$ rpki-client -vvf rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft File: 3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft (raw, json) Hash identifier: Mm72AhsmCgXOn0XeYtUDI9pfx52ArZIHnQpfzS111ns= Subject key identifier: 46:10:CC:0A:E6:EF:6D:1E:83:32:E5:13:E0:16:E0:04:15:D4:D9:23 Authority key identifier: 35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2 Certificate issuer: /CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2 Certificate serial: 4D23164AC667436F9124E7D1011EC51DF128F787 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft Manifest number: 0306 Signing time: Wed 05 Nov 2025 02:24:43 +0000 Manifest this update: Wed 05 Nov 2025 02:19:43 +0000 Manifest next update: Thu 06 Nov 2025 04:34:43 +0000 Files and hashes: 1: 3137302e38322e3132302e302f32322d3234203d3e20323633363638.roa (hash: oLFcJDR+piIEBdqrJGQ1URlRH59LSw4XFpddQMkvr2g=) 2: 3139312e3234312e35362e302f32322d3234203d3e20323633363638.roa (hash: FKNYF9UdtLT5dzH41/M3vw86QkrwsEo9zVWfnFSF5xQ=) 3: 3134332e3133372e37362e302f32322d3234203d3e20323633363638.roa (hash: jS2yt6iWqnU4Fu3w0oDSmPWdZIRbmkruFgSjKM6ouBM=) 4: 3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl (hash: vTxDKSBnhHatFrTMdbrz74Fev9bat0mlXLtHU/8AMHw=) 5: 323830343a313134383a3a2f33322d3438203d3e20323633363638.roa (hash: xdHdjHLVcOu3wNmoYsUtHv/HX60zCuV6THDKgGvGDkE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 04:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:23:16:4a:c6:67:43:6f:91:24:e7:d1:01:1e:c5:1d:f1:28:f7:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2 Validity Not Before: Nov 5 02:19:43 2025 GMT Not After : Nov 6 04:34:43 2025 GMT Subject: CN=4610CC0AE6EF6D1E8332E513E016E00415D4D923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1c:26:9d:1e:6a:bc:9c:eb:ad:5e:4a:09:de: 6e:ae:bd:4c:98:a8:a0:23:16:e1:66:48:5e:a7:30: 4c:06:bf:d8:07:0f:03:8e:c1:58:16:8a:7b:0f:ac: a4:f3:6d:1f:2a:bc:f8:61:01:a0:a1:99:9f:23:f1: 0c:46:ec:a7:62:13:0c:91:57:b7:02:e1:3c:e7:33: 73:2d:04:02:fc:c8:ac:fa:33:6d:7b:3f:e6:b4:a2: 14:f1:4a:88:75:d5:f9:3e:aa:14:72:a0:72:db:7e: 29:13:4f:75:3d:95:d5:9e:0b:24:20:87:71:91:bc: 6f:50:90:42:c1:43:a4:6c:2e:df:e2:20:3e:3a:67: 99:4d:74:b3:e5:31:6e:05:67:4d:09:0f:17:97:33: 59:9e:9d:c9:41:c7:dd:b9:8f:dc:df:36:0f:7c:db: 62:53:69:a0:e0:b2:e8:63:87:6a:ec:2a:97:ae:82: 17:4f:52:0d:f2:0a:e2:18:2a:73:80:22:90:97:05: 92:dc:b6:5e:1c:26:50:cd:b2:2a:b4:0c:93:2d:f1: b8:66:a5:cc:0d:3e:0d:ae:64:22:ec:b3:74:35:fa: 2b:76:c3:b7:a0:51:ab:f4:12:59:46:29:3e:71:13: 35:27:60:d9:88:c7:e5:e8:0f:b8:36:5a:14:fc:b7: c8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:10:CC:0A:E6:EF:6D:1E:83:32:E5:13:E0:16:E0:04:15:D4:D9:23 