$ rpki-client -vvf rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/F3A58196CD0A4AD290F3F47F168D539B895B28A6.mft File: F3A58196CD0A4AD290F3F47F168D539B895B28A6.mft (raw, json) Hash identifier: NsgdmiqiyuwinyoxcVXT1qqCs02DMUzINV8pt2cu57o= Subject key identifier: A9:39:85:24:84:EF:28:00:6E:C8:05:FC:09:E7:BC:3F:30:8F:83:50 Authority key identifier: F3:A5:81:96:CD:0A:4A:D2:90:F3:F4:7F:16:8D:53:9B:89:5B:28:A6 Certificate issuer: /CN=F3A58196CD0A4AD290F3F47F168D539B895B28A6 Certificate serial: 217242B424890F472033EE25A971789023EB5D7C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3A58196CD0A4AD290F3F47F168D539B895B28A6.cer Subject info access: rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/F3A58196CD0A4AD290F3F47F168D539B895B28A6.mft Manifest number: 0139 Signing time: Wed 05 Nov 2025 08:12:15 +0000 Manifest this update: Wed 05 Nov 2025 08:07:15 +0000 Manifest next update: Thu 06 Nov 2025 11:55:15 +0000 Files and hashes: 1: F3A58196CD0A4AD290F3F47F168D539B895B28A6.crl (hash: jAm9kK5GP5r8bUrpvfS770UtcIaQ8IOBinZydKkzxDQ=) 2: 3137302e3233312e3134302e302f32322d3234203d3e203631353832.roa (hash: LQzmGjYduSHqSQu7L41QEu/Ces5GLX2Hai9I3VYto9M=) 3: 3133382e39392e3136382e302f32322d3234203d3e203631353832.roa (hash: 8F4vHq720JUJiE/oMp9TfoWjhYydHW9Js7dZdgA/F2Q=) 4: 323830343a333234383a3a2f33322d3438203d3e203631353832.roa (hash: 6cGqxAJyFs/ef/5Scq35NoTtQ9ZBlPGKbl+DG0ikhtg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/F3A58196CD0A4AD290F3F47F168D539B895B28A6.crl rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/F3A58196CD0A4AD290F3F47F168D539B895B28A6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3A58196CD0A4AD290F3F47F168D539B895B28A6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 11:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:72:42:b4:24:89:0f:47:20:33:ee:25:a9:71:78:90:23:eb:5d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3A58196CD0A4AD290F3F47F168D539B895B28A6 Validity Not Before: Nov 5 08:07:15 2025 GMT Not After : Nov 6 11:55:15 2025 GMT Subject: CN=A939852484EF28006EC805FC09E7BC3F308F8350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:47:20:62:f9:39:95:a2:10:0c:1e:33:75:40: 76:5c:70:97:46:f5:eb:81:2c:e6:cc:31:e8:6f:1a: 30:88:3a:c0:d3:d5:16:75:e7:19:90:f1:9b:a7:b8: af:f5:b3:c3:5a:4c:9f:1d:10:42:2d:15:84:1b:c4: 2f:6d:1d:f0:e2:58:a0:bc:6d:35:2a:85:75:6c:d9: da:f9:65:a3:25:69:dc:ae:4c:d0:66:d6:0c:a4:1a: 30:67:f9:f3:4f:66:11:b4:0e:6a:fa:34:33:10:60: 36:ad:75:ef:82:40:3d:aa:5b:01:7f:81:21:e5:8a: 28:8f:06:7f:69:c1:df:a0:77:38:76:20:d7:a5:e9: 4a:4d:2e:32:50:d8:5a:04:51:cc:22:36:aa:ac:4c: f8:17:88:86:7b:9b:d7:34:20:48:c2:07:42:d0:bf: 08:d2:76:96:d9:07:a7:57:a2:83:ad:29:74:8c:93: 94:d5:bd:69:5a:32:03:4e:ca:37:e3:a9:65:69:58: da:a5:31:ba:58:27:e4:da:54:e4:a2:18:6a:67:00: 65:93:b6:d8:f3:e4:24:26:02:70:64:e6:44:0d:be: eb:28:3e:46:37:8b:a7:ac:12:22:c0:93:5c:0c:cd: f7:1b:49:1d:96:6d:78:bc:75:dc:86:71:ba:b8:51: 48:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:39:85:24:84:EF:28:00:6E:C8:05:FC:09:E7:BC:3F:30:8F:83:50 