$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft File: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft (raw, json) Hash identifier: r6kYHtpcszfGxcIN5e30zEMjSDQ9x2oe3slcT6pIwgM= Subject key identifier: 2E:F7:E6:24:AF:BD:56:37:80:E0:DF:02:CE:4E:9A:BC:E3:59:57:EB Authority key identifier: DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF Certificate issuer: /CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF Certificate serial: 431F5E528A49E2227167407633A278FAE0378DD4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer Subject info access: rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft Manifest number: 02EE Signing time: Mon 20 Oct 2025 04:50:03 +0000 Manifest this update: Mon 20 Oct 2025 04:45:03 +0000 Manifest next update: Tue 21 Oct 2025 07:51:03 +0000 Files and hashes: 1: 34352e3233322e37342e302f32342d3234203d3e20323637323531.roa (hash: 40prK8ppN8vt4mijpoc2pjLbuuqUZaJ9Grs/fMA2kDg=) 2: 34352e3233322e37322e302f32342d3234203d3e20323637323531.roa (hash: 3KJaKxQH8BfvmqPdr0f3pk4VVvf9POaN3twm4TXLa3A=) 3: 34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (hash: d4RD2/KeG1YPHk0v9voZ54DgtjeHPBbE3WMduZTo2Tk=) 4: DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl (hash: ghCsDbqlibfT3Q/0mdT2y3hau6xCO4fFrRW/OOPzi8g=) 5: 34352e3233322e37332e302f32342d3234203d3e20323637323531.roa (hash: lMncz++kvT6MHNunBcJ6oHQBvWwWSBFElu5ZGi2kkO0=) 6: 34352e3233322e37322e302f32332d3233203d3e20323637323531.roa (hash: Em9nIZXC1XnJHHkeLO0Am9KIh2IHxIcFrayfBCdDiB4=) 7: 34352e3233322e37342e302f32332d3233203d3e20323637323531.roa (hash: gq23d3+kRAY4dWCEoVb03VA6J8a063C0N58YBiErots=) 8: 34352e3233322e37352e302f32342d3234203d3e20323637323531.roa (hash: DVRW50QGSfKkCx0M1+VA9DFoSNRjF7ldfT0pmPw8n2A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 07:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:1f:5e:52:8a:49:e2:22:71:67:40:76:33:a2:78:fa:e0:37:8d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF Validity Not Before: Oct 20 04:45:03 2025 GMT Not After : Oct 21 07:51:03 2025 GMT Subject: CN=2EF7E624AFBD563780E0DF02CE4E9ABCE35957EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:de:50:1c:81:bf:f3:9b:12:a7:85:2e:7a:c6: cf:f3:ec:82:df:96:c2:e7:86:6d:ac:fb:70:8c:88: bd:6b:8b:ab:fe:33:1c:6f:39:56:9c:db:a5:a8:75: 31:7e:8b:69:52:d7:8f:dc:2e:55:1e:6d:2e:c0:83: 3a:a3:6f:7b:5a:0e:2e:d1:c5:d7:63:6b:c7:46:5f: 0d:e8:6d:dc:64:70:42:35:36:ec:d4:e4:cd:6b:de: e8:5a:f6:4c:a4:3d:26:36:cb:23:35:77:64:6d:da: f1:89:11:b3:e5:22:4a:41:55:4a:e3:2c:84:0f:a6: 02:30:5f:db:43:47:90:2f:d8:7e:75:41:63:fb:93: 16:d6:59:9b:bb:d7:0a:ba:48:08:56:e9:09:47:4d: c1:f2:d7:fa:f3:5c:a1:87:54:d9:2e:c2:97:bd:a2: 46:6e:e4:24:00:d0:81:fb:fd:59:8d:fb:c6:b9:7b: df:f6:67:6d:ae:48:da:b3:d0:f1:81:a5:c1:00:75: f0:ab:51:bf:c3:11:1d:6d:87:3a:b6:e4:22:ed:26: 5c:18:1d:a9:74:a4:f8:80:bb:86:2b:f8:41:9a:d3: a9:95:30:a1:71:2d:af:08:f1:6c:ce:16:2d:52:3f: e1:f9:4c:22:a4:dd:33:88:77:0d:a5:ca:8d:cb:98: