$ rpki-client -vvf rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft File: 3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft (raw, json) Hash identifier: 13aVG0qDfgwpcmfgWaxGqUA7GlflBBeUFXz1Szc3otk= Subject key identifier: 2E:E1:FF:BD:58:67:0F:3E:A5:E6:D9:9C:A1:44:00:18:EE:F6:E2:65 Authority key identifier: 3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41 Certificate issuer: /CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41 Certificate serial: 78F33CBFE68F90BBDCB9E45494DA85D27B568E6C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer Subject info access: rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft Manifest number: 0120 Signing time: Mon 03 Nov 2025 09:05:43 +0000 Manifest this update: Mon 03 Nov 2025 09:00:43 +0000 Manifest next update: Tue 04 Nov 2025 11:02:43 +0000 Files and hashes: 1: 323830343a383136633a3a2f33322d3333203d3e20323732343533.roa (hash: km/ah8tdGnSbAEE8eMAVgMkElj1zG/cbsgnk+5b2q5E=) 2: 3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl (hash: IL/flRkU/bHn6zl9kl5R8iMnzKCu9G8RTDEaZnrzbYk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 11:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f3:3c:bf:e6:8f:90:bb:dc:b9:e4:54:94:da:85:d2:7b:56:8e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41 Validity Not Before: Nov 3 09:00:43 2025 GMT Not After : Nov 4 11:02:43 2025 GMT Subject: CN=2EE1FFBD58670F3EA5E6D99CA1440018EEF6E265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:ff:14:c9:ed:15:2b:d8:b1:1c:3f:36:69: 73:a6:c5:42:05:e7:0b:73:61:9a:96:7b:41:43:c2: eb:d7:92:53:05:af:d5:a5:53:c5:9b:72:7f:3f:3f: 2b:a9:22:56:7a:0c:6e:1b:24:21:de:29:6d:9c:38: b4:5b:de:e0:d5:22:5f:5e:0e:d6:95:0e:bb:f6:3e: a8:63:4f:af:0d:84:df:01:8c:06:c2:fb:c2:f5:e7: 51:f2:be:df:0d:8c:7c:fe:b8:68:06:55:5e:b8:66: a1:d5:5f:c5:eb:35:58:ad:29:0d:f5:5e:8e:7c:b7: b6:6d:d8:4f:fa:61:2d:ea:7e:bb:72:12:76:4e:69: ad:f4:5a:79:06:59:da:18:96:08:30:68:11:8b:23: 2b:9d:f6:2f:c6:3b:ad:e2:0c:3d:e1:d2:df:88:1a: e4:f9:9e:46:e7:a7:d2:8c:68:3c:6a:60:20:d9:d6: 63:96:2e:16:c6:76:4e:36:75:77:3d:dd:36:78:9f: 48:ef:ab:1f:47:50:35:36:34:25:84:9c:9b:e4:d1: ed:5d:02:a4:38:f3:08:05:6f:f1:9a:5c:69:7b:f8: 52:10:d0:b2:70:fc:19:38:e7:b2:b7:72:0a:34:25: 15:ea:ad:09:10:99:1d:7c:7d:9b:a4:da:42:ac:df: b9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E1:FF:BD:58:67:0F:3E:A5:E6:D9:9C:A1:44:00:18:EE:F6:E2:65 X509v3 Authority Key Identifier: keyid:3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:67:0d:73:c1:db:c6:e0:4a:34:a4:1a:b2:cb:d4:a1:e4:46: 