$ rpki-client -vvf rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.mft File: 349BDC9A5D2D169C13F5929341F8E986CACF88D9.mft (raw, json) Hash identifier: g+3C3WqNY2dOVBhrrJudKRGj6SGbpgsVjzQaqSJvaEE= Subject key identifier: D9:F2:22:27:C8:A5:72:8C:AB:90:F4:E6:D1:FA:F6:CD:FF:B4:EA:3B Authority key identifier: 34:9B:DC:9A:5D:2D:16:9C:13:F5:92:93:41:F8:E9:86:CA:CF:88:D9 Certificate issuer: /CN=349BDC9A5D2D169C13F5929341F8E986CACF88D9 Certificate serial: 7D2AFA65CCE4203A5823553EC82A805690AA0AAB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/349BDC9A5D2D169C13F5929341F8E986CACF88D9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.mft Manifest number: 39 Signing time: Mon 03 Nov 2025 02:55:06 +0000 Manifest this update: Mon 03 Nov 2025 02:50:06 +0000 Manifest next update: Tue 04 Nov 2025 03:13:06 +0000 Files and hashes: 1: 323830343a346361343a3a2f33322d313238203d3e20323637333832.roa (hash: gt5uEoYMYqM6if3oNPcnpwptlLfdw88JJcTDqT76Luo=) 2: 349BDC9A5D2D169C13F5929341F8E986CACF88D9.crl (hash: Njg+RfXYtB3kYp4lDgKLnsL9GdXnrLTpmFBt6DXJSqA=) 3: 34352e3233342e3134302e302f32322d3332203d3e20323637333832.roa (hash: w1a2LCC4hQc0RPNVmKfvItCl8GgNaYXtVfSCDlKVpSI=) 4: 34352e3233342e3134302e302f32322d3234203d3e20313938393439.roa (hash: nGoUxy3Z/MpvqrXwnPLSoXN9QWdPvQGTMWdzwQBA2AE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.crl rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/349BDC9A5D2D169C13F5929341F8E986CACF88D9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 03:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2a:fa:65:cc:e4:20:3a:58:23:55:3e:c8:2a:80:56:90:aa:0a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349BDC9A5D2D169C13F5929341F8E986CACF88D9 Validity Not Before: Nov 3 02:50:06 2025 GMT Not After : Nov 4 03:13:06 2025 GMT Subject: CN=D9F22227C8A5728CAB90F4E6D1FAF6CDFFB4EA3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:26:54:ee:50:db:dc:63:c7:0d:ae:83:c0: ba:c3:ac:b1:10:44:08:bf:07:1a:8f:29:41:7f:4b: 4c:f9:eb:b7:1e:b3:a4:a0:e2:2b:af:2f:69:71:25: 13:61:60:7e:83:f5:2d:57:ee:68:48:e6:c2:71:06: d2:7c:6c:f5:42:dd:93:c4:81:12:28:31:bb:82:5d: f8:69:8f:84:12:d0:b3:ba:f1:1a:b5:0c:5b:3f:02: 63:5c:17:42:e3:9a:3c:7d:40:f0:30:30:93:ea:b2: b1:8e:62:48:a1:0b:d5:98:cc:f9:fa:b7:94:44:98: 08:2d:96:45:ab:e7:98:0b:03:05:f1:73:d0:77:fa: 6a:16:ed:64:66:3f:79:98:a0:ad:ad:a9:fd:13:a6: 96:31:0e:79:99:da:3c:97:2f:8a:9a:87:a6:88:55: 0e:ae:f8:df:65:35:c7:92:1d:91:84:7e:01:da:1f: f0:91:43:b7:d0:39:42:61:47:c6:a3:a9:22:42:05: 9d:97:b5:ea:95:3e:d8:e4:47:7a:bb:f1:ac:e4:33: 21:e9:fa:08:0c:f3:81:62:59:d8:25:9f:2c:0a:28: dd:b0:8c:f8:d4:17:76:37:69:98:4c:5e:99:90:81: 8d:c4:f5:ec:8f:57:80:32:6a:c7:67:7d:d7:25:a5: b0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F2:22:27:C8:A5:72:8C:AB:90:F4:E6:D1:FA:F6:CD:FF:B4:EA:3B