$ rpki-client -vvf rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/3A0B596F0C66E75776A6946984E881410C5B85C3.mft File: 3A0B596F0C66E75776A6946984E881410C5B85C3.mft (raw, json) Hash identifier: JQJRmOVJg5jiTiYV7R0OyLlvjufvr9JiFGezVuLrKgQ= Subject key identifier: 06:1F:47:21:59:B1:20:25:76:EC:A5:14:07:DA:61:9D:F3:DD:29:07 Authority key identifier: 3A:0B:59:6F:0C:66:E7:57:76:A6:94:69:84:E8:81:41:0C:5B:85:C3 Certificate issuer: /CN=3A0B596F0C66E75776A6946984E881410C5B85C3 Certificate serial: 5A3EE7D43AAC0CD7760941CFFD680ED1375895C6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A0B596F0C66E75776A6946984E881410C5B85C3.cer Subject info access: rsync://rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/3A0B596F0C66E75776A6946984E881410C5B85C3.mft Manifest number: 26 Signing time: Mon 03 Nov 2025 08:24:54 +0000 Manifest this update: Mon 03 Nov 2025 08:19:54 +0000 Manifest next update: Tue 04 Nov 2025 12:20:54 +0000 Files and hashes: 1: 323830313a38313a33303a3a2f34382d313238203d3e20323733353334.roa (hash: 985BOJw0h5QIitCbptHOi/svlDEzMQiQTV2qlrnF6Fw=) 2: 34352e3137302e3133392e302f32342d3332203d3e20323733353334.roa (hash: xa+Le74wVRLZrfDoWLitPfZgwKbXYEypRAw46UpBJ3I=) 3: 3A0B596F0C66E75776A6946984E881410C5B85C3.crl (hash: rLvKCYF1wa1s/JqVnHAnGR2OCLk+eOUxip8g8pMGwAs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/3A0B596F0C66E75776A6946984E881410C5B85C3.crl rsync://rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/3A0B596F0C66E75776A6946984E881410C5B85C3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A0B596F0C66E75776A6946984E881410C5B85C3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 12:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3e:e7:d4:3a:ac:0c:d7:76:09:41:cf:fd:68:0e:d1:37:58:95:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A0B596F0C66E75776A6946984E881410C5B85C3 Validity Not Before: Nov 3 08:19:54 2025 GMT Not After : Nov 4 12:20:54 2025 GMT Subject: CN=061F472159B1202576ECA51407DA619DF3DD2907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:73:41:3f:14:5c:ea:45:5b:26:88:5c:0c:a8: 0f:d2:27:9e:0d:ba:f3:fc:c7:62:14:c4:9d:3b:51: 13:34:b9:d3:a5:e9:fc:c1:cf:2a:67:4a:ce:ca:f5: db:90:53:c2:b0:da:73:a3:d1:a4:88:38:56:98:07: cd:c0:d2:2e:c5:4b:2f:11:97:ec:f2:fa:3a:2f:d2: be:18:48:84:f9:d8:dc:76:0f:34:40:65:77:a0:f9: a7:53:55:24:f2:d2:5d:40:49:6d:30:dd:09:e9:7e: 2e:57:92:61:0a:10:d1:01:c0:6c:16:f5:c5:e8:3a: 3f:bd:76:7f:bf:3e:34:93:28:77:61:7b:51:2e:4d: af:24:a6:95:e8:0d:88:f5:a8:d5:8e:6a:7e:eb:99: 4d:ae:1c:de:6e:8a:2b:cc:be:3c:0a:e5:74:4a:c7: 2d:95:c0:26:50:f0:11:bb:4d:5b:05:31:00:cd:72: f3:b5:b1:0e:df:c7:ad:c0:c9:d9:99:2a:a4:14:d7: d6:c8:9c:09:71:67:d5:fe:bc:8c:b3:0d:01:0b:c5: 9d:86:65:b6:d5:30:54:65:a9:f7:e4:cc:6d:9a:e6: ea:cd:fe:e7:56:fd:b7:5c:f5:b1:ef:65:b2:63:64: b4:ce:46:cd:ec:9a:79:94:d2:d1:3a:0f:97:7d:5b: 9f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1F:47:21:59:B1:20:25:76:EC:A5:14:07:DA:61:9D:F3:DD:29:07 X509v3 Authority