$ rpki-client -vvf rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft File: 3A643A755DDC15D6F86DC11230B9F76A2774D614.mft (raw, json) Hash identifier: YBP7Ei2g2kaxJ1qUxVMqZdB8XPwort1bN22i0Gyk9ug= Subject key identifier: 09:46:51:AA:C2:7B:76:E0:16:B8:CE:82:9C:77:A7:77:CE:22:D7:E6 Authority key identifier: 3A:64:3A:75:5D:DC:15:D6:F8:6D:C1:12:30:B9:F7:6A:27:74:D6:14 Certificate issuer: /CN=3A643A755DDC15D6F86DC11230B9F76A2774D614 Certificate serial: 7CC23E1FA977369FA01F9FC9950BE35F90903848 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer Subject info access: rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft Manifest number: D4 Signing time: Mon 03 Nov 2025 09:40:00 +0000 Manifest this update: Mon 03 Nov 2025 09:35:00 +0000 Manifest next update: Tue 04 Nov 2025 13:30:00 +0000 Files and hashes: 1: 3138392e35312e34302e302f32332d3332203d3e20323730373235.roa (hash: BqLQha74KDtppF7T3QZ5OxMFjGkWPH/hI5cH+aGR4ek=) 2: 3A643A755DDC15D6F86DC11230B9F76A2774D614.crl (hash: vPxk/nM3GlmDooV12kqj1nH1jYT4bBpaZKSJM84OOwc=) 3: 323830343a373036383a3a2f33322d313238203d3e20323730373235.roa (hash: Zn64V4rp5ilUi+BcA6Yz4lAJz878uFpz4QzpzKZng+o=) 4: 3138392e35312e34322e302f32332d3332203d3e20323730373235.roa (hash: 86mbNBoxrsA5PU/6bdXPR6HwbxrKjF+4v1Ng/ngi+u8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c2:3e:1f:a9:77:36:9f:a0:1f:9f:c9:95:0b:e3:5f:90:90:38:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A643A755DDC15D6F86DC11230B9F76A2774D614 Validity Not Before: Nov 3 09:35:00 2025 GMT Not After : Nov 4 13:30:00 2025 GMT Subject: CN=094651AAC27B76E016B8CE829C77A777CE22D7E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:ca:d9:f2:de:3b:6d:b0:e7:c3:d3:b5:e7:85: 72:b0:f7:52:ff:e0:de:2f:89:3e:82:18:80:eb:24: 3d:3c:35:4a:6f:cb:3b:94:0f:ea:ee:25:28:69:a0: 8a:4f:3b:66:d0:73:43:37:65:fc:75:49:3a:37:cf: c9:b5:81:47:99:54:b2:ee:03:d2:7f:9b:5e:d1:0c: c0:ff:91:18:4c:44:76:b0:bd:cf:f9:87:61:1e:3e: 44:9b:73:c6:2a:40:27:f8:de:ff:f2:ef:1c:90:fa: f6:2c:5a:61:54:bc:ee:cd:41:d5:27:44:72:4a:20: d9:ce:2e:75:94:41:a5:de:ac:85:a0:0c:86:35:bd: f6:d3:09:c1:79:66:5c:43:d1:77:98:09:c5:b3:46: c5:a5:b0:9d:ef:fa:63:5b:04:0a:ff:19:61:e7:19: e3:d4:af:95:e0:5b:18:d1:2c:a6:db:f0:ba:f0:87: ba:b4:f2:fe:81:8b:74:87:ec:8e:a1:e5:84:30:7a: 03:1f:c9:4d:82:09:ea:c1:fd:ea:42:16:a5:9f:67: 2e:34:f4:90:b5:a7:10:fa:c7:65:68:b9:86:e3:69: c8:3a:03:84:64:eb:a7:ed:48:4a:2f:b9:77:64:ec: c0:82:67:45:c4:38:81:f2:7a:11:42:b2:ea:07:00: 5a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:46:51:AA:C2:7B:76:E0:16:B8:CE:82:9C:77:A7:77:CE:22:D7:E6 X509v3 Authority Key Identifier: keyid:3A:64:3A:75:5D:DC:15:D6:F8:6D:C1:12:30:B9:F7:6A:27:74:D6:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5b:e7:7c:3d:6a:75:b7:00:58:1a:1f:fe:51:e9:89:78:e7: fa:09:7e:eb:ea:f0:24:d7:18:3d:a6:46:9b:83:44:81:00:b4: 8f:f5:dc:33:46:24:9a:0f:cb:23:a1:82:53:7f:82:ad:b6:4c: 39:5e:4c:14:54:e5:f3:b1:07:f4:dc:84:0e:ec:b3:d4:19:2f: d6:b4:66:60:c4:83:2d:8d:1f:65:f1:50:3c:5e:7f:d5:46:b8: 0c:12:37:0b:4e:a2:5b:ab:d2:8a:bc:06:29:86:a3:6b:eb:57: e0:b3:b5:5f:2d:4f:3a:8c:d2:e7:4b:6f:a6:38:86:45:a9:c6: b0:c7:91:d8:79:b0:03:87:cc:54:62:bf:21:a3:bc:c1:53:f4: 3d:77:5f:9f:d4:69:e1:48:b7:2c:cd:32:9f:be:37:0d:6e:fa: 8a:ae:45:1b:c0:f7:58:e8:d6:9a:3f:d5:7b:a0:29:cb:41:7f: 80:08:53:9c:08:e2:6b:1d:2a:26:b7:33:aa:7d:b4:21:d8:27: 4e:55:85:8f:7f:a4:b9:41:82:ea:dc:e4:10:d0:20:59:f0:30: f0:a8:2a:0f:e2:90:a5:10:24:32:33:74:a9:5d:64:25:3a:f7: b2:f0:e1:c5:78:db:98:dc:e6:d3:af:64:f3:8d:ee:c9:ae:1c: b1:56:06:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfMI+H6l3Np+gH5/JlQvjX5CQOEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E2NDNBNzU1RERDMTVENkY4NkRDMTEyMzBCOUY3NkEy Nzc0RDYxNDAeFw0yNTExMDMwOTM1MDBaFw0yNTExMDQxMzMwMDBaMDMxMTAvBgNV BAMTKDA5NDY1MUFBQzI3Qjc2RTAxNkI4Q0U4MjlDNzdBNzc3Q0UyMkQ3RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4ytny3jttsOfD07XnhXKw91L/ 4N4viT6CGIDrJD08NUpvyzuUD+ruJShpoIpPO2bQc0M3Zfx1STo3z8m1gUeZVLLu A9J/m17RDMD/kRhMRHawvc/5h2EePkSbc8YqQCf43v/y7xyQ+vYsWmFUvO7NQdUn RHJKINnOLnWUQaXerIWgDIY1vfbTCcF5ZlxD0XeYCcWzRsWlsJ3v+mNbBAr/GWHn GePUr5XgWxjRLKbb8Lrwh7q08v6Bi3SH7I6h5YQwegMfyU2CCerB/epCFqWfZy40 9JC1pxD6x2VouYbjacg6A4Rk66ftSEovuXdk7MCCZ0XEOIHyehFCsuoHAFoDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCUZRqsJ7duAWuM6CnHend84i1+YwHwYDVR0j BBgwFoAUOmQ6dV3cFdb4bcESMLn3aid01hQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNW5lNU1xa0hNazgxWWdhWnpWY2ZOM2tKcjNBVlVuWlRtYm5DcDNpV2RV S0EvMC8zQTY0M0E3NTVEREMxNUQ2Rjg2REMxMTIzMEI5Rjc2QTI3NzRENjE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBNjQzQTc1NUREQzE1RDZG ODZEQzExMjMwQjlGNzZBMjc3NEQ2MTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NW5lNU1xa0hNazgxWWdhWnpWY2ZOM2tKcjNBVlVuWlRtYm5DcDNpV2RVS0EvMC8z QTY0M0E3NTVEREMxNUQ2Rjg2REMxMTIzMEI5Rjc2QTI3NzRENjE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPlvnfD1qdbcAWBof/lHpiXjn+gl+6+rwJNcYPaZGm4NEgQC0j/XcM0Ykmg/L I6GCU3+CrbZMOV5MFFTl87EH9NyEDuyz1Bkv1rRmYMSDLY0fZfFQPF5/1Ua4DBI3 C06iW6vSirwGKYaja+tX4LO1Xy1POozS50tvpjiGRanGsMeR2HmwA4fMVGK/IaO8 wVP0PXdfn9Rp4Ui3LM0yn743DW76iq5FG8D3WOjWmj/Ve6Apy0F/gAhTnAjiax0q Jrczqn20IdgnTlWFj3+kuUGC6tzkENAgWfAw8KgqD+KQpRAkMjN0qV1kJTr3svDh xXjbmNzm069k843uya4csVYGDw== -----END CERTIFICATE-----Generated at Mon Nov 3 12:31:20 2025 by rpki-client