$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft File: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft (raw, json) Hash identifier: +dAPMerzxfB4pc+6PdzeFomzLqlLrs6i1UKZ9ehs45M= Subject key identifier: 05:38:E0:07:95:45:4A:C4:53:D0:A9:18:C3:1F:AD:08:61:12:D7:2A Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 Certificate issuer: /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Certificate serial: 0F82BF82889548625FACF5EB663A640FD6D24C3D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject info access: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft Manifest number: 0306 Signing time: Tue 04 Nov 2025 12:39:23 +0000 Manifest this update: Tue 04 Nov 2025 12:34:23 +0000 Manifest next update: Wed 05 Nov 2025 16:08:23 +0000 Files and hashes: 1: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl (hash: /Fuvdm+TRAh7wK775Vmyzow8XYLUFVlTu1gN+gtTg9k=) 2: 34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa (hash: AeBka8A3KQatx5ylf8efYG/0aqDgMHQ/4DLsZ9vgq54=) 3: 34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa (hash: mLL7psbKfiKaGnpbVWEJoTKcK/IxrSqWRS37Ju8bJQQ=) 4: 34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa (hash: YBBTkiHSOgUVAXZZp1wx9Ur96wrUs7rREvi/PLPwCpY=) 5: 323830343a356338343a3a2f33322d313238203d3e20323638393133.roa (hash: Ec9hIaDkp+aDDW4FFpB4Fl3AQwvF5+e3QIn8T/v0bXM=) 6: 34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa (hash: I4lnOLHJxZjbb3Rjorlm2O4yGEV8irB1EDwevjkQU7A=) 7: 34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (hash: cHOQoX8+QBdwYQGhnsohZ0k1iqnuoavS/B7p944uAlM=) 8: 34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa (hash: dvZmaJKiFIhzuB+mWc62fkHLhWOlTP21drygDtaN74Y=) 9: 34352e3137352e3232382e302f32342d3234203d3e20323638393133.roa (hash: cXY6PhWUBNWJmbKk4RKtBWwU4LfTGX87FWGJlKUeqPM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 16:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:82:bf:82:88:95:48:62:5f:ac:f5:eb:66:3a:64:0f:d6:d2:4c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Validity Not Before: Nov 4 12:34:23 2025 GMT Not After : Nov 5 16:08:23 2025 GMT Subject: CN=0538E00795454AC453D0A918C31FAD086112D72A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:04:ef:9f:16:20:8d:f7:5c:fa:10:7f:48:94: 92:cb:fc:5b:94:ba:15:75:8b:6d:c4:9b:dc:c3:5e: 63:91:13:59:3e:35:6a:9a:17:34:59:e0:77:26:11: 68:31:87:37:31:ba:62:d2:20:64:5b:bb:e6:be:8f: df:ae:b9:b2:07:01:d9:68:3a:8a:6a:6e:d5:28:cc: 4a:63:92:5d:25:5a:45:5f:d6:51:b7:4a:d8:a8:ed: 45:84:b3:da:02:f2:cb:98:f1:50:e5:b4:b2:ac:90: 44:13:a0:bd:75:58:62:10:8f:7b:85:b4:22:9d:8d: ec:7b:ac:33:3c:52:d7:4d:de:9e:e8:7e:71:87:be: 7e:9a:52:2d:21:07:4d:91:52:7b:4f:a5:7d:37:21: 7c:cc:01:12:4d:03:54:ea:00:67:dc:0b:01:b7:23: c2:08:26:63:e3:5b:f1:61:81:a5:9b:e2:2b:28:d3: 