$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft File: 3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft (raw, json) Hash identifier: EIEMDHh7k6M4iSuT8XOyIjRbUfoE4nDh7Ti3t+JN9OU= Subject key identifier: 9D:3C:96:13:3A:12:86:5A:27:E2:52:AC:A7:34:22:CB:8F:EF:B5:2B Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0 Certificate issuer: /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0 Certificate serial: 25D9B33A18AD80B429F71D6C15F6DACB721B8591 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft Manifest number: 0301 Signing time: Mon 03 Nov 2025 10:50:25 +0000 Manifest this update: Mon 03 Nov 2025 10:45:25 +0000 Manifest next update: Tue 04 Nov 2025 12:36:25 +0000 Files and hashes: 1: 34352e3138302e3138342e302f32322d3232203d3e20323639313435.roa (hash: kbu54ESKW1e5BIRWIv2H+d7R8holRL2gmDinoqBBatI=) 2: 34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa (hash: /bpAsgSUi1LnoTyueVXmEbHEdvQmkmUVeA1xO4MqaNU=) 3: 3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl (hash: ylVHIchX3kJhHo+Jq8vZpSzuP1hJA6mIQV5hc/2wwIs=) 4: 323830343a363031383a3a2f33322d3332203d3e20323639313435.roa (hash: pukb5lj9ipcGQlV0LxsDM+V/GjI+AEgmTgzISsvatVU=) 5: 34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa (hash: 2RkNWBLR029RFRbh32kFnlXtZFOD9xnYisNTVjldsO0=) 6: 323830343a363031383a3a2f33332d3333203d3e20323639313435.roa (hash: nPpf0hhGMugZmNdbWERrNoc79wWP0pZTB/sPp3v04wk=) 7: 323830343a363031383a383030303a3a2f33332d3333203d3e20323639313435.roa (hash: Orz/ogX6qFnRjGYGiV2xeJsYmVdzFYD63V3ZXxKfl8k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d9:b3:3a:18:ad:80:b4:29:f7:1d:6c:15:f6:da:cb:72:1b:85:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0 Validity Not Before: Nov 3 10:45:25 2025 GMT Not After : Nov 4 12:36:25 2025 GMT Subject: CN=9D3C96133A12865A27E252ACA73422CB8FEFB52B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:07:c1:8b:19:12:b2:95:5b:35:6e:22:5f:fe: 5b:27:77:53:30:26:92:30:cc:81:d6:77:e4:fd:c6: 88:aa:06:8d:c3:03:0e:0a:f9:de:02:b7:e8:2a:5a: 05:43:2a:c1:26:b5:03:d2:2b:b4:3a:b4:33:84:1f: 0f:bf:1a:7b:a1:5a:50:a5:21:95:c3:03:db:29:76: 06:ac:5c:1c:8a:c8:3d:48:47:42:fa:a9:f6:59:c8: ba:a5:0e:8c:a6:af:c6:c5:d3:c4:c7:2d:35:fc:3a: 43:ee:1a:20:fd:85:b6:b1:42:c0:71:26:ca:0c:42: 96:b8:59:89:dd:61:23:e2:2a:c2:65:0a:fe:df:4b: ae:d0:34:1c:7e:63:c4:a3:c9:bb:ec:55:76:fb:98: ee:93:91:09:36:f2:88:4a:92:ac:df:f5:bf:60:2a: 10:33:8f:24:1d:9c:f3:3c:79:ac:cd:5a:84:88:84: ee:a0:60:5f:ba:02:48:3f:84:e3:fe:9d:c1:5c:6d: b7:88:53:2d:99:57:b6:f4:ff:05:ce:51:b0:b2:b3: d3:7f:65:ac:62:22:b9:18:eb:8c:b7:b5:0b:22:88: 6e:4e:af:70:25:99:8b:27:9a:b1:e1:70:32:89:d0: f3:1a:59:60:02:bd:b5:8c:32:74:ce:be:ec:a3:42: 