$ rpki-client -vvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft File: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft (raw, json) Hash identifier: 39PkxoEO9WUJMQiYp6jRgR9wPxQicwgYR8uvX/86BBM= Subject key identifier: 9C:27:92:DA:58:0D:DA:08:BD:99:75:12:64:77:A0:23:B2:81:15:DB Authority key identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 Certificate issuer: /CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Certificate serial: 29E9AD89CEE99CC5A3F9F774F8251EBA4FFC64FF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer Subject info access: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft Manifest number: 0306 Signing time: Tue 04 Nov 2025 11:42:49 +0000 Manifest this update: Tue 04 Nov 2025 11:37:49 +0000 Manifest next update: Wed 05 Nov 2025 15:31:49 +0000 Files and hashes: 1: 323830343a386563383a3a2f33322d3438203d3e203631363136.roa (hash: lyXwR8szxK6wAklIFmsSWrdvlecUEfLPCwBeu/gOa+0=) 2: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl (hash: 8tsn9p3/SnKmJCrwY8F+VsQ1fE4Xh6vMZDRrS1LDc9Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 15:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e9:ad:89:ce:e9:9c:c5:a3:f9:f7:74:f8:25:1e:ba:4f:fc:64:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Validity Not Before: Nov 4 11:37:49 2025 GMT Not After : Nov 5 15:31:49 2025 GMT Subject: CN=9C2792DA580DDA08BD9975126477A023B28115DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:72:9f:2c:ee:23:ea:ef:e7:b3:60:cb:6c:7a: 4c:b6:7a:7d:4b:56:b9:f2:a8:90:98:6a:70:0b:3b: 3e:b3:91:54:44:70:2c:2f:5e:8c:1d:7c:94:17:32: 78:f9:c6:e1:72:8c:f2:57:e3:a0:95:ce:bd:75:eb: ba:d1:4c:7b:cb:5f:5c:c3:25:fc:e5:20:59:81:ca: f9:7a:ef:b0:00:7f:7c:94:64:16:6b:fd:e0:4f:22: 31:ff:3e:51:0b:50:fb:a4:d3:5e:b6:84:74:70:55: 72:a0:02:d8:72:3a:f6:18:2b:12:3b:94:7a:b0:7a: 69:ed:d6:07:f6:4d:af:ee:b2:70:60:cc:e1:4b:f6: b9:1a:60:51:96:79:14:2d:a2:02:c8:ce:42:07:27: b2:36:d2:d5:af:ac:fb:49:3c:b0:d6:c4:ca:f0:62: 3c:e9:3b:91:c3:e9:a5:83:61:f9:03:d5:9e:0b:66: 59:5e:d5:3c:f5:35:5f:a8:86:06:e7:f3:91:4c:8b: 5a:46:c1:3e:69:0b:66:f3:8f:6d:3d:72:18:aa:52: 29:52:48:75:f2:e6:3d:3b:91:58:ec:93:8b:8a:7b: 27:8a:fa:e5:85:43:c0:c7:87:09:dd:0c:3c:a0:4a: dd:b6:a8:8f:98:27:23:2a:0b:df:be:fa:fd:ed:22: 8b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:27:92:DA:58:0D:DA:08:BD:99:75:12:64:77:A0:23:B2:81:15:DB X509v3 Authority Key Identifier: keyid:36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4d:99:cf:12:33:30:ad:05:14:b1:cc:39:21:7b:64:d3:f3: bd:79:72:bb:03:b0:f9:8a:8a:e0:fc:ce:9b:bc:c5:b5:bd:7a: 48:70:a1:0d:5c:a7:aa:b2:9b:1c:79:d3:f7:f2:1b:1c:64:43: 8c:02:7b:e2:ea:56:be:8d:ee:c2:11:e7:96:4d:4f:0a:65:08: 0d:c4:ab:6a:47:bd:7d:2d:2f:bd:4c:39:a1:85:f5:80:65:d1: 5b:85:20:0f:1f:86:1c:65:dd:00:53:45:65:92:1a:85:a6:95: e6:00:c6:64:85:45:07:1b:1f:86:b2:c2:a5:30:b0:62:8a:f7: ab:be:ee:73:a6:57:c5:9e:70:e1:b4:ba:bb:4f:83:ce:20:4f: 1c:28:3f:99:d7:f0:5f:3e:6d:ac:69:ae:fe:59:e1:d9:74:fc: 71:cf:7a:5e:6b:08:1c:83:f6:23:aa:db:b7:41:93:77:bd:11: 13:bc:69:b9:94:7a:5d:ce:49:30:f1:ee:7d:bb:be:b9:70:4f: 01:aa:84:55:5a:6b:5d:64:2c:9d:7a:84:cf:3b:22:7e:f4:33: ed:3d:fb:41:f5:81:21:91:8d:3e:3c:12:57:00:ad:a5:a1:d5: a0:62:c3:6e:d0:c1:e3:5c:f8:29:73:da:4a:08:92:83:6d:76: 1e:f6:fb:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKemtic7pnMWj+fd0+CUeuk/8ZP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYyNUE1RTE2NThFRTRCMzc5M0FCQUMwMTkyNEEzM0U1 N0MzRkMyMTAeFw0yNTExMDQxMTM3NDlaFw0yNTExMDUxNTMxNDlaMDMxMTAvBgNV BAMTKDlDMjc5MkRBNTgwRERBMDhCRDk5NzUxMjY0NzdBMDIzQjI4MTE1REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLcp8s7iPq7+ezYMtseky2en1L VrnyqJCYanALOz6zkVREcCwvXowdfJQXMnj5xuFyjPJX46CVzr1167rRTHvLX1zD JfzlIFmByvl677AAf3yUZBZr/eBPIjH/PlELUPuk0162hHRwVXKgAthyOvYYKxI7 lHqwemnt1gf2Ta/usnBgzOFL9rkaYFGWeRQtogLIzkIHJ7I20tWvrPtJPLDWxMrw YjzpO5HD6aWDYfkD1Z4LZlle1Tz1NV+ohgbn85FMi1pGwT5pC2bzj209chiqUilS SHXy5j07kVjsk4uKeyeK+uWFQ8DHhwndDDygSt22qI+YJyMqC9+++v3tIovVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnCeS2lgN2gi9mXUSZHegI7KBFdswHwYDVR0j BBgwFoAUNiWl4WWO5LN5OrrAGSSjPlfD/CEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFO UFcvMS8zNjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2MjVBNUUxNjU4RUU0QjM3 OTNBQkFDMDE5MjRBMzNFNTdDM0ZDMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFOUFcvMS8z NjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAE2ZzxIzMK0FFLHMOSF7ZNPzvXlyuwOw+YqK4PzOm7zFtb16SHChDVynqrKb HHnT9/IbHGRDjAJ74upWvo3uwhHnlk1PCmUIDcSrake9fS0vvUw5oYX1gGXRW4Ug Dx+GHGXdAFNFZZIahaaV5gDGZIVFBxsfhrLCpTCwYor3q77uc6ZXxZ5w4bS6u0+D ziBPHCg/mdfwXz5trGmu/lnh2XT8cc96XmsIHIP2I6rbt0GTd70RE7xpuZR6Xc5J MPHufbu+uXBPAaqEVVprXWQsnXqEzzsifvQz7T37QfWBIZGNPjwSVwCtpaHVoGLD btDB41z4KXPaSgiSg212Hvb7bg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:52 2025 by rpki-client