$ rpki-client -vvf rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft File: 3583862D781B71B103E9FA8D726C4D02380ACEE3.mft (raw, json) Hash identifier: qlWu0gTRXlqu7R9Qycjb86VKlLp1SLWMNUQlsQNpfxo= Subject key identifier: D8:88:B2:6C:81:6F:FA:E0:A9:E2:48:9C:D0:A2:16:1C:98:96:19:61 Authority key identifier: 35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3 Certificate issuer: /CN=3583862D781B71B103E9FA8D726C4D02380ACEE3 Certificate serial: 75141DA3BC2D0E8EEF11F0A21070651B20D8D7C0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer Subject info access: rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft Manifest number: 0306 Signing time: Mon 03 Nov 2025 23:36:37 +0000 Manifest this update: Mon 03 Nov 2025 23:31:37 +0000 Manifest next update: Wed 05 Nov 2025 00:22:37 +0000 Files and hashes: 1: 323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa (hash: F3fG9mFxvglpd2enKC9y9YG4bfXdBUOav0qW+NySFMc=) 2: 323830343a386361633a323030303a3a2f34302d3430203d3e20323733383134.roa (hash: VKDf7ggbfiz8rpCjJSQ+yu2T5sqSYuaym0M0bLcYVKI=) 3: 3583862D781B71B103E9FA8D726C4D02380ACEE3.crl (hash: 9FnSxSXXmAgC72jyqXJhf7pHSh0AeFtzRvw+RnHZ3d0=) 4: 323830343a386361633a3a2f33322d3332203d3e20323733383134.roa (hash: roe3CRwUBZHOfPicJI5B0uNIJHF0uBEXZDkKOt8LSec=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 00:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:14:1d:a3:bc:2d:0e:8e:ef:11:f0:a2:10:70:65:1b:20:d8:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3583862D781B71B103E9FA8D726C4D02380ACEE3 Validity Not Before: Nov 3 23:31:37 2025 GMT Not After : Nov 5 00:22:37 2025 GMT Subject: CN=D888B26C816FFAE0A9E2489CD0A2161C98961961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3f:4a:d3:4b:13:44:8d:30:4e:26:53:e4:d3: 64:ce:90:7f:88:bf:53:18:40:b3:c1:b7:d2:af:c5: 18:4d:25:57:da:1a:91:8c:39:b8:25:ac:c4:45:df: 21:55:0a:81:d2:3f:e1:5c:62:72:49:7a:7e:96:81: ab:25:68:f1:fe:15:89:5a:42:01:3f:d0:e9:90:b0: 17:53:28:ba:8c:3a:96:50:cd:db:15:fc:35:12:40: 84:bb:89:f5:37:73:00:e5:0a:06:49:a7:36:48:fc: 7c:38:76:1a:3c:ba:b0:5c:f0:f5:e4:1c:a7:69:67: 29:ee:61:49:ed:9e:05:8c:12:c6:d6:5e:c4:d5:a3: b1:2b:68:19:57:b5:47:c7:55:55:7f:21:b2:60:5c: 43:1a:5a:bb:a7:bf:03:4d:e9:f8:c2:2f:76:a8:56: c2:1f:6d:f6:7a:bf:7d:38:14:49:a0:71:ee:ff:52: c9:f5:59:31:67:bd:d1:5e:75:7e:9a:61:ca:99:02: 3c:db:ab:fe:3a:55:37:db:07:58:54:17:54:75:b4: 33:b4:0e:09:63:5b:81:f4:05:9f:d9:f0:9c:eb:32: a5:6a:5f:35:06:ad:e7:cf:be:ad:ad:6d:c4:b0:53: e8:a6:75:7d:44:9c:83:2a:3f:df:fa:6c:2d:85:2d: 3b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:88:B2:6C:81:6F:FA:E0:A9:E2:48:9C:D0:A2:16:1C:98:96:19:61 X509v3 