$ rpki-client -vvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft File: C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft (raw, json) Hash identifier: EX56Ng8ld1d8YIiQNn08iJz75x7Xd7R6zpSB5xXBqFo= Subject key identifier: 34:11:EF:62:20:74:88:DB:93:30:82:6F:4E:89:BD:DC:64:FC:0F:9C Authority key identifier: C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22 Certificate issuer: /CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22 Certificate serial: 5C029C1EA1FF387790DF6AD33234816E4AE74E08 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer Subject info access: rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft Manifest number: 21 Signing time: Sun 02 Nov 2025 22:43:40 +0000 Manifest this update: Sun 02 Nov 2025 22:38:40 +0000 Manifest next update: Mon 03 Nov 2025 22:58:40 +0000 Files and hashes: 1: 34352e3233362e31302e302f32342d3234203d3e20323638323133.roa (hash: Hfp1DucUOLGX558iN8StPvuFHGp7CQRLaXSkygAZbFQ=) 2: C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl (hash: JEnj9ej6bm38sKMaY7hqIs7Ti2cvj3u3KuFRVzRjyyI=) 3: 34352e3233362e392e302f32342d3234203d3e20323638323133.roa (hash: 70JQRaVTJXwvav8bFTgGxR3IrAOSwj6tnXxST/n7XC0=) 4: 323830343a346462303a3a2f33322d3332203d3e20323638323133.roa (hash: SZSAqVslfoIeZ8CsTmwiFp0IQTONHzAfigBL/Esv6sQ=) 5: 34352e3233362e382e302f32342d3234203d3e20323638323133.roa (hash: ctFV3kPNJK3bV9B3MLschItzKM1ihhzRapNYYOJyJ2c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 03 Nov 2025 22:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:02:9c:1e:a1:ff:38:77:90:df:6a:d3:32:34:81:6e:4a:e7:4e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3254EFA5C4E9FDA6768D0294247DF70DABBEF22 Validity Not Before: Nov 2 22:38:40 2025 GMT Not After : Nov 3 22:58:40 2025 GMT Subject: CN=3411EF62207488DB9330826F4E89BDDC64FC0F9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f1:fc:0c:76:28:a4:81:a8:5d:75:81:46:27: c2:22:64:7b:2f:7e:7a:f5:c8:7b:46:25:af:a5:ca: b1:51:50:cc:f7:14:9e:c0:20:f6:de:08:fe:0c:ed: b0:4d:ec:05:0b:02:d9:0f:b1:be:66:6e:12:bc:c9: d0:d0:5e:0f:49:5c:55:32:77:a7:ed:4d:9d:f2:2d: 69:b6:4f:ec:4f:35:f8:5e:98:7d:c9:4f:7c:5a:4b: 7c:a0:29:22:66:20:09:eb:cf:a9:e6:07:22:8e:f3: 47:69:9d:31:a9:e3:f5:d6:85:39:20:c9:3c:00:6d: 8e:dd:fb:5c:51:19:0f:40:d9:4e:f6:a9:a0:43:97: 53:60:73:b0:db:a2:80:2b:00:60:be:31:5c:86:61: db:d2:de:94:1f:31:7a:a6:f2:61:3c:06:8e:96:ee: 68:96:96:d0:dd:e6:a2:06:ba:0f:38:7b:c3:d8:75: e9:e5:d0:5d:92:6a:11:01:8c:6b:85:b6:67:0e:ca: cd:c3:0f:8b:51:6e:29:54:3a:d1:ae:ef:7b:6b:98: 34:7e:73:57:41:9b:45:0a:0c:89:c3:d6:e6:f1:7c: e3:bb:9a:c4:12:c6:9a:9f:00:d0:e9:a6:2a:2e:0b: 1e:98:01:2a:22:b9:dc:72:3f:f9:96:3f:cd:64:11: ea:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:11:EF:62:20:74:88:DB:93:30:82:6F:4E:89:BD:DC:64:FC:0F:9C X509v3 Authority