$ rpki-client -vvf rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft File: 3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft (raw, json) Hash identifier: 0nMCZcyROClyIQhN31sn9jR8VgvSh2ULXMNj0BGaTf4= Subject key identifier: 29:B2:26:6C:A6:39:5E:33:F9:58:64:DF:E4:74:C1:8A:B2:23:9C:09 Authority key identifier: 35:02:23:1E:80:F0:11:7D:D8:B1:1A:5E:9D:1C:FD:0C:46:B2:78:59 Certificate issuer: /CN=3502231E80F0117DD8B11A5E9D1CFD0C46B27859 Certificate serial: 0D55F64C6E12B53492035ADAAD43FB56704457FF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.cer Subject info access: rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft Manifest number: 48 Signing time: Mon 03 Nov 2025 12:16:08 +0000 Manifest this update: Mon 03 Nov 2025 12:11:08 +0000 Manifest next update: Tue 04 Nov 2025 15:29:08 +0000 Files and hashes: 1: 3502231E80F0117DD8B11A5E9D1CFD0C46B27859.crl (hash: 5WXI65ogxX5SDEKZXldy3s7uduNcnYTSY3gidnydQtA=) 2: 34352e3137312e3130342e302f32322d3332203d3e20323638373530.roa (hash: FnqYyjRTYfkNNd38hYxVbI+10+vM4PYCwzmDz8TKA/4=) 3: 323830343a356132303a3a2f33322d313238203d3e20323638373530.roa (hash: KTpCP5+yYRNR+V93Ak7K+33CiAxupoTZH+z8ERWiROk=) 4: 34352e3137322e35322e302f32322d3332203d3e20323638373530.roa (hash: /BDeZPrUv8+PcsdMOixik9++54jka+M6eyu4nPvnr5g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.crl rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 15:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:55:f6:4c:6e:12:b5:34:92:03:5a:da:ad:43:fb:56:70:44:57:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3502231E80F0117DD8B11A5E9D1CFD0C46B27859 Validity Not Before: Nov 3 12:11:08 2025 GMT Not After : Nov 4 15:29:08 2025 GMT Subject: CN=29B2266CA6395E33F95864DFE474C18AB2239C09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:77:d8:df:92:02:76:c9:ec:7e:41:59:28:a4: b4:c2:35:a0:d9:ff:aa:61:93:4a:9d:9f:77:31:d9: b5:40:60:40:1f:67:c5:e5:c3:89:6e:2f:10:3b:a6: 9c:f0:c5:f2:c3:a3:35:6c:ab:a4:31:43:28:9c:43: 0c:6b:63:ca:41:d5:d9:83:15:1d:d4:e4:c5:ff:13: 5b:01:72:6f:aa:ce:f0:67:df:2f:55:bb:a5:f1:ff: fa:85:6d:73:84:16:0d:84:dd:4a:88:75:82:a6:4d: be:60:0f:4d:5f:5f:bf:52:35:03:15:c2:f8:47:dc: ae:39:33:95:f3:db:c7:74:f2:7c:f1:04:7a:f3:a9: 2f:de:ec:55:f7:19:b5:24:a8:85:4e:95:45:16:9f: 82:79:ed:8c:6d:c9:04:7a:a0:cf:c3:d0:a5:c1:94: c8:4b:dc:80:b9:ba:4a:28:db:e4:19:da:8f:60:40: 8b:61:fd:95:3c:e8:7a:b7:59:a5:8d:00:cf:3a:8e: 4f:58:2a:be:a9:e2:8c:f5:94:b9:f3:75:af:37:38: 34:39:cc:cc:61:e3:4f:92:79:51:8e:c2:15:48:36: 5a:7f:7c:2c:34:66:60:d4:f1:ad:63:cd:b4:17:db: 81:75:d0:db:64:cf:25:21:0a:e3:d2:0f:33:aa:67: 6a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B2:26:6C:A6:39:5E:33:F9:58:64:DF:E4:74:C1:8A:B2:23:9C:09 