$ rpki-client -vvf rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/3924B516E35165FE5C42CA81DECF7024E08B60F5.mft File: 3924B516E35165FE5C42CA81DECF7024E08B60F5.mft (raw, json) Hash identifier: gyldt6C6TPv1R9fbNfrdBDnlH3cJ1l7IvRXWoO8rcDE= Subject key identifier: 49:E2:44:18:68:2F:73:33:01:CD:76:A2:15:72:75:CA:88:5B:7F:3F Authority key identifier: 39:24:B5:16:E3:51:65:FE:5C:42:CA:81:DE:CF:70:24:E0:8B:60:F5 Certificate issuer: /CN=3924B516E35165FE5C42CA81DECF7024E08B60F5 Certificate serial: 1D7C70310BD3656CC1D10DF44440FDF3188F867E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3924B516E35165FE5C42CA81DECF7024E08B60F5.cer Subject info access: rsync://rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/3924B516E35165FE5C42CA81DECF7024E08B60F5.mft Manifest number: 02F3 Signing time: Mon 03 Nov 2025 02:54:56 +0000 Manifest this update: Mon 03 Nov 2025 02:49:56 +0000 Manifest next update: Tue 04 Nov 2025 06:35:56 +0000 Files and hashes: 1: 3924B516E35165FE5C42CA81DECF7024E08B60F5.crl (hash: fplJIrzjv0gQnsXPQJv85REhCPQv5qx7wWcGNT+jUD0=) 2: 34352e3232372e3232382e302f32322d3332203d3e20323731373034.roa (hash: DEhnwHFSs1NvcHFXVYwTNEhwXAraDqc8OLTOxQKjJMc=) 3: 323830343a376662343a3a2f33322d313238203d3e20323731373034.roa (hash: uXxw0eaYe/IPT8weYD7z1pq/JJmMkHNNoif0E+WU82I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/3924B516E35165FE5C42CA81DECF7024E08B60F5.crl rsync://rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/3924B516E35165FE5C42CA81DECF7024E08B60F5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3924B516E35165FE5C42CA81DECF7024E08B60F5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 06:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:7c:70:31:0b:d3:65:6c:c1:d1:0d:f4:44:40:fd:f3:18:8f:86:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3924B516E35165FE5C42CA81DECF7024E08B60F5 Validity Not Before: Nov 3 02:49:56 2025 GMT Not After : Nov 4 06:35:56 2025 GMT Subject: CN=49E24418682F733301CD76A2157275CA885B7F3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cd:a9:65:5a:a5:70:5f:02:e9:a3:4b:90:f8: 91:a7:8b:7c:67:9e:4b:09:a7:af:dd:43:b3:bd:25: 49:11:2b:46:70:0f:8c:e9:29:e8:bd:25:c5:06:d9: fc:20:33:b1:de:24:71:2b:da:48:be:d5:b8:6e:f6: 55:fc:2b:c3:95:3a:a7:3d:ee:27:3b:88:13:38:7b: 73:9e:9e:bb:85:2f:49:39:b0:e9:e7:fb:b3:f0:cd: e4:48:65:f6:65:db:4b:2d:d1:04:19:91:ec:69:db: 31:e0:93:e5:fc:ae:b6:28:1d:5b:2e:a9:a2:12:da: fb:c2:95:7b:aa:1e:18:26:d9:93:72:a3:ea:32:80: ef:50:7f:32:d5:a7:b4:a4:dc:c0:d4:78:a2:b4:a4: dd:eb:5f:d6:07:05:b8:e8:b9:6a:cc:de:f6:62:4e: 68:35:e5:f3:9c:1b:13:d5:7e:36:16:8a:96:79:4d: 2b:d1:8f:7f:5c:59:fa:7b:2e:76:c2:94:a1:25:3d: 00:65:f2:16:ec:82:f3:3b:3f:c4:ea:f7:59:a2:fc: d4:db:aa:f9:ce:72:68:1c:01:57:9d:4f:c9:c0:b6: 67:82:a2:ae:a8:8c:59:89:41:2d:e2:dc:7e:88:56: 73:8e:14:16:40:b4:c0:97:cf:f5:aa:fe:54:06:7d: c8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E2:44:18:68:2F:73:33:01:CD:76:A2:15:72:75:CA:88:5B:7F:3F X509v3 Authority