$ rpki-client -vvf rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft File: 3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft (raw, json) Hash identifier: 3j75Qw1a0pooXjJiaVnohCwDvFQsCL+cqpBV3B8+9WM= Subject key identifier: 1F:04:C3:5D:F2:F4:55:65:74:BB:9E:50:CC:69:24:71:7E:83:AC:A6 Authority key identifier: 3D:45:19:C7:76:9E:08:9F:7D:05:32:70:03:C6:A5:0E:92:B8:C0:B8 Certificate issuer: /CN=3D4519C7769E089F7D05327003C6A50E92B8C0B8 Certificate serial: 563D7F77CD5280647B7E46C86F5468A958B66B3F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4519C7769E089F7D05327003C6A50E92B8C0B8.cer Subject info access: rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft Manifest number: 21 Signing time: Tue 04 Nov 2025 10:08:56 +0000 Manifest this update: Tue 04 Nov 2025 10:03:56 +0000 Manifest next update: Wed 05 Nov 2025 13:33:56 +0000 Files and hashes: 1: 3137372e3138352e3234302e302f32302d3234203d3e20323633363233.roa (hash: j+FV69/njmj4oFmPt6kSnXyQbUS03CHA/8u11POeSL8=) 2: 3D4519C7769E089F7D05327003C6A50E92B8C0B8.crl (hash: rlpkerLFLX/88H1geTZD2rM/SbTPgNmAWY9724Bd1Bs=) 3: 323830343a313032633a3a2f33322d3438203d3e20323633363233.roa (hash: 3Ghujwd9UJr9rmn+1oBjDbpHtaxE8dNt1tzIlqfBhgM=) 4: 3134332e3235352e34342e302f32322d3234203d3e20323633363233.roa (hash: 7vlAhbb3FI7QyEjtwP0+o0wEbBe10eFGaDw+xDEygn0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.crl rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4519C7769E089F7D05327003C6A50E92B8C0B8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 13:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:3d:7f:77:cd:52:80:64:7b:7e:46:c8:6f:54:68:a9:58:b6:6b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D4519C7769E089F7D05327003C6A50E92B8C0B8 Validity Not Before: Nov 4 10:03:56 2025 GMT Not After : Nov 5 13:33:56 2025 GMT Subject: CN=1F04C35DF2F4556574BB9E50CC6924717E83ACA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:b8:ef:d8:38:94:b0:61:ae:ac:d2:e5:3c: bf:c7:8e:e2:da:2b:e4:05:9f:e1:43:bf:6a:ca:a3: 26:ea:01:44:49:14:43:ff:55:1a:ab:7f:ac:0c:a6: 1c:ba:fc:dd:5d:b7:2b:33:7f:4f:53:7b:70:69:96: d1:9a:8f:38:f5:6e:c8:f9:5a:42:35:d8:45:87:ec: 7d:92:9e:d7:4d:42:8d:fc:de:c2:28:e2:de:0b:be: 68:23:cc:e9:e6:cf:20:95:14:86:6f:c9:24:1e:f7: 8e:21:58:63:0f:3f:02:68:39:b0:08:9c:ea:d5:77: 46:41:c5:8f:08:77:15:3f:a0:f7:5e:2a:e2:eb:b9: 5c:4d:12:3c:14:f7:a9:4c:52:32:cc:fb:5c:a8:5d: 5b:3d:45:03:e5:43:d5:b1:09:13:75:f4:81:2b:13: 44:78:34:1c:b6:9a:11:f4:2f:f7:b1:31:99:9c:b8: ea:a0:c4:b0:6d:7e:66:99:b3:97:8c:cf:fc:de:32: 07:27:33:83:b8:d6:e5:d1:4a:69:56:fb:06:89:3e: 12:05:6f:c9:56:80:8a:94:b1:7c:4e:33:16:20:98: 3b:7c:24:3a:82:4f:20:46:13:ea:e4:a9:e7:bf:99: 10:a8:37:d6:18:9b:35:1c:d7:5a:c8:2e:45:ba:48: dd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:04:C3:5D:F2:F4:55:65:74:BB:9E:50:CC:69:24:71:7E:83:AC:A6 X509v3 Authority Key Identifier: