$ rpki-client -vvf rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.mft File: 3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.mft (raw, json) Hash identifier: 9axDDWJfEbPTGXgnItJwOqfJqc4gFbQQ4BvIzusuUmY= Subject key identifier: 0F:7B:98:9F:19:D4:A7:45:DB:82:70:9B:A5:33:CD:58:D5:CF:B0:F7 Authority key identifier: 3B:18:B7:DC:9E:3A:9E:E8:2B:ED:80:DD:09:B5:7D:20:04:5B:0C:30 Certificate issuer: /CN=3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30 Certificate serial: 7614433619D1FEAC11DCFAFB62A2BCE716785F1C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer Subject info access: rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.mft Manifest number: 0283 Signing time: Sun 02 Nov 2025 23:37:24 +0000 Manifest this update: Sun 02 Nov 2025 23:32:24 +0000 Manifest next update: Tue 04 Nov 2025 02:08:24 +0000 Files and hashes: 1: 323830343a356530383a3a2f33322d3438203d3e20323639303037.roa (hash: XNfpe29wpSD5Jq68F4ol5Kh5+JZ+3Y9vJwAd+o17mgY=) 2: 3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.crl (hash: OPa6YWDNiHp+7KL/daGqdN7sLwyBb50pt8AznKN1CXw=) 3: 34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa (hash: cwW732GIsVo8A0Kc08lus9H96AnrSy4tEEaHAL65/dQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.crl rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 02:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:14:43:36:19:d1:fe:ac:11:dc:fa:fb:62:a2:bc:e7:16:78:5f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30 Validity Not Before: Nov 2 23:32:24 2025 GMT Not After : Nov 4 02:08:24 2025 GMT Subject: CN=0F7B989F19D4A745DB82709BA533CD58D5CFB0F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9b:b8:6a:72:4e:63:93:82:78:70:b1:4c:ce: 56:c6:99:15:bf:29:dd:e7:2f:22:f3:41:a7:d6:09: 04:11:4a:4e:05:90:1a:26:41:26:03:25:cf:f1:58: 68:65:77:52:01:27:63:84:07:33:4c:28:03:80:d3: fb:35:fd:1b:1b:7c:93:70:32:6d:10:21:17:33:2f: fb:23:e2:ff:d8:e9:82:01:92:5e:90:0a:0a:5f:66: 5e:35:27:16:ed:76:03:79:07:f0:78:e5:1c:77:e1: 0c:52:c4:cb:5b:5d:60:bd:4a:6c:cc:b1:fd:95:c3: fa:10:8d:00:32:52:a0:38:77:0d:2b:83:96:18:6d: d2:10:c2:37:67:3e:49:53:57:8e:e8:ed:a0:06:21: e9:26:6b:d1:73:b4:5a:f3:3e:db:46:f8:38:e8:40: 7f:9f:50:b7:b2:4d:94:82:45:fe:e2:b5:f4:19:e3: e4:27:aa:28:ce:2b:c8:1e:58:f1:a5:e3:60:42:c6: 32:3e:f1:ef:a2:92:cb:8d:6b:ee:02:83:0f:bb:67: 09:40:f5:32:d1:de:ac:cf:62:3c:1c:fe:41:e4:07: f5:0d:29:00:d3:0b:23:b1:f2:e3:95:2a:68:0f:34: 9a:f5:88:5f:82:04:03:f8:81:2e:55:79:a4:02:9f: 1f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7B:98:9F:19:D4:A7:45:DB:82:70:9B:A5:33:CD:58:D5:CF:B0:F7 X509v3 Authority Key Identifier: