$ rpki-client -vvf rpki-repo.registro.br/repo/4gN8UrTLVUXJ14mJUCgCfvtvJNRLrfxVV1nUMFeCuzQm/0/3ED7EEA9BB1434585656441E180F390DC5431423.mft File: 3ED7EEA9BB1434585656441E180F390DC5431423.mft (raw, json) Hash identifier: MD0BRuvwD9GzjZPK7/E4oDyxk9yFibQ6oGi5llk+v7I= Subject key identifier: 4A:AD:2C:CC:4F:21:C2:37:91:23:5A:9E:26:62:F6:61:06:28:1E:4D Authority key identifier: 3E:D7:EE:A9:BB:14:34:58:56:56:44:1E:18:0F:39:0D:C5:43:14:23 Certificate issuer: /CN=3ED7EEA9BB1434585656441E180F390DC5431423 Certificate serial: 4EE0BB9B58A545DFE363D80A93072C9E7E959BA1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED7EEA9BB1434585656441E180F390DC5431423.cer Subject info access: rsync://rpki-repo.registro.br/repo/4gN8UrTLVUXJ14mJUCgCfvtvJNRLrfxVV1nUMFeCuzQm/0/3ED7EEA9BB1434585656441E180F390DC5431423.mft Manifest number: BB Signing time: Sun 02 Nov 2025 23:31:32 +0000 Manifest this update: Sun 02 Nov 2025 23:26:32 +0000 Manifest next update: Tue 04 Nov 2025 03:06:32 +0000 Files and hashes: 1: 323830343a333735343a3a2f33322d3438203d3e20323636343034.roa (hash: QghiRlJ69bLeTBIWhvuXr2JfQ4vQpjYEXH0ZTsOaxxU=) 2: 3137302e38312e3131322e302f32322d3234203d3e20323636343034.roa (hash: N8kKAb5Ws8Kbb6LYPKTPlPXTl9Z+Htv/mCxKupmmNO8=) 3: 3ED7EEA9BB1434585656441E180F390DC5431423.crl (hash: Q+JOjA8gRaf1NulqicupxUUoIumapRRy3n4BbPuKp88=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4gN8UrTLVUXJ14mJUCgCfvtvJNRLrfxVV1nUMFeCuzQm/0/3ED7EEA9BB1434585656441E180F390DC5431423.crl rsync://rpki-repo.registro.br/repo/4gN8UrTLVUXJ14mJUCgCfvtvJNRLrfxVV1nUMFeCuzQm/0/3ED7EEA9BB1434585656441E180F390DC5431423.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED7EEA9BB1434585656441E180F390DC5431423.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 03:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e0:bb:9b:58:a5:45:df:e3:63:d8:0a:93:07:2c:9e:7e:95:9b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ED7EEA9BB1434585656441E180F390DC5431423 Validity Not Before: Nov 2 23:26:32 2025 GMT Not After : Nov 4 03:06:32 2025 GMT Subject: CN=4AAD2CCC4F21C23791235A9E2662F66106281E4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:be:1f:4f:9a:9f:c6:3d:83:45:46:10:64:56: 78:8f:44:fb:b9:ba:1a:cb:61:9f:d5:7c:61:c5:1e: 68:3b:1a:04:8b:a3:ac:4c:1e:51:d5:4f:74:c3:33: 7e:34:ca:db:6c:a4:c1:9a:ae:fc:70:fd:fa:1d:99: f7:5b:18:9c:96:55:13:8c:01:c9:e3:7e:8e:1a:a3: 13:1a:95:be:45:e0:8c:50:08:ba:b0:68:ac:09:66: d2:51:e6:3d:c1:ec:88:5a:05:fe:c7:9d:23:b0:d7: 9b:b6:98:62:4b:7c:19:c2:58:3e:20:63:9e:4f:5d: 11:d4:ad:60:94:8c:d0:5f:18:8f:9c:83:1a:08:63: fa:b6:a1:c8:22:5d:55:73:cd:d3:9c:92:78:34:24: f0:46:e4:d8:25:6b:d0:4d:9c:b4:99:57:d5:f7:50: a2:b3:01:c4:da:21:86:54:db:c0:0d:cb:0f:9b:99: cf:c3:e2:78:0e:0b:ee:7d:67:5d:b3:f4:01:32:96: a3:3f:88:39:9a:f2:df:c0:95:96:28:18:53:29:a0: 87:e8:d5:71:c2:6f:be:3a:e2:7e:f2:d1:3e:d2:61: 75:73:70:e4:78:c5:28:79:4f:0e:86:d2:f1:7f:b7: af:4e:7e:81:7c:4a:17:2c:27:5c:19:e4:42:5c:2b: 6b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AD:2C:CC:4F:21:C2:37:91:23:5A:9E:26:62:F6:61:06:28:1E:4D X509v3 Authority Key Identifier: keyid:3E:D7:EE:A9:BB:14:34:58:56:56:44:1E:18:0F:39:0D:C5:43:14:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4gN8UrTLVUXJ14mJUCgCfvtvJNRLrfxVV1nUMFeCuzQm/0/3ED7EEA9BB1434585656441E180F390DC5431423.