$ rpki-client -vvf rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft File: 3BA0E4707E0361E96A25CFBC6104551202B34011.mft (raw, json) Hash identifier: uVlJ0U6XitMYwj+FbEusebmRUdNlFJ73ATNYvTtwW9I= Subject key identifier: A0:55:63:DA:A7:89:4D:AC:55:5D:08:39:9A:FA:32:74:8A:A3:1A:C7 Authority key identifier: 3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 Certificate issuer: /CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Certificate serial: 661947106062ED673D94F89278C26B8DF574C6EA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft Manifest number: 02FA Signing time: Wed 05 Nov 2025 11:24:10 +0000 Manifest this update: Wed 05 Nov 2025 11:19:10 +0000 Manifest next update: Thu 06 Nov 2025 12:47:10 +0000 Files and hashes: 1: 3BA0E4707E0361E96A25CFBC6104551202B34011.crl (hash: /tsTlNIMKNdgfscabIBmzQImHxTYOyae1wqz6R3IX+Y=) 2: 3136382e302e33322e302f32322d3234203d3e20323635323232.roa (hash: FfWivJ4gNEyGVTWyPXQlAoFJfcDTKU2BxPer5WjncSs=) 3: 323830343a326337633a3a2f33322d3438203d3e20323635323232.roa (hash: gZh/j6TTWYlb6HfDh0Q2BiPD8Rby4m6dl3mVzy3MH6M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 12:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:19:47:10:60:62:ed:67:3d:94:f8:92:78:c2:6b:8d:f5:74:c6:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Validity Not Before: Nov 5 11:19:10 2025 GMT Not After : Nov 6 12:47:10 2025 GMT Subject: CN=A05563DAA7894DAC555D08399AFA32748AA31AC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:bb:2d:b0:aa:6e:42:02:7c:79:07:79:86: de:06:ae:c5:1c:74:ea:df:ed:74:91:f1:33:4f:dd: 9f:ef:df:10:94:d4:7a:60:1a:cc:0e:5f:31:09:91: 9b:0d:d6:4c:bd:20:23:9f:24:fd:02:99:4c:d4:62: 79:86:00:2b:28:7d:8e:a4:74:eb:64:c1:5e:7e:f9: aa:54:a4:61:66:93:da:06:ec:8b:78:b9:ea:f2:48: 03:12:46:88:44:91:1e:29:4c:44:ca:4c:73:46:ea: 5c:33:ab:30:8a:5e:c2:18:79:a0:ae:39:11:f9:64: 3f:5a:4a:25:00:e9:40:a8:07:87:b2:1a:07:f8:97: b6:43:34:5e:a1:fe:ff:19:57:ff:13:80:31:00:a4: 38:2f:4d:4e:f5:af:11:1b:15:c7:09:e3:e5:68:d0: 4b:20:45:95:bf:cb:0b:69:18:c3:6e:92:2a:ed:e3: 39:83:91:f6:45:96:4b:02:a8:ca:28:72:24:5c:00: 24:eb:e6:4c:5c:d2:3c:df:ae:c1:d9:9f:81:37:ae: 22:1e:2e:73:b3:2a:48:b9:1a:de:33:64:c7:c3:f7: fc:f4:10:c3:0f:a8:17:1c:4f:f7:55:42:e7:b7:02: d6:1a:71:41:1c:20:0d:7c:c0:71:d1:ba:50:f5:36: 8d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:55:63:DA:A7:89:4D:AC:55:5D:08:39:9A:FA:32:74:8A:A3:1A:C7 X509v3 Authority Key