$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft File: 38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft (raw, json) Hash identifier: ScKfFZNRx5jIQcYYs0F82q5xfiYTXmwD0zg4njkQIoU= Subject key identifier: 86:A8:60:74:7F:A5:3E:E1:F2:DD:93:8A:50:89:85:A3:19:CD:52:B0 Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3 Certificate issuer: /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3 Certificate serial: 64D530C0322FF7F2DA5CE6C4F2DCB4EF104FDCB4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft Manifest number: 0309 Signing time: Tue 04 Nov 2025 15:04:38 +0000 Manifest this update: Tue 04 Nov 2025 14:59:38 +0000 Manifest next update: Wed 05 Nov 2025 15:16:38 +0000 Files and hashes: 1: 323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa (hash: u9fwuwlcVlrLUEDLWvJsUdw6PZpcbu5LujjwqTVS6zs=) 2: 3136342e3136332e32332e302f32342d3234203d3e20323635393335.roa (hash: xPngmDYkRZ0N4BgFGzfITwtVOSvC5t5MiTn/0VX+8Fs=) 3: 3136342e3136332e32322e302f32342d3234203d3e20323635393335.roa (hash: 35z3e246Z+fyO5X/GtPsgCr1RalEayMlVcqQWqIJGxc=) 4: 323830343a343031633a3a2f33342d3334203d3e20323635393335.roa (hash: Sahl2RiuVTohechxqH9kEgIw0rbG9MfR6lFxaweqFQI=) 5: 323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa (hash: K6hKgjGHS2JMsgie2uti/OK2EXoaH1YdGKcx614Q77c=) 6: 3136342e3136332e32302e302f32332d3234203d3e20323635393335.roa (hash: wg2cqsCgcZbAdOFn10mzbSUzdoDtdWxiDjUxBp/NKqA=) 7: 38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl (hash: B61ekl4tXibzkVXF/enTSGIsnEyKXvjEGu8DnsyrU0A=) 8: 323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa (hash: 3triGDE1ZxhPAnqJadqRcQb4fDCJ1Pqb6fzxF7HMxXo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 15:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:d5:30:c0:32:2f:f7:f2:da:5c:e6:c4:f2:dc:b4:ef:10:4f:dc:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3 Validity Not Before: Nov 4 14:59:38 2025 GMT Not After : Nov 5 15:16:38 2025 GMT Subject: CN=86A860747FA53EE1F2DD938A508985A319CD52B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2d:2d:62:21:96:6b:f0:53:eb:ac:c7:4a:dd: 6d:40:dc:b8:59:6f:5d:1b:4c:95:74:b3:24:c1:6e: a8:bb:38:a4:dd:66:a9:1c:29:45:04:fe:93:c3:0c: 32:48:a0:98:f7:fb:68:17:90:9a:ef:fb:40:63:0c: c9:8d:11:92:28:ca:1e:f3:36:6f:c9:6e:c7:e6:11: 1c:9a:91:64:13:76:d0:f6:81:68:2a:f6:6c:0f:60: 7b:34:2a:3c:ac:e5:38:91:bf:24:51:a5:25:34:6d: 39:12:90:ff:d1:ba:a6:43:a3:fd:5f:86:2a:de:e8: 0e:a3:7b:e0:f0:98:ec:73:ef:7e:5a:1a:eb:5e:0a: 5e:9c:39:e3:50:9a:04:d6:c2:1b:55:4e:3e:24:9d: 2a:08:af:83:27:1b:55:ea:54:bf:e0:67:c0:02:b3: 9d:18:06:76:1f:04:40:ac:1d:0d:3e:87:5b:6d:4e: 12:02:62:9d:88:78:18:c7:10:85:45:ac:55:91:47: 73:d4:07:b8:30:ee:87:42:d7:be:cb:58:75:5c:a3: 65:5f:46:0b:97:e9:0d:d5:eb:22:d5:d9:0a:6f:8d: 1d:59:da:1b:4d:be:9b:dd:b8:50:d5:82:9b:1f:12: 