$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3CF934353EBFDABA82A37BB01E2978A8416E4E61.mft File: 3CF934353EBFDABA82A37BB01E2978A8416E4E61.mft (raw, json) Hash identifier: sbC4AJQr5xn+70ANqWr1zCxeihSO4//orb6FXFzAcX8= Subject key identifier: 58:13:54:FB:D6:8A:77:F2:A7:10:8A:39:99:C1:6E:10:70:21:59:A5 Authority key identifier: 3C:F9:34:35:3E:BF:DA:BA:82:A3:7B:B0:1E:29:78:A8:41:6E:4E:61 Certificate issuer: /CN=3CF934353EBFDABA82A37BB01E2978A8416E4E61 Certificate serial: 06F3DC7B6B19D520B5CB2960B0DB55F0A65D78D9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF934353EBFDABA82A37BB01E2978A8416E4E61.cer Subject info access: rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3CF934353EBFDABA82A37BB01E2978A8416E4E61.mft Manifest number: 0B Signing time: Mon 03 Nov 2025 09:02:20 +0000 Manifest this update: Mon 03 Nov 2025 08:57:20 +0000 Manifest next update: Tue 04 Nov 2025 10:19:20 +0000 Files and hashes: 1: 3138362e3230382e3234382e302f32322d3234203d3e20323633303836.roa (hash: V7rcSavUAJcCA6H53w4LDef5s/U/Kbjt2bv4RVwyUfg=) 2: 323830343a3937303a3a2f33322d3438203d3e20323633303836.roa (hash: ULLOOKMFeNHlPUv0DYSWxXpet+nvVRea/P49WdtgpBY=) 3: 3133382e39392e34302e302f32322d3234203d3e20323633303836.roa (hash: 8MLKNUFG8PmsO7aA70OzrBRlogU4CNw+//Ry87Nsag8=) 4: 3CF934353EBFDABA82A37BB01E2978A8416E4E61.crl (hash: txsicd797A+i1F/La4+d+zX2THef7HeVdsCyTB5TaHU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3CF934353EBFDABA82A37BB01E2978A8416E4E61.crl rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3CF934353EBFDABA82A37BB01E2978A8416E4E61.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF934353EBFDABA82A37BB01E2978A8416E4E61.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 10:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f3:dc:7b:6b:19:d5:20:b5:cb:29:60:b0:db:55:f0:a6:5d:78:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CF934353EBFDABA82A37BB01E2978A8416E4E61 Validity Not Before: Nov 3 08:57:20 2025 GMT Not After : Nov 4 10:19:20 2025 GMT Subject: CN=581354FBD68A77F2A7108A3999C16E10702159A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:18:b4:6d:1f:82:43:7a:c1:59:19:bb:da:a0: 1f:85:91:17:51:f1:ef:31:2d:0f:29:88:0a:58:b4: e6:d6:8c:3f:d1:c7:6b:20:31:44:1b:89:0c:04:f6: 24:84:34:80:54:a5:f1:02:1c:24:ef:f8:51:4a:c2: 45:6e:5d:a4:6f:61:4f:bc:b7:81:c2:c3:62:71:1a: 65:fc:4d:41:7c:8d:e0:be:8b:1f:17:75:02:16:cf: 44:4c:99:b3:17:ce:3e:cd:6f:c5:95:b0:c2:49:55: 4b:0d:f9:98:90:2e:0c:69:ce:12:8c:10:e0:e1:b0: ab:2f:63:2e:71:80:d0:53:f1:dd:bd:e5:96:7f:fa: 37:b1:99:ce:a2:42:4c:ab:b9:c9:a1:37:d3:07:97: 05:a1:a8:f7:b3:9e:cd:04:6f:e9:98:f8:33:7b:d1: da:1f:2d:a9:43:3f:0e:cb:fa:02:00:e7:7f:8d:9f: f2:43:43:79:3a:ff:b0:56:52:ff:58:e3:45:e3:6c: 56:08:36:f5:86:d1:c0:37:f8:e6:87:34:64:82:0b: ac:51:bb:63:99:12:8c:91:69:59:3d:38:05:a1:f6: 5b:bd:7d:98:33:b4:34:7f:76:1d:e9:be:10:40:1a: 85:01:2a:ac:86:5a:eb:e5:31:6e:53:0d:1e:fd:36: bf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:13:54:FB:D6:8A:77:F2:A7:10:8A:39:99:C1:6E:10:70:21:59:A5 X509v3 Authority Key Identifier: keyid:3C:F9:34:35:3E:BF:DA:BA:82:A3:7B:B0:1E:29:78:A8:41:6E:4E:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3CF934353EBFDABA82A37BB01E2978A8416E4E61.