9c:17:60:bc:5b:3e:dc:63:3b:6b:1c:58:af:35:f1: 02:9f:71:8d:85:89:2f:8e:f8:1a:6d:32:59:95:34: b1:ed:f7:32:49:b0:9a:88:70:b3:4c:81:35:9e:c5: 68:fb:45:d6:a0:60:cc:a2:79:47:84:22:7b:19:d0: 68:22:65:1e:ab:2d:d8:d1:b4:8f:11:e3:b0:64:bb: 5f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:38:E0:07:95:45:4A:C4:53:D0:A9:18:C3:1F:AD:08:61:12:D7:2A X509v3 Authority Key Identifier: keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:cc:c7:31:33:c9:35:74:4a:83:f7:d6:74:30:85:24:89:0e: e9:48:2f:ac:14:fc:c3:15:b0:ce:1f:0f:41:7a:51:d2:91:1b: 71:96:6c:be:d5:61:f5:8d:27:72:49:2d:85:df:a3:3a:af:f8: 5c:22:5c:36:bc:87:b3:6a:14:00:81:b0:b2:ad:a7:ad:d7:63: 74:dd:6e:c4:9a:1f:9a:b0:02:8b:47:bd:54:24:81:8f:eb:61: 03:c8:5a:fd:b2:0a:a6:6e:e7:16:4a:21:ea:aa:01:f8:b2:10: 8e:e3:a1:5e:46:60:f7:b2:05:6f:27:0f:e9:97:b2:78:0b:22: 07:62:dd:48:2b:e2:36:74:2e:18:8a:e8:4e:72:ec:fe:16:62: b7:7f:f9:5e:45:63:65:25:a2:bb:0f:b6:25:7c:bc:42:b6:49: 9f:9e:63:ab:d0:1a:e0:de:26:e2:86:6b:60:af:b8:0e:1d:26: 05:c4:6e:69:ca:4a:9c:8a:ff:ea:00:26:1c:80:a7:f7:d6:af: ab:5c:92:44:97:22:14:80:d9:9d:cf:19:d5:97:43:e2:07:ad: 68:94:df:c9:28:52:a9:dc:97:1d:0e:78:69:a1:8b:da:ff:a2: ba:de:d8:98:e6:a1:f4:da:b8:99:4f:21:e6:cc:b8:23:0f:3e: a4:51:2b:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD4K/goiVSGJfrPXrZjpkD9bSTD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NGRUUyQzIxQTE3MzE0QUQwQ0ZGQzUyMEZEODE3RDE0 QjQxNDBEMTAeFw0yNTExMDQxMjM0MjNaFw0yNTExMDUxNjA4MjNaMDMxMTAvBgNV BAMTKDA1MzhFMDA3OTU0NTRBQzQ1M0QwQTkxOEMzMUZBRDA4NjExMkQ3MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQBO+fFiCN91z6EH9IlJLL/FuU uhV1i23Em9zDXmORE1k+NWqaFzRZ4HcmEWgxhzcxumLSIGRbu+a+j9+uubIHAdlo OopqbtUozEpjkl0lWkVf1lG3Stio7UWEs9oC8suY8VDltLKskEQToL11WGIQj3uF tCKdjex7rDM8UtdN3p7ofnGHvn6aUi0hB02RUntPpX03IXzMARJNA1TqAGfcCwG3 I8IIJmPjW/FhgaWb4iso05wXYLxbPtxjO2scWK818QKfcY2FiS+O+BptMlmVNLHt 9zJJsJqIcLNMgTWexWj7RdagYMyieUeEInsZ0GgiZR6rLdjRtI8R47Bku19VAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBTjgB5VFSsRT0KkYwx+tCGES1yowHwYDVR0j BBgwFoAUPP7iwhoXMUrQz/xSD9gX0UtBQNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5K Z2UvMS8zQ0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRkVFMkMyMUExNzMxNEFE MENGRkM1MjBGRDgxN0QxNEI0MTQwRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5KZ2UvMS8z Q0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4czHMTPJNXRKg/fWdDCFJIkO6UgvrBT8wxWwzh8PQXpR0pEbcZZsvtVh9Y0n ckkthd+jOq/4XCJcNryHs2oUAIGwsq2nrddjdN1uxJofmrACi0e9VCSBj+thA8ha /bIKpm7nFkoh6qoB+LIQjuOhXkZg97IFbycP6ZeyeAsiB2LdSCviNnQuGIroTnLs /hZit3/5XkVjZSWiuw+2JXy8QrZJn55jq9Aa4N4m4oZrYK+4Dh0mBcRuacpKnIr/ 6gAmHICn99avq1ySRJciFIDZnc8Z1ZdD4getaJTfyShSqdyXHQ54aaGL2v+iut7Y mOah9Nq4mU8h5sy4Iw8+pFEr6A== -----END CERTIFICATE-----Generated at Wed Nov 5 04:08:20 2025 by rpki-client