$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.mft File: C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.mft (raw, json) Hash identifier: OIGEqyPMkiZyUy5Ny1o1uX9mD9tTD3J9PxSyMBfgUjU= Subject key identifier: 25:B6:DE:75:F4:8F:6A:86:F9:98:CC:95:0E:B9:FB:AA:BC:FC:F3:FE Authority key identifier: C7:C5:FB:EC:3A:54:3A:98:78:99:FE:A8:6B:4E:C6:8B:B3:B7:85:C6 Certificate issuer: /CN=C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6 Certificate serial: 7BD42995FC748BFFF50775C841773C0AACE6D3FB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.cer Subject info access: rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.mft Manifest number: A3 Signing time: Mon 03 Nov 2025 17:51:07 +0000 Manifest this update: Mon 03 Nov 2025 17:46:07 +0000 Manifest next update: Tue 04 Nov 2025 19:21:07 +0000 Files and hashes: 1: 3137372e3138342e36342e302f32302d3234203d3e203532383938.roa (hash: u5VZboufd9q3izfHx5cNQeI0r2bBo05yX5Km59lO+FA=) 2: C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.crl (hash: OdTQhzexvpzz6aJ7u7LDIiAHNLjbhDxLia3yy2KnCfw=) 3: 323830343a6139633a3a2f33322d3333203d3e203532383938.roa (hash: HpYSXVRiMUCEyphfyUnjYZ8d4vusVhaATgf/hl2rd0Q=) 4: 3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa (hash: p/f9WMgk5TtK110gPA24AZ2OwCTIhCwLfAsFip2SxTc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.crl rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 19:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d4:29:95:fc:74:8b:ff:f5:07:75:c8:41:77:3c:0a:ac:e6:d3:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6 Validity Not Before: Nov 3 17:46:07 2025 GMT Not After : Nov 4 19:21:07 2025 GMT Subject: CN=25B6DE75F48F6A86F998CC950EB9FBAABCFCF3FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a8:61:63:3e:27:c7:20:2c:60:e1:6c:b5:79: cf:09:45:2c:f9:af:2d:be:3f:aa:44:df:dc:13:c2: 28:65:62:03:71:20:4a:b8:bc:c2:9c:ae:b6:76:e4: 33:00:c3:2a:a1:c6:d3:41:c2:b3:da:d1:ee:1a:c2: c9:25:0d:bc:ad:39:be:f1:b2:19:6b:9d:ea:c3:2d: 61:e2:15:9b:1f:b6:79:bb:78:b4:e2:ff:ed:5b:20: c2:c4:9b:83:af:26:ac:00:97:77:08:7e:a2:4f:f9: c3:36:c9:dd:8a:52:dc:c8:69:20:44:c6:b8:3a:fe: a0:c5:23:75:00:be:9a:e5:91:e7:00:08:16:1d:5f: b0:a6:c6:41:77:7e:bc:1f:1e:1c:26:7a:11:82:db: dc:0e:a1:b0:3f:8c:e5:93:66:f3:04:c7:84:c1:ab: 6e:97:c8:6c:5a:a6:2f:ac:b7:a6:14:97:80:93:bb: b6:ae:ae:bd:93:cc:bc:fb:fa:ad:b1:9f:14:c5:05: a2:12:21:8f:ab:0e:df:c3:65:6c:6a:f9:cb:7d:49: 49:7c:df:5e:27:da:de:08:5b:64:0e:89:b1:3f:12: 56:07:4c:a0:cf:9a:f7:38:fb:35:ec:fa:7b:06:f4: 45:8a:f3:71:60:b0:0c:6c:b6:ce:91:37:16:8f:49: f9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B6:DE:75:F4:8F:6A:86:F9:98:CC:95:0E:B9:FB:AA:BC:FC:F3:FE X509v3 Authority Key Identifier: keyid:C7:C5:FB:EC:3A:54:3A:98:78:99:FE:A8:6B:4E:C6:8B:B3:B7:85:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/C7C5FBEC3A543A987899FEA86B4EC68BB3B785C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b5:b1:db:f1:fe:d7:f7:c2:c5:b5:a0:48:33:be:58:62:ec: 30:ec:f8:c9:4e:2d:e5:30:4c:2d:2a:5f:7b:f5:13:39:db:dc: f6:8b:c0:05:8e:ae:89:47:5c:5f:83:e9:24:2c:fa:e8:38:7e: 30:82:10:21:d3:a6:07:db:07:0a:85:f8:e1:c4:a8:5d:76:e9: 0a:3b:c3:85:5f:1e:82:ee:c2:77:34:e6:33:bb:ca:28:d7:99: af:05:d9:52:77:a7:f8:8b:ed:e0:fc:ec:f7:5a:c8:6f:19:fc: f2:fc:64:c5:d6:b9:51:7e:ae:c4:0e:3b:2e:72:c1:de:12:8f: 45:f9:b1:ee:a1:a7:3e:7c:ff:d5:5e:03:82:e8:27:7d:bc:45: e0:91:9e:39:f9:dc:e3:fb:0f:68:53:53:ad:1e:43:68:83:cc: 6d:75:ef:f3:48:ea:eb:ee:22:16:67:04:93:de:cf:b5:af:c4: 56:02:c9:5e:e4:9c:c6:b0:13:23:24:d7:af:aa:91:66:f5:e0: d1:e1:e2:e1:14:fc:d9:cc:85:7b:a0:f3:6a:55:d2:62:b5:99: c0:b7:3a:47:ab:cb:7e:bf:a9:88:04:1a:c2:9e:15:3c:7a:bf: c4:f1:27:30:06:29:dd:22:13:92:a7:b8:12:5f:e0:bc:a4:eb: d7:05:67:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUe9Qplfx0i//1B3XIQXc8Cqzm0/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdDNUZCRUMzQTU0M0E5ODc4OTlGRUE4NkI0RUM2OEJC M0I3ODVDNjAeFw0yNTExMDMxNzQ2MDdaFw0yNTExMDQxOTIxMDdaMDMxMTAvBgNV BAMTKDI1QjZERTc1RjQ4RjZBODZGOTk4Q0M5NTBFQjlGQkFBQkNGQ0YzRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDqGFjPifHICxg4Wy1ec8JRSz5 ry2+P6pE39wTwihlYgNxIEq4vMKcrrZ25DMAwyqhxtNBwrPa0e4awsklDbytOb7x shlrnerDLWHiFZsftnm7eLTi/+1bIMLEm4OvJqwAl3cIfqJP+cM2yd2KUtzIaSBE xrg6/qDFI3UAvprlkecACBYdX7CmxkF3frwfHhwmehGC29wOobA/jOWTZvMEx4TB q26XyGxapi+st6YUl4CTu7aurr2TzLz7+q2xnxTFBaISIY+rDt/DZWxq+ct9SUl8 314n2t4IW2QOibE/ElYHTKDPmvc4+zXs+nsG9EWK83FgsAxsts6RNxaPSfmfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJbbedfSPaob5mMyVDrn7qrz88/4wHwYDVR0j BBgwFoAUx8X77DpUOph4mf6oa07Gi7O3hcYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2FuaEdYY0diZTdtekhTZFhTMVoxZjRwaGNTQ0V6UFJIUm9zV1FxZWV4 cTQvMC9DN0M1RkJFQzNBNTQzQTk4Nzg5OUZFQTg2QjRFQzY4QkIzQjc4NUM2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3QzVGQkVDM0E1NDNBOTg3 ODk5RkVBODZCNEVDNjhCQjNCNzg1QzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2FuaEdYY0diZTdtekhTZFhTMVoxZjRwaGNTQ0V6UFJIUm9zV1FxZWV4cTQvMC9D N0M1RkJFQzNBNTQzQTk4Nzg5OUZFQTg2QjRFQzY4QkIzQjc4NUM2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfrWx2/H+1/fCxbWgSDO+WGLsMOz4yU4t5TBMLSpfe/UTOdvc9ovABY6uiUdc X4PpJCz66Dh+MIIQIdOmB9sHCoX44cSoXXbpCjvDhV8egu7CdzTmM7vKKNeZrwXZ Unen+Ivt4Pzs91rIbxn88vxkxda5UX6uxA47LnLB3hKPRfmx7qGnPnz/1V4Dgugn fbxF4JGeOfnc4/sPaFNTrR5DaIPMbXXv80jq6+4iFmcEk97Pta/EVgLJXuScxrAT IyTXr6qRZvXg0eHi4RT82cyFe6DzalXSYrWZwLc6R6vLfr+piAQawp4VPHq/xPEn MAYp3SITkqe4El/gvKTr1wVnaA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:40 2025 by rpki-client