keyid:3B:18:B7:DC:9E:3A:9E:E8:2B:ED:80:DD:09:B5:7D:20:04:5B:0C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/0/3B18B7DC9E3A9EE82BED80DD09B57D20045B0C30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:35:f4:f8:97:04:7f:86:d1:85:c1:07:10:ef:4c:40:e1:a1: 48:59:d6:14:bb:2c:b8:5f:97:90:b3:21:be:d1:cf:69:6e:6d: e2:aa:e2:f8:30:79:37:78:17:1b:2e:c6:ee:c2:72:68:2b:f4: 61:68:d7:4f:31:e4:4c:e6:1d:5d:81:2f:3e:5c:de:97:f2:f1: a7:bf:0f:fd:6c:0a:01:97:af:ec:90:64:36:4a:19:e8:2b:9b: 15:5a:8b:4b:ef:71:3c:d5:66:1d:42:81:4d:0a:53:28:7f:4c: d3:24:38:ad:57:53:55:ec:1d:be:ce:f3:f7:39:fb:13:0d:ea: d5:99:cc:b8:e2:f5:0e:8b:21:4d:6d:d5:3a:28:f9:a9:0b:17: b0:80:50:97:3b:c4:15:fd:1f:9d:e8:3e:9b:ba:b8:7b:4a:e7: 73:fb:cc:c3:33:b0:8f:a4:d2:09:19:e9:6c:af:e1:6a:60:12: 23:2b:fd:8f:f2:fb:2c:00:ff:1b:46:e4:60:8a:fc:3c:37:ab: 01:b7:2f:d0:a1:86:b8:fb:23:55:ce:27:ca:7b:f0:3e:9f:a2: 51:c7:69:37:d3:0f:e6:7f:13:16:f7:d0:0e:40:6c:3f:54:5c: 5e:97:d6:90:71:5b:b3:df:c7:69:d6:df:40:55:ca:c8:91:70: 67:39:cf:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdhRDNhnR/qwR3Pr7YqK85xZ4XxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IxOEI3REM5RTNBOUVFODJCRUQ4MEREMDlCNTdEMjAw NDVCMEMzMDAeFw0yNTExMDIyMzMyMjRaFw0yNTExMDQwMjA4MjRaMDMxMTAvBgNV BAMTKDBGN0I5ODlGMTlENEE3NDVEQjgyNzA5QkE1MzNDRDU4RDVDRkIwRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKm7hqck5jk4J4cLFMzlbGmRW/ Kd3nLyLzQafWCQQRSk4FkBomQSYDJc/xWGhld1IBJ2OEBzNMKAOA0/s1/RsbfJNw Mm0QIRczL/sj4v/Y6YIBkl6QCgpfZl41JxbtdgN5B/B45Rx34QxSxMtbXWC9SmzM sf2Vw/oQjQAyUqA4dw0rg5YYbdIQwjdnPklTV47o7aAGIekma9FztFrzPttG+Djo QH+fULeyTZSCRf7itfQZ4+QnqijOK8geWPGl42BCxjI+8e+iksuNa+4Cgw+7ZwlA 9TLR3qzPYjwc/kHkB/UNKQDTCyOx8uOVKmgPNJr1iF+CBAP4gS5VeaQCnx8LAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUD3uYnxnUp0XbgnCbpTPNWNXPsPcwHwYDVR0j BBgwFoAUOxi33J46nugr7YDdCbV9IARbDDAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2o2NXFaSnFyQUpEZVJFODl4RW5VNkVxM1REZkZVTkFrZ0cyaHdwWkVy QUUvMC8zQjE4QjdEQzlFM0E5RUU4MkJFRDgwREQwOUI1N0QyMDA0NUIwQzMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCMThCN0RDOUUzQTlFRTgy QkVEODBERDA5QjU3RDIwMDQ1QjBDMzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2o2NXFaSnFyQUpEZVJFODl4RW5VNkVxM1REZkZVTkFrZ0cyaHdwWkVyQUUvMC8z QjE4QjdEQzlFM0E5RUU4MkJFRDgwREQwOUI1N0QyMDA0NUIwQzMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALzX0+JcEf4bRhcEHEO9MQOGhSFnWFLssuF+XkLMhvtHPaW5t4qri+DB5N3gX Gy7G7sJyaCv0YWjXTzHkTOYdXYEvPlzel/Lxp78P/WwKAZev7JBkNkoZ6CubFVqL S+9xPNVmHUKBTQpTKH9M0yQ4rVdTVewdvs7z9zn7Ew3q1ZnMuOL1DoshTW3VOij5 qQsXsIBQlzvEFf0fneg+m7q4e0rnc/vMwzOwj6TSCRnpbK/hamASIyv9j/L7LAD/ G0bkYIr8PDerAbcv0KGGuPsjVc4nynvwPp+iUcdpN9MP5n8TFvfQDkBsP1RcXpfW kHFbs9/HadbfQFXKyJFwZznPIw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:06:50 2025 by rpki-client