$ rpki-client -vvf rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft File: 3BA0E4707E0361E96A25CFBC6104551202B34011.mft (raw, json) Hash identifier: EWr4W/X8YPWvnD9jlPkIYqu1HlLyjKbnTGa6+QeOjFM= Subject key identifier: A9:F0:AF:07:3A:74:58:4B:12:71:B7:F1:25:B3:36:77:A0:C3:F5:04 Authority key identifier: 3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 Certificate issuer: /CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Certificate serial: 20E70B5558B3E5922B687A1C98CC9DC509E36C03 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft Manifest number: 02F8 Signing time: Tue 04 Nov 2025 00:54:01 +0000 Manifest this update: Tue 04 Nov 2025 00:49:01 +0000 Manifest next update: Wed 05 Nov 2025 03:09:01 +0000 Files and hashes: 1: 323830343a326337633a3a2f33322d3438203d3e20323635323232.roa (hash: gZh/j6TTWYlb6HfDh0Q2BiPD8Rby4m6dl3mVzy3MH6M=) 2: 3BA0E4707E0361E96A25CFBC6104551202B34011.crl (hash: xyK2NMOaYUbB/NgpDT/3c1komCc5ePkbEGXt3G3faAw=) 3: 3136382e302e33322e302f32322d3234203d3e20323635323232.roa (hash: FfWivJ4gNEyGVTWyPXQlAoFJfcDTKU2BxPer5WjncSs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 02:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e7:0b:55:58:b3:e5:92:2b:68:7a:1c:98:cc:9d:c5:09:e3:6c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Validity Not Before: Nov 4 00:49:01 2025 GMT Not After : Nov 5 03:09:01 2025 GMT Subject: CN=A9F0AF073A74584B1271B7F125B33677A0C3F504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0e:b9:59:25:6e:d9:12:ac:21:81:1d:bc:9f: 1f:7e:bf:af:7a:88:02:b6:cb:ec:68:08:e5:1a:c6: 0a:30:06:3e:15:7e:bd:7b:8c:f3:d0:51:0e:8b:41: a4:98:ae:da:97:f2:c9:9f:20:93:04:c1:2f:50:8e: 11:57:03:57:3e:81:ad:0e:ca:ca:69:98:a9:98:6f: ae:49:88:18:0c:09:62:a7:6f:73:ad:0e:9f:75:f6: 83:8f:34:17:4e:3b:30:89:0f:79:c5:83:b6:6c:3f: e3:b6:f9:06:87:f8:20:5d:c7:9a:be:47:bd:a1:aa: 8d:26:cd:fa:14:0d:9d:45:1b:9d:18:7d:84:3c:7b: a4:d7:a8:2d:21:17:eb:c9:32:de:f3:c6:41:9c:51: 14:c4:3a:75:04:fd:77:df:02:0e:48:f4:46:01:c3: b9:6c:42:a4:db:7d:d2:f1:c0:3c:85:cd:0a:79:8f: e3:b5:b7:79:3f:c2:6c:78:b2:9d:41:20:84:b3:70: e9:a2:f1:84:dc:7f:a3:a9:cf:a5:26:94:a0:3c:b7: c7:bb:b1:ab:d7:6d:2b:d7:8f:bb:35:ee:bc:25:90: 77:10:92:06:fd:72:13:0c:e9:b5:9f:47:8e:a2:63: be:29:bb:09:c5:ac:63:7b:13:6f:80:3a:fc:fd:34: 00:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F0:AF:07:3A:74:58:4B:12:71:B7:F1:25:B3:36:77:A0:C3:F5:04 X509v3 Authority