$ rpki-client -vvf rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft File: 3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft (raw, json) Hash identifier: YSVj0NR7XSrQ00nSFQrecoS3jMPhD+tZWuXpTMtUqcY= Subject key identifier: 1C:26:51:73:E1:E9:2E:C5:83:6A:36:46:79:BC:05:11:CD:EB:DE:17 Authority key identifier: 3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41 Certificate issuer: /CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41 Certificate serial: 70484C615FBD731F9168C4A73532C8618009EF7F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer Subject info access: rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft Manifest number: 0122 Signing time: Tue 04 Nov 2025 23:05:47 +0000 Manifest this update: Tue 04 Nov 2025 23:00:47 +0000 Manifest next update: Wed 05 Nov 2025 23:51:47 +0000 Files and hashes: 1: 323830343a383136633a3a2f33322d3333203d3e20323732343533.roa (hash: km/ah8tdGnSbAEE8eMAVgMkElj1zG/cbsgnk+5b2q5E=) 2: 3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl (hash: mG0aT+7je4PwMH/aS+jrdmS78aJng8KEV87F0JY2ruA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 23:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:48:4c:61:5f:bd:73:1f:91:68:c4:a7:35:32:c8:61:80:09:ef:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41 Validity Not Before: Nov 4 23:00:47 2025 GMT Not After : Nov 5 23:51:47 2025 GMT Subject: CN=1C265173E1E92EC5836A364679BC0511CDEBDE17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5a:80:0a:83:c2:49:ef:33:5e:8e:8a:70:db: c4:7a:de:01:ac:69:c7:bd:d4:2d:5b:b6:83:e5:f1: 9f:da:1a:42:79:fd:04:d0:54:f5:2c:7d:e0:18:c9: 84:48:e8:c3:f1:4f:1a:6a:11:03:fd:3a:69:96:56: 14:aa:35:11:ec:1a:aa:68:91:d9:84:4c:e0:60:db: 92:dc:16:53:84:34:91:f8:b2:e4:bd:b8:cf:1b:ce: fe:95:e6:f8:e9:a2:5d:28:8a:ca:6b:f5:9f:5c:23: d9:2c:56:e4:ec:94:85:7f:be:18:72:be:d5:77:93: 38:fa:80:59:49:80:b2:05:4d:66:e1:3a:2b:fd:cd: 46:84:03:6e:1a:33:05:62:99:61:27:e4:40:c2:f9: a5:2c:3e:09:0a:ce:eb:ed:97:de:9e:c3:9b:05:d1: 21:55:c5:05:be:7e:91:61:b9:64:cb:2f:0e:74:13: 9a:00:fd:ae:fc:8c:c1:33:02:88:b4:5e:05:6b:7f: 96:0d:7c:46:f5:1e:85:b5:15:01:5e:7e:cc:73:40: 77:47:c9:03:aa:3e:c4:39:64:48:6c:87:44:f3:bd: ae:18:ce:7a:39:21:67:14:dc:84:b4:03:7f:7e:63: dd:d5:42:13:0f:58:2e:eb:b7:db:48:19:67:d1:3b: b1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:26:51:73:E1:E9:2E:C5:83:6A:36:46:79:BC:05:11:CD:EB:DE:17 X509v3 Authority Key Identifier: keyid:3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:b6:3b:03:7d:91:d8:db:92:b3:42:a0:3a:b2:76:ed:97:33: 