0c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3C:96:13:3A:12:86:5A:27:E2:52:AC:A7:34:22:CB:8F:EF:B5:2B X509v3 Authority Key Identifier: keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:76:bf:34:c3:58:51:9c:9f:27:97:25:d3:18:35:42:0c:f3: 49:d8:36:e7:7e:bb:a3:5a:0e:00:7d:cc:96:df:bd:73:62:12: c3:f7:e2:88:eb:42:be:78:e1:16:c1:e4:9b:3c:3e:2d:ef:c3: 12:02:c0:fa:fb:93:4f:cb:5e:59:a1:17:b4:a3:e7:6e:78:22: ce:1b:b9:1b:d8:1f:79:80:b9:f0:3b:0b:2e:1f:f6:fa:87:05: 33:c6:3d:8b:29:a6:de:4d:c2:a6:64:7e:c3:b3:db:5f:be:42: fb:01:37:20:85:d8:e7:2d:0f:b0:b9:41:5c:a5:70:c0:60:d9: 60:b3:a9:e9:67:de:9b:dd:1e:5a:35:03:e2:4a:43:56:79:06: fc:54:7c:65:94:07:6b:4d:f5:40:20:8b:48:6d:e9:6d:2b:a9: 7b:ee:79:69:dd:b3:df:6c:e8:5b:27:3b:af:28:69:0f:06:82: b1:f0:85:99:1d:b6:ff:62:9b:2e:10:1c:e5:23:24:57:26:5f: b0:b4:6b:ff:91:fe:30:e7:63:ee:54:26:1d:39:bb:17:77:ec: 0e:ed:5a:a0:19:50:df:aa:d3:a8:b6:60:8e:86:4a:4f:f7:4e: 9e:2d:c2:f4:75:0a:24:09:a6:2d:2d:b2:6c:b3:46:93:70:13: 80:d7:e7:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJdmzOhitgLQp9x1sFfbay3IbhZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZBNjQ1M0ZGNkVFNDhEQUQ5QzIwQzU1MkY5QTRBRkEx M0JGNzRGMDAeFw0yNTExMDMxMDQ1MjVaFw0yNTExMDQxMjM2MjVaMDMxMTAvBgNV BAMTKDlEM0M5NjEzM0ExMjg2NUEyN0UyNTJBQ0E3MzQyMkNCOEZFRkI1MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNB8GLGRKylVs1biJf/lsnd1Mw JpIwzIHWd+T9xoiqBo3DAw4K+d4Ct+gqWgVDKsEmtQPSK7Q6tDOEHw+/GnuhWlCl IZXDA9spdgasXByKyD1IR0L6qfZZyLqlDoymr8bF08THLTX8OkPuGiD9hbaxQsBx JsoMQpa4WYndYSPiKsJlCv7fS67QNBx+Y8SjybvsVXb7mO6TkQk28ohKkqzf9b9g KhAzjyQdnPM8eazNWoSIhO6gYF+6Akg/hOP+ncFcbbeIUy2ZV7b0/wXOUbCys9N/ ZaxiIrkY64y3tQsiiG5Or3AlmYsnmrHhcDKJ0PMaWWACvbWMMnTOvuyjQgxVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnTyWEzoShlon4lKspzQiy4/vtSswHwYDVR0j BBgwFoAUP6ZFP/buSNrZwgxVL5pK+hO/dPAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmU5NkFwdUN6ZldKbnRvMXlQZjVRMlhaQzhndHEzNFZpY2t6aG9VaGRt TU4vMS8zRkE2NDUzRkY2RUU0OERBRDlDMjBDNTUyRjlBNEFGQTEzQkY3NEYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQTY0NTNGRjZFRTQ4REFE OUMyMEM1NTJGOUE0QUZBMTNCRjc0RjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmU5NkFwdUN6ZldKbnRvMXlQZjVRMlhaQzhndHEzNFZpY2t6aG9VaGRtTU4vMS8z RkE2NDUzRkY2RUU0OERBRDlDMjBDNTUyRjlBNEFGQTEzQkY3NEYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjXa/NMNYUZyfJ5cl0xg1QgzzSdg25367o1oOAH3Mlt+9c2ISw/fiiOtCvnjh FsHkmzw+Le/DEgLA+vuTT8teWaEXtKPnbngizhu5G9gfeYC58DsLLh/2+ocFM8Y9 iymm3k3CpmR+w7PbX75C+wE3IIXY5y0PsLlBXKVwwGDZYLOp6Wfem90eWjUD4kpD VnkG/FR8ZZQHa031QCCLSG3pbSupe+55ad2z32zoWyc7ryhpDwaCsfCFmR22/2Kb LhAc5SMkVyZfsLRr/5H+MOdj7lQmHTm7F3fsDu1aoBlQ36rTqLZgjoZKT/dOni3C 9HUKJAmmLS2ybLNGk3ATgNfnEg== -----END CERTIFICATE-----Generated at Tue Nov 4 05:19:55 2025 by rpki-client