X509v3 Authority Key Identifier: keyid:35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:be:63:64:14:67:86:27:96:6b:eb:0e:75:6c:7e:b9:6f:62: ca:c7:64:75:92:7f:7b:05:2c:ae:9b:d1:85:80:e5:d9:32:69: 5c:a5:49:1c:4d:0d:7d:50:ac:38:59:40:77:b3:09:9e:42:a6: 4d:f8:17:7e:de:f6:59:5c:20:b7:dc:ff:5c:18:3b:0e:8b:c5: 26:b8:c3:1f:8f:67:67:23:dc:c5:42:19:dd:6c:3c:45:c1:7e: f0:05:c9:71:48:35:7d:81:d7:d2:66:b7:cf:35:2f:a9:6d:b2: 34:80:c3:1a:ec:f2:37:df:df:bd:36:4b:e0:31:9e:34:b1:23: 0a:de:3e:3d:ed:75:21:d8:b2:36:1c:f7:54:84:4f:5b:4a:0b: 68:d6:e6:03:1e:b9:59:15:85:04:b3:5f:20:a7:94:16:5d:f8: 37:5c:b3:f4:38:14:21:49:b4:fd:d5:01:a4:96:f1:1c:05:af: 96:88:37:d8:a4:19:4b:9e:4e:2f:3f:88:57:28:38:db:8b:6f: 29:6f:44:53:d4:6a:9d:af:bd:83:45:0e:85:7b:ab:7e:81:47: e5:fe:5b:f3:86:bb:59:b0:9c:aa:aa:83:46:93:c8:b1:b9:23: 56:ff:d4:1e:a9:b3:7d:a7:fa:f1:3b:32:a3:77:91:d8:32:46: 7e:90:34:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTSMWSsZnQ2+RJOfRAR7FHfEo94cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNkRBOUZBMUNGN0UzMTJBQUY3NzIxRUQxNTM4NEUw NjNBRTJFMjAeFw0yNTExMDUwMjE5NDNaFw0yNTExMDYwNDM0NDNaMDMxMTAvBgNV BAMTKDQ2MTBDQzBBRTZFRjZEMUU4MzMyRTUxM0UwMTZFMDA0MTVENEQ5MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuHCadHmq8nOutXkoJ3m6uvUyY qKAjFuFmSF6nMEwGv9gHDwOOwVgWinsPrKTzbR8qvPhhAaChmZ8j8QxG7KdiEwyR V7cC4TznM3MtBAL8yKz6M217P+a0ohTxSoh11fk+qhRyoHLbfikTT3U9ldWeCyQg h3GRvG9QkELBQ6RsLt/iID46Z5lNdLPlMW4FZ00JDxeXM1menclBx925j9zfNg98 22JTaaDgsuhjh2rsKpeughdPUg3yCuIYKnOAIpCXBZLctl4cJlDNsiq0DJMt8bhm pcwNPg2uZCLss3Q1+it2w7egUav0EllGKT5xEzUnYNmIx+XoD7g2WhT8t8i9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURhDMCubvbR6DMuUT4BbgBBXU2SMwHwYDVR0j BBgwFoAUNTban6HPfjEqr3ch7RU4TgY64uIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0g5UUN4MkhBem1VZ240WHk3aW5uZERtMmZETHl1RUhtcW53NzRSdXdE aDgvMS8zNTM2REE5RkExQ0Y3RTMxMkFBRjc3MjFFRDE1Mzg0RTA2M0FFMkUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1MzZEQTlGQTFDRjdFMzEy QUFGNzcyMUVEMTUzODRFMDYzQUUyRTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0g5UUN4MkhBem1VZ240WHk3aW5uZERtMmZETHl1RUhtcW53NzRSdXdEaDgvMS8z NTM2REE5RkExQ0Y3RTMxMkFBRjc3MjFFRDE1Mzg0RTA2M0FFMkUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOb5jZBRnhieWa+sOdWx+uW9iysdkdZJ/ewUsrpvRhYDl2TJpXKVJHE0NfVCs OFlAd7MJnkKmTfgXft72WVwgt9z/XBg7DovFJrjDH49nZyPcxUIZ3Ww8RcF+8AXJ cUg1fYHX0ma3zzUvqW2yNIDDGuzyN9/fvTZL4DGeNLEjCt4+Pe11IdiyNhz3VIRP W0oLaNbmAx65WRWFBLNfIKeUFl34N1yz9DgUIUm0/dUBpJbxHAWvlog32KQZS55O Lz+IVyg424tvKW9EU9Rqna+9g0UOhXurfoFH5f5b84a7WbCcqqqDRpPIsbkjVv/U Hqmzfaf68Tsyo3eR2DJGfpA0wA== -----END CERTIFICATE-----Generated at Wed Nov 5 04:47:24 2025 by rpki-client