$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft File: 3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft (raw, json) Hash identifier: 1OFmMbcd/MSCWK1jqIntpkgleVTL9MXghKrTUFg8QtQ= Subject key identifier: DF:C0:14:BE:67:0A:DC:BA:36:F8:56:51:5F:DF:25:88:58:75:87:C7 Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0 Certificate issuer: /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0 Certificate serial: 79812A60E1723AA5E107142185BB719EDAFF1742 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft Manifest number: 0303 Signing time: Wed 05 Nov 2025 00:08:52 +0000 Manifest this update: Wed 05 Nov 2025 00:03:51 +0000 Manifest next update: Thu 06 Nov 2025 03:48:51 +0000 Files and hashes: 1: 34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa (hash: /bpAsgSUi1LnoTyueVXmEbHEdvQmkmUVeA1xO4MqaNU=) 2: 323830343a363031383a383030303a3a2f33332d3333203d3e20323639313435.roa (hash: Orz/ogX6qFnRjGYGiV2xeJsYmVdzFYD63V3ZXxKfl8k=) 3: 3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl (hash: tckaJr1TR3iFKnGrdYyhQMS2IwHWdXKW9syTKdX3eak=) 4: 34352e3138302e3138342e302f32322d3232203d3e20323639313435.roa (hash: kbu54ESKW1e5BIRWIv2H+d7R8holRL2gmDinoqBBatI=) 5: 323830343a363031383a3a2f33322d3332203d3e20323639313435.roa (hash: pukb5lj9ipcGQlV0LxsDM+V/GjI+AEgmTgzISsvatVU=) 6: 34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa (hash: 2RkNWBLR029RFRbh32kFnlXtZFOD9xnYisNTVjldsO0=) 7: 323830343a363031383a3a2f33332d3333203d3e20323639313435.roa (hash: nPpf0hhGMugZmNdbWERrNoc79wWP0pZTB/sPp3v04wk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 03:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:81:2a:60:e1:72:3a:a5:e1:07:14:21:85:bb:71:9e:da:ff:17:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0 Validity Not Before: Nov 5 00:03:51 2025 GMT Not After : Nov 6 03:48:51 2025 GMT Subject: CN=DFC014BE670ADCBA36F856515FDF2588587587C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f9:9c:0f:fa:c2:0a:9b:14:03:55:5c:22:ec: 12:96:01:ee:97:82:41:8f:40:59:e1:ae:12:2f:bc: 47:ea:85:f9:88:70:8f:57:11:ea:90:ae:01:db:40: 44:91:90:20:b4:cc:d9:98:62:7a:88:40:10:3f:36: 71:c4:ec:05:0f:0b:cd:d5:65:01:69:60:e9:52:a1: 58:16:8f:b1:ff:91:72:7f:33:40:fe:45:80:e2:48: 77:4d:9b:2a:dd:30:c5:65:46:b3:52:31:40:58:e6: e4:a2:1f:c3:fe:0c:44:44:ca:c4:d6:8a:c5:8e:77: f9:37:93:74:74:72:11:0a:20:f4:3b:a9:d4:47:2f: 4d:e9:82:24:91:47:ef:e3:c8:4e:5d:f4:74:93:ae: a5:3d:43:1d:84:28:34:59:a9:f9:23:cc:e3:64:9a: 66:b3:3b:4f:54:43:5c:56:38:a8:5d:44:10:71:76: 4e:b2:af:fa:1b:84:64:8b:ac:2b:95:1a:0a:38:89: c7:7f:67:12:92:ed:d3:31:a9:99:ec:48:bc:cb:29: dd:04:d8:3c:e5:2d:35:23:67:73:9d:30:6a:31:75: aa:cd:f9:7f:56:42:39:53:3d:d3:f8:89:b7:e4:15: 52:4f:18:62:28:af:a8:0e:b5:2c:99:3e:f4:ef:fc: 52:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C0:14:BE:67:0A:DC:BA:36:F8:56:51:5F:DF:25:88:58:75:87:C7 X509v3 Authority Key Identifier: keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:1c:d7:a1:f6:3e:d3:e2:8b:7f:5d:c6:b4:0b:63:61:c1:4f: b0:c8:1d:46:34:4d:6e:f0:de:18:02:7e:13:40:6c:ea:57:f7: 04:a2:3e:a0:aa:99:ea:d4:aa:72:d3:9c:b5:4a:01:a9:7e:7c: d3:d9:5b:4e:63:ca:29:fa:7f:d8:0e:8a:cd:f9:1e:9e:be:6f: 6e:f0:82:dc:14:5b:37:3f:1d:d1:7e:9a:7e:80:b6:35:30:f8: 7f:9e:a9:85:01:2c:33:56:75:0d:84:11:4f:aa:22:f4:3c:dc: e2:aa:7d:36:67:aa:8f:95:6e:a4:5d:2a:f5:f2:a9:e1:6e:07: ff:bb:13:72:15:c3:cb:ee:11:14:00:dc:f5:26:be:d2:43:ac: c5:d6:58:18:b9:5d:b3:2c:33:93:af:d8:b3:6e:05:d6:45:34: 2a:a8:c0:cb:89:aa:28:bd:37:01:98:02:03:63:87:87:af:d0: 77:fa:e3:35:68:ad:30:2a:36:64:f7:08:5f:20:5c:81:30:89: 92:2d:28:f9:93:6a:76:e4:cb:f3:b6:5c:85:ce:7c:9b:2b:62: 4f:bd:d3:32:e3:a0:3e:9f:db:a6:8d:38:56:d7:26:a2:3f:6a: 86:6a:17:58:0a:66:41:06:9e:bc:87:bd:68:29:64:af:4c:a8: 93:b7:26:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeYEqYOFyOqXhBxQhhbtxntr/F0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZBNjQ1M0ZGNkVFNDhEQUQ5QzIwQzU1MkY5QTRBRkEx M0JGNzRGMDAeFw0yNTExMDUwMDAzNTFaFw0yNTExMDYwMzQ4NTFaMDMxMTAvBgNV BAMTKERGQzAxNEJFNjcwQURDQkEzNkY4NTY1MTVGREYyNTg4NTg3NTg3QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu+ZwP+sIKmxQDVVwi7BKWAe6X gkGPQFnhrhIvvEfqhfmIcI9XEeqQrgHbQESRkCC0zNmYYnqIQBA/NnHE7AUPC83V ZQFpYOlSoVgWj7H/kXJ/M0D+RYDiSHdNmyrdMMVlRrNSMUBY5uSiH8P+DEREysTW isWOd/k3k3R0chEKIPQ7qdRHL03pgiSRR+/jyE5d9HSTrqU9Qx2EKDRZqfkjzONk mmazO09UQ1xWOKhdRBBxdk6yr/obhGSLrCuVGgo4icd/ZxKS7dMxqZnsSLzLKd0E 2DzlLTUjZ3OdMGoxdarN+X9WQjlTPdP4ibfkFVJPGGIor6gOtSyZPvTv/FKdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU38AUvmcK3Lo2+FZRX98liFh1h8cwHwYDVR0j BBgwFoAUP6ZFP/buSNrZwgxVL5pK+hO/dPAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmU5NkFwdUN6ZldKbnRvMXlQZjVRMlhaQzhndHEzNFZpY2t6aG9VaGRt TU4vMS8zRkE2NDUzRkY2RUU0OERBRDlDMjBDNTUyRjlBNEFGQTEzQkY3NEYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQTY0NTNGRjZFRTQ4REFE OUMyMEM1NTJGOUE0QUZBMTNCRjc0RjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmU5NkFwdUN6ZldKbnRvMXlQZjVRMlhaQzhndHEzNFZpY2t6aG9VaGRtTU4vMS8z RkE2NDUzRkY2RUU0OERBRDlDMjBDNTUyRjlBNEFGQTEzQkY3NEYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUhzXofY+0+KLf13GtAtjYcFPsMgdRjRNbvDeGAJ+E0Bs6lf3BKI+oKqZ6tSq ctOctUoBqX5809lbTmPKKfp/2A6Kzfkenr5vbvCC3BRbNz8d0X6afoC2NTD4f56p hQEsM1Z1DYQRT6oi9Dzc4qp9Nmeqj5VupF0q9fKp4W4H/7sTchXDy+4RFADc9Sa+ 0kOsxdZYGLldsywzk6/Ys24F1kU0KqjAy4mqKL03AZgCA2OHh6/Qd/rjNWitMCo2 ZPcIXyBcgTCJki0o+ZNqduTL87Zchc58mytiT73TMuOgPp/bpo04Vtcmoj9qhmoX WApmQQaevIe9aClkr0yok7cmMA== -----END CERTIFICATE-----Generated at Wed Nov 5 10:52:49 2025 by rpki-client