$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft File: B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft (raw, json) Hash identifier: U9df0AGNVR+gp3BxoGTtdTqUOhsHxXG0cEbAn4BpCrE= Subject key identifier: BA:E8:A9:F3:FA:67:2D:B7:E1:69:86:D3:C4:A8:58:13:35:F5:82:B5 Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4 Certificate issuer: /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4 Certificate serial: 0FC67BCEDA56B57B36D7BE7A1AD495E5CA17D361 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer Subject info access: rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft Manifest number: 033B Signing time: Mon 03 Nov 2025 20:56:37 +0000 Manifest this update: Mon 03 Nov 2025 20:51:37 +0000 Manifest next update: Tue 04 Nov 2025 23:27:37 +0000 Files and hashes: 1: 34352e3138352e32342e302f32322d3234203d3e20323637343538.roa (hash: uFnPinhDNV6Ru+lvf1dzEFE1o2yci+L01AMBz2gGlNI=) 2: 323830343a343564383a3a2f33322d3438203d3e20323636393533.roa (hash: UDaXjotivXR1wZMUx5AKwXlj6jcGCdMh57RMBD9RoFw=) 3: 34352e3232362e342e302f32322d3234203d3e20323636393533.roa (hash: lQUk/io/0V6ktaBfJam3UWZjx7cW3bRhz/SHAUccZoc=) 4: 323830343a343164303a3a2f33322d3438203d3e20323637343538.roa (hash: lV8YlAT7N7CTNdBWWXAzlGLk6Sb4fZhQnpR6xgC+fBU=) 5: B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl (hash: nsWi9FWbUhhEUohTkjxZIA+uxxLtisWSf/qVZ1k8GH8=) 6: 3139322e3134312e33322e302f32322d3234203d3e20323637343538.roa (hash: Oj9to5TEf4ITLA0AMc1PvVIOEl94Ayv1iS5HwmqrSFY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Nov 2025 23:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c6:7b:ce:da:56:b5:7b:36:d7:be:7a:1a:d4:95:e5:ca:17:d3:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4 Validity Not Before: Nov 3 20:51:37 2025 GMT Not After : Nov 4 23:27:37 2025 GMT Subject: CN=BAE8A9F3FA672DB7E16986D3C4A8581335F582B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cd:59:ee:d1:75:0a:e6:cf:ee:b4:c0:2e:d0: 11:75:97:ee:f2:23:78:44:8a:56:a9:9f:7d:e8:78: 03:26:62:bd:f5:77:f8:5f:39:4f:49:4f:a2:94:47: 96:3c:52:0f:d4:fb:5b:c7:20:10:be:d3:20:a8:9d: 5d:99:e5:c8:f0:91:90:35:b8:d5:30:43:11:fb:1c: 44:21:51:9f:15:66:48:53:0f:23:ec:2c:fd:34:53: f7:48:c1:a9:d9:11:1b:50:e6:5c:b2:a2:e8:95:16: 1a:56:bd:a4:5b:2a:76:51:35:68:92:71:a5:3e:74: 4e:d1:32:68:ac:d5:03:d3:ed:64:92:d0:df:ff:31: 26:f4:95:92:72:84:52:44:a6:bd:8e:45:0e:bf:fa: 0c:da:e6:95:ad:b3:97:6f:fe:0b:da:b4:28:64:f5: ca:7b:06:39:39:4d:bc:65:27:23:33:4b:db:6a:39: 01:8a:36:37:66:1e:05:e7:a1:59:0e:28:d2:fc:76: 48:6f:17:3e:38:08:42:4f:7a:35:1e:81:7d:c9:ea: 2c:d8:f9:8c:44:ff:a1:3e:58:f2:ed:e9:e7:23:e5: d5:81:13:22:b8:67:4b:99:0f:44:43:7f:e0:78:1e: 