$ rpki-client -vvf rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.mft File: 3A546F3625A8CE1F69122E8BD80769CC991FC593.mft (raw, json) Hash identifier: o9xkvGaY7Auen5BOEhxnHiK4H+Q9ysSYSs3WOrewpOw= Subject key identifier: 1E:13:50:96:D6:D2:7F:A6:DB:2B:FC:5A:F4:4F:0A:98:CA:3E:14:8F Authority key identifier: 3A:54:6F:36:25:A8:CE:1F:69:12:2E:8B:D8:07:69:CC:99:1F:C5:93 Certificate issuer: /CN=3A546F3625A8CE1F69122E8BD80769CC991FC593 Certificate serial: 05621A0E11EFD6AABEF52AD59B5953678910F245 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A546F3625A8CE1F69122E8BD80769CC991FC593.cer Subject info access: rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.mft Manifest number: 02DC Signing time: Tue 04 Nov 2025 17:05:26 +0000 Manifest this update: Tue 04 Nov 2025 17:00:26 +0000 Manifest next update: Wed 05 Nov 2025 17:24:26 +0000 Files and hashes: 1: 323830343a323464343a3a2f33322d3334203d3e203532373831.roa (hash: BrQu+teATlcXUUvtBftKQPiXlc9Ng5jgkpjP7s8cieM=) 2: 3137372e3230302e34382e302f32302d3234203d3e203532373831.roa (hash: FBQ/5T6eAP7P2pyDV6IcSDAewNdRCf0cOWfvAowUNtw=) 3: 3A546F3625A8CE1F69122E8BD80769CC991FC593.crl (hash: MJgWDg4aHkY/Nm3usHPh0w4tTQ4W+gGCsqctd1maH50=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.crl rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A546F3625A8CE1F69122E8BD80769CC991FC593.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 17:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:62:1a:0e:11:ef:d6:aa:be:f5:2a:d5:9b:59:53:67:89:10:f2:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A546F3625A8CE1F69122E8BD80769CC991FC593 Validity Not Before: Nov 4 17:00:26 2025 GMT Not After : Nov 5 17:24:26 2025 GMT Subject: CN=1E135096D6D27FA6DB2BFC5AF44F0A98CA3E148F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e1:30:1f:1b:90:22:af:94:92:90:0e:9f:26: 55:cf:b7:59:b8:70:6d:a0:f3:ee:05:7c:16:4b:82: f7:30:f6:8f:09:29:67:bd:75:be:45:b2:1a:88:d6: c7:a6:01:59:fe:ff:2e:03:4d:07:3f:ae:a2:44:21: 8b:57:07:b9:0a:f0:bc:65:28:6f:82:c7:5a:9d:97: b8:b5:e7:7c:7a:ad:25:b5:6a:34:48:b5:c9:75:8f: b3:b9:1c:e8:de:47:7e:55:21:22:7f:80:71:a2:0f: a5:9e:cc:90:32:be:87:62:58:29:75:18:51:ac:aa: 77:d3:72:00:41:c4:69:95:3f:6a:6e:38:1b:84:ee: 45:4b:ee:7b:59:6b:08:f4:38:de:91:36:cc:12:f0: 55:cc:10:5f:a6:06:fd:19:7c:b0:84:53:97:d1:22: cf:30:5c:e4:93:4b:4e:60:ed:eb:79:44:b4:fe:c5: a2:d2:b3:aa:97:de:b1:43:31:80:3a:60:2e:95:38: 01:87:34:6b:38:cc:99:c1:98:ae:88:14:e9:8c:d2: 54:c9:d9:7f:6a:5a:36:40:30:f9:6b:5b:78:96:ce: 9e:30:ca:26:ce:59:39:e8:56:fe:2c:be:11:77:99: ff:7e:e0:fb:ab:84:8e:80:4d:5e:0c:f9:a9:ec:c5: 51:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:13:50:96:D6:D2:7F:A6:DB:2B:FC:5A:F4:4F:0A:98:CA:3E:14:8F X509v3 Authority Key Identifier: keyid:3A:54:6F:36:25:A8:CE:1F:69:12:2E:8B:D8:07:69:CC:99:1F:C5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A546F3625A8CE1F69122E8BD80769CC991FC593.