$ rpki-client -vvf rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft File: 3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft (raw, json) Hash identifier: XYqVKAvpEHbLX2SLqlvEuYK/IM4lPmklwcJ7B1swgBU= Subject key identifier: 68:3A:C3:9F:8E:FC:C6:6A:E3:17:0A:B4:BB:0F:EE:7E:6E:B7:80:99 Authority key identifier: 3D:45:19:C7:76:9E:08:9F:7D:05:32:70:03:C6:A5:0E:92:B8:C0:B8 Certificate issuer: /CN=3D4519C7769E089F7D05327003C6A50E92B8C0B8 Certificate serial: 4A6E0CDC12B0927D55D35A27196B49825A87329B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4519C7769E089F7D05327003C6A50E92B8C0B8.cer Subject info access: rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft Manifest number: 1F Signing time: Sun 02 Nov 2025 18:14:45 +0000 Manifest this update: Sun 02 Nov 2025 18:09:45 +0000 Manifest next update: Mon 03 Nov 2025 22:04:45 +0000 Files and hashes: 1: 323830343a313032633a3a2f33322d3438203d3e20323633363233.roa (hash: 3Ghujwd9UJr9rmn+1oBjDbpHtaxE8dNt1tzIlqfBhgM=) 2: 3D4519C7769E089F7D05327003C6A50E92B8C0B8.crl (hash: 60lgkNNg9LvXPjVNJqbJYvxt23nW8iF8mtkQ3awK6HQ=) 3: 3134332e3235352e34342e302f32322d3234203d3e20323633363233.roa (hash: 7vlAhbb3FI7QyEjtwP0+o0wEbBe10eFGaDw+xDEygn0=) 4: 3137372e3138352e3234302e302f32302d3234203d3e20323633363233.roa (hash: j+FV69/njmj4oFmPt6kSnXyQbUS03CHA/8u11POeSL8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.crl rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4519C7769E089F7D05327003C6A50E92B8C0B8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 22:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:6e:0c:dc:12:b0:92:7d:55:d3:5a:27:19:6b:49:82:5a:87:32:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D4519C7769E089F7D05327003C6A50E92B8C0B8 Validity Not Before: Nov 2 18:09:45 2025 GMT Not After : Nov 3 22:04:45 2025 GMT Subject: CN=683AC39F8EFCC66AE3170AB4BB0FEE7E6EB78099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:d7:5c:05:01:ff:d4:1d:15:42:14:3a:92: 02:aa:dc:1a:e8:f3:f2:34:8c:44:b7:0a:c8:f0:96: aa:d0:a7:7d:2f:f4:a0:59:5e:f0:6c:ac:13:95:0c: 8f:35:b7:b6:7c:33:02:51:52:96:63:d6:b3:fa:f2: fd:92:f3:c7:88:58:fb:10:5d:6c:95:c9:11:2e:2d: 85:56:de:1b:a7:9f:38:45:87:2b:c2:d8:f7:a5:8e: 95:cd:9b:a2:41:fc:59:f6:18:a2:ac:c3:ee:f1:d7: 79:1b:27:ae:4c:18:0b:3b:c4:6f:4e:31:92:56:f5: f2:17:aa:bf:c5:81:ab:f5:a7:54:64:2d:94:ae:b6: 5b:aa:a7:fa:4a:d1:42:94:32:ae:a2:58:23:b7:21: 6b:42:6e:6c:7b:34:c8:cd:11:cf:12:8c:a8:a9:d1: 40:82:1a:b7:aa:08:03:6e:eb:91:41:b9:46:a3:4c: 58:e8:d4:0d:35:22:2f:64:a0:bd:a8:fc:b1:de:ec: ed:a6:ab:25:5c:2f:79:c5:f9:34:f4:7f:fc:b9:69: fb:78:1f:23:26:08:0a:1b:ee:8e:27:73:2a:77:48: db:65:3a:3b:3e:e8:cc:da:59:ad:e8:2f:d0:a7:32: 2b:f1:7b:09:3c:a0:5f:34:49:3c:72:1f:e2:2d:24: 1e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3A:C3:9F:8E:FC:C6:6A:E3:17:0A:B4:BB:0F:EE:7E:6E:B7:80:99 