$ rpki-client -vvf rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.mft File: 349BDC9A5D2D169C13F5929341F8E986CACF88D9.mft (raw, json) Hash identifier: 7r+f2Jv9dhE8cehwIPRETQoeud6cndjDH89nwQjEyok= Subject key identifier: E8:29:9B:F4:77:02:7C:FC:02:4A:91:F0:05:A4:E0:0A:0B:A2:08:BE Authority key identifier: 34:9B:DC:9A:5D:2D:16:9C:13:F5:92:93:41:F8:E9:86:CA:CF:88:D9 Certificate issuer: /CN=349BDC9A5D2D169C13F5929341F8E986CACF88D9 Certificate serial: 7F63C0DD78F636EF8E84ADE8F41D3E816323ED16 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/349BDC9A5D2D169C13F5929341F8E986CACF88D9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.mft Manifest number: 3B Signing time: Tue 04 Nov 2025 14:05:37 +0000 Manifest this update: Tue 04 Nov 2025 14:00:37 +0000 Manifest next update: Wed 05 Nov 2025 17:05:37 +0000 Files and hashes: 1: 323830343a346361343a3a2f33322d313238203d3e20323637333832.roa (hash: gt5uEoYMYqM6if3oNPcnpwptlLfdw88JJcTDqT76Luo=) 2: 34352e3233342e3134302e302f32322d3234203d3e20313938393439.roa (hash: nGoUxy3Z/MpvqrXwnPLSoXN9QWdPvQGTMWdzwQBA2AE=) 3: 34352e3233342e3134302e302f32322d3332203d3e20323637333832.roa (hash: w1a2LCC4hQc0RPNVmKfvItCl8GgNaYXtVfSCDlKVpSI=) 4: 349BDC9A5D2D169C13F5929341F8E986CACF88D9.crl (hash: Um91mpNYPIbsTnicg9qNgKrb/Zk0a2F6BD4+keTaSMI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.crl rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/349BDC9A5D2D169C13F5929341F8E986CACF88D9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 17:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:63:c0:dd:78:f6:36:ef:8e:84:ad:e8:f4:1d:3e:81:63:23:ed:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349BDC9A5D2D169C13F5929341F8E986CACF88D9 Validity Not Before: Nov 4 14:00:37 2025 GMT Not After : Nov 5 17:05:37 2025 GMT Subject: CN=E8299BF477027CFC024A91F005A4E00A0BA208BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:82:93:a1:81:7f:b0:6e:a0:88:9e:59:24:08: c8:a6:99:19:0c:ea:68:68:bb:65:9a:28:af:3f:ac: 84:09:8e:cb:73:b6:bd:79:92:d3:50:ca:66:b0:51: 42:d3:ed:d2:21:77:64:dd:ca:2b:2c:fe:7d:3b:41: 57:b7:f9:87:e2:4a:41:ab:db:f1:ef:3d:a4:93:a3: f1:1f:0d:d4:5f:bb:11:82:57:50:52:93:bf:12:10: 2e:61:2a:01:2d:58:34:81:0c:8a:44:4b:e4:8e:b5: 4c:97:7d:c9:89:f9:8e:b2:7b:db:2b:51:19:64:e0: c3:82:a4:e3:32:ce:5e:d2:b8:4c:2d:68:50:37:92: 2e:e3:0c:e0:e5:1a:eb:22:7a:79:54:6d:22:a9:b6: dc:03:22:c2:8c:2e:f1:04:44:1a:b3:51:a0:7b:0f: 1c:5c:35:b5:9b:4e:9e:79:dd:0d:24:43:98:a9:df: f7:31:06:5c:f8:ba:b5:79:61:be:a2:31:fe:ce:52: f2:c8:e5:f3:13:d7:ee:b8:ff:c3:a0:f9:46:fa:97: 95:67:8f:13:99:44:61:b4:97:fe:c2:58:5f:c2:85: 4d:14:59:d9:f7:0b:0d:7e:34:a2:5b:6a:fe:5e:a5: 66:f1:ea:ba:f5:9b:ed:7b:7f:7d:0a:0c:c7:21:2d: db:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:29:9B:F4:77:02:7C:FC:02:4A:91:F0:05:A4:E0:0A:0B:A2:08:BE X509v3 Authority Key Identifier: keyid:34:9B:DC:9A:5D:2D:16:9C:13:F5:92:93:41:F8:E9:86:CA:CF:88:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/349BDC9A5D2D169C13F5929341F8E986CACF88D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XkWFJGyZFVb34FhagSXgcCLQCpX2yMZkRs5iWzZTXpz/0/349BDC9A5D2D169C13F5929341F8E986CACF88D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:4f:16:c6:f0:78:93:e5:5b:3d:63:5f:94:f7:0d:89:3e:2d: 9f:1c:7f:88:d6:56:5e:7f:d9:29:a6:df:d4:20:3f:7a:17:1f: f7:d5:2e:57:37:0a:39:13:4e:80:6e:06:70:b1:67:b0:e4:9b: 54:c6:55:d6:c1:6f:91:91:20:3e:89:35:2a:5d:d6:30:03:4b: 2c:88:d3:ab:45:25:a3:71:7f:e9:6f:fd:f9:da:bc:2f:b7:a1: 9c:9b:83:f0:c1:03:3a:15:3e:c4:25:94:14:e0:97:d8:4b:c8: 0b:6c:8c:64:b3:64:c9:de:ba:58:df:66:3d:8a:25:c8:b3:70: 58:da:d1:e2:63:41:ac:68:83:e1:97:f0:97:c9:56:fe:89:3a: ad:63:9d:a1:cf:b9:e6:46:24:42:14:ab:b8:d0:d5:46:2e:ca: 3e:95:9c:8b:09:56:60:ec:10:ec:ec:93:15:8f:68:4a:65:81: 07:72:22:fb:af:8f:80:2b:ff:50:12:e9:9a:66:2a:c9:8a:01: 32:d9:65:5c:8f:9d:b6:96:d8:f8:1d:92:af:a2:ca:ca:96:c5: 22:95:f1:ce:57:92:04:36:60:8d:18:b9:4b:64:fb:f3:03:34: 7f:92:c3:5c:87:35:b4:bb:d8:8c:2e:3c:32:d0:94:c5:6c:12: 8f:53:47:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUf2PA3Xj2Nu+OhK3o9B0+gWMj7RYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ5QkRDOUE1RDJEMTY5QzEzRjU5MjkzNDFGOEU5ODZD QUNGODhEOTAeFw0yNTExMDQxNDAwMzdaFw0yNTExMDUxNzA1MzdaMDMxMTAvBgNV BAMTKEU4Mjk5QkY0NzcwMjdDRkMwMjRBOTFGMDA1QTRFMDBBMEJBMjA4QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWgpOhgX+wbqCInlkkCMimmRkM 6mhou2WaKK8/rIQJjstztr15ktNQymawUULT7dIhd2Tdyiss/n07QVe3+YfiSkGr 2/HvPaSTo/EfDdRfuxGCV1BSk78SEC5hKgEtWDSBDIpES+SOtUyXfcmJ+Y6ye9sr URlk4MOCpOMyzl7SuEwtaFA3ki7jDODlGusienlUbSKpttwDIsKMLvEERBqzUaB7 DxxcNbWbTp553Q0kQ5ip3/cxBlz4urV5Yb6iMf7OUvLI5fMT1+64/8Og+Ub6l5Vn jxOZRGG0l/7CWF/ChU0UWdn3Cw1+NKJbav5epWbx6rr1m+17f30KDMchLdtLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6Cmb9HcCfPwCSpHwBaTgCguiCL4wHwYDVR0j BBgwFoAUNJvcml0tFpwT9ZKTQfjphsrPiNkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlhrV0ZKR3laRlZiMzRGaGFnU1hnY0NMUUNwWDJ5TVprUnM1aVd6WlRY cHovMC8zNDlCREM5QTVEMkQxNjlDMTNGNTkyOTM0MUY4RTk4NkNBQ0Y4OEQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0OUJEQzlBNUQyRDE2OUMx M0Y1OTI5MzQxRjhFOTg2Q0FDRjg4RDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlhrV0ZKR3laRlZiMzRGaGFnU1hnY0NMUUNwWDJ5TVprUnM1aVd6WlRYcHovMC8z NDlCREM5QTVEMkQxNjlDMTNGNTkyOTM0MUY4RTk4NkNBQ0Y4OEQ5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuU8WxvB4k+VbPWNflPcNiT4tnxx/iNZWXn/ZKabf1CA/ehcf99UuVzcKORNO gG4GcLFnsOSbVMZV1sFvkZEgPok1Kl3WMANLLIjTq0Ulo3F/6W/9+dq8L7ehnJuD 8MEDOhU+xCWUFOCX2EvIC2yMZLNkyd66WN9mPYolyLNwWNrR4mNBrGiD4Zfwl8lW /ok6rWOdoc+55kYkQhSruNDVRi7KPpWciwlWYOwQ7OyTFY9oSmWBB3Ii+6+PgCv/ UBLpmmYqyYoBMtllXI+dtpbY+B2Sr6LKypbFIpXxzleSBDZgjRi5S2T78wM0f5LD XIc1tLvYjC48MtCUxWwSj1NH2Q== -----END CERTIFICATE-----Generated at Wed Nov 5 05:01:19 2025 by rpki-client