X509v3 Authority Key Identifier: keyid:F3:A5:81:96:CD:0A:4A:D2:90:F3:F4:7F:16:8D:53:9B:89:5B:28:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/F3A58196CD0A4AD290F3F47F168D539B895B28A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3A58196CD0A4AD290F3F47F168D539B895B28A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/F3A58196CD0A4AD290F3F47F168D539B895B28A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:2a:89:d7:c2:ae:23:8b:f3:2e:ca:b4:d0:a9:e1:a1:84:0c: 52:c9:60:61:e8:76:83:a8:5a:34:31:79:80:2b:d9:4f:28:a3: 4e:65:93:4c:98:f8:af:23:2b:de:b0:a3:22:d4:94:c8:53:90: ec:d2:2d:fd:8f:94:9f:fd:49:99:76:a7:96:51:65:85:13:c2: d2:27:45:dc:03:7c:85:28:c9:53:64:9f:0a:34:15:31:9e:8e: 14:0c:9c:ac:cf:97:5a:51:a4:f8:aa:f0:7c:44:2b:40:dc:90: 9a:2b:99:6e:25:81:f6:b8:c6:55:6b:c8:fd:e7:98:56:6a:1b: 75:58:4a:09:e2:48:ae:bd:55:8a:70:aa:59:fb:d3:cc:f5:7d: ee:da:26:83:05:81:87:94:e5:28:77:a2:e4:b8:58:b6:a8:03: 56:e4:ee:97:90:0f:5f:fe:78:ba:9e:e3:e2:ef:13:2c:17:f6: 83:ba:69:ab:3f:3f:66:8f:95:03:8b:fa:ca:49:3d:6c:11:7c: 4f:7c:90:e7:6e:85:2d:51:f0:30:54:57:89:9f:f2:ff:52:03: a4:7e:46:fc:a8:08:8b:a1:99:a1:8e:05:d1:f9:95:2e:52:47: 63:0d:67:3d:85:26:80:ad:a0:98:79:a2:12:3a:3f:52:25:63: 94:9e:8e:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIXJCtCSJD0cgM+4lqXF4kCPrXXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBNTgxOTZDRDBBNEFEMjkwRjNGNDdGMTY4RDUzOUI4 OTVCMjhBNjAeFw0yNTExMDUwODA3MTVaFw0yNTExMDYxMTU1MTVaMDMxMTAvBgNV BAMTKEE5Mzk4NTI0ODRFRjI4MDA2RUM4MDVGQzA5RTdCQzNGMzA4RjgzNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPRyBi+TmVohAMHjN1QHZccJdG 9euBLObMMehvGjCIOsDT1RZ15xmQ8ZunuK/1s8NaTJ8dEEItFYQbxC9tHfDiWKC8 bTUqhXVs2dr5ZaMladyuTNBm1gykGjBn+fNPZhG0Dmr6NDMQYDatde+CQD2qWwF/ gSHliiiPBn9pwd+gdzh2INel6UpNLjJQ2FoEUcwiNqqsTPgXiIZ7m9c0IEjCB0LQ vwjSdpbZB6dXooOtKXSMk5TVvWlaMgNOyjfjqWVpWNqlMbpYJ+TaVOSiGGpnAGWT ttjz5CQmAnBk5kQNvusoPkY3i6esEiLAk1wMzfcbSR2WbXi8ddyGcbq4UUjZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqTmFJITvKABuyAX8Cee8PzCPg1AwHwYDVR0j BBgwFoAU86WBls0KStKQ8/R/Fo1Tm4lbKKYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFRnYjkzV2ZYYUxraXVoSHNiNGNZczNieTMyWW5mck5idnVMZk11WWl5 YjIvMC9GM0E1ODE5NkNEMEE0QUQyOTBGM0Y0N0YxNjhENTM5Qjg5NUIyOEE2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzQTU4MTk2Q0QwQTRBRDI5 MEYzRjQ3RjE2OEQ1MzlCODk1QjI4QTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFRnYjkzV2ZYYUxraXVoSHNiNGNZczNieTMyWW5mck5idnVMZk11WWl5YjIvMC9G M0E1ODE5NkNEMEE0QUQyOTBGM0Y0N0YxNjhENTM5Qjg5NUIyOEE2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvCqJ18KuI4vzLsq00KnhoYQMUslgYeh2g6haNDF5gCvZTyijTmWTTJj4ryMr 3rCjItSUyFOQ7NIt/Y+Un/1JmXanllFlhRPC0idF3AN8hSjJU2SfCjQVMZ6OFAyc rM+XWlGk+KrwfEQrQNyQmiuZbiWB9rjGVWvI/eeYVmobdVhKCeJIrr1VinCqWfvT zPV97tomgwWBh5TlKHei5LhYtqgDVuTul5APX/54up7j4u8TLBf2g7ppqz8/Zo+V A4v6ykk9bBF8T3yQ526FLVHwMFRXiZ/y/1IDpH5G/KgIi6GZoY4F0fmVLlJHYw1n PYUmgK2gmHmiEjo/UiVjlJ6ObA== -----END CERTIFICATE-----Generated at Wed Nov 5 23:50:30 2025 by rpki-client