$ rpki-client -vvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft File: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft (raw, json) Hash identifier: UU7l03PZ/nkSuTN55tdOK5UmzqnbI9rn+aBt80EFG14= Subject key identifier: BB:FB:65:5E:74:BF:55:8C:B6:C5:AC:3D:6F:15:3B:BD:9E:49:EC:0C Authority key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 Certificate issuer: /CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Certificate serial: 334ABAF14B2EE877DC4C93818055695EFC75522F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft Manifest number: 3F Signing time: Sun 02 Nov 2025 19:33:37 +0000 Manifest this update: Sun 02 Nov 2025 19:28:37 +0000 Manifest next update: Mon 03 Nov 2025 21:43:37 +0000 Files and hashes: 1: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl (hash: K2fJ9E3xEl4VvpK8QlC+z24pk5mG3Q99B6qqPwlB7jg=) 2: 3138362e3139322e3234302e302f32302d3332203d3e203533313338.roa (hash: rs7ZZAZg46x8jtp0XLIVsq+UbLhT8CF4hnhCIIsyQAI=) 3: 323830343a3134303a3a2f33322d313238203d3e203533313338.roa (hash: LqeZnwKDXDTNwr+ak5RShDJ/CXx7aCz5TV0Xv6trEoI=) 4: 3137372e35332e3232342e302f32312d3332203d3e203533313338.roa (hash: +d3EaGdR1hOJ5rzIOKKHnD4g/YmIXL9GdS7cQwdyqnc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 21:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:4a:ba:f1:4b:2e:e8:77:dc:4c:93:81:80:55:69:5e:fc:75:52:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Validity Not Before: Nov 2 19:28:37 2025 GMT Not After : Nov 3 21:43:37 2025 GMT Subject: CN=BBFB655E74BF558CB6C5AC3D6F153BBD9E49EC0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0a:9e:c4:fd:25:b6:26:8a:ec:b2:0e:6d:17: 06:25:37:99:c1:ab:57:39:0a:2d:6a:fa:7c:62:3e: ce:44:8f:e1:1f:67:b4:e9:85:ea:86:dc:2a:53:a4: 94:e5:84:4e:09:32:35:35:64:01:f8:c8:59:c7:b3: 26:c7:8f:8d:15:37:96:a4:04:38:f3:52:17:64:eb: 11:01:5a:36:3e:6e:49:4c:01:f7:d0:b3:84:01:fb: b8:50:a3:13:14:4d:ab:a6:af:23:c1:d6:bf:75:06: 97:5c:0c:49:13:c7:4e:09:86:13:a6:71:de:ba:e3: 76:00:94:34:cc:8e:5d:4d:ff:1c:c6:49:3f:47:16: 32:c3:4b:b5:d4:57:f8:2c:e1:95:53:d4:0a:f9:95: 08:e7:cb:f3:e7:17:2d:79:ec:56:74:dd:4a:75:9c: be:08:5d:50:57:1f:1d:80:7d:74:69:c0:43:d8:72: e2:c0:43:13:9c:de:28:e4:aa:0a:a3:a3:81:dd:7e: 7d:69:5e:ab:11:0f:97:b8:0f:ed:b8:26:df:b4:2c: 1f:42:87:c9:1b:b8:30:86:bc:31:f6:97:71:cf:b8: 80:a1:95:ae:8f:2a:ee:f9:83:82:cb:90:ed:1d:6f: 12:c7:9a:19:ac:c9:76:99:76:9e:07:ee:0f:46:9d: 95:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FB:65:5E:74:BF:55:8C:B6:C5:AC:3D:6F:15:3B:BD:9E:49:EC:0C X509v3 Authority Key Identifier: keyid:39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7e:c4:88:e0:82:00:80:7f:7d:c5:f1:fb:1d:ad:41:d4:97: 7c:1d:4b:ab:31:41:d0:d6:7b:fa:ec:14:3a:3f:95:da:db:ca: de:e9:21:de:27:63:28:0c:9a:8a:81:7f:ad:c4:93:da:bc:7b: 0e:f8:d9:89:a3:ca:7d:97:13:8c:8a:b1:47:34:52:04:0d:83: cd:20:f0:e8:71:98:46:c5:60:c8:68:45:94:27:dc:06:e8:cb: 39:47:f5:39:57:02:6c:75:6d:8e:6c:4a:c9:b0:ea:ef:89:de: c1:ec:c0:50:e0:9a:ef:d4:0b:cf:7c:8a:46:d2:5c:5b:0a:f8: 67:51:6b:d5:e1:fe:7a:a3:73:c8:1a:87:be:6b:96:91:f4:20: ea:07:3d:62:0f:f1:35:a9:f1:de:ab:7d:1c:00:aa:ac:ad:0e: d1:f5:32:e2:4b:26:ae:85:54:3c:93:0d:36:6b:9e:69:29:80: c0:4b:08:dc:92:f2:24:a2:2c:57:c3:5e:2d:ba:96:80:60:7a: b0:70:11:79:1d:51:66:7a:28:25:b3:6a:15:e7:8f:b4:ed:96: 49:46:31:07:e0:0b:d2:4f:52:a6:cc:f5:14:99:23:7a:f8:d4: a2:69:a7:c8:a6:64:7c:52:f5:5c:4b:97:b6:41:d5:b9:39:06: 38:7c:66:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUM0q68Usu6HfcTJOBgFVpXvx1Ui8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzkxN0U0QkJCNEQxRkQ5OTQwMEVEOThDOThBMzIzQURB QUIzODk3NzAeFw0yNTExMDIxOTI4MzdaFw0yNTExMDMyMTQzMzdaMDMxMTAvBgNV BAMTKEJCRkI2NTVFNzRCRjU1OENCNkM1QUMzRDZGMTUzQkJEOUU0OUVDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzCp7E/SW2Jorssg5tFwYlN5nB q1c5Ci1q+nxiPs5Ej+EfZ7TpheqG3CpTpJTlhE4JMjU1ZAH4yFnHsybHj40VN5ak BDjzUhdk6xEBWjY+bklMAffQs4QB+7hQoxMUTaumryPB1r91BpdcDEkTx04JhhOm cd6643YAlDTMjl1N/xzGST9HFjLDS7XUV/gs4ZVT1Ar5lQjny/PnFy157FZ03Up1 nL4IXVBXHx2AfXRpwEPYcuLAQxOc3ijkqgqjo4Hdfn1pXqsRD5e4D+24Jt+0LB9C h8kbuDCGvDH2l3HPuIChla6PKu75g4LLkO0dbxLHmhmsyXaZdp4H7g9GnZUHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUu/tlXnS/VYy2xaw9bxU7vZ5J7AwwHwYDVR0j BBgwFoAUORfku7TR/ZlADtmMmKMjraqziXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFlYcTNDSkszMkdpWHFHYllTTWtta2UyRk0yeGY0RnhWZWduNzVvTkJk a0cvMC8zOTE3RTRCQkI0RDFGRDk5NDAwRUQ5OEM5OEEzMjNBREFBQjM4OTc3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MTdFNEJCQjREMUZEOTk0 MDBFRDk4Qzk4QTMyM0FEQUFCMzg5NzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFlYcTNDSkszMkdpWHFHYllTTWtta2UyRk0yeGY0RnhWZWduNzVvTkJka0cvMC8z OTE3RTRCQkI0RDFGRDk5NDAwRUQ5OEM5OEEzMjNBREFBQjM4OTc3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADX7EiOCCAIB/fcXx+x2tQdSXfB1LqzFB0NZ7+uwUOj+V2tvK3ukh3idjKAya ioF/rcST2rx7DvjZiaPKfZcTjIqxRzRSBA2DzSDw6HGYRsVgyGhFlCfcBujLOUf1 OVcCbHVtjmxKybDq74newezAUOCa79QLz3yKRtJcWwr4Z1Fr1eH+eqNzyBqHvmuW kfQg6gc9Yg/xNanx3qt9HACqrK0O0fUy4ksmroVUPJMNNmueaSmAwEsI3JLyJKIs V8NeLbqWgGB6sHAReR1RZnooJbNqFeePtO2WSUYxB+AL0k9Spsz1FJkjevjUommn yKZkfFL1XEuXtkHVuTkGOHxmmg== -----END CERTIFICATE-----Generated at Mon Nov 3 12:16:45 2025 by rpki-client