$ rpki-client -vvf rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft File: 3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft (raw, json) Hash identifier: mXBDsG+wgY/TloerLlfaJARU5e8jQ+T+Gv0BxYsU/hk= Subject key identifier: 78:BE:D7:23:8F:1A:43:C7:E5:28:A8:2E:34:88:C8:DD:EC:EE:DC:6F Authority key identifier: 3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8 Certificate issuer: /CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8 Certificate serial: 0A5FD9258ADB5AE03C49809F8334E42F374A7473 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft Manifest number: 0172 Signing time: Tue 04 Nov 2025 14:43:43 +0000 Manifest this update: Tue 04 Nov 2025 14:38:43 +0000 Manifest next update: Wed 05 Nov 2025 17:31:43 +0000 Files and hashes: 1: 323830343a333233343a3a2f33322d313238203d3e20323635303632.roa (hash: tbkH5yeZvuDlAXrYeHvJYz6TwGXhqVtSN5MEPVbKHTU=) 2: 3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl (hash: mR+TY8i5S9J97QZvkSPewedssbSkjjtXLOVhKBgA0jM=) 3: 3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa (hash: SeYU5404iSokv/Gz5rw5RNitLBwfn0VjE4GkNS2MnrE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 17:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:5f:d9:25:8a:db:5a:e0:3c:49:80:9f:83:34:e4:2f:37:4a:74:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8 Validity Not Before: Nov 4 14:38:43 2025 GMT Not After : Nov 5 17:31:43 2025 GMT Subject: CN=78BED7238F1A43C7E528A82E3488C8DDECEEDC6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:c3:09:24:a6:c1:4e:b1:69:6a:89:7e:c6: f8:72:c7:43:02:cb:e2:5c:de:29:e7:da:f8:e3:0b: d4:f1:8d:fb:d5:4c:da:62:7c:77:2e:28:51:73:32: c5:fd:1c:72:c5:51:f8:88:1d:d8:0e:fd:5e:ac:d7: 8e:44:53:54:58:f3:ed:7a:ef:de:34:ba:4e:ba:6d: f8:d2:18:08:5e:e6:b5:4d:4f:32:ab:f7:f3:1e:9a: 33:12:18:35:84:92:b7:20:cb:19:78:7a:d2:5f:f5: 2f:e1:66:08:a9:4f:99:c4:fe:9f:26:5b:51:5d:44: f3:92:ce:87:1c:e5:5c:fa:6b:b2:ab:29:71:2f:6b: fa:33:1a:f5:24:81:38:24:16:0c:40:bb:b8:d1:7c: e4:8f:ab:d8:66:ac:7f:3a:7e:2f:a1:6b:4d:5e:3e: 81:86:75:02:82:53:b2:a8:28:2d:0e:c5:83:8e:27: 7f:5c:3b:ad:a1:d2:a3:9f:b2:b6:31:84:8e:34:93: 0b:64:5c:0f:ad:05:61:14:f4:41:61:56:45:5e:cf: 95:9c:e1:93:41:9a:e4:7c:b8:09:fc:91:51:c3:fe: 43:43:54:8a:0d:37:bb:cd:05:56:cc:31:88:a0:80: 8c:61:f8:93:f0:93:d1:ca:64:51:ae:df:f9:9d:84: 7e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BE:D7:23:8F:1A:43:C7:E5:28:A8:2E:34:88:C8:DD:EC:EE:DC:6F X509v3 Authority Key Identifier: