$ rpki-client -vvf rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.mft File: F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.mft (raw, json) Hash identifier: oZ6mauoXzQnI6EWkrPmQ5IJDnQEuiqftiOsKHD6K76M= Subject key identifier: C3:8F:0D:66:B9:9A:25:CC:8F:C3:AE:50:42:17:4D:92:52:42:B9:DF Authority key identifier: F3:AE:CC:A1:DA:CF:7A:DB:0F:3C:DD:C2:E4:82:6B:18:F3:6A:78:CF Certificate issuer: /CN=F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF Certificate serial: 2433FA56CB52444BA9D1849015D61F2F6F152B44 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.cer Subject info access: rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.mft Manifest number: FB Signing time: Wed 05 Nov 2025 09:11:10 +0000 Manifest this update: Wed 05 Nov 2025 09:06:10 +0000 Manifest next update: Thu 06 Nov 2025 12:19:10 +0000 Files and hashes: 1: 323830343a323231383a3a2f33322d3438203d3e20323634353931.roa (hash: HlwUs2L7419/cMa2+4mwkPjcY7ZP9qFwySS+Yz91Nh0=) 2: 3133382e33362e3230302e302f32322d3234203d3e20323634353931.roa (hash: HvjR2d2trJ5LWnuobRmMJncz1ARxND/q/9gbw8Is3K0=) 3: F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.crl (hash: qQDLixLCq+iWjgLX+Ot1zlUlf3gCcf/JIHI+ZvPKdeU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.crl rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 12:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:33:fa:56:cb:52:44:4b:a9:d1:84:90:15:d6:1f:2f:6f:15:2b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF Validity Not Before: Nov 5 09:06:10 2025 GMT Not After : Nov 6 12:19:10 2025 GMT Subject: CN=C38F0D66B99A25CC8FC3AE5042174D925242B9DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d8:bc:e3:68:f3:48:58:28:d0:02:fd:b4:3d: 5e:be:08:3d:6f:bf:64:98:f8:94:49:63:ab:5b:64: 9f:51:e6:4f:31:84:b6:4c:dc:b2:7c:9a:c0:98:26: 00:50:e7:75:22:3e:ce:99:2f:e0:3d:4a:d6:e3:8a: fd:48:7b:6f:9b:bf:bd:6e:ec:9c:eb:5d:96:28:4f: c3:0d:90:2e:c1:1d:77:71:de:77:ce:f4:e1:87:2c: db:f1:26:5c:4a:e3:7a:e6:4c:f0:82:42:be:74:1b: 2d:d6:75:ce:48:7a:d9:c9:23:5d:fe:3b:53:43:3d: db:ce:33:59:1e:2b:56:7b:e2:5a:53:35:26:73:fa: 27:34:e2:6b:27:02:7f:0c:b2:d3:ae:0f:39:19:3c: 10:f9:f4:fd:99:39:07:b1:86:57:59:b0:11:3d:20: 15:dc:74:6e:6f:d4:1f:a9:8f:af:39:4e:b5:e5:d2: 1a:ec:8c:ea:49:b8:d7:c0:1e:65:45:4b:7d:2b:4e: df:64:40:6b:d0:ce:b8:3a:5a:a8:10:a6:11:61:5d: 85:ed:a7:51:79:19:f2:15:73:b6:6a:49:46:73:93: b6:36:f7:b5:b2:e4:e4:30:fb:88:e7:ae:d0:c7:9c: db:0c:19:e2:a0:e5:31:12:c1:7a:f5:1d:f5:0a:72: c5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8F:0D:66:B9:9A:25:CC:8F:C3:AE:50:42:17:4D:92:52:42:B9:DF X509v3 Authority Key Identifier: keyid:F3:AE:CC:A1:DA:CF:7A:DB:0F:3C:DD:C2:E4:82:6B:18:F3:6A:78:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:d6:80:3a:bf:ac:1a:67:ad:f1:0e:5e:57:9c:26:8a:e3:9d: 3c:29:66:12:df:cf:6d:a2:ae:3f:ec:7e:80:34:21:d0:a6:97: 49:9b:c0:b6:a2:bc:0d:70:77:99:63:3b:3f:bd:d1:0a:84:7f: 3d:85:77:55:77:2a:ad:b1:f5:9f:a6:f4:9d:27:25:82:13:19: 5f:12:86:17:08:a8:fd:41:3e:1f:01:6a:6c:e6:bb:a5:fc:3f: c7:fe:ee:37:36:36:7a:39:bb:c4:9a:34:ff:33:db:d1:e8:8c: a3:64:32:61:91:33:4c:ae:2b:ec:7d:09:96:db:54:71:a8:91: 10:1a:c3:11:8b:0c:0d:ef:4f:64:5c:8a:a4:92:ca:ec:27:b6: 4f:69:39:96:ae:91:22:f4:b4:f4:47:e0:de:ba:cd:e9:01:05: 3b:63:af:39:b3:1e:46:78:90:29:42:65:a4:25:10:46:16:52: 67:53:7b:9e:89:08:a5:39:00:8d:53:e3:03:9d:ce:63:38:46: 8d:b7:13:9a:90:b2:a6:67:40:1a:93:cf:52:c0:cc:06:50:0b: b4:40:14:fe:b9:9e:c4:ed:e3:ad:4b:13:10:3a:94:cc:49:2e: 20:8b:8e:13:de:dc:f0:7e:a0:52:9c:27:c1:6e:3b:b3:53:39: 36:62:1f:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJDP6VstSREup0YSQFdYfL28VK0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBRUNDQTFEQUNGN0FEQjBGM0NEREMyRTQ4MjZCMThG MzZBNzhDRjAeFw0yNTExMDUwOTA2MTBaFw0yNTExMDYxMjE5MTBaMDMxMTAvBgNV BAMTKEMzOEYwRDY2Qjk5QTI1Q0M4RkMzQUU1MDQyMTc0RDkyNTI0MkI5REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD2LzjaPNIWCjQAv20PV6+CD1v v2SY+JRJY6tbZJ9R5k8xhLZM3LJ8msCYJgBQ53UiPs6ZL+A9Stbjiv1Ie2+bv71u 7JzrXZYoT8MNkC7BHXdx3nfO9OGHLNvxJlxK43rmTPCCQr50Gy3Wdc5IetnJI13+ O1NDPdvOM1keK1Z74lpTNSZz+ic04msnAn8MstOuDzkZPBD59P2ZOQexhldZsBE9 IBXcdG5v1B+pj685TrXl0hrsjOpJuNfAHmVFS30rTt9kQGvQzrg6WqgQphFhXYXt p1F5GfIVc7ZqSUZzk7Y297Wy5OQw+4jnrtDHnNsMGeKg5TESwXr1HfUKcsXdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUw48NZrmaJcyPw65QQhdNklJCud8wHwYDVR0j BBgwFoAU867ModrPetsPPN3C5IJrGPNqeM8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlRYdVNKOXJ0TllKanVmbjY0RVI1NWh5cG5zekdWaUN5NmhCdmFDRWF1 R0gvMC9GM0FFQ0NBMURBQ0Y3QURCMEYzQ0REQzJFNDgyNkIxOEYzNkE3OENGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzQUVDQ0ExREFDRjdBREIw RjNDRERDMkU0ODI2QjE4RjM2QTc4Q0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlRYdVNKOXJ0TllKanVmbjY0RVI1NWh5cG5zekdWaUN5NmhCdmFDRWF1R0gvMC9G M0FFQ0NBMURBQ0Y3QURCMEYzQ0REQzJFNDgyNkIxOEYzNkE3OENGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk9aAOr+sGmet8Q5eV5wmiuOdPClmEt/PbaKuP+x+gDQh0KaXSZvAtqK8DXB3 mWM7P73RCoR/PYV3VXcqrbH1n6b0nSclghMZXxKGFwio/UE+HwFqbOa7pfw/x/7u NzY2ejm7xJo0/zPb0eiMo2QyYZEzTK4r7H0JlttUcaiREBrDEYsMDe9PZFyKpJLK 7Ce2T2k5lq6RIvS09Efg3rrN6QEFO2OvObMeRniQKUJlpCUQRhZSZ1N7nokIpTkA jVPjA53OYzhGjbcTmpCypmdAGpPPUsDMBlALtEAU/rmexO3jrUsTEDqUzEkuIIuO E97c8H6gUpwnwW47s1M5NmIf1A== -----END CERTIFICATE-----Generated at Wed Nov 5 18:01:11 2025 by rpki-client