Key Identifier: keyid:3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:65:49:b9:49:a2:ea:f5:34:5a:75:4b:ee:ef:06:80:04:6e: 34:58:1f:1b:52:0d:3d:01:be:f5:5b:ad:15:3a:3c:6c:8d:e9: 81:80:c3:4f:ec:ae:df:da:6d:2c:53:c3:d4:5d:57:8c:a4:4a: d1:49:ee:56:a6:c7:80:b9:7c:4c:2e:57:7c:9b:c1:26:8f:a6: 92:b1:71:fd:89:2e:99:2f:98:7e:22:a6:b5:55:0e:3c:e4:1b: 0a:93:1a:53:49:9a:be:4e:2f:05:05:32:ad:bd:34:06:8c:62: 12:aa:d1:57:65:16:ed:a5:95:b6:f7:0e:58:e0:3c:ea:cd:3b: 33:ca:1a:1b:18:d3:0e:89:a8:53:ec:ea:eb:2c:1b:72:0e:d5: 49:1f:78:ef:cd:9b:5a:19:e4:70:c8:14:11:96:e4:aa:e1:d2: e0:96:70:de:37:b5:e8:52:4c:69:a4:c3:48:c1:bc:91:a8:17: bb:6c:d2:dc:1b:74:e5:35:e3:9d:4a:04:c6:69:55:03:ef:42: 58:90:4a:46:4f:ef:54:de:5b:87:c8:6b:1e:40:6e:13:d1:7c: 5c:31:b8:08:f7:1d:0a:41:b1:ef:7b:f9:e3:e2:8f:40:09:6e: 44:32:d7:e1:c6:4d:ca:e1:71:24:90:10:c9:9f:77:e9:0e:5c: 95:fd:fb:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIOcLVViz5ZIraHocmMydxQnjbAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMEU0NzA3RTAzNjFFOTZBMjVDRkJDNjEwNDU1MTIw MkIzNDAxMTAeFw0yNTExMDQwMDQ5MDFaFw0yNTExMDUwMzA5MDFaMDMxMTAvBgNV BAMTKEE5RjBBRjA3M0E3NDU4NEIxMjcxQjdGMTI1QjMzNjc3QTBDM0Y1MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIDrlZJW7ZEqwhgR28nx9+v696 iAK2y+xoCOUaxgowBj4Vfr17jPPQUQ6LQaSYrtqX8smfIJMEwS9QjhFXA1c+ga0O ysppmKmYb65JiBgMCWKnb3OtDp919oOPNBdOOzCJD3nFg7ZsP+O2+QaH+CBdx5q+ R72hqo0mzfoUDZ1FG50YfYQ8e6TXqC0hF+vJMt7zxkGcURTEOnUE/XffAg5I9EYB w7lsQqTbfdLxwDyFzQp5j+O1t3k/wmx4sp1BIISzcOmi8YTcf6Opz6UmlKA8t8e7 savXbSvXj7s17rwlkHcQkgb9chMM6bWfR46iY74puwnFrGN7E2+AOvz9NABrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqfCvBzp0WEsScbfxJbM2d6DD9QQwHwYDVR0j BBgwFoAUO6DkcH4DYelqJc+8YQRVEgKzQBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5q c2UvMS8zQkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCQTBFNDcwN0UwMzYxRTk2 QTI1Q0ZCQzYxMDQ1NTEyMDJCMzQwMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5qc2UvMS8z QkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAImVJuUmi6vU0WnVL7u8GgARuNFgfG1INPQG+9VutFTo8bI3pgYDDT+yu39pt LFPD1F1XjKRK0UnuVqbHgLl8TC5XfJvBJo+mkrFx/YkumS+YfiKmtVUOPOQbCpMa U0mavk4vBQUyrb00BoxiEqrRV2UW7aWVtvcOWOA86s07M8oaGxjTDomoU+zq6ywb cg7VSR94782bWhnkcMgUEZbkquHS4JZw3je16FJMaaTDSMG8kagXu2zS3Bt05TXj nUoExmlVA+9CWJBKRk/vVN5bh8hrHkBuE9F8XDG4CPcdCkGx73v54+KPQAluRDLX 4cZNyuFxJJAQyZ936Q5clf37Xg== -----END CERTIFICATE-----Generated at Tue Nov 4 02:16:21 2025 by rpki-client