$ rpki-client -vvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft File: 3E268A146165B7580B59E044B59D275B5F824225.mft (raw, json) Hash identifier: x+S/KixTp7Sj7ZWG4PvpynRa1P1pzQCA0RYYEIG9PWA= Subject key identifier: E7:84:54:C5:E8:CD:41:0A:F2:EF:C3:63:4C:E3:C7:FC:47:A9:5E:7E Authority key identifier: 3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25 Certificate issuer: /CN=3E268A146165B7580B59E044B59D275B5F824225 Certificate serial: 2869DD5C0D1B0AB3A025B139BB4FD3C2491A8CD6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer Subject info access: rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft Manifest number: 0311 Signing time: Tue 04 Nov 2025 17:08:52 +0000 Manifest this update: Tue 04 Nov 2025 17:03:52 +0000 Manifest next update: Wed 05 Nov 2025 20:04:52 +0000 Files and hashes: 1: 3133382e3138352e38382e302f32322d3332203d3e20323730383737.roa (hash: X8IqYsVc4UPBd60P1jFReCsRvPnvnifQVtHXvaLIU/Q=) 2: 3E268A146165B7580B59E044B59D275B5F824225.crl (hash: w3sCtVBIUc9/WeXIDyumv3m/Pb9mQV1ZfIk/JPT2auY=) 3: 323830343a373264303a3a2f33322d313238203d3e20323730383737.roa (hash: x0Negjnv647J6XLParkDmeJSFD9sjq4i3L0k57j1LkI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 20:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:69:dd:5c:0d:1b:0a:b3:a0:25:b1:39:bb:4f:d3:c2:49:1a:8c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E268A146165B7580B59E044B59D275B5F824225 Validity Not Before: Nov 4 17:03:52 2025 GMT Not After : Nov 5 20:04:52 2025 GMT Subject: CN=E78454C5E8CD410AF2EFC3634CE3C7FC47A95E7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:51:6c:64:a4:c1:47:33:a3:7b:5c:6c:c9: 84:96:51:6c:22:35:f4:ac:2a:d1:43:01:81:a5:83: 71:32:b4:b3:b6:44:27:a9:a2:3a:f3:43:b9:e6:61: 9c:e8:70:c6:9c:0e:37:16:c6:cb:07:d5:e8:e3:27: 34:48:15:d0:65:34:d0:90:a8:8e:cf:78:22:a2:c2: 6f:1c:da:cf:02:25:1f:71:b5:6a:d2:78:b4:5b:06: d8:1c:aa:83:a1:a5:e4:4d:ad:bc:d9:a0:36:8d:69: a2:d4:95:08:13:53:a3:cc:1a:f6:04:cc:64:1d:8d: 9c:05:d3:10:2f:b0:d9:88:b2:28:ca:e4:b9:a0:45: 86:c9:9f:29:f9:5f:93:d5:27:6c:f0:6a:d5:6a:00: b5:25:17:79:8a:a8:89:0d:bc:68:a2:90:96:5c:56: d6:ac:55:d1:4a:32:36:65:54:a6:ed:70:3f:0e:55: 7f:4d:82:ae:9f:1b:77:20:19:2f:29:7a:4b:75:6d: 48:c2:a0:63:25:a9:e5:98:42:bc:80:63:19:df:2a: 97:2a:e0:c8:70:31:38:41:fb:08:42:87:7c:b7:12: 03:ec:30:89:81:5e:99:0e:3f:ff:cf:e3:0b:f9:2f: 9c:d3:08:20:b3:0b:88:87:81:d1:a4:52:fc:0d:ff: 5b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:84:54:C5:E8:CD:41:0A:F2:EF:C3:63:4C:E3:C7:FC:47:A9:5E:7E X509v3 Authority Key Identifier: keyid:3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:37:e5:96:1b:b3:9d:2f:09:c9:fa:42:26:9f:3b:53:1e:57: 76:34:a9:fa:aa:e8:1c:e5:28:ac:eb:3a:52:f5:65:20:24:73: 0d:c7:fa:dc:2a:c6:66:25:be:8a:41:cb:1a:3d:79:cc:13:f8: 03:be:77:d3:79:d9:8e:ac:ad:76:9d:93:4b:44:ea:a7:57:d3: 4e:d6:3c:85:1e:f8:32:e3:50:6a:f1:33:3b:6f:18:0d:ed:e5: ce:78:7b:3a:d8:b3:f7:8d:34:87:b8:b6:e9:0d:1c:0b:44:51: 3f:e3:83:3b:e2:0b:b2:77:0f:b6:62:69:52:14:ae:f0:c3:ee: 94:4f:57:b3:34:a1:00:67:6a:5c:e3:0c:65:37:21:43:5e:92: c3:6b:d1:df:35:bb:75:46:9c:cb:bd:0d:0d:4b:1b:b3:24:1d: e5:72:28:48:e3:3c:ca:ee:87:01:6b:9a:a8:97:cf:58:9c:39: 86:9c:c2:4b:e1:11:ac:ca:a5:4c:2b:b7:7c:bd:f0:79:52:16: 33:86:19:ac:d6:11:9c:82:3e:9d:27:29:c3:ec:5d:32:10:42: 06:12:6f:fb:a4:a5:ff:49:92:f3:36:65:7c:08:91:55:bd:89: 34:2d:76:de:16:09:33:a7:d7:9b:f1:6a:cc:f3:0f:36:4f:3a: f6:e7:20:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKGndXA0bCrOgJbE5u0/TwkkajNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UyNjhBMTQ2MTY1Qjc1ODBCNTlFMDQ0QjU5RDI3NUI1 RjgyNDIyNTAeFw0yNTExMDQxNzAzNTJaFw0yNTExMDUyMDA0NTJaMDMxMTAvBgNV BAMTKEU3ODQ1NEM1RThDRDQxMEFGMkVGQzM2MzRDRTNDN0ZDNDdBOTVFN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKFlFsZKTBRzOje1xsyYSWUWwi NfSsKtFDAYGlg3EytLO2RCepojrzQ7nmYZzocMacDjcWxssH1ejjJzRIFdBlNNCQ qI7PeCKiwm8c2s8CJR9xtWrSeLRbBtgcqoOhpeRNrbzZoDaNaaLUlQgTU6PMGvYE zGQdjZwF0xAvsNmIsijK5LmgRYbJnyn5X5PVJ2zwatVqALUlF3mKqIkNvGiikJZc VtasVdFKMjZlVKbtcD8OVX9Ngq6fG3cgGS8pekt1bUjCoGMlqeWYQryAYxnfKpcq 4MhwMThB+whCh3y3EgPsMImBXpkOP//P4wv5L5zTCCCzC4iHgdGkUvwN/1uRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU54RUxejNQQry78NjTOPH/EepXn4wHwYDVR0j BBgwFoAUPiaKFGFlt1gLWeBEtZ0nW1+CQiUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXFnUldORVdmc0NKZk4xdzVndEhYb3NXaGtMV1pxcVUyTUx1Ujl4aW5B RXQvMS8zRTI2OEExNDYxNjVCNzU4MEI1OUUwNDRCNTlEMjc1QjVGODI0MjI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFMjY4QTE0NjE2NUI3NTgw QjU5RTA0NEI1OUQyNzVCNUY4MjQyMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXFnUldORVdmc0NKZk4xdzVndEhYb3NXaGtMV1pxcVUyTUx1Ujl4aW5BRXQvMS8z RTI2OEExNDYxNjVCNzU4MEI1OUUwNDRCNTlEMjc1QjVGODI0MjI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbjfllhuznS8JyfpCJp87Ux5XdjSp+qroHOUorOs6UvVlICRzDcf63CrGZiW+ ikHLGj15zBP4A75303nZjqytdp2TS0Tqp1fTTtY8hR74MuNQavEzO28YDe3lznh7 Otiz9400h7i26Q0cC0RRP+ODO+ILsncPtmJpUhSu8MPulE9XszShAGdqXOMMZTch Q16Sw2vR3zW7dUacy70NDUsbsyQd5XIoSOM8yu6HAWuaqJfPWJw5hpzCS+ERrMql TCu3fL3weVIWM4YZrNYRnII+nScpw+xdMhBCBhJv+6Sl/0mS8zZlfAiRVb2JNC12 3hYJM6fXm/FqzPMPNk869ucgPg== -----END CERTIFICATE-----Generated at Wed Nov 5 10:00:38 2025 by rpki-client