$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft File: 3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft (raw, json) Hash identifier: wzm4CqLa262en2660Z5zIl8cpQoRUP8TSywyu5XUVzI= Subject key identifier: BD:6C:0C:69:E8:A3:73:55:5F:26:72:D4:3C:B2:E0:81:69:98:C8:FE Authority key identifier: 3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE Certificate issuer: /CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE Certificate serial: 29FA3A1A0879AC969C6293923D471F6CAC841E57 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft Manifest number: 0325 Signing time: Thu 18 Sep 2025 16:50:00 +0000 Manifest this update: Thu 18 Sep 2025 16:45:00 +0000 Manifest next update: Fri 19 Sep 2025 16:50:00 +0000 Files and hashes: 1: 3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa (hash: xBPwvS0zrXLXBjGxZbTS0R+/LiP5J9k9hLEuIZa5HTs=) 2: 323830343a376136303a313030303a3a2f34302d3430203d3e20323731333637.roa (hash: ZH/q1SgpxFp9UFjRkP0Pk7p8Hatpjf4m06WESj+5rT8=) 3: 323830343a376136303a3a2f33322d3332203d3e20323731333637.roa (hash: qRohoeNnKNf6cv7/p17nFmOIRtNgNQ2ZfmHXIaZ+ebE=) 4: 3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl (hash: 8MpJN5F/7fU+TTwO+nfrWnLmqqg0WtLA5W6PkLnj2BI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 16:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:fa:3a:1a:08:79:ac:96:9c:62:93:92:3d:47:1f:6c:ac:84:1e:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE Validity Not Before: Sep 18 16:45:00 2025 GMT Not After : Sep 19 16:50:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b8:70:26:c6:ab:2c:f7:0f:13:92:61:a1:8e: 66:3d:1a:10:c5:f3:3a:25:53:86:37:76:43:d8:f9: bf:7d:82:5e:9e:46:4e:a4:c4:8c:7f:b4:ef:c0:b8: 49:46:a8:dc:31:bc:ed:e3:f7:34:c5:f7:8e:9a:ed: a9:a2:87:87:56:5e:f5:1d:d1:5b:47:72:6b:ae:d0: e2:9b:64:9a:4d:cb:c2:94:bb:50:85:03:88:d2:f1: c1:78:47:94:0a:c1:17:5d:9f:61:6f:94:35:49:bd: 6c:34:6b:81:b5:d6:cf:8c:a4:b4:64:0c:46:a4:d0: 9d:2e:4f:34:5d:7f:8f:bb:32:57:31:37:de:a4:ca: bc:3b:cd:e5:19:c1:01:fa:9c:3e:22:e5:e8:75:fa: d8:cf:4e:55:41:ab:a4:60:fb:c1:89:93:87:94:80: fb:f3:10:d1:4a:a7:b5:df:a3:06:0c:05:4f:7d:99: 2c:93:19:7f:cd:3c:08:a5:2d:9c:99:9e:1e:08:15: 12:af:83:98:27:17:2e:17:ec:aa:41:ad:22:5b:58: 3c:c5:19:01:a1:df:1f:f8:a7:0b:92:14:0d:b6:64: 60:d8:41:b7:84:4a:5f:df:18:4b:9c:d1:fd:cc:b2: 68:64:e2:69:85:b3:80:ef:1a:53:94:cf:98:a3:39: 60:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6C:0C:69:E8:A3:73:55:5F:26:72:D4:3C:B2:E0:81:69:98:C8:FE X509v3 Authority Key Identifier: keyid:3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:9e:b4:ff:7b:b4:4f:4a:96:d7:25:02:18:0e:62:33:35:74: c0:3a:65:a5:bb:a0:3b:76:7a:11:6f:45:c1:18:a2:5c:a5:3f: d1:48:dd:d5:8f:75:0d:42:d4:c4:47:24:6a:1f:94:74:3e:d8: 6b:09:d2:39:5a:e4:55:25:7f:8e:af:2f:61:58:f9:3e:33:45: 0a:8a:aa:79:7f:7e:23:51:52:ae:18:6c:ab:69:6c:b7:22:be: ce:e4:c6:13:91:06:67:af:e9:ef:c9:5c:5d:b4:9d:1b:89:c2: 