Authority Key Identifier: keyid:35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:9b:bd:9e:d3:d3:ee:79:d2:a9:4f:82:27:08:5b:b9:4c:0c: 1c:5b:d8:1a:c6:4e:e5:52:44:da:48:74:84:69:8f:29:ed:70: 4f:bd:e1:78:2f:4c:f7:d2:df:4a:8e:55:06:af:d1:17:68:38: fe:64:7a:26:29:61:55:31:74:48:9b:6e:52:85:a3:cb:7b:77: 9d:29:98:c5:09:fc:34:5d:4f:43:34:b6:c5:8c:1b:21:98:fb: 2e:18:7d:8a:97:01:b8:68:79:15:3f:c6:66:44:d5:36:4c:00: c1:d5:4c:1c:5f:07:2d:88:18:aa:1f:eb:3d:c8:37:a8:cd:6b: 03:1a:0a:da:b9:bb:90:4b:e8:bc:33:21:70:aa:22:fb:18:33: 1f:4f:f0:1a:6a:16:02:b6:ed:32:be:7c:c4:b0:78:d9:22:3f: ab:ab:a6:5d:3b:71:76:83:50:81:4a:b9:a8:c0:6a:5a:6a:c9: 1a:a4:a7:76:37:71:4b:ef:7e:9a:6f:0d:40:7a:0e:e7:cf:df: 93:77:17:4d:b1:02:dc:d9:82:b1:88:67:37:7c:fd:73:fa:97: 32:96:5f:50:d9:f3:0c:40:04:ab:0f:28:da:cc:7b:fd:8a:90: fc:60:58:e5:4e:f9:61:58:e9:a4:a6:7f:8b:06:42:ef:47:d5: 30:2c:e9:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdRQdo7wtDo7vEfCiEHBlGyDY18AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4Mzg2MkQ3ODFCNzFCMTAzRTlGQThENzI2QzREMDIz ODBBQ0VFMzAeFw0yNTExMDMyMzMxMzdaFw0yNTExMDUwMDIyMzdaMDMxMTAvBgNV BAMTKEQ4ODhCMjZDODE2RkZBRTBBOUUyNDg5Q0QwQTIxNjFDOTg5NjE5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUP0rTSxNEjTBOJlPk02TOkH+I v1MYQLPBt9KvxRhNJVfaGpGMObglrMRF3yFVCoHSP+FcYnJJen6WgaslaPH+FYla QgE/0OmQsBdTKLqMOpZQzdsV/DUSQIS7ifU3cwDlCgZJpzZI/Hw4dho8urBc8PXk HKdpZynuYUntngWMEsbWXsTVo7EraBlXtUfHVVV/IbJgXEMaWrunvwNN6fjCL3ao VsIfbfZ6v304FEmgce7/Usn1WTFnvdFedX6aYcqZAjzbq/46VTfbB1hUF1R1tDO0 DgljW4H0BZ/Z8JzrMqVqXzUGrefPvq2tbcSwU+imdX1EnIMqP9/6bC2FLTtJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2IiybIFv+uCp4kic0KIWHJiWGWEwHwYDVR0j BBgwFoAUNYOGLXgbcbED6fqNcmxNAjgKzuMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmhxNm9YM2J4eGtuWHRjZkIxcnRZeVRqa21rMkR2Rm9tb1I1RzRqNjZQ TEsvMS8zNTgzODYyRDc4MUI3MUIxMDNFOUZBOEQ3MjZDNEQwMjM4MEFDRUUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1ODM4NjJENzgxQjcxQjEw M0U5RkE4RDcyNkM0RDAyMzgwQUNFRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RmhxNm9YM2J4eGtuWHRjZkIxcnRZeVRqa21rMkR2Rm9tb1I1RzRqNjZQTEsvMS8z NTgzODYyRDc4MUI3MUIxMDNFOUZBOEQ3MjZDNEQwMjM4MEFDRUUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo5u9ntPT7nnSqU+CJwhbuUwMHFvYGsZO5VJE2kh0hGmPKe1wT73heC9M99Lf So5VBq/RF2g4/mR6JilhVTF0SJtuUoWjy3t3nSmYxQn8NF1PQzS2xYwbIZj7Lhh9 ipcBuGh5FT/GZkTVNkwAwdVMHF8HLYgYqh/rPcg3qM1rAxoK2rm7kEvovDMhcKoi +xgzH0/wGmoWArbtMr58xLB42SI/q6umXTtxdoNQgUq5qMBqWmrJGqSndjdxS+9+ mm8NQHoO58/fk3cXTbEC3NmCsYhnN3z9c/qXMpZfUNnzDEAEqw8o2sx7/YqQ/GBY 5U75YVjppKZ/iwZC70fVMCzp8Q== -----END CERTIFICATE-----Generated at Tue Nov 4 00:26:02 2025 by rpki-client