$ rpki-client -vvf rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft File: DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft (raw, json) Hash identifier: BN45uA2OH9xa4GhD75IbX1vFHZJsPwzwjxusb0D09LY= Subject key identifier: 59:AE:A9:B4:99:0F:9E:3D:DF:F8:20:BF:78:C2:91:16:9C:DA:AE:CC Authority key identifier: DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 Certificate issuer: /CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229 Certificate serial: 1E92F995E37C774B307CA0CDAFCEED8AF2445465 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft Manifest number: 02F3 Signing time: Mon 20 Oct 2025 01:53:53 +0000 Manifest this update: Mon 20 Oct 2025 01:48:53 +0000 Manifest next update: Tue 21 Oct 2025 03:20:53 +0000 Files and hashes: 1: 323830343a6561383a3a2f33322d3438203d3e20323632393636.roa (hash: k3mQQh+jFVJ+W9lI5qcYz2pIEXAoMKMazd3p9xRcR90=) 2: 3136382e3132312e3234382e302f32322d3235203d3e20323632393636.roa (hash: Z6rpwRyuxvgqZK9wg3IWbxseWkxo3KvfvA7U8nx0qtI=) 3: 3138362e3235302e32382e302f32322d3235203d3e20323632393636.roa (hash: iKC8mrbvMcLPzl1+sFNxgHBkh7HGux1xw4YCVG73YFo=) 4: DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl (hash: L0AWVCxhXHCETjgwYaRQWHluDN4EM3yrbLPz4cXm0g4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:92:f9:95:e3:7c:77:4b:30:7c:a0:cd:af:ce:ed:8a:f2:44:54:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229 Validity Not Before: Oct 20 01:48:53 2025 GMT Not After : Oct 21 03:20:53 2025 GMT Subject: CN=59AEA9B4990F9E3DDFF820BF78C291169CDAAECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cc:5c:a2:02:c0:d9:00:7b:e9:d7:ef:16:d1: 5d:70:99:2a:1e:75:40:c8:d9:7f:96:44:e3:db:61: 9f:8f:3a:07:09:c1:a3:0d:4d:df:e0:3f:22:85:7f: d0:c8:ef:8c:f4:1b:ee:ee:fd:39:aa:06:92:86:d9: ed:23:c1:d7:5f:a0:84:33:67:89:93:79:8d:43:7d: f0:e0:a6:93:56:66:c5:93:65:b7:59:84:3e:69:de: 0b:9d:4c:3b:fd:a2:42:5c:2d:47:5e:17:de:30:6f: e1:f7:be:03:4f:66:8a:c8:79:0a:d6:e1:96:51:7e: fe:ce:b0:44:dd:91:03:67:d8:7e:ac:0c:29:6e:48: fa:aa:d5:9e:44:18:4d:e9:6d:bf:9c:3e:97:f6:b7: ab:1a:2b:3d:1e:3c:8d:90:4f:d6:38:72:dc:72:46: c3:22:9f:f5:df:14:71:26:03:ab:f8:c4:7c:77:34: 05:88:fd:87:d9:67:27:b8:ff:46:1c:19:73:79:62: 49:85:27:e1:77:33:2f:cb:55:6a:5f:9d:44:dd:51: a3:15:2c:cf:97:8f:ac:f4:11:e4:01:2c:28:11:bd: 46:a6:c7:ab:8d:10:8a:75:79:06:8d:e2:a6:63:1b: 5a:94:98:49:7b:96:e9:ee:e7:37:98:86:46:b7:42: 38:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AE:A9:B4:99:0F:9E:3D:DF:F8:20:BF:78:C2:91:16:9C:DA:AE:CC X509v3 Authority Key Identifier: keyid:DB:60:11:3D:B8:47:EE:4F:DF:EC:F8:E7:B3:2D:8C:B0:A2:8A:42:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gk3dY6TvJQdEyVQjJTJVZWHbwoNxp1kXbiftjwx3MsCj/1/DB60113DB847EE4FDFECF8E7B32D8CB0A28A4229.