36:96:9b:38:69:b7:51:84:1f:52:28:57:07:08:5e:30:d0:ba: d1:0e:b1:0f:d3:11:db:94:5f:36:44:a1:0d:9d:a7:86:23:aa: 69:67:a7:03:b3:4e:50:88:56:08:6f:5b:f9:f4:20:6e:6b:c1: 2f:0d:bd:18:82:d5:72:e4:4c:7c:07:8f:94:33:d8:56:66:18: 9b:47:65:85:d8:74:d1:6f:ee:a6:b8:e5:ba:27:1f:09:cf:81: 2d:a3:12:9b:fe:00:90:65:b9:0f:64:54:d4:75:59:8c:65:7a: ea:f6:d9:19:14:00:ff:98:46:fa:11:38:ae:97:bf:9e:2d:71: 15:ef:bf:fc:5d:54:cd:d6:14:dd:a6:23:3c:33:c6:07:da:d7: 99:e9:1f:7b:69:d4:5f:85:1c:34:04:66:2f:8a:05:01:98:31: 9f:d4:bc:0a:ff:f2:80:18:6d:aa:82:43:14:b2:6a:8d:fb:e9: 1e:45:45:ff:40:ef:a6:d4:1c:3c:2a:33:0b:31:a8:e8:2d:48: f5:b3:e6:d4:5f:bd:07:37:1e:b5:07:75:f5:6d:68:3c:5d:63: 54:9d:5f:84:8e:1d:82:db:f6:96:da:10:f1:5b:e3:73:fb:dd: db:43:22:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUePM8v+aPkLvcueRUlNqF0ntWjmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQjlBRjYwM0IzRTI2NkVDNTE3OEMxNTg5MkNCQjM3 RDhDQ0Q0MTAeFw0yNTExMDMwOTAwNDNaFw0yNTExMDQxMTAyNDNaMDMxMTAvBgNV BAMTKDJFRTFGRkJENTg2NzBGM0VBNUU2RDk5Q0ExNDQwMDE4RUVGNkUyNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2wP8Uye0VK9ixHD82aXOmxUIF 5wtzYZqWe0FDwuvXklMFr9WlU8Wbcn8/PyupIlZ6DG4bJCHeKW2cOLRb3uDVIl9e DtaVDrv2PqhjT68NhN8BjAbC+8L151Hyvt8NjHz+uGgGVV64ZqHVX8XrNVitKQ31 Xo58t7Zt2E/6YS3qfrtyEnZOaa30WnkGWdoYlggwaBGLIyud9i/GO63iDD3h0t+I GuT5nkbnp9KMaDxqYCDZ1mOWLhbGdk42dXc93TZ4n0jvqx9HUDU2NCWEnJvk0e1d AqQ48wgFb/GaXGl7+FIQ0LJw/Bk457K3cgo0JRXqrQkQmR18fZuk2kKs37nvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULuH/vVhnDz6l5tmcoUQAGO724mUwHwYDVR0j BBgwFoAUOjua9gOz4mbsUXjBWJLLs32MzUEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmh2M21FZzVMem5keHcyRDh0Uk5LSkd4SHExbm9BYUtTMTJ6TG5DdnhI N1ovMC8zQTNCOUFGNjAzQjNFMjY2RUM1MTc4QzE1ODkyQ0JCMzdEOENDRDQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBM0I5QUY2MDNCM0UyNjZF QzUxNzhDMTU4OTJDQkIzN0Q4Q0NENDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mmh2M21FZzVMem5keHcyRDh0Uk5LSkd4SHExbm9BYUtTMTJ6TG5DdnhIN1ovMC8z QTNCOUFGNjAzQjNFMjY2RUM1MTc4QzE1ODkyQ0JCMzdEOENDRDQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE2cNc8HbxuBKNKQassvUoeRGNpabOGm3UYQfUihXBwheMNC60Q6xD9MR25Rf NkShDZ2nhiOqaWenA7NOUIhWCG9b+fQgbmvBLw29GILVcuRMfAePlDPYVmYYm0dl hdh00W/uprjluicfCc+BLaMSm/4AkGW5D2RU1HVZjGV66vbZGRQA/5hG+hE4rpe/ ni1xFe+//F1UzdYU3aYjPDPGB9rXmekfe2nUX4UcNARmL4oFAZgxn9S8Cv/ygBht qoJDFLJqjfvpHkVF/0DvptQcPCozCzGo6C1I9bPm1F+9BzcetQd19W1oPF1jVJ1f hI4dgtv2ltoQ8Vvjc/vd20MiRg== -----END CERTIFICATE-----Generated at Mon Nov 3 19:08:55 2025 by rpki-client