keyid:3D:45:19:C7:76:9E:08:9F:7D:05:32:70:03:C6:A5:0E:92:B8:C0:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4519C7769E089F7D05327003C6A50E92B8C0B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3D4519C7769E089F7D05327003C6A50E92B8C0B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:c0:20:f2:2a:c4:bd:03:ff:f1:f7:56:c8:e5:28:16:e4:d1: 4c:ff:34:18:5f:7c:8f:e2:d0:b4:dd:28:6e:a7:f7:6c:9e:ef: cd:cc:86:7e:37:d2:b1:67:63:66:a6:87:0d:5c:4c:58:9e:bd: ad:ae:ac:de:82:0c:68:c8:10:d9:ae:69:18:fc:88:23:e5:b7: fd:0d:50:ab:29:2f:87:9d:61:b2:ed:10:da:fc:cc:71:df:3f: 74:21:9a:b4:7a:9c:d0:24:d5:74:d2:d0:c5:4d:32:20:a9:81: 24:f4:29:ce:1a:2f:69:86:a9:67:f4:d4:98:87:75:7c:94:b3: 6c:c0:b8:4f:b5:2e:7d:09:c3:ed:6c:b5:28:d3:94:fd:c7:3d: d7:be:d6:f7:51:1f:72:0f:e3:4b:4a:85:ee:1f:53:32:75:51: de:dc:1f:8d:88:80:fb:17:92:d4:b1:d4:69:70:98:ce:95:27: a6:93:c5:02:e2:9f:61:db:28:ab:29:2e:4c:f2:bc:fc:02:5c: 08:f1:da:c3:58:bb:cc:ca:d7:9b:17:20:73:c0:88:f2:91:3a: b7:26:5b:b8:e4:e4:5c:ee:c3:cf:45:51:d1:6b:0c:1e:ac:48: ba:22:5f:c8:76:bd:8a:54:b1:bd:5c:9e:70:ad:8f:2f:17:2f: 9c:ab:e4:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVj1/d81SgGR7fkbIb1RoqVi2az8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q0NTE5Qzc3NjlFMDg5RjdEMDUzMjcwMDNDNkE1MEU5 MkI4QzBCODAeFw0yNTExMDQxMDAzNTZaFw0yNTExMDUxMzMzNTZaMDMxMTAvBgNV BAMTKDFGMDRDMzVERjJGNDU1NjU3NEJCOUU1MENDNjkyNDcxN0U4M0FDQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOubjv2DiUsGGurNLlPL/HjuLa K+QFn+FDv2rKoybqAURJFEP/VRqrf6wMphy6/N1dtyszf09Te3BpltGajzj1bsj5 WkI12EWH7H2SntdNQo383sIo4t4LvmgjzOnmzyCVFIZvySQe944hWGMPPwJoObAI nOrVd0ZBxY8IdxU/oPdeKuLruVxNEjwU96lMUjLM+1yoXVs9RQPlQ9WxCRN19IEr E0R4NBy2mhH0L/exMZmcuOqgxLBtfmaZs5eMz/zeMgcnM4O41uXRSmlW+waJPhIF b8lWgIqUsXxOMxYgmDt8JDqCTyBGE+rkqee/mRCoN9YYmzUc11rILkW6SN1TAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHwTDXfL0VWV0u55QzGkkcX6DrKYwHwYDVR0j BBgwFoAUPUUZx3aeCJ99BTJwA8alDpK4wLgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0t0SlJZaUFKd0ZLeGFEWlFUUWdQTjFkd2tia2p4Uld5bm96RmVyVTdh TUgvMC8zRDQ1MTlDNzc2OUUwODlGN0QwNTMyNzAwM0M2QTUwRTkyQjhDMEI4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENDUxOUM3NzY5RTA4OUY3 RDA1MzI3MDAzQzZBNTBFOTJCOEMwQjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N0t0SlJZaUFKd0ZLeGFEWlFUUWdQTjFkd2tia2p4Uld5bm96RmVyVTdhTUgvMC8z RDQ1MTlDNzc2OUUwODlGN0QwNTMyNzAwM0M2QTUwRTkyQjhDMEI4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFMAg8irEvQP/8fdWyOUoFuTRTP80GF98j+LQtN0obqf3bJ7vzcyGfjfSsWdj ZqaHDVxMWJ69ra6s3oIMaMgQ2a5pGPyII+W3/Q1Qqykvh51hsu0Q2vzMcd8/dCGa tHqc0CTVdNLQxU0yIKmBJPQpzhovaYapZ/TUmId1fJSzbMC4T7UufQnD7Wy1KNOU /cc9177W91Efcg/jS0qF7h9TMnVR3twfjYiA+xeS1LHUaXCYzpUnppPFAuKfYdso qykuTPK8/AJcCPHaw1i7zMrXmxcgc8CI8pE6tyZbuOTkXO7Dz0VR0WsMHqxIuiJf yHa9ilSxvVyecK2PLxcvnKvkmA== -----END CERTIFICATE-----Generated at Wed Nov 5 04:24:30 2025 by rpki-client