8d:00:b1:15:55:df:e1:27:68:7d:b2:58:05:cd:11:c5:c5:12: af:22:b6:f9:bb:59:ef:49:7e:b8:80:f0:30:04:4f:91:fa:de: ad:80:f2:24:2b:35:e7:56:3f:1b:37:ec:8d:53:c5:c5:82:99: 19:f6:dd:3f:26:82:af:01:80:2d:b5:84:25:9e:86:6a:39:4d: 68:d6:de:13:df:75:3e:df:41:e9:16:67:45:77:64:a1:3a:2a: cd:b6:b7:92:74:ab:22:69:59:a0:59:36:60:13:71:34:2b:53: c2:52:b9:69:12:d4:6a:18:7c:89:52:87:aa:7a:2c:d4:d4:5c: cf:b3:fc:a0:21:bb:78:20:8e:81:bd:35:4d:f2:7f:7f:c1:0d: 69:f6:12:23 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUKfo6Ggh5rJacYpOSPUcfbKyEHlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FCRjk2RDE4RTdFMDVBMjRFREFBMTE3RDJCOUU3NkEw N0ZFQzVDRTAeFw0yNTA5MTgxNjQ1MDBaFw0yNTA5MTkxNjUwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0JCODcwMjZDNkFCMkNGNzBG MTM5MjYxQTE4RTY2M0QxQTEwQzVGMzNBMjU1Mzg2Mzc3NjQzRDhGOUJGN0Q4MjVF OUU0NjRFQTRDNDhDN0ZCNEVGQzBCODQ5NDZBOERDMzFCQ0VERTNGNzM0QzVGNzhF OUFFREE5QTI4Nzg3NTY1RUY1MUREMTVCNDc3MjZCQUVEMEUyOUI2NDlBNERDQkMy OTRCQjUwODUwMzg4RDJGMUMxNzg0Nzk0MEFDMTE3NUQ5RjYxNkY5NDM1NDlCRDZD MzQ2QjgxQjVENkNGOENBNEI0NjQwQzQ2QTREMDlEMkU0RjM0NUQ3RjhGQkIzMjU3 MzEzN0RFQTRDQUJDM0JDREU1MTlDMTAxRkE5QzNFMjJFNUU4NzVGQUQ4Q0Y0RTU1 NDFBQkE0NjBGQkMxODk5Mzg3OTQ4MEZCRjMxMEQxNEFBN0I1REZBMzA2MEMwNTRG N0Q5OTJDOTMxOTdGQ0QzQzA4QTUyRDlDOTk5RTFFMDgxNTEyQUY4Mzk4MjcxNzJF MTdFQ0FBNDFBRDIyNUI1ODNDQzUxOTAxQTFERjFGRjhBNzBCOTIxNDBEQjY2NDYw RDg0MUI3ODQ0QTVGREYxODRCOUNEMUZEQ0NCMjY4NjRFMjY5ODVCMzgwRUYxQTUz OTRDRjk4QTMzOTYwNTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAy7hwJsarLPcPE5JhoY5mPRoQxfM6JVOGN3ZD2Pm/fYJenkZOpMSM f7TvwLhJRqjcMbzt4/c0xfeOmu2pooeHVl71HdFbR3JrrtDim2SaTcvClLtQhQOI 0vHBeEeUCsEXXZ9hb5Q1Sb1sNGuBtdbPjKS0ZAxGpNCdLk80XX+PuzJXMTfepMq8 O83lGcEB+pw+IuXodfrYz05VQaukYPvBiZOHlID78xDRSqe136MGDAVPfZkskxl/ zTwIpS2cmZ4eCBUSr4OYJxcuF+yqQa0iW1g8xRkBod8f+KcLkhQNtmRg2EG3hEpf 3xhLnNH9zLJoZOJphbOA7xpTlM+YozlgWQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FL1sDGnoo3NVXyZy1Dyy4IFpmMj+MB8GA1UdIwQYMBaAFDq/ltGOfgWiTtqhF9K5 52oH/sXOMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JGWUh5M3BCa1lSUXRy QjhNNmp3Sk1hanlXNGRmemtFbVJZVHNGdHd1c2dyLzEvM0FCRjk2RDE4RTdFMDVB MjRFREFBMTE3RDJCOUU3NkEwN0ZFQzVDRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS8zQUJGOTZEMThFN0UwNUEyNEVEQUExMTdEMkI5RTc2QTA3RkVD NUNFLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JGWUh5M3BCa1lSUXRyQjhNNmp3 Sk1hanlXNGRmemtFbVJZVHNGdHd1c2dyLzEvM0FCRjk2RDE4RTdFMDVBMjRFREFB MTE3RDJCOUU3NkEwN0ZFQzVDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHOetP97tE9KltclAhgOYjM1 dMA6ZaW7oDt2ehFvRcEYolylP9FI3dWPdQ1C1MRHJGoflHQ+2GsJ0jla5FUlf46v L2FY+T4zRQqKqnl/fiNRUq4YbKtpbLcivs7kxhORBmev6e/JXF20nRuJwo0AsRVV 3+EnaH2yWAXNEcXFEq8itvm7We9JfriA8DAET5H63q2A8iQrNedWPxs37I1TxcWC mRn23T8mgq8BgC21hCWehmo5TWjW3hPfdT7fQekWZ0V3ZKE6Ks22t5J0qyJpWaBZ NmATcTQrU8JSuWkS1GoYfIlSh6p6LNTUXM+z/KAhu3ggjoG9NU3yf3/BDWn2EiM= -----END CERTIFICATE-----Generated at Fri Sep 19 04:46:32 2025 by rpki-client