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED7EEA9BB1434585656441E180F390DC5431423.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gN8UrTLVUXJ14mJUCgCfvtvJNRLrfxVV1nUMFeCuzQm/0/3ED7EEA9BB1434585656441E180F390DC5431423.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:49:10:a8:35:a0:0c:f2:46:7e:88:db:59:4f:2f:01:f3:a2: bf:d7:54:f5:29:56:a6:c7:a7:7b:a8:10:9b:23:f3:d2:a0:03: 6e:34:04:9b:17:7d:aa:40:a7:61:92:92:3d:6e:90:75:8c:95: fa:68:52:4e:60:d1:42:4a:d4:79:b0:fe:2c:96:41:34:59:1c: d3:91:8f:69:fc:55:d6:b3:ab:78:d2:ee:87:a0:de:72:f2:08: bc:b0:10:c1:16:1b:a7:c1:21:b6:2e:da:e5:40:ea:85:b0:23: 59:72:b9:47:73:4d:8d:e3:74:9e:47:0d:dc:17:fc:1d:31:1b: 8e:74:ec:a0:7b:39:3c:f6:e9:57:4f:33:42:a3:9d:8d:89:f1: a4:1f:18:4f:5c:6c:cd:96:77:db:fc:34:91:52:81:57:de:ab: d5:20:f2:13:51:fc:3d:42:2f:8d:15:4a:8f:1e:a2:c4:24:1d: db:36:03:78:b4:7a:40:cc:72:fd:19:62:ef:e9:29:4d:32:94: 13:87:82:fb:bc:a0:0c:2c:a8:99:7c:75:63:6e:a6:1e:ba:74: 4a:a8:4d:54:8a:73:12:74:e4:6f:f7:6d:cd:52:85:4f:dd:be: 71:3c:32:64:c9:e0:6b:fe:99:18:cd:6b:b5:d2:11:0f:6d:d7: ea:c1:2a:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTuC7m1ilRd/jY9gKkwcsnn6Vm6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VEN0VFQTlCQjE0MzQ1ODU2NTY0NDFFMTgwRjM5MERD NTQzMTQyMzAeFw0yNTExMDIyMzI2MzJaFw0yNTExMDQwMzA2MzJaMDMxMTAvBgNV BAMTKDRBQUQyQ0NDNEYyMUMyMzc5MTIzNUE5RTI2NjJGNjYxMDYyODFFNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtvh9Pmp/GPYNFRhBkVniPRPu5 uhrLYZ/VfGHFHmg7GgSLo6xMHlHVT3TDM340yttspMGarvxw/fodmfdbGJyWVROM Acnjfo4aoxMalb5F4IxQCLqwaKwJZtJR5j3B7IhaBf7HnSOw15u2mGJLfBnCWD4g Y55PXRHUrWCUjNBfGI+cgxoIY/q2ocgiXVVzzdOckng0JPBG5Ngla9BNnLSZV9X3 UKKzAcTaIYZU28ANyw+bmc/D4ngOC+59Z12z9AEylqM/iDma8t/AlZYoGFMpoIfo 1XHCb7464n7y0T7SYXVzcOR4xSh5Tw6G0vF/t69OfoF8ShcsJ1wZ5EJcK2sTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSq0szE8hwjeRI1qeJmL2YQYoHk0wHwYDVR0j BBgwFoAUPtfuqbsUNFhWVkQeGA85DcVDFCMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGdOOFVyVExWVVhKMTRtSlVDZ0NmdnR2Sk5STHJmeFZWMW5VTUZlQ3V6 UW0vMC8zRUQ3RUVBOUJCMTQzNDU4NTY1NjQ0MUUxODBGMzkwREM1NDMxNDIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFRDdFRUE5QkIxNDM0NTg1 NjU2NDQxRTE4MEYzOTBEQzU0MzE0MjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGdOOFVyVExWVVhKMTRtSlVDZ0NmdnR2Sk5STHJmeFZWMW5VTUZlQ3V6UW0vMC8z RUQ3RUVBOUJCMTQzNDU4NTY1NjQ0MUUxODBGMzkwREM1NDMxNDIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxkkQqDWgDPJGfojbWU8vAfOiv9dU9SlWpsene6gQmyPz0qADbjQEmxd9qkCn YZKSPW6QdYyV+mhSTmDRQkrUebD+LJZBNFkc05GPafxV1rOreNLuh6DecvIIvLAQ wRYbp8Ehti7a5UDqhbAjWXK5R3NNjeN0nkcN3Bf8HTEbjnTsoHs5PPbpV08zQqOd jYnxpB8YT1xszZZ32/w0kVKBV96r1SDyE1H8PUIvjRVKjx6ixCQd2zYDeLR6QMxy /Rli7+kpTTKUE4eC+7ygDCyomXx1Y26mHrp0SqhNVIpzEnTkb/dtzVKFT92+cTwy ZMnga/6ZGM1rtdIRD23X6sEq4g== -----END CERTIFICATE-----Generated at Mon Nov 3 12:34:48 2025 by rpki-client