Identifier: keyid:3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b7:14:53:4c:e5:53:52:8e:8f:8c:52:7a:ab:6e:9e:4f:ee: bf:7f:95:7a:cc:23:c0:71:f9:80:34:e7:04:78:93:a1:9f:05: 88:a9:62:1a:82:35:06:cf:44:48:fd:e9:47:b1:4d:12:28:92: 5f:e1:d9:cf:d5:20:f6:cf:8b:63:09:18:f1:ae:fc:1d:07:7c: d8:49:6d:64:a5:b7:c3:4a:2a:8f:82:40:2a:34:8b:df:e6:6b: 01:0e:d0:a9:c0:1e:74:28:ed:7d:1e:e3:f0:bb:54:b8:44:36: ec:ee:d9:0a:b9:b8:dc:3b:9d:9c:73:de:8a:e1:4f:8d:0a:67: 34:13:f9:4a:91:83:c4:21:59:7c:e4:ea:f3:97:b9:84:0f:03: bc:89:ef:e4:d8:33:0b:9e:42:cc:02:11:28:f6:cd:7c:3f:19: a8:3c:e7:69:cf:48:92:35:c8:3b:10:bf:13:4f:d6:e6:51:38: 23:4a:cc:bd:59:11:3e:9f:13:27:31:4f:6f:7a:06:0d:fc:2a: 96:fb:e1:b7:14:76:94:af:73:18:4a:87:c3:d5:a9:6d:e8:b8: a7:dd:61:a7:29:5d:f3:e1:df:4f:e8:e2:92:7f:ba:d6:e7:c0: 7d:95:08:49:f5:21:d1:f7:39:48:06:45:59:a1:f8:a1:da:4b: a9:24:c6:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZhlHEGBi7Wc9lPiSeMJrjfV0xuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMEU0NzA3RTAzNjFFOTZBMjVDRkJDNjEwNDU1MTIw MkIzNDAxMTAeFw0yNTExMDUxMTE5MTBaFw0yNTExMDYxMjQ3MTBaMDMxMTAvBgNV BAMTKEEwNTU2M0RBQTc4OTREQUM1NTVEMDgzOTlBRkEzMjc0OEFBMzFBQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6C7stsKpuQgJ8eQd5ht4GrsUc dOrf7XSR8TNP3Z/v3xCU1HpgGswOXzEJkZsN1ky9ICOfJP0CmUzUYnmGACsofY6k dOtkwV5++apUpGFmk9oG7It4uerySAMSRohEkR4pTETKTHNG6lwzqzCKXsIYeaCu ORH5ZD9aSiUA6UCoB4eyGgf4l7ZDNF6h/v8ZV/8TgDEApDgvTU71rxEbFccJ4+Vo 0EsgRZW/ywtpGMNukirt4zmDkfZFlksCqMoociRcACTr5kxc0jzfrsHZn4E3riIe LnOzKki5Gt4zZMfD9/z0EMMPqBccT/dVQue3AtYacUEcIA18wHHRulD1No1HAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoFVj2qeJTaxVXQg5mvoydIqjGscwHwYDVR0j BBgwFoAUO6DkcH4DYelqJc+8YQRVEgKzQBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5q c2UvMS8zQkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCQTBFNDcwN0UwMzYxRTk2 QTI1Q0ZCQzYxMDQ1NTEyMDJCMzQwMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5qc2UvMS8z QkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACrcUU0zlU1KOj4xSeqtunk/uv3+VeswjwHH5gDTnBHiToZ8FiKliGoI1Bs9E SP3pR7FNEiiSX+HZz9Ug9s+LYwkY8a78HQd82EltZKW3w0oqj4JAKjSL3+ZrAQ7Q qcAedCjtfR7j8LtUuEQ27O7ZCrm43DudnHPeiuFPjQpnNBP5SpGDxCFZfOTq85e5 hA8DvInv5NgzC55CzAIRKPbNfD8ZqDznac9IkjXIOxC/E0/W5lE4I0rMvVkRPp8T JzFPb3oGDfwqlvvhtxR2lK9zGEqHw9Wpbei4p91hpyld8+HfT+jikn+61ufAfZUI SfUh0fc5SAZFWaH4odpLqSTGBw== -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:51 2025 by rpki-client