$ rpki-client -vvf rpki-repo.registro.br/repo/7eZJLVNox42TYnEBTwa5fhJJtY4wKGwLkArn7JYcCs44/0/A3DCF2E734FAC32DE040D3A1F4190A800C964B09.mft File: A3DCF2E734FAC32DE040D3A1F4190A800C964B09.mft (raw, json) Hash identifier: f86c8d/8y63uXWL7RaK+4itbqbo/3aGBYcikUWGlfRA= Subject key identifier: AB:72:6E:3F:09:8C:97:22:E4:56:4D:7E:7F:69:60:69:2D:E3:D4:97 Authority key identifier: A3:DC:F2:E7:34:FA:C3:2D:E0:40:D3:A1:F4:19:0A:80:0C:96:4B:09 Certificate issuer: /CN=A3DCF2E734FAC32DE040D3A1F4190A800C964B09 Certificate serial: 11C13DA7CCA895869B7C0AB26F2BE119603B629C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3DCF2E734FAC32DE040D3A1F4190A800C964B09.cer Subject info access: rsync://rpki-repo.registro.br/repo/7eZJLVNox42TYnEBTwa5fhJJtY4wKGwLkArn7JYcCs44/0/A3DCF2E734FAC32DE040D3A1F4190A800C964B09.mft Manifest number: 0129 Signing time: Wed 05 Nov 2025 12:34:38 +0000 Manifest this update: Wed 05 Nov 2025 12:29:38 +0000 Manifest next update: Thu 06 Nov 2025 16:32:38 +0000 Files and hashes: 1: A3DCF2E734FAC32DE040D3A1F4190A800C964B09.crl (hash: fmGQOA3UPlPpi0sSfaRAgSy7nY1/y7Q9MUaJqDs58Ic=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7eZJLVNox42TYnEBTwa5fhJJtY4wKGwLkArn7JYcCs44/0/A3DCF2E734FAC32DE040D3A1F4190A800C964B09.crl rsync://rpki-repo.registro.br/repo/7eZJLVNox42TYnEBTwa5fhJJtY4wKGwLkArn7JYcCs44/0/A3DCF2E734FAC32DE040D3A1F4190A800C964B09.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3DCF2E734FAC32DE040D3A1F4190A800C964B09.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 16:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c1:3d:a7:cc:a8:95:86:9b:7c:0a:b2:6f:2b:e1:19:60:3b:62:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3DCF2E734FAC32DE040D3A1F4190A800C964B09 Validity Not Before: Nov 5 12:29:38 2025 GMT Not After : Nov 6 16:32:38 2025 GMT Subject: CN=AB726E3F098C9722E4564D7E7F6960692DE3D497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b9:ae:08:08:68:ac:a2:6d:59:f3:14:88:86: ea:1e:92:42:29:d1:db:07:a9:4f:bd:d2:80:09:f0: 81:66:b8:5d:20:81:3e:b1:cd:63:c9:0e:4b:af:4e: 19:cf:46:c4:41:bd:48:09:11:b1:63:0b:2b:a3:a0: b4:29:b4:f0:1a:b7:61:ec:d8:77:19:5e:f1:08:b0: 8b:5f:3c:cb:5b:5e:8e:00:47:74:33:95:8b:d1:60: 1d:ff:d7:67:16:49:3f:e0:1d:f5:11:83:b7:04:83: 17:c3:d3:19:6b:28:c4:d0:47:ff:54:90:6a:6b:48: 79:08:1f:d7:e0:ed:4d:22:48:54:d4:f6:2e:ea:39: f1:f8:51:0a:4e:4a:74:9a:1e:35:89:45:75:1b:3c: 9e:85:fc:b8:55:2e:dc:36:be:b2:c6:72:3e:fa:2d: 41:f7:df:9a:3f:a8:25:b4:59:22:99:63:b2:39:ce: 52:0e:09:5d:d6:3c:0c:fb:f9:1f:31:b9:74:d5:46: 9d:fc:a9:4d:94:a3:69:96:fe:7b:e5:a5:17:b1:f9: 7f:f8:40:96:99:35:bf:0a:1d:95:21:f3:10:33:ec: 7e:f0:f8:15:1b:98:06:8d:0e:f1:d8:4c:c1:0b:b7: 52:98:12:ad:a2:68:2f:40:de:bd:80:8b:d0:7c:4c: a1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:72:6E:3F:09:8C:97:22:E4:56:4D:7E:7F:69:60:69:2D:E3:D4:97 X509v3 Authority Key Identifier: keyid:A3:DC:F2:E7:34:FA:C3:2D:E0:40:D3:A1:F4:19:0A:80:0C:96:4B:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7eZJLVNox42TYnEBTwa5fhJJtY4wKGwLkArn7JYcCs44/0/A3DCF2E734FAC32DE040D3A1F4190A800C964B09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3DCF2E734FAC32DE040D3A1F4190A800C964B09.