$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft File: 3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft (raw, json) Hash identifier: tuv+9dwOlTrr2B/4PC6TxmOXROqopPW6xamIq9RTC18= Subject key identifier: 48:A0:CF:03:84:A5:1B:3E:48:CD:0F:7E:91:20:7F:B0:ED:0D:AB:FC Authority key identifier: 3A:5A:1F:BD:FB:AC:3B:0E:47:1D:80:73:BA:46:35:F1:7B:26:60:48 Certificate issuer: /CN=3A5A1FBDFBAC3B0E471D8073BA4635F17B266048 Certificate serial: 0715187194CD94734B425522931F38DFF0D797DC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer Subject info access: rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft Manifest number: 0132 Signing time: Tue 04 Nov 2025 16:43:26 +0000 Manifest this update: Tue 04 Nov 2025 16:38:26 +0000 Manifest next update: Wed 05 Nov 2025 19:11:26 +0000 Files and hashes: 1: 3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa (hash: 0U027hiG5j6MP8jXcfJ5yJvBy4z7e9JmZqPN/4bO+A4=) 2: 3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl (hash: tY2RDqPHy2armCRJj56m/qGDTHOPDgxdH0xVIdL6An4=) 3: 323830343a373233303a3a2f33322d3438203d3e20323730383338.roa (hash: 8Q0j1lTtgEWTeidT42m/MaKKKMdbqnM2l9pI0A3eweM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 19:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:15:18:71:94:cd:94:73:4b:42:55:22:93:1f:38:df:f0:d7:97:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A5A1FBDFBAC3B0E471D8073BA4635F17B266048 Validity Not Before: Nov 4 16:38:26 2025 GMT Not After : Nov 5 19:11:26 2025 GMT Subject: CN=48A0CF0384A51B3E48CD0F7E91207FB0ED0DABFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b0:f0:be:50:c0:77:3d:a0:0f:92:7a:1e:30: 37:72:2b:e4:20:16:f7:5c:d4:18:a6:cc:33:c4:ad: 50:4f:43:0f:f3:e1:ff:c3:15:3f:f1:68:a2:db:f7: e8:53:78:5e:6c:1e:43:f5:79:45:5d:b8:86:9b:da: dd:ba:0d:64:34:5b:8d:d1:2f:99:ab:64:84:2c:d9: 08:50:08:bc:0f:7f:78:b3:d3:3e:e4:3a:f1:68:05: 77:35:30:88:68:1b:23:90:c6:a4:f3:33:1b:90:11: ff:be:44:97:72:87:f0:7a:f5:55:ab:bc:4f:9a:70: 48:df:0c:95:8a:36:fd:90:3f:1c:19:06:bc:43:23: 24:92:25:1f:3b:b7:d1:31:7e:98:1c:e1:c2:0d:59: a2:87:8d:61:d1:8c:fe:d7:1e:d9:71:ec:6f:dd:d0: 5e:64:96:28:7c:39:5d:70:6e:80:42:37:60:0a:67: 44:b9:41:7b:80:a8:8c:e4:7b:bc:b6:b6:4a:77:64: 55:2b:9d:fd:fa:fb:6a:3a:64:c5:08:fc:f2:11:f8: fc:e5:21:77:29:03:d4:22:20:68:7f:22:74:15:45: 65:85:8a:81:28:ce:81:4e:a2:7b:ba:ed:e5:80:5b: bf:e9:7d:a6:0b:ba:a9:76:34:28:8f:c7:0a:9c:06: bc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A0:CF:03:84:A5:1B:3E:48:CD:0F:7E:91:20:7F:B0:ED:0D:AB:FC X509v3 Authority Key Identifier: keyid:3A:5A:1F:BD:FB:AC:3B:0E:47:1D:80:73:BA:46:35:F1:7B:26:60:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d5:1d:68:bb:03:7b:66:0e:91:1c:bb:9e:73:48:f4:33:cf: 5d:b8:8b:83:f6:4d:45:0e:9a:54:fa:31:9a:ac:7b:6a:cb:ab: 71:99:cd:ca:ae:b6:1a:6c:3b:a5:ea:03:54:7e:42:9f:bc:00: 36:00:d0:d3:a1:65:37:f3:15:08:9c:03:62:95:3e:0c:e9:7b: cf:ba:58:06:14:e3:97:e1:9e:c8:fd:92:1b:a5:33:5d:1a:bc: 99:3c:d9:a3:e7:c4:66:2d:cc:13:f6:1c:68:a9:a7:75:74:b6: 08:87:2a:4e:41:5c:47:0d:61:84:15:b5:2b:5b:82:34:90:9e: 38:c7:99:b5:d0:25:ff:df:c0:84:ec:2d:6b:ce:5b:22:2f:90: fc:d3:b4:52:c6:8d:0a:12:25:7a:c2:ae:2c:50:75:03:e4:83: c8:4b:2e:c5:d5:21:e4:d4:03:58:81:2d:64:69:78:04:08:9b: 55:37:f4:bf:c6:01:98:3a:bb:ba:c6:71:ee:f7:f7:45:f7:c4: 18:52:de:fb:2c:c2:da:2c:55:6c:c6:90:5a:8b:e1:f7:db:c1: 4d:27:8a:13:e3:ac:9f:4f:32:29:73:ad:5a:21:4d:ce:05:e7: bf:2d:e4:90:52:5a:0c:e2:fd:f1:43:2f:7f:ba:58:67:8d:29: 2d:a8:18:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBxUYcZTNlHNLQlUikx843/DXl9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1QTFGQkRGQkFDM0IwRTQ3MUQ4MDczQkE0NjM1RjE3 QjI2NjA0ODAeFw0yNTExMDQxNjM4MjZaFw0yNTExMDUxOTExMjZaMDMxMTAvBgNV BAMTKDQ4QTBDRjAzODRBNTFCM0U0OENEMEY3RTkxMjA3RkIwRUQwREFCRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRsPC+UMB3PaAPknoeMDdyK+Qg Fvdc1BimzDPErVBPQw/z4f/DFT/xaKLb9+hTeF5sHkP1eUVduIab2t26DWQ0W43R L5mrZIQs2QhQCLwPf3iz0z7kOvFoBXc1MIhoGyOQxqTzMxuQEf++RJdyh/B69VWr vE+acEjfDJWKNv2QPxwZBrxDIySSJR87t9Exfpgc4cINWaKHjWHRjP7XHtlx7G/d 0F5klih8OV1wboBCN2AKZ0S5QXuAqIzke7y2tkp3ZFUrnf36+2o6ZMUI/PIR+Pzl IXcpA9QiIGh/InQVRWWFioEozoFOonu67eWAW7/pfaYLuql2NCiPxwqcBrw3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSKDPA4SlGz5IzQ9+kSB/sO0Nq/wwHwYDVR0j BBgwFoAUOlofvfusOw5HHYBzukY18XsmYEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlN4YmV6emVaQVp4OWRMUjdBajZCZ1R5ODhWMmMzeFhUelFZaFp6MkQ5 aWsvMC8zQTVBMUZCREZCQUMzQjBFNDcxRDgwNzNCQTQ2MzVGMTdCMjY2MDQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBNUExRkJERkJBQzNCMEU0 NzFEODA3M0JBNDYzNUYxN0IyNjYwNDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlN4YmV6emVaQVp4OWRMUjdBajZCZ1R5ODhWMmMzeFhUelFZaFp6MkQ5aWsvMC8z QTVBMUZCREZCQUMzQjBFNDcxRDgwNzNCQTQ2MzVGMTdCMjY2MDQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj9UdaLsDe2YOkRy7nnNI9DPPXbiLg/ZNRQ6aVPoxmqx7asurcZnNyq62Gmw7 peoDVH5Cn7wANgDQ06FlN/MVCJwDYpU+DOl7z7pYBhTjl+GeyP2SG6UzXRq8mTzZ o+fEZi3ME/YcaKmndXS2CIcqTkFcRw1hhBW1K1uCNJCeOMeZtdAl/9/AhOwta85b Ii+Q/NO0UsaNChIlesKuLFB1A+SDyEsuxdUh5NQDWIEtZGl4BAibVTf0v8YBmDq7 usZx7vf3RffEGFLe+yzC2ixVbMaQWovh99vBTSeKE+Osn08yKXOtWiFNzgXnvy3k kFJaDOL98UMvf7pYZ40pLagYQw== -----END CERTIFICATE-----Generated at Wed Nov 5 03:19:26 2025 by rpki-client