$ rpki-client -vvf rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft File: 3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft (raw, json) Hash identifier: KYCxQgbguleU+VKvA019Z/HHpmcXNmDUvvaIGA3Rmx4= Subject key identifier: 7F:98:47:D8:60:43:B9:4F:4E:DC:25:DA:15:57:2D:E3:79:ED:0F:48 Authority key identifier: 3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE Certificate issuer: /CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE Certificate serial: 79F1C5CE5EEE92B1E2FBE7753A1F17AFF6F89284 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft Manifest number: 036C Signing time: Wed 05 Nov 2025 00:50:00 +0000 Manifest this update: Wed 05 Nov 2025 00:45:00 +0000 Manifest next update: Thu 06 Nov 2025 00:50:00 +0000 Files and hashes: 1: 323830343a376136303a313030303a3a2f34302d3430203d3e20323731333637.roa (hash: ZH/q1SgpxFp9UFjRkP0Pk7p8Hatpjf4m06WESj+5rT8=) 2: 3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl (hash: oukM/LHci+k0O9ltZgwBLwErVxQQvLUIvFDkKeeWw4Q=) 3: 3230302e33362e3231362e302f32322d3234203d3e20323731333637.roa (hash: xBPwvS0zrXLXBjGxZbTS0R+/LiP5J9k9hLEuIZa5HTs=) 4: 323830343a376136303a3a2f33322d3332203d3e20323731333637.roa (hash: qRohoeNnKNf6cv7/p17nFmOIRtNgNQ2ZfmHXIaZ+ebE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f1:c5:ce:5e:ee:92:b1:e2:fb:e7:75:3a:1f:17:af:f6:f8:92:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE Validity Not Before: Nov 5 00:45:00 2025 GMT Not After : Nov 6 00:50:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:75:4c:57:db:9b:77:50:32:ff:16:85:15:32: 0b:19:1f:c5:f3:4c:1c:0d:02:5d:60:ff:0a:fc:0c: 13:10:15:fd:89:91:70:04:c6:44:1c:1d:2e:c6:8f: 8f:20:36:45:30:3e:9b:6f:cc:01:86:20:69:a2:e2: 6d:8b:ad:93:21:57:18:19:05:6f:84:f8:78:fb:31: 77:32:16:eb:f2:e5:5f:85:9b:a2:c6:4c:03:f1:b4: f1:24:98:e5:f8:41:5f:38:42:03:9c:5e:d9:2d:3c: 85:52:0a:a6:23:8b:4a:0a:af:a3:3f:25:8c:98:6f: 17:a0:19:33:83:04:17:70:be:bc:ac:47:0f:f8:53: 80:e9:5b:fa:35:3f:c2:57:5b:3c:6d:d9:82:62:2b: 3c:1d:c6:2c:91:94:03:93:f1:4e:b0:e9:ba:81:d6: e1:a4:d9:79:56:3f:b6:53:62:62:87:4c:a5:9f:71: 99:9b:9b:27:58:56:93:13:fe:0e:1b:84:e7:87:96: dc:ae:b5:77:bf:37:76:52:3b:c6:a9:2f:c4:22:d2: 7e:92:76:bd:fd:a2:df:0b:34:b5:e8:d2:d0:b4:52: ac:b6:f7:ee:58:05:3e:52:06:c9:64:22:07:27:d7: de:0d:cc:09:74:da:1b:f3:8b:93:93:bb:42:07:49: bd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:98:47:D8:60:43:B9:4F:4E:DC:25:DA:15:57:2D:E3:79:ED:0F:48 X509v3 Authority Key Identifier: keyid:3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:49:dd:8f:d4:12:ba:87:c4:46:19:7c:bf:c6:64:82:ce:16: cb:8a:fb:a6:d1:1f:b8:1a:7e:6a:48:a5:44:cb:58:ca:30:bb: 9d:d7:cf:e0:5f:5c:0c:0c:ed:45:ff:c7:6f:9d:0e:ba:72:98: 35:e5:97:be:f8:73:cf:b4:55:3d:6f:57:ba:0a:29:e6:de:fb: 64:7a:92:5f:e7:96:50:bf:b0:01:29:7a:85:88:98:bf:40:19: b1:ac:b2:1d:d0:2f:81:ec:83:4b:02:4f:47:77:4b:70:76:b5: d5:51:85:e0:e4:81:d6:ff:5e:f5:0c:b2:d0:a4:cf:51:23:e5: 32:c2:13:89:72:bf:83:61:d2:e2:6d:fd:01:fd:d4:63:22:ba: 6f:e1:1c:fa:53:57:db:7a:b4:00:34:d4:74:fd:1d:92:39:95: 1c:55:2e:16:22:02:cd:bc:12:e1:1e:f3:36:92:43:41:2f:71: d6:38:bc:a6:0b:cf:83:37:97:f7:15:4f:03:20:96:32:a4:55: ac:fc:dd:e0:5f:09:40:62:88:ac:79:59:0d:e0:62:ac:a5:aa: 3f:6d:c1:50:e5:ed:cc:26:e4:f9:fd:89:3c:43:91:e8:bf:d5: c7:6d:9d:76:87:55:ad:04:bf:c2:f5:29:00:eb:87:2f:8b:46: 63:33:06:69 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUefHFzl7ukrHi++d1Oh8Xr/b4koQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FCRjk2RDE4RTdFMDVBMjRFREFBMTE3RDJCOUU3NkEw N0ZFQzVDRTAeFw0yNTExMDUwMDQ1MDBaFw0yNTExMDYwMDUwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDE3NTRDNTdEQjlCNzc1MDMy RkYxNjg1MTUzMjBCMTkxRkM1RjM0QzFDMEQwMjVENjBGRjBBRkMwQzEzMTAxNUZE ODk5MTcwMDRDNjQ0MUMxRDJFQzY4RjhGMjAzNjQ1MzAzRTlCNkZDQzAxODYyMDY5 QTJFMjZEOEJBRDkzMjE1NzE4MTkwNTZGODRGODc4RkIzMTc3MzIxNkVCRjJFNTVG ODU5QkEyQzY0QzAzRjFCNEYxMjQ5OEU1Rjg0MTVGMzg0MjAzOUM1RUQ5MkQzQzg1 NTIwQUE2MjM4QjRBMEFBRkEzM0YyNThDOTg2RjE3QTAxOTMzODMwNDE3NzBCRUJD QUM0NzBGRjg1MzgwRTk1QkZBMzUzRkMyNTc1QjNDNkREOTgyNjIyQjNDMURDNjJD OTE5NDAzOTNGMTRFQjBFOUJBODFENkUxQTREOTc5NTYzRkI2NTM2MjYyODc0Q0E1 OUY3MTk5OUI5QjI3NTg1NjkzMTNGRTBFMUI4NEU3ODc5NkRDQUVCNTc3QkYzNzc2 NTIzQkM2QTkyRkM0MjJEMjdFOTI3NkJERkRBMkRGMEIzNEI1RThEMkQwQjQ1MkFD QjZGN0VFNTgwNTNFNTIwNkM5NjQyMjA3MjdEN0RFMERDQzA5NzREQTFCRjM4Qjkz OTNCQjQyMDc0OUJENEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA0XVMV9ubd1Ay/xaFFTILGR/F80wcDQJdYP8K/AwTEBX9iZFwBMZE HB0uxo+PIDZFMD6bb8wBhiBpouJti62TIVcYGQVvhPh4+zF3Mhbr8uVfhZuixkwD 8bTxJJjl+EFfOEIDnF7ZLTyFUgqmI4tKCq+jPyWMmG8XoBkzgwQXcL68rEcP+FOA 6Vv6NT/CV1s8bdmCYis8HcYskZQDk/FOsOm6gdbhpNl5Vj+2U2Jih0yln3GZm5sn WFaTE/4OG4Tnh5bcrrV3vzd2UjvGqS/EItJ+kna9/aLfCzS16NLQtFKstvfuWAU+ UgbJZCIHJ9feDcwJdNob84uTk7tCB0m9TwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FH+YR9hgQ7lPTtwl2hVXLeN57Q9IMB8GA1UdIwQYMBaAFDq/ltGOfgWiTtqhF9K5 52oH/sXOMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JGWUh5M3BCa1lSUXRy QjhNNmp3Sk1hanlXNGRmemtFbVJZVHNGdHd1c2dyLzEvM0FCRjk2RDE4RTdFMDVB MjRFREFBMTE3RDJCOUU3NkEwN0ZFQzVDRS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS8zQUJGOTZEMThFN0UwNUEyNEVEQUExMTdEMkI5RTc2QTA3RkVD NUNFLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JGWUh5M3BCa1lSUXRyQjhNNmp3 Sk1hanlXNGRmemtFbVJZVHNGdHd1c2dyLzEvM0FCRjk2RDE4RTdFMDVBMjRFREFB MTE3RDJCOUU3NkEwN0ZFQzVDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKpJ3Y/UErqHxEYZfL/GZILO FsuK+6bRH7gafmpIpUTLWMowu53Xz+BfXAwM7UX/x2+dDrpymDXll774c8+0VT1v V7oKKebe+2R6kl/nllC/sAEpeoWImL9AGbGssh3QL4Hsg0sCT0d3S3B2tdVRheDk gdb/XvUMstCkz1Ej5TLCE4lyv4Nh0uJt/QH91GMium/hHPpTV9t6tAA01HT9HZI5 lRxVLhYiAs28EuEe8zaSQ0EvcdY4vKYLz4M3l/cVTwMgljKkVaz83eBfCUBiiKx5 WQ3gYqylqj9twVDl7cwm5Pn9iTxDkei/1cdtnXaHVa0Ev8L1KQDrhy+LRmMzBmk= -----END CERTIFICATE-----Generated at Wed Nov 5 07:18:17 2025 by rpki-client