15:73:1c:66:a7:41:de:f6:be:fb:45:c2:0f:04:dc: 10:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E8:A9:F3:FA:67:2D:B7:E1:69:86:D3:C4:A8:58:13:35:F5:82:B5 X509v3 Authority Key Identifier: keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:f2:e1:f7:19:23:4d:2e:75:85:cb:ad:91:e0:99:49:d2:e8: 47:70:77:96:40:8a:b6:59:9b:32:44:6d:70:e4:85:0c:a0:cf: ad:66:3f:fb:7a:a3:47:95:98:0b:9f:2a:11:f8:a2:9c:ad:26: 42:86:3d:d2:7a:1d:a5:56:71:41:fe:fd:4c:00:c9:32:28:9c: ee:31:6d:8c:aa:9f:ad:39:57:c5:41:e2:3a:e6:f2:8a:6e:a2: ca:80:8e:b5:ab:6a:26:1e:32:ab:c6:62:f0:4d:97:5b:d9:83: e2:0c:f9:20:64:b7:fb:9c:2f:e0:10:e7:66:2a:c9:69:32:07: ad:df:26:08:0a:85:79:cc:b5:17:04:24:74:c4:9c:2a:b7:cc: 79:51:d4:ef:f1:ee:d4:39:1f:68:30:82:d7:ea:f7:15:d4:fb: 38:d7:fa:87:e0:22:f3:fe:f2:a0:3c:a4:3b:e4:85:4b:ab:b0: 44:b4:ba:b5:68:e9:91:37:df:e9:1b:23:70:0f:76:a4:00:32: 83:d3:c3:34:33:b1:f0:fe:67:10:93:15:39:f5:e6:4d:a8:52: a0:1e:4f:36:5e:f6:24:03:62:47:44:c1:b7:19:74:20:77:df: 48:28:dd:00:df:0b:03:45:fe:0f:d6:92:ae:36:66:41:ba:a9: 48:25:5f:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD8Z7ztpWtXs21756GtSV5coX02EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDMzlGMjIzQkVDMjRCODZCNzdFNDlCNDYyMzYyRjYy REIyNEJFNDAeFw0yNTExMDMyMDUxMzdaFw0yNTExMDQyMzI3MzdaMDMxMTAvBgNV BAMTKEJBRThBOUYzRkE2NzJEQjdFMTY5ODZEM0M0QTg1ODEzMzVGNTgyQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnzVnu0XUK5s/utMAu0BF1l+7y I3hEilapn33oeAMmYr31d/hfOU9JT6KUR5Y8Ug/U+1vHIBC+0yConV2Z5cjwkZA1 uNUwQxH7HEQhUZ8VZkhTDyPsLP00U/dIwanZERtQ5lyyouiVFhpWvaRbKnZRNWiS caU+dE7RMmis1QPT7WSS0N//MSb0lZJyhFJEpr2ORQ6/+gza5pWts5dv/gvatChk 9cp7Bjk5TbxlJyMzS9tqOQGKNjdmHgXnoVkOKNL8dkhvFz44CEJPejUegX3J6izY +YxE/6E+WPLt6ecj5dWBEyK4Z0uZD0RDf+B4HhVzHGanQd72vvtFwg8E3BCNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuuip8/pnLbfhaYbTxKhYEzX1grUwHwYDVR0j BBgwFoAUs8OfIjvsJLhrd+SbRiNi9i2yS+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFh WXYvMS9CM0MzOUYyMjNCRUMyNEI4NkI3N0U0OUI0NjIzNjJGNjJEQjI0QkU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQzM5RjIyM0JFQzI0Qjg2 Qjc3RTQ5QjQ2MjM2MkY2MkRCMjRCRTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFhWXYvMS9C M0MzOUYyMjNCRUMyNEI4NkI3N0U0OUI0NjIzNjJGNjJEQjI0QkU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy/Lh9xkjTS51hcutkeCZSdLoR3B3lkCKtlmbMkRtcOSFDKDPrWY/+3qjR5WY C58qEfiinK0mQoY90nodpVZxQf79TADJMiic7jFtjKqfrTlXxUHiOubyim6iyoCO tatqJh4yq8Zi8E2XW9mD4gz5IGS3+5wv4BDnZirJaTIHrd8mCAqFecy1FwQkdMSc KrfMeVHU7/Hu1DkfaDCC1+r3FdT7ONf6h+Ai8/7yoDykO+SFS6uwRLS6tWjpkTff 6RsjcA92pAAyg9PDNDOx8P5nEJMVOfXmTahSoB5PNl72JANiR0TBtxl0IHffSCjd AN8LA0X+D9aSrjZmQbqpSCVfWA== -----END CERTIFICATE-----Generated at Tue Nov 4 00:10:16 2025 by rpki-client