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF934353EBFDABA82A37BB01E2978A8416E4E61.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/0/3CF934353EBFDABA82A37BB01E2978A8416E4E61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:9e:4d:41:3e:65:8e:6e:ed:4c:9c:00:22:1d:ff:ab:4a:59: e2:0f:79:4c:36:d2:59:99:6c:f3:cf:a8:4f:31:40:1a:2a:a6: 2f:ea:af:df:f2:40:89:0e:26:0b:d9:de:98:5b:ff:52:fe:63: ec:25:fb:e0:d6:b3:09:1d:08:1c:ee:dd:1c:a4:38:ed:d4:72: 72:59:a5:70:cd:65:ac:5e:e4:78:5a:42:43:03:e2:e1:1a:c2: 9e:a7:5c:ec:1c:6a:f6:ed:b6:94:4a:1d:ca:d8:48:ff:2c:80: db:f2:6f:f8:e3:63:02:91:34:34:44:b2:ec:d6:06:2e:a1:f2: 52:af:4a:fc:fc:82:35:cd:5c:c4:83:df:b5:3f:d6:7e:97:31: de:66:0f:b0:3f:b0:b7:3b:8b:1f:78:8f:15:07:6d:2b:5d:4f: 63:a8:0f:2f:31:62:b9:0d:09:10:b1:44:29:cd:ba:5e:69:45: 5f:5d:b7:b9:7b:29:ef:41:eb:26:14:e7:fd:b4:25:1b:c3:f1: f4:e0:b1:63:6b:7a:86:1c:2f:21:a8:61:07:3e:7f:2e:1a:dd: 75:1f:3b:19:39:3e:79:5f:b9:80:dc:87:74:c5:75:3d:14:e3: a8:08:45:d9:53:18:0b:43:0f:2e:e3:c3:ed:10:5b:08:67:95: e5:f1:34:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBvPce2sZ1SC1yylgsNtV8KZdeNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NGOTM0MzUzRUJGREFCQTgyQTM3QkIwMUUyOTc4QTg0 MTZFNEU2MTAeFw0yNTExMDMwODU3MjBaFw0yNTExMDQxMDE5MjBaMDMxMTAvBgNV BAMTKDU4MTM1NEZCRDY4QTc3RjJBNzEwOEEzOTk5QzE2RTEwNzAyMTU5QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4GLRtH4JDesFZGbvaoB+FkRdR 8e8xLQ8piApYtObWjD/Rx2sgMUQbiQwE9iSENIBUpfECHCTv+FFKwkVuXaRvYU+8 t4HCw2JxGmX8TUF8jeC+ix8XdQIWz0RMmbMXzj7Nb8WVsMJJVUsN+ZiQLgxpzhKM EODhsKsvYy5xgNBT8d295ZZ/+jexmc6iQkyrucmhN9MHlwWhqPezns0Eb+mY+DN7 0dofLalDPw7L+gIA53+Nn/JDQ3k6/7BWUv9Y40XjbFYINvWG0cA3+OaHNGSCC6xR u2OZEoyRaVk9OAWh9lu9fZgztDR/dh3pvhBAGoUBKqyGWuvlMW5TDR79Nr9JAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWBNU+9aKd/KnEIo5mcFuEHAhWaUwHwYDVR0j BBgwFoAUPPk0NT6/2rqCo3uwHil4qEFuTmEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFU2SjQ3Q1FjZGJyckd3SjZYV00yRUdSY21TVTV0NTNCdjZFWEx5dGh5 bmQvMC8zQ0Y5MzQzNTNFQkZEQUJBODJBMzdCQjAxRTI5NzhBODQxNkU0RTYxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRjkzNDM1M0VCRkRBQkE4 MkEzN0JCMDFFMjk3OEE4NDE2RTRFNjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFU2SjQ3Q1FjZGJyckd3SjZYV00yRUdSY21TVTV0NTNCdjZFWEx5dGh5bmQvMC8z Q0Y5MzQzNTNFQkZEQUJBODJBMzdCQjAxRTI5NzhBODQxNkU0RTYxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkZ5NQT5ljm7tTJwAIh3/q0pZ4g95TDbSWZls88+oTzFAGiqmL+qv3/JAiQ4m C9nemFv/Uv5j7CX74NazCR0IHO7dHKQ47dRyclmlcM1lrF7keFpCQwPi4RrCnqdc 7Bxq9u22lEodythI/yyA2/Jv+ONjApE0NESy7NYGLqHyUq9K/PyCNc1cxIPftT/W fpcx3mYPsD+wtzuLH3iPFQdtK11PY6gPLzFiuQ0JELFEKc26XmlFX123uXsp70Hr JhTn/bQlG8Px9OCxY2t6hhwvIahhBz5/LhrddR87GTk+eV+5gNyHdMV1PRTjqAhF 2VMYC0MPLuPD7RBbCGeV5fE0Qg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:15:41 2025 by rpki-client