keyid:3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:8b:e8:bb:ae:53:0a:30:ae:b8:2c:4e:72:7b:40:18:7c:46: c3:62:da:b2:c8:5d:41:81:98:1c:3b:a7:f9:1c:e9:05:58:f3: c9:17:bf:d3:b8:a5:c2:7d:cc:58:ca:ed:1c:d0:1b:25:d5:bc: e9:84:09:5f:6a:44:c0:b1:5a:d6:86:ce:ab:fd:97:98:3e:93: df:b4:59:e8:f7:5c:fc:a6:a0:04:38:ce:2b:c2:f9:dc:ec:8e: 2a:69:bc:7a:29:f9:91:b4:2c:ed:6e:e3:04:0c:b2:ef:f6:2b: b7:64:43:6f:92:d7:27:71:00:43:04:2a:17:a5:87:e0:a4:08: 2d:0f:29:15:13:a6:f6:c1:5a:94:07:cd:14:4f:6c:65:8f:e1: 26:9d:09:63:74:59:b5:1d:42:c5:ac:f0:24:a4:e6:13:35:b6: 45:cc:0f:54:16:9a:52:f7:e5:93:4e:da:b3:db:ab:b3:d9:07: cb:1e:6b:93:23:07:19:bb:90:15:b3:ed:18:59:c8:d4:cb:39: 21:a9:7b:a4:3b:50:76:a7:c6:e6:34:d2:50:98:3c:4d:89:d8: 09:e0:1e:cd:35:d8:a8:05:91:dc:0d:a1:44:8f:7d:67:ea:82: 39:86:db:07:3c:70:cd:33:fe:31:f0:75:42:95:d5:8f:e1:f6: e2:2d:2b:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCl/ZJYrbWuA8SYCfgzTkLzdKdHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCNUE0RDlFNjdFOUE1OUZDNTY0MkIwMjNDM0UyRTAy QjBDOTFDODAeFw0yNTExMDQxNDM4NDNaFw0yNTExMDUxNzMxNDNaMDMxMTAvBgNV BAMTKDc4QkVENzIzOEYxQTQzQzdFNTI4QTgyRTM0ODhDOERERUNFRURDNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDm8MJJKbBTrFpaol+xvhyx0MC y+Jc3inn2vjjC9TxjfvVTNpifHcuKFFzMsX9HHLFUfiIHdgO/V6s145EU1RY8+16 7940uk66bfjSGAhe5rVNTzKr9/MemjMSGDWEkrcgyxl4etJf9S/hZgipT5nE/p8m W1FdRPOSzocc5Vz6a7KrKXEva/ozGvUkgTgkFgxAu7jRfOSPq9hmrH86fi+ha01e PoGGdQKCU7KoKC0OxYOOJ39cO62h0qOfsrYxhI40kwtkXA+tBWEU9EFhVkVez5Wc 4ZNBmuR8uAn8kVHD/kNDVIoNN7vNBVbMMYiggIxh+JPwk9HKZFGu3/mdhH4PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUeL7XI48aQ8flKKguNIjI3ezu3G8wHwYDVR0j BBgwFoAUP7Wk2eZ+mln8VkKwI8Pi4CsMkcgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFw WjQvMC8zRkI1QTREOUU2N0U5QTU5RkM1NjQyQjAyM0MzRTJFMDJCMEM5MUM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQjVBNEQ5RTY3RTlBNTlG QzU2NDJCMDIzQzNFMkUwMkIwQzkxQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFwWjQvMC8z RkI1QTREOUU2N0U5QTU5RkM1NjQyQjAyM0MzRTJFMDJCMEM5MUM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQIvou65TCjCuuCxOcntAGHxGw2LasshdQYGYHDun+RzpBVjzyRe/07ilwn3M WMrtHNAbJdW86YQJX2pEwLFa1obOq/2XmD6T37RZ6Pdc/KagBDjOK8L53OyOKmm8 ein5kbQs7W7jBAyy7/Yrt2RDb5LXJ3EAQwQqF6WH4KQILQ8pFROm9sFalAfNFE9s ZY/hJp0JY3RZtR1CxazwJKTmEzW2RcwPVBaaUvflk07as9urs9kHyx5rkyMHGbuQ FbPtGFnI1Ms5Ial7pDtQdqfG5jTSUJg8TYnYCeAezTXYqAWR3A2hRI99Z+qCOYbb BzxwzTP+MfB1QpXVj+H24i0rYQ== -----END CERTIFICATE-----Generated at Wed Nov 5 03:19:55 2025 by rpki-client