Key Identifier: keyid:39:24:B5:16:E3:51:65:FE:5C:42:CA:81:DE:CF:70:24:E0:8B:60:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/3924B516E35165FE5C42CA81DECF7024E08B60F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3924B516E35165FE5C42CA81DECF7024E08B60F5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/3924B516E35165FE5C42CA81DECF7024E08B60F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:7d:2b:cf:6f:df:cf:d6:5b:e0:1d:46:b6:fb:58:db:52:0c: b6:b3:56:58:47:77:f3:be:81:17:60:df:94:72:b4:68:df:b7: 1b:1b:de:6a:bf:37:46:f9:03:48:29:21:66:aa:07:c1:aa:a2: e7:01:fe:b5:14:b1:06:e6:49:9b:e4:4c:b5:be:a0:80:15:c0: 18:d6:0e:9b:61:08:30:fd:22:b4:a9:32:73:bf:83:bb:3f:94: 95:2a:b8:32:47:26:1b:c4:ae:43:3d:7e:71:8c:50:6f:f8:a6: e2:7c:49:c8:58:16:9a:10:52:62:06:6b:ae:a1:d7:9e:c6:73: a4:83:17:ff:66:28:7e:45:d9:16:fb:b5:63:3f:04:37:42:14: c0:63:11:62:21:57:1c:8a:96:82:5a:4d:c7:47:08:37:29:ff: e6:73:55:64:bb:d8:98:c5:29:f5:90:dd:6c:69:54:c4:cf:44: 87:6b:06:7b:64:7e:8d:63:7e:98:27:84:18:6b:a2:f7:66:ae: df:6f:8b:c5:95:40:80:16:60:78:f3:05:84:0b:b9:25:24:cb: ff:22:56:e6:68:98:d5:32:21:4d:da:ab:8a:fb:95:b6:24:c9: 5a:47:9b:89:1c:39:3b:1b:38:7f:83:ac:35:fb:5f:33:db:87: 4c:d6:a1:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHXxwMQvTZWzB0Q30RED98xiPhn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzkyNEI1MTZFMzUxNjVGRTVDNDJDQTgxREVDRjcwMjRF MDhCNjBGNTAeFw0yNTExMDMwMjQ5NTZaFw0yNTExMDQwNjM1NTZaMDMxMTAvBgNV BAMTKDQ5RTI0NDE4NjgyRjczMzMwMUNENzZBMjE1NzI3NUNBODg1QjdGM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGzallWqVwXwLpo0uQ+JGni3xn nksJp6/dQ7O9JUkRK0ZwD4zpKei9JcUG2fwgM7HeJHEr2ki+1bhu9lX8K8OVOqc9 7ic7iBM4e3OenruFL0k5sOnn+7PwzeRIZfZl20st0QQZkexp2zHgk+X8rrYoHVsu qaIS2vvClXuqHhgm2ZNyo+oygO9QfzLVp7Sk3MDUeKK0pN3rX9YHBbjouWrM3vZi Tmg15fOcGxPVfjYWipZ5TSvRj39cWfp7LnbClKElPQBl8hbsgvM7P8Tq91mi/NTb qvnOcmgcAVedT8nAtmeCoq6ojFmJQS3i3H6IVnOOFBZAtMCXz/Wq/lQGfcjJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSeJEGGgvczMBzXaiFXJ1yohbfz8wHwYDVR0j BBgwFoAUOSS1FuNRZf5cQsqB3s9wJOCLYPUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREV1R0hQS2ppRndWeEtnY2c4aDZqMXVYOE5rTVV6SHFvdlplMmFtTTNO YVUvMC8zOTI0QjUxNkUzNTE2NUZFNUM0MkNBODFERUNGNzAyNEUwOEI2MEY1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MjRCNTE2RTM1MTY1RkU1 QzQyQ0E4MURFQ0Y3MDI0RTA4QjYwRjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REV1R0hQS2ppRndWeEtnY2c4aDZqMXVYOE5rTVV6SHFvdlplMmFtTTNOYVUvMC8z OTI0QjUxNkUzNTE2NUZFNUM0MkNBODFERUNGNzAyNEUwOEI2MEY1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACX0rz2/fz9Zb4B1GtvtY21IMtrNWWEd3876BF2DflHK0aN+3Gxvear83RvkD SCkhZqoHwaqi5wH+tRSxBuZJm+RMtb6ggBXAGNYOm2EIMP0itKkyc7+Duz+UlSq4 MkcmG8SuQz1+cYxQb/im4nxJyFgWmhBSYgZrrqHXnsZzpIMX/2YofkXZFvu1Yz8E N0IUwGMRYiFXHIqWglpNx0cINyn/5nNVZLvYmMUp9ZDdbGlUxM9Eh2sGe2R+jWN+ mCeEGGui92au32+LxZVAgBZgePMFhAu5JSTL/yJW5miY1TIhTdqrivuVtiTJWkeb iRw5Oxs4f4OsNftfM9uHTNahIg== -----END CERTIFICATE-----Generated at Mon Nov 3 19:39:48 2025 by rpki-client