$ rpki-client -vvf rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft File: 3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft (raw, json) Hash identifier: AscbH0y1lLTPO+AUntt7honTaSJPUxMk2rNTHsOxVgg= Subject key identifier: E2:A1:11:8A:3C:14:3E:7A:7A:96:21:A8:ED:D2:6F:51:88:6C:F1:D6 Authority key identifier: 3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E Certificate issuer: /CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E Certificate serial: 4D390A8C5AA9439886C7D4C916E34B7371DE6166 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer Subject info access: rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft Manifest number: 017A Signing time: Tue 04 Nov 2025 19:57:12 +0000 Manifest this update: Tue 04 Nov 2025 19:52:12 +0000 Manifest next update: Wed 05 Nov 2025 20:24:12 +0000 Files and hashes: 1: 3138392e35302e3232302e302f32322d3232203d3e20323730353531.roa (hash: AX9jQRnpyOWBuTJjKmVSaEOA2ZYYCjSkvfBgQQ9WXbA=) 2: 3138392e35302e3232322e302f32342d3234203d3e20323730353531.roa (hash: UsQOMyZHtsc6TaHqA0joIAL0Xfjc2PpvhLLL00pQDVA=) 3: 323830343a366462383a3a2f33322d3332203d3e20323730353531.roa (hash: FV+S+TZX84Q03vR1jKTgDhNyXgTv5smpg9WGAeALcHM=) 4: 3138392e35302e3232312e302f32342d3234203d3e20323730353531.roa (hash: a5PrF0/f461Ynit6WvECovL5BWmEJeQoBlDUQq7HxQo=) 5: 3138392e35302e3232302e302f32342d3234203d3e20323730353531.roa (hash: XIK3trgOduFvYXpauvrEY/zSl++zplK4JsYkuaGD2gw=) 6: 3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl (hash: XmFWfRTghUXH7JWjojd7pMiaoAXrT4P6Z7B0wlJSDRg=) 7: 3138392e35302e3232332e302f32342d3234203d3e20323730353531.roa (hash: tg53L27JqwL4FND+rLzsbtuLYRRo/BSqrNhOQnodd2w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:39:0a:8c:5a:a9:43:98:86:c7:d4:c9:16:e3:4b:73:71:de:61:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E Validity Not Before: Nov 4 19:52:12 2025 GMT Not After : Nov 5 20:24:12 2025 GMT Subject: CN=E2A1118A3C143E7A7A9621A8EDD26F51886CF1D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fa:e5:da:49:7c:6e:ac:09:b6:97:71:bb:f5: c3:fd:ab:c4:a7:c8:9e:fa:aa:00:ad:ca:47:56:fa: 18:69:ee:a0:84:ce:9f:27:21:7b:82:49:9c:5e:02: 4f:39:c9:eb:cf:7d:aa:e6:18:41:44:5d:7e:a8:fa: 31:e9:35:94:28:78:22:13:94:5d:2b:d4:f4:3d:65: 5a:ce:f7:89:8d:de:7f:71:95:77:63:4f:21:a7:80: 67:f5:1e:d6:90:c7:40:e2:3d:f8:a1:62:3b:3d:a0: 5e:a1:e0:c9:f7:8d:ce:ca:91:2f:96:8a:9e:9b:86: c9:6e:4a:77:05:8a:c1:a6:29:7e:f4:7d:eb:40:d1: cb:c7:68:af:37:5b:6f:9a:83:84:6e:87:01:00:e7: 2c:e9:78:2b:3f:d6:b0:55:12:3a:d3:34:bc:07:6e: d0:cf:0f:67:a9:8f:bd:d2:88:de:f1:61:cc:9f:19: fb:6a:e3:0d:bd:fc:e2:04:b9:a6:e5:4a:24:67:fa: aa:a5:0b:25:5a:f5:64:b3:8b:f0:1d:40:d3:81:b5: 26:9f:af:ad:fd:c8:95:d2:55:7b:33:00:3b:95:db: 9e:71:59:63:9a:50:36:0a:eb:f2:a2:4e:02:ad:df: 