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/3A546F3625A8CE1F69122E8BD80769CC991FC593.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b7:a4:fa:d5:4d:4f:15:d5:7b:24:79:66:6e:7d:36:61:63: e9:56:0b:8d:66:c2:c2:db:ad:80:44:7e:11:0f:96:a1:40:85: 6d:aa:2c:9d:d8:2e:ca:60:53:19:2f:78:cc:df:fe:e4:52:10: a1:89:b5:b9:3a:7b:65:17:0f:d4:e6:74:47:e0:f5:b5:7a:49: 98:88:73:13:93:ac:e4:49:e3:32:8f:ba:ff:34:64:c1:49:ae: bb:bc:84:24:74:38:56:50:e0:61:e9:bd:e4:ff:9f:c3:10:8e: 22:57:cf:ab:58:1a:ad:14:5a:00:9d:fa:b9:97:ae:2a:43:76: 77:90:79:32:95:84:de:84:ff:74:0c:db:7f:ae:0a:c3:84:71: 0e:3e:11:4e:0e:42:df:cb:6b:ba:f9:0c:9f:dd:6e:1b:bf:59: b4:bf:bf:96:bc:64:f0:43:ca:1b:e0:b3:d7:fa:3d:f8:25:12: d0:47:0a:e7:1d:d9:e0:5c:85:ae:5c:a7:0c:e3:8e:0d:26:8a: 17:cc:a5:4f:90:93:03:04:d6:98:b4:bf:46:28:01:78:4d:75: 75:6c:ab:d9:fd:22:bf:70:19:bf:8c:15:c0:2f:42:ee:01:db: d5:6c:34:53:7e:9b:11:76:f6:b0:a6:e4:9c:cd:1d:c4:2b:2f: be:a6:01:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBWIaDhHv1qq+9SrVm1lTZ4kQ8kUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1NDZGMzYyNUE4Q0UxRjY5MTIyRThCRDgwNzY5Q0M5 OTFGQzU5MzAeFw0yNTExMDQxNzAwMjZaFw0yNTExMDUxNzI0MjZaMDMxMTAvBgNV BAMTKDFFMTM1MDk2RDZEMjdGQTZEQjJCRkM1QUY0NEYwQTk4Q0EzRTE0OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4TAfG5Air5SSkA6fJlXPt1m4 cG2g8+4FfBZLgvcw9o8JKWe9db5FshqI1semAVn+/y4DTQc/rqJEIYtXB7kK8Lxl KG+Cx1qdl7i153x6rSW1ajRItcl1j7O5HOjeR35VISJ/gHGiD6WezJAyvodiWCl1 GFGsqnfTcgBBxGmVP2puOBuE7kVL7ntZawj0ON6RNswS8FXMEF+mBv0ZfLCEU5fR Is8wXOSTS05g7et5RLT+xaLSs6qX3rFDMYA6YC6VOAGHNGs4zJnBmK6IFOmM0lTJ 2X9qWjZAMPlrW3iWzp4wyibOWTnoVv4svhF3mf9+4PurhI6ATV4M+ansxVHjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHhNQltbSf6bbK/xa9E8KmMo+FI8wHwYDVR0j BBgwFoAUOlRvNiWozh9pEi6L2AdpzJkfxZMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUVUNDJGQnRDYTJmd2NaUHUxWVI5OEtkUEhpMW9YaVRTaXZ0b2ZuVThE bnkvMC8zQTU0NkYzNjI1QThDRTFGNjkxMjJFOEJEODA3NjlDQzk5MUZDNTkzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBNTQ2RjM2MjVBOENFMUY2 OTEyMkU4QkQ4MDc2OUNDOTkxRkM1OTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUVUNDJGQnRDYTJmd2NaUHUxWVI5OEtkUEhpMW9YaVRTaXZ0b2ZuVThEbnkvMC8z QTU0NkYzNjI1QThDRTFGNjkxMjJFOEJEODA3NjlDQzk5MUZDNTkzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASrek+tVNTxXVeyR5Zm59NmFj6VYLjWbCwtutgER+EQ+WoUCFbaosndguymBT GS94zN/+5FIQoYm1uTp7ZRcP1OZ0R+D1tXpJmIhzE5Os5EnjMo+6/zRkwUmuu7yE JHQ4VlDgYem95P+fwxCOIlfPq1garRRaAJ36uZeuKkN2d5B5MpWE3oT/dAzbf64K w4RxDj4RTg5C38truvkMn91uG79ZtL+/lrxk8EPKG+Cz1/o9+CUS0EcK5x3Z4FyF rlynDOOODSaKF8ylT5CTAwTWmLS/RigBeE11dWyr2f0iv3AZv4wVwC9C7gHb1Ww0 U36bEXb2sKbknM0dxCsvvqYB2w== -----END CERTIFICATE-----Generated at Wed Nov 5 02:17:09 2025 by rpki-client