$ rpki-client -vvf rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft File: 3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft (raw, json) Hash identifier: 7QGUfUC80AOxGg76N/DRtlh1kGvy5+nlGqDQ5nhg2eM= Subject key identifier: CD:80:99:67:F4:64:7C:D0:F0:B1:9F:37:13:CA:E8:8D:3A:D9:83:75 Authority key identifier: 3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8 Certificate issuer: /CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8 Certificate serial: 7D439641FC5C5C73B66C96D1C75623A7075E525A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft Manifest number: 0170 Signing time: Sun 02 Nov 2025 23:18:43 +0000 Manifest this update: Sun 02 Nov 2025 23:13:43 +0000 Manifest next update: Tue 04 Nov 2025 03:12:43 +0000 Files and hashes: 1: 3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa (hash: SeYU5404iSokv/Gz5rw5RNitLBwfn0VjE4GkNS2MnrE=) 2: 323830343a333233343a3a2f33322d313238203d3e20323635303632.roa (hash: tbkH5yeZvuDlAXrYeHvJYz6TwGXhqVtSN5MEPVbKHTU=) 3: 3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl (hash: chGOttHHbU+MkiVXtha0KSyp2T1CZSl1xhpoUqC4pm8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 03:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:43:96:41:fc:5c:5c:73:b6:6c:96:d1:c7:56:23:a7:07:5e:52:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8 Validity Not Before: Nov 2 23:13:43 2025 GMT Not After : Nov 4 03:12:43 2025 GMT Subject: CN=CD809967F4647CD0F0B19F3713CAE88D3AD98375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b6:0e:8b:af:67:0d:4a:9e:27:80:b7:52:fc: 64:90:86:a0:30:c1:de:fa:71:14:03:54:94:a2:3b: d0:72:35:cb:e2:4b:c2:6f:89:5b:a3:f4:76:50:3c: c8:85:20:9d:e5:1a:b8:c8:48:05:33:11:58:4d:eb: a8:1c:45:ff:c2:57:29:9f:d3:08:90:2c:1b:61:f3: 42:d8:8c:c9:95:c5:2a:87:07:20:b7:07:9e:cc:90: 7a:7b:25:34:ec:9a:c7:89:27:eb:5c:b8:c6:08:eb: 2e:ca:18:3f:2a:ce:32:37:3f:cc:64:17:e8:0c:aa: 55:14:ac:11:74:79:71:4e:2e:cc:55:35:e0:8a:e5: 02:0a:d7:04:ca:d3:f6:3c:7e:61:ff:5b:ec:c8:7a: fe:c8:5d:c7:18:04:d2:97:3d:96:33:ed:d3:af:89: 02:2e:bd:76:27:48:16:c3:a7:af:9e:4a:8d:9b:af: 90:b5:b4:3b:89:18:04:59:a0:02:e5:ea:c3:0b:61: da:b3:12:01:63:52:60:3a:4a:db:13:2d:37:6d:16: f0:fe:7c:6c:0d:b7:42:54:45:14:f1:9c:87:89:44: b1:96:85:f0:07:1a:05:87:aa:a7:22:2d:17:85:fc: 7a:9a:59:26:67:5a:7a:a2:5a:b7:85:0b:f4:af:a5: 5a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:80:99:67:F4:64:7C:D0:F0:B1:9F:37:13:CA:E8:8D:3A:D9:83:75 X509v3 Authority Key Identifier: keyid:3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:97:b8:4d:c8:49:bf:4e:6d:ab:47:5f:81:29:fd:22:3a:a2: 45:73:e6:f8:bf:62:fa:8f:a1:d3:d8:30:d4:5b:98:38:2e:8a: 11:40:e0:2a:21:79:14:f1:f3:2e:8b:e3:3f:48:26:e4:99:fb: 62:9e:0b:ca:b8:d2:a5:13:b5:a4:37:36:1e:bb:1a:5f:ff:80: 8a:ea:52:4d:7c:36:e8:ff:3c:cd:16:a7:a4:eb:23:96:f1:97: bc:26:b3:c0:1d:28:88:3c:14:21:53:dc:9e:4e:66:75:41:18: 03:f7:7e:36:14:3b:39:d6:e6:33:59:f5:96:19:c2:17:a7:9a: 48:b3:31:d7:39:25:af:0e:30:99:58:be:9e:4c:8b:f8:af:94: 8a:ac:ba:69:9d:34:c3:67:99:58:5f:d1:15:5e:09:31:fb:1f: 5e:02:03:eb:28:4c:44:1c:6c:f1:8a:2c:c6:d3:46:16:47:1c: 6f:3f:4e:e8:0a:9a:b4:cc:20:6e:42:64:4b:e4:3d:94:f6:b5: 3f:90:f5:30:f4:b5:5c:7c:d6:32:ed:49:46:25:16:12:31:05: 8f:19:a8:50:4b:5e:8a:eb:b2:74:fa:70:98:cd:34:06:7f:19: 22:69:2d:fd:af:be:e0:35:e0:7f:05:86:f8:29:da:a2:50:f6: 06:34:29:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfUOWQfxcXHO2bJbRx1YjpwdeUlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCNUE0RDlFNjdFOUE1OUZDNTY0MkIwMjNDM0UyRTAy QjBDOTFDODAeFw0yNTExMDIyMzEzNDNaFw0yNTExMDQwMzEyNDNaMDMxMTAvBgNV BAMTKENEODA5OTY3RjQ2NDdDRDBGMEIxOUYzNzEzQ0FFODhEM0FEOTgzNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1tg6Lr2cNSp4ngLdS/GSQhqAw wd76cRQDVJSiO9ByNcviS8JviVuj9HZQPMiFIJ3lGrjISAUzEVhN66gcRf/CVymf 0wiQLBth80LYjMmVxSqHByC3B57MkHp7JTTsmseJJ+tcuMYI6y7KGD8qzjI3P8xk F+gMqlUUrBF0eXFOLsxVNeCK5QIK1wTK0/Y8fmH/W+zIev7IXccYBNKXPZYz7dOv iQIuvXYnSBbDp6+eSo2br5C1tDuJGARZoALl6sMLYdqzEgFjUmA6StsTLTdtFvD+ fGwNt0JURRTxnIeJRLGWhfAHGgWHqqciLReF/HqaWSZnWnqiWreFC/SvpVo/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzYCZZ/RkfNDwsZ83E8rojTrZg3UwHwYDVR0j BBgwFoAUP7Wk2eZ+mln8VkKwI8Pi4CsMkcgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFw WjQvMC8zRkI1QTREOUU2N0U5QTU5RkM1NjQyQjAyM0MzRTJFMDJCMEM5MUM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQjVBNEQ5RTY3RTlBNTlG QzU2NDJCMDIzQzNFMkUwMkIwQzkxQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFwWjQvMC8z RkI1QTREOUU2N0U5QTU5RkM1NjQyQjAyM0MzRTJFMDJCMEM5MUM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdZe4TchJv05tq0dfgSn9IjqiRXPm+L9i+o+h09gw1FuYOC6KEUDgKiF5FPHz LovjP0gm5Jn7Yp4LyrjSpRO1pDc2HrsaX/+AiupSTXw26P88zRanpOsjlvGXvCaz wB0oiDwUIVPcnk5mdUEYA/d+NhQ7OdbmM1n1lhnCF6eaSLMx1zklrw4wmVi+nkyL +K+Uiqy6aZ00w2eZWF/RFV4JMfsfXgID6yhMRBxs8YosxtNGFkccbz9O6AqatMwg bkJkS+Q9lPa1P5D1MPS1XHzWMu1JRiUWEjEFjxmoUEteiuuydPpwmM00Bn8ZImkt /a++4DXgfwWG+CnaolD2BjQpVQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:12:25 2025 by rpki-client