Key Identifier: keyid:C3:25:4E:FA:5C:4E:9F:DA:67:68:D0:29:42:47:DF:70:DA:BB:EF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/C3254EFA5C4E9FDA6768D0294247DF70DABBEF22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:20:6e:76:28:5e:b7:6b:3d:4a:25:f6:7c:1d:22:06:a9:93: 1f:8c:0f:c4:27:e5:40:6a:9f:d9:4f:54:0b:09:36:b9:ae:57: 90:04:7b:99:c5:fc:83:6a:d6:71:c3:1c:38:88:4b:b4:ed:ba: 9e:c1:78:94:9a:10:f0:5a:53:86:43:45:59:bb:dc:7c:dc:ec: ab:c2:f5:1e:06:86:b2:63:77:f9:b3:86:a8:84:4c:cd:32:ba: 04:e5:e4:af:16:f6:81:e6:a9:e3:d2:1f:aa:9b:cd:5e:ef:53: 22:ef:92:a6:ce:66:2d:22:f8:b3:da:e5:65:7e:66:41:13:22: 56:73:d3:29:a8:43:25:32:9b:66:d3:e5:23:0b:dd:c8:4c:2e: df:68:98:47:c4:73:3f:99:ad:bb:35:7a:ea:11:89:f1:86:fc: 2b:0f:32:f4:02:fe:65:9c:ed:0e:6d:56:c9:0f:52:4c:7b:79: aa:2b:25:f5:8e:a5:db:4b:74:4d:dc:19:9e:7a:e9:47:cd:25: 71:9f:76:66:d2:50:f9:29:7c:ae:cb:86:54:a8:e8:47:18:53: 91:07:47:4f:2a:09:3a:78:b9:24:47:3c:63:4f:5f:b1:c7:7e: 08:d4:b4:a2:ab:4f:07:92:5d:bb:71:40:c5:0e:38:c9:a5:71: 1a:9e:c2:19 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUXAKcHqH/OHeQ32rTMjSBbkrnTggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMyNTRFRkE1QzRFOUZEQTY3NjhEMDI5NDI0N0RGNzBE QUJCRUYyMjAeFw0yNTExMDIyMjM4NDBaFw0yNTExMDMyMjU4NDBaMDMxMTAvBgNV BAMTKDM0MTFFRjYyMjA3NDg4REI5MzMwODI2RjRFODlCRERDNjRGQzBGOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR8fwMdiikgahddYFGJ8IiZHsv fnr1yHtGJa+lyrFRUMz3FJ7AIPbeCP4M7bBN7AULAtkPsb5mbhK8ydDQXg9JXFUy d6ftTZ3yLWm2T+xPNfhemH3JT3xaS3ygKSJmIAnrz6nmByKO80dpnTGp4/XWhTkg yTwAbY7d+1xRGQ9A2U72qaBDl1Ngc7DbooArAGC+MVyGYdvS3pQfMXqm8mE8Bo6W 7miWltDd5qIGug84e8PYdenl0F2SahEBjGuFtmcOys3DD4tRbilUOtGu73trmDR+ c1dBm0UKDInD1ubxfOO7msQSxpqfANDppiouCx6YASoiudxyP/mWP81kEeq7AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUNBHvYiB0iNuTMIJvTom93GT8D5wwHwYDVR0j BBgwFoAUwyVO+lxOn9pnaNApQkffcNq77yIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9XQlptZ3dmV3RKcHlVUzJKeDhMeUs4YUJkNGd2R1JRU0xYSE5xN1hlN0hV LzAvQzMyNTRFRkE1QzRFOUZEQTY3NjhEMDI5NDI0N0RGNzBEQUJCRUYyMi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DMzI1NEVGQTVDNEU5RkRBNjc2 OEQwMjk0MjQ3REY3MERBQkJFRjIyLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1dC Wm1nd2ZXdEpweVVTMkp4OEx5SzhhQmQ0Z3ZHUlFTTFhITnE3WGU3SFUvMC9DMzI1 NEVGQTVDNEU5RkRBNjc2OEQwMjk0MjQ3REY3MERBQkJFRjIyLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA KSBudihet2s9SiX2fB0iBqmTH4wPxCflQGqf2U9UCwk2ua5XkAR7mcX8g2rWccMc OIhLtO26nsF4lJoQ8FpThkNFWbvcfNzsq8L1HgaGsmN3+bOGqIRMzTK6BOXkrxb2 geap49IfqpvNXu9TIu+Sps5mLSL4s9rlZX5mQRMiVnPTKahDJTKbZtPlIwvdyEwu 32iYR8RzP5mtuzV66hGJ8Yb8Kw8y9AL+ZZztDm1WyQ9STHt5qisl9Y6l20t0TdwZ nnrpR80lcZ92ZtJQ+Sl8rsuGVKjoRxhTkQdHTyoJOni5JEc8Y09fscd+CNS0oqtP B5Jdu3FAxQ44yaVxGp7CGQ== -----END CERTIFICATE-----Generated at Mon Nov 3 12:10:41 2025 by rpki-client