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:77:b6:d9:50:fc:90:1e:b1:f1:1f:04:6e:fd:fb:39:6e:95: df:07:38:df:dd:9e:ec:02:ce:e0:d2:3b:1c:21:61:bf:82:ba: af:e4:8b:61:c7:6c:9d:5b:f2:1b:cd:21:c1:d9:fc:e3:9a:fd: 0c:d2:ec:ef:aa:7c:f6:0f:3f:8e:89:14:50:39:ea:9c:54:e7: 1b:28:68:6a:83:5c:6b:e4:b6:31:65:ba:c0:1f:72:cd:ee:bb: 9b:dd:aa:0a:b7:78:a6:a6:ab:cb:92:ac:cb:82:bf:17:95:b9: f0:2d:50:04:f4:b9:16:dd:5a:95:10:42:ef:4e:7d:32:36:4c: 5f:fd:23:1b:6c:20:e0:a5:ef:18:ad:b6:3b:48:d2:15:52:f6: 8b:59:ff:3c:66:f0:af:6c:8d:c4:e8:2e:1d:3c:67:3b:c8:af: a3:00:80:c2:a7:87:34:99:fb:77:83:7d:db:15:54:b8:f0:90: 48:55:af:4f:d2:7e:97:c2:de:0b:28:a2:fb:6e:6b:da:74:12: 8e:44:c1:e4:20:e0:3b:40:71:df:fb:ab:bf:7c:dc:a0:d0:88: 93:83:fd:46:a3:ca:c9:c3:48:89:72:e0:d6:2a:5a:a0:2e:46: 35:a8:05:73:88:5b:7d:a6:d4:92:c7:84:72:ca:d2:09:06:21: b7:0b:7e:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHpL5leN8d0swfKDNr87tivJEVGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2MDExM0RCODQ3RUU0RkRGRUNGOEU3QjMyRDhDQjBB MjhBNDIyOTAeFw0yNTEwMjAwMTQ4NTNaFw0yNTEwMjEwMzIwNTNaMDMxMTAvBgNV BAMTKDU5QUVBOUI0OTkwRjlFM0RERkY4MjBCRjc4QzI5MTE2OUNEQUFFQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/zFyiAsDZAHvp1+8W0V1wmSoe dUDI2X+WROPbYZ+POgcJwaMNTd/gPyKFf9DI74z0G+7u/TmqBpKG2e0jwddfoIQz Z4mTeY1DffDgppNWZsWTZbdZhD5p3gudTDv9okJcLUdeF94wb+H3vgNPZorIeQrW 4ZZRfv7OsETdkQNn2H6sDCluSPqq1Z5EGE3pbb+cPpf2t6saKz0ePI2QT9Y4ctxy RsMin/XfFHEmA6v4xHx3NAWI/YfZZye4/0YcGXN5YkmFJ+F3My/LVWpfnUTdUaMV LM+Xj6z0EeQBLCgRvUamx6uNEIp1eQaN4qZjG1qUmEl7lunu5zeYhka3Qjj7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWa6ptJkPnj3f+CC/eMKRFpzarswwHwYDVR0j BBgwFoAU22ARPbhH7k/f7Pjnsy2MsKKKQikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2szZFk2VHZKUWRFeVZRakpUSlZaV0hid29OeHAxa1hiaWZ0and4M01z Q2ovMS9EQjYwMTEzREI4NDdFRTRGREZFQ0Y4RTdCMzJEOENCMEEyOEE0MjI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCNjAxMTNEQjg0N0VFNEZE RkVDRjhFN0IzMkQ4Q0IwQTI4QTQyMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2szZFk2VHZKUWRFeVZRakpUSlZaV0hid29OeHAxa1hiaWZ0and4M01zQ2ovMS9E QjYwMTEzREI4NDdFRTRGREZFQ0Y4RTdCMzJEOENCMEEyOEE0MjI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACHe22VD8kB6x8R8Ebv37OW6V3wc4392e7ALO4NI7HCFhv4K6r+SLYcdsnVvy G80hwdn845r9DNLs76p89g8/jokUUDnqnFTnGyhoaoNca+S2MWW6wB9yze67m92q Crd4pqary5Ksy4K/F5W58C1QBPS5Ft1alRBC7059MjZMX/0jG2wg4KXvGK22O0jS FVL2i1n/PGbwr2yNxOguHTxnO8ivowCAwqeHNJn7d4N92xVUuPCQSFWvT9J+l8Le Cyii+25r2nQSjkTB5CDgO0Bx3/urv3zcoNCIk4P9RqPKycNIiXLg1ipaoC5GNagF c4hbfabUkseEcsrSCQYhtwt+9A== -----END CERTIFICATE-----Generated at Mon Oct 20 17:54:17 2025 by rpki-client