4b:1b:a4:39:32:56:b4:d1:26:0b:c6:c8:8b:85:68:ec:f2:21: 77:19:fc:fa:37:f5:2c:b6:9c:48:ae:1e:4e:1f:3f:a4:92:b6: 40:ad:c1:5e:ba:1b:b1:16:7f:0a:f2:bc:84:3b:3a:99:88:a9: c8:22:ef:71:f3:f5:48:bd:36:53:08:84:10:7d:79:8f:dc:f8: f3:c8:3f:6e:ca:b5:a5:c7:5e:35:af:d8:c7:04:35:8f:28:df: f9:25:24:19:04:2f:26:52:41:2d:56:25:25:a5:65:87:8b:cf: 6f:69:de:31:f5:c7:5d:08:e9:6a:ac:a2:95:a7:6c:9e:72:50: 65:96:2f:6f:f4:6d:c0:70:6f:2a:e1:ad:f2:fe:17:81:e5:b0: af:56:62:d3:d3:39:3d:07:cd:ea:0d:00:ad:a8:7d:1b:4e:07: 9b:77:04:29:b8:a5:cd:4d:58:19:e8:b8:0d:73:3b:ec:7c:23: 5f:af:b0:c6:71:59:c5:c8:52:fe:ca:73:10:68:21:dd:12:40: 06:40:3c:61:3b:ae:08:4c:21:bf:3f:a6:0c:d1:38:85:76:23: a9:34:06:bd:cf:90:73:f1:8d:82:fc:0e:ed:ec:88:55:d9:4a: 73:72:f2:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcEhMYV+9cx+RaMSnNTLIYYAJ738wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQjlBRjYwM0IzRTI2NkVDNTE3OEMxNTg5MkNCQjM3 RDhDQ0Q0MTAeFw0yNTExMDQyMzAwNDdaFw0yNTExMDUyMzUxNDdaMDMxMTAvBgNV BAMTKDFDMjY1MTczRTFFOTJFQzU4MzZBMzY0Njc5QkMwNTExQ0RFQkRFMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmWoAKg8JJ7zNejopw28R63gGs ace91C1btoPl8Z/aGkJ5/QTQVPUsfeAYyYRI6MPxTxpqEQP9OmmWVhSqNRHsGqpo kdmETOBg25LcFlOENJH4suS9uM8bzv6V5vjpol0oispr9Z9cI9ksVuTslIV/vhhy vtV3kzj6gFlJgLIFTWbhOiv9zUaEA24aMwVimWEn5EDC+aUsPgkKzuvtl96ew5sF 0SFVxQW+fpFhuWTLLw50E5oA/a78jMEzAoi0XgVrf5YNfEb1HoW1FQFefsxzQHdH yQOqPsQ5ZEhsh0Tzva4Yzno5IWcU3IS0A39+Y93VQhMPWC7rt9tIGWfRO7ELAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHCZRc+HpLsWDajZGebwFEc3r3hcwHwYDVR0j BBgwFoAUOjua9gOz4mbsUXjBWJLLs32MzUEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmh2M21FZzVMem5keHcyRDh0Uk5LSkd4SHExbm9BYUtTMTJ6TG5DdnhI N1ovMC8zQTNCOUFGNjAzQjNFMjY2RUM1MTc4QzE1ODkyQ0JCMzdEOENDRDQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBM0I5QUY2MDNCM0UyNjZF QzUxNzhDMTU4OTJDQkIzN0Q4Q0NENDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mmh2M21FZzVMem5keHcyRDh0Uk5LSkd4SHExbm9BYUtTMTJ6TG5DdnhIN1ovMC8z QTNCOUFGNjAzQjNFMjY2RUM1MTc4QzE1ODkyQ0JCMzdEOENDRDQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkrY7A32R2NuSs0KgOrJ27ZczSxukOTJWtNEmC8bIi4Vo7PIhdxn8+jf1LLac SK4eTh8/pJK2QK3BXrobsRZ/CvK8hDs6mYipyCLvcfP1SL02UwiEEH15j9z488g/ bsq1pcdeNa/YxwQ1jyjf+SUkGQQvJlJBLVYlJaVlh4vPb2neMfXHXQjpaqyilads nnJQZZYvb/RtwHBvKuGt8v4XgeWwr1Zi09M5PQfN6g0Arah9G04Hm3cEKbilzU1Y Gei4DXM77HwjX6+wxnFZxchS/spzEGgh3RJABkA8YTuuCEwhvz+mDNE4hXYjqTQG vc+Qc/GNgvwO7eyIVdlKc3LyhA== -----END CERTIFICATE-----Generated at Wed Nov 5 10:10:08 2025 by rpki-client