X509v3 Authority Key Identifier: keyid:3D:45:19:C7:76:9E:08:9F:7D:05:32:70:03:C6:A5:0E:92:B8:C0:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4519C7769E089F7D05327003C6A50E92B8C0B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:2f:45:fc:73:1e:75:58:ff:e9:ed:61:c3:a7:dd:6f:ed:9d: 5d:47:9a:b1:6c:ad:b2:2d:2c:a8:80:ef:99:ad:a4:76:af:0e: fd:82:b2:cd:c0:13:35:82:f5:93:c5:5c:06:d4:9f:6c:29:b0: 57:82:8e:ba:2d:6d:2b:b6:c7:ce:80:a0:c7:70:5d:60:89:d0: 4c:f1:6a:21:18:35:fa:4c:ad:fd:62:40:3b:ed:6d:a2:93:09: 9e:a6:ec:cf:3e:59:20:0b:4a:51:a6:53:47:71:0c:ca:75:c5: 5c:12:52:2e:c3:22:c0:bd:a1:c1:3a:6a:66:a6:8c:5e:1a:92: 3a:97:87:8c:b3:0e:df:f5:d9:eb:49:4f:0d:7f:17:54:ab:86: 6a:f3:6f:3d:e2:46:80:e6:7b:91:30:b7:ba:f2:e9:03:1c:52: 9c:51:35:1a:1e:be:6b:7c:cd:df:e8:9f:ec:ba:90:cb:b2:7f: 6d:53:84:1d:90:6a:0a:bb:d7:e4:28:e8:47:4e:23:c4:5c:8a: aa:e1:48:66:5d:67:23:55:a0:81:50:66:c1:a5:db:fe:92:23: f5:15:fa:e4:8b:ec:1d:d2:56:36:15:9e:f5:5a:e7:75:20:2a: 49:11:cf:a6:53:ac:44:1a:2c:fe:8d:68:a8:0d:62:16:9b:61: c0:eb:49:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSm4M3BKwkn1V01onGWtJglqHMpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q0NTE5Qzc3NjlFMDg5RjdEMDUzMjcwMDNDNkE1MEU5 MkI4QzBCODAeFw0yNTExMDIxODA5NDVaFw0yNTExMDMyMjA0NDVaMDMxMTAvBgNV BAMTKDY4M0FDMzlGOEVGQ0M2NkFFMzE3MEFCNEJCMEZFRTdFNkVCNzgwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8B9dcBQH/1B0VQhQ6kgKq3Bro 8/I0jES3CsjwlqrQp30v9KBZXvBsrBOVDI81t7Z8MwJRUpZj1rP68v2S88eIWPsQ XWyVyREuLYVW3hunnzhFhyvC2PeljpXNm6JB/Fn2GKKsw+7x13kbJ65MGAs7xG9O MZJW9fIXqr/Fgav1p1RkLZSutluqp/pK0UKUMq6iWCO3IWtCbmx7NMjNEc8SjKip 0UCCGreqCANu65FBuUajTFjo1A01Ii9koL2o/LHe7O2mqyVcL3nF+TT0f/y5aft4 HyMmCAob7o4ncyp3SNtlOjs+6MzaWa3oL9CnMivxewk8oF80STxyH+ItJB6XAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaDrDn478xmrjFwq0uw/ufm63gJkwHwYDVR0j BBgwFoAUPUUZx3aeCJ99BTJwA8alDpK4wLgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0t0SlJZaUFKd0ZLeGFEWlFUUWdQTjFkd2tia2p4Uld5bm96RmVyVTdh TUgvMC8zRDQ1MTlDNzc2OUUwODlGN0QwNTMyNzAwM0M2QTUwRTkyQjhDMEI4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENDUxOUM3NzY5RTA4OUY3 RDA1MzI3MDAzQzZBNTBFOTJCOEMwQjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N0t0SlJZaUFKd0ZLeGFEWlFUUWdQTjFkd2tia2p4Uld5bm96RmVyVTdhTUgvMC8z RDQ1MTlDNzc2OUUwODlGN0QwNTMyNzAwM0M2QTUwRTkyQjhDMEI4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQi9F/HMedVj/6e1hw6fdb+2dXUeasWytsi0sqIDvma2kdq8O/YKyzcATNYL1 k8VcBtSfbCmwV4KOui1tK7bHzoCgx3BdYInQTPFqIRg1+kyt/WJAO+1topMJnqbs zz5ZIAtKUaZTR3EMynXFXBJSLsMiwL2hwTpqZqaMXhqSOpeHjLMO3/XZ60lPDX8X VKuGavNvPeJGgOZ7kTC3uvLpAxxSnFE1Gh6+a3zN3+if7LqQy7J/bVOEHZBqCrvX 5CjoR04jxFyKquFIZl1nI1WggVBmwaXb/pIj9RX65IvsHdJWNhWe9VrndSAqSRHP plOsRBos/o1oqA1iFpthwOtJnA== -----END CERTIFICATE-----Generated at Mon Nov 3 12:11:46 2025 by rpki-client