X509v3 Authority Key Identifier: keyid:34:9B:DC:9A:5D:2D:16:9C:13:F5:92:93:41:F8:E9:86:CA:CF:88:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/349BDC9A5D2D169C13F5929341F8E986CACF88D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d0:8e:44:8f:16:f4:db:75:aa:b5:17:40:f3:96:16:eb:15: 2d:4e:0b:05:8f:31:a4:0f:5e:de:17:fd:74:13:da:79:0b:c2: 4c:2b:cb:78:71:f8:22:7d:e2:54:2d:39:b4:c9:cd:b9:ac:90: 9c:a8:2d:9e:9a:ab:52:83:b2:66:bd:b9:22:d2:1f:76:dc:ac: db:81:42:f0:ba:3b:5f:99:f0:73:23:c4:4d:d3:e3:40:55:19: 69:4e:64:21:c9:7b:8e:dc:45:5f:be:d8:c7:b1:59:66:79:3f: ad:cb:6a:07:fc:92:28:d2:55:b7:bc:b7:74:27:c9:9a:21:20: c6:46:90:78:fa:2a:7c:f0:23:e9:96:dc:db:5e:bd:68:e7:b6: cf:4a:10:13:c8:21:79:3e:76:13:b7:4c:dc:67:88:8b:5f:1e: b0:6d:23:1b:2e:04:0c:f8:43:1d:af:96:b3:71:d7:b6:ca:1a: 06:51:72:d2:e3:20:29:c6:a3:23:98:d3:05:c8:0e:d5:5b:62: f0:0f:33:82:fa:99:f8:20:ea:bb:00:ed:be:ae:4f:ae:72:92: 53:e6:c5:be:ea:23:73:60:2b:83:ec:b0:6c:23:bc:a2:01:d1: 32:d9:d9:0b:a3:18:0f:cd:4e:0b:bd:ef:8c:05:9f:04:f2:2b: 6d:2c:6b:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfSr6ZczkIDpYI1U+yCqAVpCqCqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ5QkRDOUE1RDJEMTY5QzEzRjU5MjkzNDFGOEU5ODZD QUNGODhEOTAeFw0yNTExMDMwMjUwMDZaFw0yNTExMDQwMzEzMDZaMDMxMTAvBgNV BAMTKEQ5RjIyMjI3QzhBNTcyOENBQjkwRjRFNkQxRkFGNkNERkZCNEVBM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFICZU7lDb3GPHDa6DwLrDrLEQ RAi/BxqPKUF/S0z567ces6Sg4iuvL2lxJRNhYH6D9S1X7mhI5sJxBtJ8bPVC3ZPE gRIoMbuCXfhpj4QS0LO68Rq1DFs/AmNcF0Ljmjx9QPAwMJPqsrGOYkihC9WYzPn6 t5REmAgtlkWr55gLAwXxc9B3+moW7WRmP3mYoK2tqf0TppYxDnmZ2jyXL4qah6aI VQ6u+N9lNceSHZGEfgHaH/CRQ7fQOUJhR8ajqSJCBZ2XteqVPtjkR3q78azkMyHp +ggM84FiWdglnywKKN2wjPjUF3Y3aZhMXpmQgY3E9eyPV4AyasdnfdclpbCrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2fIiJ8ilcoyrkPTm0fr2zf+06jswHwYDVR0j BBgwFoAUNJvcml0tFpwT9ZKTQfjphsrPiNkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlhrV0ZKR3laRlZiMzRGaGFnU1hnY0NMUUNwWDJ5TVprUnM1aVd6WlRY cHovMC8zNDlCREM5QTVEMkQxNjlDMTNGNTkyOTM0MUY4RTk4NkNBQ0Y4OEQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0OUJEQzlBNUQyRDE2OUMx M0Y1OTI5MzQxRjhFOTg2Q0FDRjg4RDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlhrV0ZKR3laRlZiMzRGaGFnU1hnY0NMUUNwWDJ5TVprUnM1aVd6WlRYcHovMC8z NDlCREM5QTVEMkQxNjlDMTNGNTkyOTM0MUY4RTk4NkNBQ0Y4OEQ5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR9CORI8W9Nt1qrUXQPOWFusVLU4LBY8xpA9e3hf9dBPaeQvCTCvLeHH4In3i VC05tMnNuayQnKgtnpqrUoOyZr25ItIfdtys24FC8Lo7X5nwcyPETdPjQFUZaU5k Icl7jtxFX77Yx7FZZnk/rctqB/ySKNJVt7y3dCfJmiEgxkaQePoqfPAj6Zbc2169 aOe2z0oQE8gheT52E7dM3GeIi18esG0jGy4EDPhDHa+Ws3HXtsoaBlFy0uMgKcaj I5jTBcgO1Vti8A8zgvqZ+CDquwDtvq5PrnKSU+bFvuojc2Arg+ywbCO8ogHRMtnZ C6MYD81OC73vjAWfBPIrbSxrEQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:05:30 2025 by rpki-client