63:b2:6b:33:b7:9c:cb:8e:ad:f9:52:6e:f4:ad:d6: c3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A8:60:74:7F:A5:3E:E1:F2:DD:93:8A:50:89:85:A3:19:CD:52:B0 X509v3 Authority Key Identifier: keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c6:c3:bf:4a:fe:e9:fd:35:68:d1:3f:a6:7d:7d:76:ce:ab: df:7b:12:eb:29:ef:ed:48:f9:8f:02:f6:cb:bd:69:80:dd:a6: 20:c5:a9:c6:63:75:5d:40:03:d2:e5:bf:7a:32:50:0c:2e:0f: 52:ca:53:b3:9c:6e:a6:23:6e:2b:bc:50:44:f5:d0:b9:ae:f5: ef:2e:65:5f:1e:e0:aa:b5:27:08:79:82:2c:72:eb:5b:cf:65: bb:42:fb:7a:e1:76:5a:b7:51:e8:3b:52:ad:bd:56:71:e0:29: 99:34:c2:e7:60:88:50:eb:98:37:af:0f:29:31:af:7f:ea:5a: 3b:6e:6b:0d:15:32:c7:c2:7f:7a:06:75:00:d2:ab:79:30:cb: 05:5e:d9:5d:59:66:00:e0:4d:68:07:fc:79:0b:cd:0b:f0:be: d8:0d:1f:cc:30:c2:50:e0:17:ad:ab:ff:47:4d:63:29:1b:33: a5:f8:ea:46:be:cc:44:85:8e:16:95:78:cd:da:0b:d7:0c:02: d9:50:98:17:af:72:a9:21:94:fd:55:bc:b7:58:00:25:50:09: 1b:5c:6e:ef:75:48:ab:89:5a:70:e9:2d:a7:96:8e:80:4f:2c: 24:e7:72:b5:b4:f7:5f:15:c5:7c:6b:1e:cc:18:94:ec:83:ec: ff:1f:0b:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZNUwwDIv9/LaXObE8ty07xBP3LQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGM0JFQUM1NzVENkI2N0JGMkYyODYzMjhDNjgwQzQ0 NjdGNUJEMzAeFw0yNTExMDQxNDU5MzhaFw0yNTExMDUxNTE2MzhaMDMxMTAvBgNV BAMTKDg2QTg2MDc0N0ZBNTNFRTFGMkREOTM4QTUwODk4NUEzMTlDRDUyQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLS1iIZZr8FPrrMdK3W1A3LhZ b10bTJV0syTBbqi7OKTdZqkcKUUE/pPDDDJIoJj3+2gXkJrv+0BjDMmNEZIoyh7z Nm/JbsfmERyakWQTdtD2gWgq9mwPYHs0Kjys5TiRvyRRpSU0bTkSkP/RuqZDo/1f hire6A6je+DwmOxz735aGuteCl6cOeNQmgTWwhtVTj4knSoIr4MnG1XqVL/gZ8AC s50YBnYfBECsHQ0+h1ttThICYp2IeBjHEIVFrFWRR3PUB7gw7odC177LWHVco2Vf RguX6Q3V6yLV2QpvjR1Z2htNvpvduFDVgpsfEmOyazO3nMuOrflSbvSt1sPjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhqhgdH+lPuHy3ZOKUImFoxnNUrAwHwYDVR0j BBgwFoAUOPO+rFdda2e/LyhjKMaAxEZ/W9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2I3YmVad0xiVGpUQjNHUFJ0Qmh6TVJ6V3hFbllNQllHVk1BdHNFendQ NmovMS8zOEYzQkVBQzU3NUQ2QjY3QkYyRjI4NjMyOEM2ODBDNDQ2N0Y1QkQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RjNCRUFDNTc1RDZCNjdC RjJGMjg2MzI4QzY4MEM0NDY3RjVCRDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2I3YmVad0xiVGpUQjNHUFJ0Qmh6TVJ6V3hFbllNQllHVk1BdHNFendQNmovMS8z OEYzQkVBQzU3NUQ2QjY3QkYyRjI4NjMyOEM2ODBDNDQ2N0Y1QkQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg8bDv0r+6f01aNE/pn19ds6r33sS6ynv7Uj5jwL2y71pgN2mIMWpxmN1XUAD 0uW/ejJQDC4PUspTs5xupiNuK7xQRPXQua717y5lXx7gqrUnCHmCLHLrW89lu0L7 euF2WrdR6DtSrb1WceApmTTC52CIUOuYN68PKTGvf+paO25rDRUyx8J/egZ1ANKr eTDLBV7ZXVlmAOBNaAf8eQvNC/C+2A0fzDDCUOAXrav/R01jKRszpfjqRr7MRIWO FpV4zdoL1wwC2VCYF69yqSGU/VW8t1gAJVAJG1xu73VIq4lacOktp5aOgE8sJOdy tbT3XxXFfGsezBiU7IPs/x8Lhg== -----END CERTIFICATE-----Generated at Wed Nov 5 07:52:39 2025 by rpki-client