$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft File: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft (raw, json) Hash identifier: grI1euP7TaUbvpy/fmVomQc78dQPs3pCmSLFcvtg5kc= Subject key identifier: 72:19:94:41:DC:38:A9:48:96:87:6C:E9:7A:DD:45:89:7B:31:99:F8 Authority key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 Certificate issuer: /CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Certificate serial: 5A0173DEBB29B2FD946506CAE2B154831FBA6975 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject info access: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft Manifest number: 0108 Signing time: Thu 18 Sep 2025 20:58:49 +0000 Manifest this update: Thu 18 Sep 2025 20:53:49 +0000 Manifest next update: Fri 19 Sep 2025 22:08:49 +0000 Files and hashes: 1: 3137372e37332e33362e302f32322d3332203d3e203532363934.roa (hash: OGK41uRpAQwllRubLCRfh+WKpYG39IFoFH08wloP1PA=) 2: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl (hash: vPnlhH/J05TAh34o3nptakDUej7g1RvPEyCxRxgy5y8=) 3: 3230302e362e3132382e302f32322d3332203d3e203532363934.roa (hash: cmMBAa8apGKZWHWfvXo7rXbYWd2EI5yW46+IKqeCJjo=) 4: 323830343a6335383a3a2f33322d313238203d3e203532363934.roa (hash: 9O2EZ1ZOA5SxIxzwzkyeRpvslbdGVqnJeJ0v8OoeGGs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 22:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:01:73:de:bb:29:b2:fd:94:65:06:ca:e2:b1:54:83:1f:ba:69:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Validity Not Before: Sep 18 20:53:49 2025 GMT Not After : Sep 19 22:08:49 2025 GMT Subject: CN=72199441DC38A94896876CE97ADD45897B3199F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0d:d7:5e:b9:3b:49:de:f3:21:c6:e4:59:7b: 0f:7d:f1:bb:92:90:bd:c8:3a:3d:36:76:ee:35:db: be:2e:34:e4:1f:ac:65:05:87:e1:25:69:54:33:88: bb:b2:bd:35:73:eb:d5:ae:df:ee:12:30:2d:e9:82: a2:b4:ef:76:7f:9b:b5:80:5e:56:51:3e:67:95:03: ce:f0:9e:99:98:ac:12:9d:8e:68:81:7d:aa:ac:95: e2:6a:30:77:4c:e5:bd:de:a9:56:4d:10:e8:24:8f: c1:dd:15:74:5d:1e:7a:44:0e:c9:56:2d:cc:2d:46: eb:47:69:b5:90:e3:04:c7:21:f1:a1:10:30:7a:6a: 56:4b:9f:f8:a9:25:e1:37:84:8a:0a:f0:0a:bf:18: d2:6b:e7:a7:83:df:a6:da:59:5d:6e:98:04:58:34: 0d:16:dc:bf:a4:c0:c6:4f:ce:83:82:8a:39:a1:9c: 2d:d0:87:d9:a4:86:52:aa:87:82:0a:c3:a6:60:09: 1a:04:b7:b6:f8:f0:23:00:2a:24:6e:c5:a3:1a:89: 59:0e:3b:42:13:32:56:fb:db:06:8c:7b:07:b6:f4: 83:f3:75:c5:d5:a6:a8:e5:ae:7d:61:60:06:ca:aa: d8:4d:54:12:1a:eb:bf:74:c7:74:a0:9c:87:00:90: 