$ rpki-client -vvf rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft File: C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft (raw, json) Hash identifier: wLBjiFKFziHsPs5yDyGZJl0DhnYM1nX9VdkKLOBLfEc= Subject key identifier: 57:53:8D:5B:BC:D1:69:3D:8B:0E:4E:13:32:D6:E4:41:99:4F:28:35 Authority key identifier: C3:4B:76:AE:7A:49:F1:4A:5E:CE:69:B2:E0:67:E9:4E:0A:2E:BB:B1 Certificate issuer: /CN=C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1 Certificate serial: 37F0D3F3346F1C4F56F7DCBBCA0D293070B137D8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer Subject info access: rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft Manifest number: 6F Signing time: Tue 04 Nov 2025 10:17:14 +0000 Manifest this update: Tue 04 Nov 2025 10:12:14 +0000 Manifest next update: Wed 05 Nov 2025 13:07:14 +0000 Files and hashes: 1: 323830343a383734303a3a2f33322d313238203d3e203532393036.roa (hash: kfImCG2TW2PZqgdH+xcKUqqX56025AHMhP+JY16ulkg=) 2: C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl (hash: 0RrcxzoX+rqGMqZgoneGGSZd+Y1aP/uRLYpWyfiCNWM=) 3: 3137372e32332e35362e302f32312d3332203d3e20313938393439.roa (hash: mv3/jFMH/WFk97h2YglLXFAx04FlpcG2tngzh8QwfNw=) 4: 3137372e32332e35362e302f32312d3332203d3e203532393036.roa (hash: jrnwbKnlRj9X3EB+DFy9Z/5ZbRMcHXbOntOJWDZ8eCc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 13:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:f0:d3:f3:34:6f:1c:4f:56:f7:dc:bb:ca:0d:29:30:70:b1:37:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1 Validity Not Before: Nov 4 10:12:14 2025 GMT Not After : Nov 5 13:07:14 2025 GMT Subject: CN=57538D5BBCD1693D8B0E4E1332D6E441994F2835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2e:e2:d3:d3:6a:76:c7:6a:73:59:8c:ea:05: c9:08:e2:a5:6f:25:ae:0c:8a:4b:87:bb:39:c8:46: 6f:bb:c6:1a:f0:b7:5f:8c:88:4b:7d:61:ec:6b:28: b0:36:54:8c:d3:10:c0:51:8b:c2:0f:0b:63:00:58: 47:6c:d6:5d:3d:b7:4c:a6:e3:13:7f:d9:23:92:bc: bf:49:e9:db:ad:99:5d:87:04:7a:57:19:fe:c0:70: 46:9d:a6:da:1c:bc:b3:79:dc:ff:f3:c8:f2:01:27: 4e:58:37:30:95:20:61:1f:07:46:ea:09:72:45:70: 11:72:6b:8e:78:05:58:f1:55:56:0d:09:d5:1a:dc: c4:e2:05:0b:52:fb:d1:2d:a5:9d:d6:8a:7e:6b:9e: c8:7b:fd:8e:03:77:20:56:6b:d7:d8:72:52:aa:99: a7:06:c1:9b:3b:06:81:12:72:25:fe:d6:89:5a:13: fc:d2:a4:1a:56:30:c7:b7:d9:3a:2d:cb:74:45:84: 55:da:50:d3:b5:62:d5:21:54:22:ed:3d:26:4c:56: 65:c4:40:86:6d:7c:7c:50:73:eb:c9:f1:12:ae:b6: e6:c0:1f:2e:fa:c1:5b:27:1c:2e:54:f4:c5:a6:63: 71:ca:f3:38:3c:bb:c8:e8:ff:f5:73:43:f4:d8:3b: a8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:53:8D:5B:BC:D1:69:3D:8B:0E:4E:13:32:D6:E4:41:99:4F:28:35 X509v3 Authority Key Identifier: keyid:C3:4B:76:AE:7A:49:F1:4A:5E:CE:69:B2:E0:67:E9:4E:0A:2E:BB:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:12:ef:24:88:be:87:3c:ce:83:a4:69:e6:ef:0f:64:86:76: c9:d5:a1:6b:03:df:95:ea:08:9b:2d:f0:06:4f:c5:ee:d7:83: 89:26:65:e3:88:5c:96:ac:20:9b:24:05:33:87:17:f6:83:60: 67:90:79:68:bb:2f:da:63:3d:59:d5:33:d7:6f:17:74:08:37: f1:17:99:a6:3f:c2:79:f6:71:e4:ff:d1:26:2a:28:68:91:95: 80:cd:bb:12:9c:8f:5b:e4:0b:14:17:f0:fe:f6:a9:90:89:3f: e3:b7:c1:6e:5f:6b:1c:18:03:63:99:42:60:e2:c1:e0:37:7f: 50:68:90:1e:a9:e6:c1:f3:9e:24:19:d7:b0:0f:2c:73:f1:dd: 59:43:8e:69:84:88:8f:8d:5d:d8:55:08:53:1c:ce:c9:41:5e: 1c:c1:6c:28:90:08:67:a1:ca:24:7e:05:0c:2e:ce:9b:29:87: 22:4a:77:ab:b3:a6:40:55:35:45:ab:d8:04:8b:3b:95:a7:de: 7f:30:c4:08:00:b4:ad:f2:7a:be:96:99:1e:fb:c4:37:12:eb: 0a:2e:8b:aa:2e:4f:78:39:38:0c:3e:b4:55:72:5e:b8:48:aa: ee:15:3f:bc:a3:cb:e0:f1:4b:22:67:0c:7a:3a:a7:eb:c6:20: d6:b2:fd:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN/DT8zRvHE9W99y7yg0pMHCxN9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM0Qjc2QUU3QTQ5RjE0QTVFQ0U2OUIyRTA2N0U5NEUw QTJFQkJCMTAeFw0yNTExMDQxMDEyMTRaFw0yNTExMDUxMzA3MTRaMDMxMTAvBgNV BAMTKDU3NTM4RDVCQkNEMTY5M0Q4QjBFNEUxMzMyRDZFNDQxOTk0RjI4MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLuLT02p2x2pzWYzqBckI4qVv Ja4MikuHuznIRm+7xhrwt1+MiEt9YexrKLA2VIzTEMBRi8IPC2MAWEds1l09t0ym 4xN/2SOSvL9J6dutmV2HBHpXGf7AcEadptocvLN53P/zyPIBJ05YNzCVIGEfB0bq CXJFcBFya454BVjxVVYNCdUa3MTiBQtS+9EtpZ3Win5rnsh7/Y4DdyBWa9fYclKq macGwZs7BoESciX+1olaE/zSpBpWMMe32Toty3RFhFXaUNO1YtUhVCLtPSZMVmXE QIZtfHxQc+vJ8RKutubAHy76wVsnHC5U9MWmY3HK8zg8u8jo//VzQ/TYO6hRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUV1ONW7zRaT2LDk4TMtbkQZlPKDUwHwYDVR0j BBgwFoAUw0t2rnpJ8Upezmmy4GfpTgouu7EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2pYMWsyQWZ1ZlFTVmdhbjVIQlVjYUxad0FRYm1UaUJTUjhUdkR1WVo2 OGsvMC9DMzRCNzZBRTdBNDlGMTRBNUVDRTY5QjJFMDY3RTk0RTBBMkVCQkIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzNEI3NkFFN0E0OUYxNEE1 RUNFNjlCMkUwNjdFOTRFMEEyRUJCQjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2pYMWsyQWZ1ZlFTVmdhbjVIQlVjYUxad0FRYm1UaUJTUjhUdkR1WVo2OGsvMC9D MzRCNzZBRTdBNDlGMTRBNUVDRTY5QjJFMDY3RTk0RTBBMkVCQkIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlxLvJIi+hzzOg6Rp5u8PZIZ2ydWhawPfleoImy3wBk/F7teDiSZl44hclqwg myQFM4cX9oNgZ5B5aLsv2mM9WdUz128XdAg38ReZpj/CefZx5P/RJiooaJGVgM27 EpyPW+QLFBfw/vapkIk/47fBbl9rHBgDY5lCYOLB4Dd/UGiQHqnmwfOeJBnXsA8s c/HdWUOOaYSIj41d2FUIUxzOyUFeHMFsKJAIZ6HKJH4FDC7OmymHIkp3q7OmQFU1 RavYBIs7lafefzDECAC0rfJ6vpaZHvvENxLrCi6Lqi5PeDk4DD60VXJeuEiq7hU/ vKPL4PFLImcMejqn68Yg1rL9jw== -----END CERTIFICATE-----Generated at Wed Nov 5 02:13:47 2025 by rpki-client