1e:5b:6c:39:77:1d:b6:c5:33:4d:11:3d:e1:7d:8d: 29:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A1:11:8A:3C:14:3E:7A:7A:96:21:A8:ED:D2:6F:51:88:6C:F1:D6 X509v3 Authority Key Identifier: keyid:3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:d1:6f:eb:1f:4c:a9:9a:5e:02:83:fb:8d:c0:10:66:58:3a: b1:b4:6c:3d:9a:ae:3f:9c:61:75:8c:75:1e:d1:e8:8a:54:49: 51:d0:31:3c:e9:9e:ef:0a:21:0e:21:29:23:c8:eb:56:22:fe: e7:28:fd:0b:b6:11:9b:b2:88:bf:ea:76:b1:02:b3:e0:59:1e: 3e:05:a8:18:34:a4:22:90:8f:3e:0d:8e:e5:82:25:01:e2:a5: ea:2f:99:47:db:9b:88:c5:28:70:0e:43:74:0c:25:9a:01:7a: c1:05:d5:ba:c0:ca:7c:41:56:ee:ce:9e:7c:5d:8e:75:16:8a: d1:6b:a1:6f:7c:04:1d:f4:10:4d:ee:28:94:d7:73:19:4d:70: 43:0c:af:73:58:2f:75:9c:11:1b:a2:bd:12:6c:7b:a1:85:7c: 97:80:d0:1c:af:ca:c0:26:b3:a2:ae:f2:0b:da:a3:64:e1:d9: ac:33:38:ce:6a:66:0a:a9:ce:fd:e0:72:11:a3:4a:ea:8f:c1: 34:2c:84:47:ce:25:bf:b8:72:d2:df:87:81:43:95:03:cf:23: e1:37:39:d5:87:06:11:64:1a:d7:fb:e4:07:5c:cc:f6:0c:6c: 2e:39:b7:1e:d5:b8:44:e4:7c:0c:9d:27:1a:15:59:48:01:f9: 07:8d:70:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTTkKjFqpQ5iGx9TJFuNLc3HeYWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QyQTFBMDk0MjQ1RDQwNzQ3NEY5MzE4NkNFM0YyNUZG QkJFRTU5RTAeFw0yNTExMDQxOTUyMTJaFw0yNTExMDUyMDI0MTJaMDMxMTAvBgNV BAMTKEUyQTExMThBM0MxNDNFN0E3QTk2MjFBOEVERDI2RjUxODg2Q0YxRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8+uXaSXxurAm2l3G79cP9q8Sn yJ76qgCtykdW+hhp7qCEzp8nIXuCSZxeAk85yevPfarmGEFEXX6o+jHpNZQoeCIT lF0r1PQ9ZVrO94mN3n9xlXdjTyGngGf1HtaQx0DiPfihYjs9oF6h4Mn3jc7KkS+W ip6bhsluSncFisGmKX70fetA0cvHaK83W2+ag4RuhwEA5yzpeCs/1rBVEjrTNLwH btDPD2epj73SiN7xYcyfGftq4w29/OIEuablSiRn+qqlCyVa9WSzi/AdQNOBtSaf r639yJXSVXszADuV255xWWOaUDYK6/KiTgKt3x5bbDl3HbbFM00RPeF9jSmNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4qERijwUPnp6liGo7dJvUYhs8dYwHwYDVR0j BBgwFoAUPSoaCUJF1AdHT5MYbOPyX/u+5Z4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEM1dDNWbXI5ajdheDFBWEdLMXVzd1FHeHREcXlaVGtMRk1MZ1puVGNu UmcvMC8zRDJBMUEwOTQyNDVENDA3NDc0RjkzMTg2Q0UzRjI1RkZCQkVFNTlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEMkExQTA5NDI0NUQ0MDc0 NzRGOTMxODZDRTNGMjVGRkJCRUU1OUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEM1dDNWbXI5ajdheDFBWEdLMXVzd1FHeHREcXlaVGtMRk1MZ1puVGNuUmcvMC8z RDJBMUEwOTQyNDVENDA3NDc0RjkzMTg2Q0UzRjI1RkZCQkVFNTlFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArNFv6x9MqZpeAoP7jcAQZlg6sbRsPZquP5xhdYx1HtHoilRJUdAxPOme7woh DiEpI8jrViL+5yj9C7YRm7KIv+p2sQKz4FkePgWoGDSkIpCPPg2O5YIlAeKl6i+Z R9ubiMUocA5DdAwlmgF6wQXVusDKfEFW7s6efF2OdRaK0Wuhb3wEHfQQTe4olNdz GU1wQwyvc1gvdZwRG6K9Emx7oYV8l4DQHK/KwCazoq7yC9qjZOHZrDM4zmpmCqnO /eByEaNK6o/BNCyER84lv7hy0t+HgUOVA88j4Tc51YcGEWQa1/vkB1zM9gxsLjm3 HtW4ROR8DJ0nGhVZSAH5B41wqg== -----END CERTIFICATE-----Generated at Wed Nov 5 10:00:28 2025 by rpki-client