Key Identifier: keyid:3A:0B:59:6F:0C:66:E7:57:76:A6:94:69:84:E8:81:41:0C:5B:85:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/3A0B596F0C66E75776A6946984E881410C5B85C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A0B596F0C66E75776A6946984E881410C5B85C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/3A0B596F0C66E75776A6946984E881410C5B85C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:62:f4:ed:b3:cb:82:e1:b5:1c:e5:39:4c:f3:ac:fb:87:e6: d4:01:3e:5b:1d:4b:e2:5d:22:e1:0e:da:11:3a:4b:97:4c:81: 15:8c:f9:e0:5a:f4:99:ec:30:9f:d3:45:1d:29:28:a0:85:55: ac:ff:0d:11:a1:d1:fb:e9:33:8a:68:19:6f:10:6e:aa:d1:56: 7d:e9:ec:81:29:ba:7e:cf:d0:00:34:41:da:31:e7:87:a6:e2: 84:86:2e:7b:a4:a2:64:6b:a0:0d:27:9a:01:40:3d:fa:ca:0c: 2d:70:5c:6e:c2:c5:5a:a0:bd:60:03:8c:19:50:83:1d:e1:b5: 0b:12:d6:11:52:a3:33:44:68:63:73:b6:1a:98:ed:b1:8b:13: cb:ee:a3:18:b6:dc:29:f6:a7:20:28:47:1f:3a:62:a7:b1:6d: f3:13:9c:83:c6:24:bb:1d:34:42:a4:47:82:4d:b8:ef:6e:87: 7b:cb:0d:6a:48:5d:fe:27:e6:9f:76:46:19:ed:a0:88:de:fe: 12:65:89:db:fc:d7:c9:f6:7c:cf:e3:1a:f4:c9:fe:1d:37:a1: 76:c7:16:d9:9b:f0:db:f7:39:d4:13:b7:26:4f:c3:d7:f0:82: 92:a6:53:27:2e:4b:3e:50:e7:1d:f6:b6:b4:d2:b9:a4:d7:fd: 40:4a:42:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWj7n1DqsDNd2CUHP/WgO0TdYlcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwQjU5NkYwQzY2RTc1Nzc2QTY5NDY5ODRFODgxNDEw QzVCODVDMzAeFw0yNTExMDMwODE5NTRaFw0yNTExMDQxMjIwNTRaMDMxMTAvBgNV BAMTKDA2MUY0NzIxNTlCMTIwMjU3NkVDQTUxNDA3REE2MTlERjNERDI5MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTc0E/FFzqRVsmiFwMqA/SJ54N uvP8x2IUxJ07URM0udOl6fzBzypnSs7K9duQU8Kw2nOj0aSIOFaYB83A0i7FSy8R l+zy+jov0r4YSIT52Nx2DzRAZXeg+adTVSTy0l1ASW0w3Qnpfi5XkmEKENEBwGwW 9cXoOj+9dn+/PjSTKHdhe1EuTa8kppXoDYj1qNWOan7rmU2uHN5uiivMvjwK5XRK xy2VwCZQ8BG7TVsFMQDNcvO1sQ7fx63AydmZKqQU19bInAlxZ9X+vIyzDQELxZ2G ZbbVMFRlqffkzG2a5urN/udW/bdc9bHvZbJjZLTORs3smnmU0tE6D5d9W58hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBh9HIVmxICV27KUUB9phnfPdKQcwHwYDVR0j BBgwFoAUOgtZbwxm51d2ppRphOiBQQxbhcMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHVDMmhEc296U1RlR3BpUUJYU0piWmNiMmpiZ1l6MWgzRXVvS1FMS3NX QXIvMC8zQTBCNTk2RjBDNjZFNzU3NzZBNjk0Njk4NEU4ODE0MTBDNUI4NUMzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBMEI1OTZGMEM2NkU3NTc3 NkE2OTQ2OTg0RTg4MTQxMEM1Qjg1QzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHVDMmhEc296U1RlR3BpUUJYU0piWmNiMmpiZ1l6MWgzRXVvS1FMS3NXQXIvMC8z QTBCNTk2RjBDNjZFNzU3NzZBNjk0Njk4NEU4ODE0MTBDNUI4NUMzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE2L07bPLguG1HOU5TPOs+4fm1AE+Wx1L4l0i4Q7aETpLl0yBFYz54Fr0meww n9NFHSkooIVVrP8NEaHR++kzimgZbxBuqtFWfensgSm6fs/QADRB2jHnh6bihIYu e6SiZGugDSeaAUA9+soMLXBcbsLFWqC9YAOMGVCDHeG1CxLWEVKjM0RoY3O2Gpjt sYsTy+6jGLbcKfanIChHHzpip7Ft8xOcg8Ykux00QqRHgk24726He8sNakhd/ifm n3ZGGe2giN7+EmWJ2/zXyfZ8z+Ma9Mn+HTehdscW2Zvw2/c51BO3Jk/D1/CCkqZT Jy5LPlDnHfa2tNK5pNf9QEpCCQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:01:17 2025 by rpki-client