$ rpki-client -vvf rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft File: 3895E2089A93A58E1062DE9612B321CA505C51FA.mft (raw, json) Hash identifier: t6EEz5bT31nRTJpXjrQPKOQihW5n0ks6bqTuh/lMhBY= Subject key identifier: 22:A1:79:A0:2B:B3:4C:45:F0:94:7A:71:B1:38:97:D9:1F:79:C1:5D Authority key identifier: 38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA Certificate issuer: /CN=3895E2089A93A58E1062DE9612B321CA505C51FA Certificate serial: 5D701E26046485F3B0C33DC40B02646677A844D7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer Subject info access: rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft Manifest number: 0365 Signing time: Tue 04 Nov 2025 07:54:00 +0000 Manifest this update: Tue 04 Nov 2025 07:49:00 +0000 Manifest next update: Wed 05 Nov 2025 07:54:00 +0000 Files and hashes: 1: 3895E2089A93A58E1062DE9612B321CA505C51FA.crl (hash: dqoHBcCM+QIDZMa+Ke+2CfIIvTG6jAbzC7uFq1InkCs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.crl rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 07:54:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:70:1e:26:04:64:85:f3:b0:c3:3d:c4:0b:02:64:66:77:a8:44:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3895E2089A93A58E1062DE9612B321CA505C51FA Validity Not Before: Nov 4 07:49:00 2025 GMT Not After : Nov 11 07:54:00 2025 GMT Subject: CN=3082010A0282010100D8D96E6E207C5250F5084DED5DBEE6EF307C63CC49D4D6DD243C8CCDBB18482DEC3607E1241C37E05DCCB7179B549B0F59E6FA09D0A543575E55FC890B8FE854C360DB554569095E5CCC64A06CA87F0EE09D4A94F61D50B94774687FE015E49F7E4DB17E07B2100F518DA7809A23D557601DE04F92052FC5E768133BE83B4BBDFF5E4B08A93CF84FFB9BA290BAB5D36F28F046F3905B5A2ABCE5D0B6EE9B5A0DC38A0BFB60E038F1CDCA3665446143DA2A3E336ED021C63F6E6F48E3EEFF6CF458CAA059A84A4FD735A46D7CE1A5035C98C2812AE079DD5A5468AC0B22077FCB2779F184EB593338E705F9E1F60684A25D9C5D89F69F0A844484CF0EB6D231BB0203010001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d9:6e:6e:20:7c:52:50:f5:08:4d:ed:5d:be: e6:ef:30:7c:63:cc:49:d4:d6:dd:24:3c:8c:cd:bb: 18:48:2d:ec:36:07:e1:24:1c:37:e0:5d:cc:b7:17: 9b:54:9b:0f:59:e6:fa:09:d0:a5:43:57:5e:55:fc: 89:0b:8f:e8:54:c3:60:db:55:45:69:09:5e:5c:cc: 64:a0:6c:a8:7f:0e:e0:9d:4a:94:f6:1d:50:b9:47: 74:68:7f:e0:15:e4:9f:7e:4d:b1:7e:07:b2:10:0f: 51:8d:a7:80:9a:23:d5:57:60:1d:e0:4f:92:05:2f: c5:e7:68:13:3b:e8:3b:4b:bd:ff:5e:4b:08:a9:3c: f8:4f:fb:9b:a2:90:ba:b5:d3:6f:28:f0:46:f3:90: 5b:5a:2a:bc:e5:d0:b6:ee:9b:5a:0d:c3:8a:0b:fb: 60:e0:38:f1:cd:ca:36:65:44:61:43:da:2a:3e:33: 6e:d0:21:c6:3f:6e:6f:48:e3:ee:ff:6c:f4:58:ca: a0:59:a8:4a:4f:d7:35:a4:6d:7c:e1:a5:03:5c:98: c2:81:2a:e0:79:dd:5a:54:68:ac:0b:22:07:7f:cb: 27:79:f1:84:eb:59:33:38:e7:05:f9:e1:f6:06:84: a2:5d:9c:5d:89:f6:9f:0a:84:44:84:cf:0e:b6:d2: 31:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A1:79:A0:2B:B3:4C:45:F0:94:7A:71:B1:38:97:D9:1F:79:C1:5D X509v3 Authority Key Identifier: keyid:38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:5c:34:9b:1b:4c:0f:2c:86:5a:c5:07:fe:75:36:da:7d:2a: 60:60:68:5c:c5:ad:14:07:0b:b7:63:64:4a:93:2f:d2:46:55: fc:fa:31:3b:eb:16:1e:75:4e:0b:26:79:57:56:88:8f:2f:cf: d7:2a:f6:66:57:d4:36:27:7f:87:fc:58:bf:46:19:68:22:d8: 4e:2d:9f:c1:2e:92:f9:0c:8a:a6:57:c9:02:db:f3:af:7d:96: 28:64:8d:0a:ea:88:ab:51:57:42:d4:28:b6:2a:a3:69:3c:18: 12:46:95:5d:73:ec:5c:75:13:57:17:82:c2:24:30:c3:d3:31: 0b:4a:47:f6:4c:9b:f9:60:67:63:f0:47:fe:f5:b5:34:5d:10: 09:92:92:c9:e6:3c:da:a5:e9:06:bc:69:7f:c0:b3:5c:54:2f: 75:2f:9a:a0:05:87:ef:fe:04:9a:21:39:58:1b:8f:ac:94:16: b3:aa:19:12:c7:16:05:fc:0e:06:c1:f4:dd:42:fa:6d:59:76: 08:a2:6b:b5:34:cd:21:92:02:96:b9:d5:5c:fa:ac:93:66:bf: 15:4e:e6:1f:78:1a:86:91:c7:95:ab:d5:4f:79:b5:14:d2:7d: 49:62:af:89:65:3e:a4:7a:af:43:83:08:59:21:d2:73:3d:15: 28:ad:25:ce -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUXXAeJgRkhfOwwz3ECwJkZneoRNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5NUUyMDg5QTkzQTU4RTEwNjJERTk2MTJCMzIxQ0E1 MDVDNTFGQTAeFw0yNTExMDQwNzQ5MDBaFw0yNTExMTEwNzU0MDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDhEOTZFNkUyMDdDNTI1MEY1 MDg0REVENURCRUU2RUYzMDdDNjNDQzQ5RDRENkREMjQzQzhDQ0RCQjE4NDgyREVD MzYwN0UxMjQxQzM3RTA1RENDQjcxNzlCNTQ5QjBGNTlFNkZBMDlEMEE1NDM1NzVF NTVGQzg5MEI4RkU4NTRDMzYwREI1NTQ1NjkwOTVFNUNDQzY0QTA2Q0E4N0YwRUUw OUQ0QTk0RjYxRDUwQjk0Nzc0Njg3RkUwMTVFNDlGN0U0REIxN0UwN0IyMTAwRjUx OERBNzgwOUEyM0Q1NTc2MDFERTA0RjkyMDUyRkM1RTc2ODEzM0JFODNCNEJCREZG NUU0QjA4QTkzQ0Y4NEZGQjlCQTI5MEJBQjVEMzZGMjhGMDQ2RjM5MDVCNUEyQUJD RTVEMEI2RUU5QjVBMERDMzhBMEJGQjYwRTAzOEYxQ0RDQTM2NjU0NDYxNDNEQTJB M0UzMzZFRDAyMUM2M0Y2RTZGNDhFM0VFRkY2Q0Y0NThDQUEwNTlBODRBNEZENzM1 QTQ2RDdDRTFBNTAzNUM5OEMyODEyQUUwNzlERDVBNTQ2OEFDMEIyMjA3N0ZDQjI3 NzlGMTg0RUI1OTMzMzhFNzA1RjlFMUY2MDY4NEEyNUQ5QzVEODlGNjlGMEE4NDQ0 ODRDRjBFQjZEMjMxQkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA2NlubiB8UlD1CE3tXb7m7zB8Y8xJ1NbdJDyMzbsYSC3sNgfhJBw3 4F3MtxebVJsPWeb6CdClQ1deVfyJC4/oVMNg21VFaQleXMxkoGyofw7gnUqU9h1Q uUd0aH/gFeSffk2xfgeyEA9RjaeAmiPVV2Ad4E+SBS/F52gTO+g7S73/XksIqTz4 T/ubopC6tdNvKPBG85BbWiq85dC27ptaDcOKC/tg4Djxzco2ZURhQ9oqPjNu0CHG P25vSOPu/2z0WMqgWahKT9c1pG184aUDXJjCgSrged1aVGisCyIHf8snefGE61kz OOcF+eH2BoSiXZxdifafCoREhM8OttIxuwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FCKheaArs0xF8JR6cbE4l9kfecFdMB8GA1UdIwQYMBaAFDiV4giak6WOEGLelhKz IcpQXFH6MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhoZ3JXc2tZcFV6Z1lr U1RGVGhZQXdKNnVwdllCYk5YeWQ1VEpaVHgxYVNYLzEvMzg5NUUyMDg5QTkzQTU4 RTEwNjJERTk2MTJCMzIxQ0E1MDVDNTFGQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS8zODk1RTIwODlBOTNBNThFMTA2MkRFOTYxMkIzMjFDQTUwNUM1 MUZBLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhoZ3JXc2tZcFV6Z1lrU1RGVGhZ QXdKNnVwdllCYk5YeWQ1VEpaVHgxYVNYLzEvMzg5NUUyMDg5QTkzQTU4RTEwNjJE RTk2MTJCMzIxQ0E1MDVDNTFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAM1cNJsbTA8shlrFB/51Ntp9 KmBgaFzFrRQHC7djZEqTL9JGVfz6MTvrFh51TgsmeVdWiI8vz9cq9mZX1DYnf4f8 WL9GGWgi2E4tn8EukvkMiqZXyQLb8699lihkjQrqiKtRV0LUKLYqo2k8GBJGlV1z 7Fx1E1cXgsIkMMPTMQtKR/ZMm/lgZ2PwR/71tTRdEAmSksnmPNql6Qa8aX/As1xU L3UvmqAFh+/+BJohOVgbj6yUFrOqGRLHFgX8DgbB9N1C+m1Zdgiia7U0zSGSApa5 1Vz6rJNmvxVO5h94GoaRx5Wr1U95tRTSfUlir4llPqR6r0ODCFkh0nM9FSitJc4= -----END CERTIFICATE-----Generated at Tue Nov 4 10:26:42 2025 by rpki-client