9e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:19:94:41:DC:38:A9:48:96:87:6C:E9:7A:DD:45:89:7B:31:99:F8 X509v3 Authority Key Identifier: keyid:3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:60:f8:17:1f:44:83:9f:cb:d0:a5:13:bc:19:81:4c:40:1a: 28:52:12:9a:d8:25:b2:d2:aa:7a:54:1c:9d:22:88:f3:dc:6a: e2:2f:f6:dc:45:08:e9:56:76:a4:93:5a:0a:cd:19:53:cf:27: 92:c8:d6:25:cb:3d:27:48:4c:c7:ea:20:7a:c9:0f:ce:51:00: 0c:f1:9c:42:26:45:ce:f8:6b:fa:ef:97:aa:e4:f0:cd:b7:1c: 1e:ed:7e:56:d6:47:7f:b6:df:b4:50:83:4c:f1:33:70:db:e6: cf:ad:86:9a:21:34:8d:f0:e5:a0:17:92:a2:64:4f:2d:ac:62: 07:f6:ec:bb:47:ea:56:2b:3a:cd:88:f2:86:61:b0:61:82:7d: 0b:4f:d9:58:a4:33:d8:a1:7b:16:ec:bb:88:0b:48:53:12:60: 15:3c:ef:b0:e3:b7:93:3a:51:e0:4d:41:ec:cb:b9:f2:50:a4: 7c:f6:76:1e:e7:d9:e1:57:f8:d9:5c:e2:d1:9b:66:a4:6f:56: 8b:bc:0e:19:0a:d5:cd:9d:c9:15:40:37:dc:2b:60:03:08:7a: 63:5b:03:16:8f:c0:82:82:61:f3:02:67:17:fb:84:92:36:ae: 68:60:3b:ee:19:e6:79:e8:34:70:36:19:30:4a:54:5b:f5:4a: a6:ab:7f:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWgFz3rspsv2UZQbK4rFUgx+6aXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RBRjFDQTQ4NjMzRDQyRjM4OTU1QzQ3QzhCQTBGQURB NzNENzAwNzAeFw0yNTA5MTgyMDUzNDlaFw0yNTA5MTkyMjA4NDlaMDMxMTAvBgNV BAMTKDcyMTk5NDQxREMzOEE5NDg5Njg3NkNFOTdBREQ0NTg5N0IzMTk5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrDddeuTtJ3vMhxuRZew998buS kL3IOj02du41274uNOQfrGUFh+ElaVQziLuyvTVz69Wu3+4SMC3pgqK073Z/m7WA XlZRPmeVA87wnpmYrBKdjmiBfaqsleJqMHdM5b3eqVZNEOgkj8HdFXRdHnpEDslW LcwtRutHabWQ4wTHIfGhEDB6alZLn/ipJeE3hIoK8Aq/GNJr56eD36baWV1umARY NA0W3L+kwMZPzoOCijmhnC3Qh9mkhlKqh4IKw6ZgCRoEt7b48CMAKiRuxaMaiVkO O0ITMlb72waMewe29IPzdcXVpqjlrn1hYAbKqthNVBIa6790x3SgnIcAkJ6pAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUchmUQdw4qUiWh2zpet1FiXsxmfgwHwYDVR0j BBgwFoAUPa8cpIYz1C84lVxHyLoPrac9cAcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3 cGQvMC8zREFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEQUYxQ0E0ODYzM0Q0MkYz ODk1NUM0N0M4QkEwRkFEQTczRDcwMDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3cGQvMC8z REFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASmD4Fx9Eg5/L0KUTvBmBTEAaKFISmtglstKqelQcnSKI89xq4i/23EUI6VZ2 pJNaCs0ZU88nksjWJcs9J0hMx+ogeskPzlEADPGcQiZFzvhr+u+XquTwzbccHu1+ VtZHf7bftFCDTPEzcNvmz62GmiE0jfDloBeSomRPLaxiB/bsu0fqVis6zYjyhmGw YYJ9C0/ZWKQz2KF7Fuy7iAtIUxJgFTzvsOO3kzpR4E1B7Mu58lCkfPZ2HufZ4Vf4 2Vzi0ZtmpG9Wi7wOGQrVzZ3JFUA33CtgAwh6Y1sDFo/AgoJh8wJnF/uEkjauaGA7 7hnmeeg0cDYZMEpUW/VKpqt/YA== -----END CERTIFICATE-----Generated at Fri Sep 19 00:05:13 2025 by rpki-client