fa:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F7:E6:24:AF:BD:56:37:80:E0:DF:02:CE:4E:9A:BC:E3:59:57:EB X509v3 Authority Key Identifier: keyid:DF:FD:35:73:AC:40:6B:4E:FB:1F:45:81:49:CF:73:C3:1A:2F:F4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/1/DFFD3573AC406B4EFB1F458149CF73C31A2FF4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:78:66:35:fe:d2:09:54:be:68:41:f1:ba:60:83:35:ed:4e: 9d:28:ae:d8:e4:8b:7c:06:db:7f:11:af:dc:c2:0b:8f:8d:2a: af:1a:9a:9f:da:c2:fa:86:51:a1:b1:63:be:6e:e3:0d:b0:33: 78:0c:22:eb:3b:65:08:64:92:89:a0:21:b1:f3:cc:eb:7f:b7: c1:9c:1e:80:33:ae:c5:00:85:61:0f:0a:ed:ef:24:1a:61:de: 09:c0:86:5d:5b:fc:25:96:bf:6b:5d:36:69:e3:3e:ce:b7:d3: 14:67:5f:af:a0:aa:82:87:ad:d6:a4:88:ec:8b:aa:a3:5b:7d: cf:ea:24:92:57:37:12:85:65:9a:99:27:26:29:1c:25:c8:dd: 4d:11:4b:97:28:b3:95:9e:69:98:96:c2:c8:a6:da:8f:dd:30: 8d:65:a9:79:91:8a:11:fc:f4:ef:4a:c8:f0:de:bf:79:c4:38: d0:42:93:83:bd:87:f2:6f:83:50:5b:6f:56:bc:04:15:91:43: aa:00:e9:4a:06:88:3f:d5:f7:6c:21:79:3b:5a:b0:df:43:73: 31:f1:27:39:5e:5e:7b:6d:12:6c:82:e0:6e:e4:ea:10:de:55: eb:2c:ad:46:70:72:e0:bb:9c:04:60:37:49:44:bc:2f:42:92: 15:c1:37:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQx9eUopJ4iJxZ0B2M6J4+uA3jdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZGRDM1NzNBQzQwNkI0RUZCMUY0NTgxNDlDRjczQzMx QTJGRjRFRjAeFw0yNTEwMjAwNDQ1MDNaFw0yNTEwMjEwNzUxMDNaMDMxMTAvBgNV BAMTKDJFRjdFNjI0QUZCRDU2Mzc4MEUwREYwMkNFNEU5QUJDRTM1OTU3RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC93lAcgb/zmxKnhS56xs/z7ILf lsLnhm2s+3CMiL1ri6v+MxxvOVac26WodTF+i2lS14/cLlUebS7Agzqjb3taDi7R xddja8dGXw3obdxkcEI1NuzU5M1r3uha9kykPSY2yyM1d2Rt2vGJEbPlIkpBVUrj LIQPpgIwX9tDR5Av2H51QWP7kxbWWZu71wq6SAhW6QlHTcHy1/rzXKGHVNkuwpe9 okZu5CQA0IH7/VmN+8a5e9/2Z22uSNqz0PGBpcEAdfCrUb/DER1thzq25CLtJlwY Hal0pPiAu4Yr+EGa06mVMKFxLa8I8WzOFi1SP+H5TCKk3TOIdw2lyo3LmPrXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULvfmJK+9VjeA4N8Czk6avONZV+swHwYDVR0j BBgwFoAU3/01c6xAa077H0WBSc9zwxov9O8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFZnRUpNbUdlSnZKUFJYSEhtZ0hWbTZHYzhlUlpaU2ZXa0F2aHZUUUwy a28vMS9ERkZEMzU3M0FDNDA2QjRFRkIxRjQ1ODE0OUNGNzNDMzFBMkZGNEVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGRkQzNTczQUM0MDZCNEVG QjFGNDU4MTQ5Q0Y3M0MzMUEyRkY0RUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFZnRUpNbUdlSnZKUFJYSEhtZ0hWbTZHYzhlUlpaU2ZXa0F2aHZUUUwya28vMS9E RkZEMzU3M0FDNDA2QjRFRkIxRjQ1ODE0OUNGNzNDMzFBMkZGNEVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKHhmNf7SCVS+aEHxumCDNe1OnSiu2OSLfAbbfxGv3MILj40qrxqan9rC+oZR obFjvm7jDbAzeAwi6ztlCGSSiaAhsfPM63+3wZwegDOuxQCFYQ8K7e8kGmHeCcCG XVv8JZa/a102aeM+zrfTFGdfr6Cqgoet1qSI7Iuqo1t9z+okklc3EoVlmpknJikc JcjdTRFLlyizlZ5pmJbCyKbaj90wjWWpeZGKEfz070rI8N6/ecQ40EKTg72H8m+D UFtvVrwEFZFDqgDpSgaIP9X3bCF5O1qw30NzMfEnOV5ee20SbILgbuTqEN5V6yyt RnBy4LucBGA3SUS8L0KSFcE3JA== -----END CERTIFICATE-----Generated at Mon Oct 20 06:25:43 2025 by rpki-client