X509v3 Authority Key Identifier: keyid:35:02:23:1E:80:F0:11:7D:D8:B1:1A:5E:9D:1C:FD:0C:46:B2:78:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:e3:24:61:77:74:b4:5f:b3:e9:9e:9b:a0:99:68:a9:b7:72: 18:c2:2d:3a:14:4d:62:c8:33:f2:49:23:7e:60:b4:ca:87:eb: 58:08:b6:5c:d3:1f:a0:7d:c7:92:06:e0:ed:d4:a4:c0:d2:4b: db:07:a2:c3:1f:ab:2e:00:bd:1a:03:1b:6d:dd:13:52:64:07: 52:9c:e6:9d:fe:75:74:58:9d:09:55:ad:43:33:40:5b:5a:34: f4:5e:32:73:da:10:d9:a1:e8:25:b8:2b:57:ff:18:8e:aa:cd: 4a:78:71:a7:7b:a1:7d:ed:7f:01:c5:91:fc:57:85:54:67:ce: 83:0c:cc:5e:1f:25:d9:1f:28:1c:fb:8e:db:88:25:4b:15:4c: af:6e:01:30:02:14:db:af:dd:fc:cd:a7:33:a1:e4:69:23:84: 88:c8:1c:a0:1f:d8:51:26:7d:da:08:a1:50:3d:f5:63:30:b8: 0f:ef:f0:d3:2c:a1:35:5b:18:e0:2b:ac:f7:f2:f3:f8:43:8c: eb:ee:bf:36:c5:a5:b9:7c:99:ee:ac:d7:ff:ab:5a:44:5e:8b: 76:5f:d6:a4:63:54:71:0d:91:32:18:ac:88:05:0d:f2:c6:2d: 97:b4:3a:ee:fd:31:45:30:90:d3:cd:bd:a3:9a:fb:be:62:e3: 81:61:12:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDVX2TG4StTSSA1rarUP7VnBEV/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwMjIzMUU4MEYwMTE3REQ4QjExQTVFOUQxQ0ZEMEM0 NkIyNzg1OTAeFw0yNTExMDMxMjExMDhaFw0yNTExMDQxNTI5MDhaMDMxMTAvBgNV BAMTKDI5QjIyNjZDQTYzOTVFMzNGOTU4NjRERkU0NzRDMThBQjIyMzlDMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCld9jfkgJ2yex+QVkopLTCNaDZ /6phk0qdn3cx2bVAYEAfZ8Xlw4luLxA7ppzwxfLDozVsq6QxQyicQwxrY8pB1dmD FR3U5MX/E1sBcm+qzvBn3y9Vu6Xx//qFbXOEFg2E3UqIdYKmTb5gD01fX79SNQMV wvhH3K45M5Xz28d08nzxBHrzqS/e7FX3GbUkqIVOlUUWn4J57YxtyQR6oM/D0KXB lMhL3IC5ukoo2+QZ2o9gQIth/ZU86Hq3WaWNAM86jk9YKr6p4oz1lLnzda83ODQ5 zMxh40+SeVGOwhVINlp/fCw0ZmDU8a1jzbQX24F10NtkzyUhCuPSDzOqZ2rrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKbImbKY5XjP5WGTf5HTBirIjnAkwHwYDVR0j BBgwFoAUNQIjHoDwEX3YsRpenRz9DEayeFkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjdpRGYybW51Rlk2b1Y0YWpLYk12eG5HTHg1MjZNS3Fic2J4UW1qYVlU WnYvMC8zNTAyMjMxRTgwRjAxMTdERDhCMTFBNUU5RDFDRkQwQzQ2QjI3ODU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1MDIyMzFFODBGMDExN0RE OEIxMUE1RTlEMUNGRDBDNDZCMjc4NTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QjdpRGYybW51Rlk2b1Y0YWpLYk12eG5HTHg1MjZNS3Fic2J4UW1qYVlUWnYvMC8z NTAyMjMxRTgwRjAxMTdERDhCMTFBNUU5RDFDRkQwQzQ2QjI3ODU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp+MkYXd0tF+z6Z6boJloqbdyGMItOhRNYsgz8kkjfmC0yofrWAi2XNMfoH3H kgbg7dSkwNJL2weiwx+rLgC9GgMbbd0TUmQHUpzmnf51dFidCVWtQzNAW1o09F4y c9oQ2aHoJbgrV/8YjqrNSnhxp3uhfe1/AcWR/FeFVGfOgwzMXh8l2R8oHPuO24gl SxVMr24BMAIU26/d/M2nM6HkaSOEiMgcoB/YUSZ92gihUD31YzC4D+/w0yyhNVsY 4Cus9/Lz+EOM6+6/NsWluXyZ7qzX/6taRF6Ldl/WpGNUcQ2RMhisiAUN8sYtl7Q6 7v0xRTCQ0829o5r7vmLjgWES+Q== -----END CERTIFICATE-----Generated at Mon Nov 3 19:39:37 2025 by rpki-client