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7eZJLVNox42TYnEBTwa5fhJJtY4wKGwLkArn7JYcCs44/0/A3DCF2E734FAC32DE040D3A1F4190A800C964B09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ef:da:bc:77:b9:c7:73:be:36:7c:60:d4:f7:9e:a3:41:cc: 80:7f:9f:53:ed:57:c6:9d:8d:f8:6e:f8:e0:f6:27:07:d3:a3: d4:c8:47:53:de:ab:d3:94:5c:37:99:18:bf:c8:33:98:34:2c: bf:e1:29:d7:6d:ad:94:4b:c0:22:0e:5a:e0:02:91:c7:5a:c0: 6b:3b:3d:b7:e6:c0:4f:0c:6b:99:bb:1f:ca:a8:31:12:ed:af: 35:f0:02:83:b0:7b:7b:33:31:d3:30:c7:b1:b1:76:e4:41:34: f8:d9:ec:88:51:4e:9f:f5:d2:95:41:0e:14:36:65:47:f7:d7: 8e:a9:17:52:b0:90:e0:e7:c1:56:99:1d:55:17:25:49:e9:a3: ec:ae:b3:a8:f2:84:63:45:98:a1:98:72:91:f5:5d:9a:70:15: aa:f0:23:fe:68:46:dd:a3:bf:16:f3:eb:84:ba:bc:d3:45:11: 58:e1:80:d6:81:95:b3:db:16:cd:0b:5c:e5:45:b4:54:09:b1: c0:79:de:97:c3:61:c0:35:4b:79:86:60:4f:04:51:95:a5:3a: 11:32:5d:b4:66:ea:a1:f8:28:51:1a:8a:fa:c4:50:4e:fb:47: c6:85:d3:50:16:cd:b8:2b:d0:e2:3d:13:31:5c:e8:c2:bf:3c: 77:a1:ac:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEcE9p8yolYabfAqybyvhGWA7YpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNEQ0YyRTczNEZBQzMyREUwNDBEM0ExRjQxOTBBODAw Qzk2NEIwOTAeFw0yNTExMDUxMjI5MzhaFw0yNTExMDYxNjMyMzhaMDMxMTAvBgNV BAMTKEFCNzI2RTNGMDk4Qzk3MjJFNDU2NEQ3RTdGNjk2MDY5MkRFM0Q0OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaua4ICGisom1Z8xSIhuoekkIp 0dsHqU+90oAJ8IFmuF0ggT6xzWPJDkuvThnPRsRBvUgJEbFjCyujoLQptPAat2Hs 2HcZXvEIsItfPMtbXo4AR3QzlYvRYB3/12cWST/gHfURg7cEgxfD0xlrKMTQR/9U kGprSHkIH9fg7U0iSFTU9i7qOfH4UQpOSnSaHjWJRXUbPJ6F/LhVLtw2vrLGcj76 LUH335o/qCW0WSKZY7I5zlIOCV3WPAz7+R8xuXTVRp38qU2Uo2mW/nvlpRex+X/4 QJaZNb8KHZUh8xAz7H7w+BUbmAaNDvHYTMELt1KYEq2iaC9A3r2Ai9B8TKFtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUq3JuPwmMlyLkVk1+f2lgaS3j1JcwHwYDVR0j BBgwFoAUo9zy5zT6wy3gQNOh9BkKgAyWSwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2VaSkxWTm94NDJUWW5FQlR3YTVmaEpKdFk0d0tHd0xrQXJuN0pZY0Nz NDQvMC9BM0RDRjJFNzM0RkFDMzJERTA0MEQzQTFGNDE5MEE4MDBDOTY0QjA5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzRENGMkU3MzRGQUMzMkRF MDQwRDNBMUY0MTkwQTgwMEM5NjRCMDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2VaSkxWTm94NDJUWW5FQlR3YTVmaEpKdFk0d0tHd0xrQXJuN0pZY0NzNDQvMC9B M0RDRjJFNzM0RkFDMzJERTA0MEQzQTFGNDE5MEE4MDBDOTY0QjA5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWu/avHe5x3O+Nnxg1Peeo0HMgH+fU+1Xxp2N+G744PYnB9Oj1MhHU96r05Rc N5kYv8gzmDQsv+Ep122tlEvAIg5a4AKRx1rAazs9t+bATwxrmbsfyqgxEu2vNfAC g7B7ezMx0zDHsbF25EE0+NnsiFFOn/XSlUEOFDZlR/fXjqkXUrCQ4OfBVpkdVRcl Semj7K6zqPKEY0WYoZhykfVdmnAVqvAj/mhG3aO/FvPrhLq800URWOGA1oGVs9sW zQtc5UW0VAmxwHnel8NhwDVLeYZgTwRRlaU6ETJdtGbqofgoURqK+sRQTvtHxoXT UBbNuCvQ4j0TMVzowr88d6Gs4g== -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:29 2025 by rpki-client