$ rpki-client -vvf rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft File: 3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft (raw, json) Hash identifier: eXlTln6puFuUpnccBTXrXq1JrtaWSQFMl+Zu+Vh3Qb0= Subject key identifier: 63:C4:2F:00:64:7B:6C:DB:E9:D2:76:3D:2B:58:10:D1:2D:53:03:76 Authority key identifier: 3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21 Certificate issuer: /CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21 Certificate serial: 1126329E6DD52CB7FC299281A725C90A0D21158D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer Subject info access: rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft Manifest number: 0323 Signing time: Tue 04 Nov 2025 23:48:30 +0000 Manifest this update: Tue 04 Nov 2025 23:43:30 +0000 Manifest next update: Thu 06 Nov 2025 00:15:30 +0000 Files and hashes: 1: 3230312e3135382e36302e302f32322d3234203d3e203533303738.roa (hash: RtLbcqR8/3YDGzfNGbZbaucDiywBqGkid5qw/mE7sdY=) 2: 3136382e3139342e3133322e302f32322d3234203d3e203533303738.roa (hash: oOTzxC9NhunYba0aP38a/ghXq4y49lqX3o2LedS636o=) 3: 3136382e3139352e3136302e302f32322d3234203d3e203533303738.roa (hash: BIZZCKSRVzmwzPvKuhflsQcj1/Bc+D/jRvP8vy3DBRc=) 4: 3133312e302e36342e302f32322d3234203d3e203533303738.roa (hash: hpYbZLjxwUBaGEXJA1EANokNGa9/vXAOk0GpYs9QKAs=) 5: 3138362e3139332e31362e302f32302d3234203d3e203533303738.roa (hash: XKuEuwCq8WL6IhFiaCXlSkQ3XvgnKaQgqigU2X9pURA=) 6: 3137302e3234372e3135362e302f32322d3234203d3e203533303738.roa (hash: fCD7FthU6WKoidsH28JhaZ06zfDAC12Eiu+9Twb1bRU=) 7: 3138372e39342e3230382e302f32302d3234203d3e203533303738.roa (hash: Oi8HKAlXDmUovKIi7l6yiijJSGD/KRzyUCebw2VqI/w=) 8: 3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl (hash: nxZAxbxyKRn3k+HeCRAJsskhvkWGwyonOQQgZ9dTIOQ=) 9: 3137302e38302e3235322e302f32322d3234203d3e203533303738.roa (hash: Dn+/PSrC0aLbCMBvDobQlUZlQxDmr2gl84WB0YnYW5U=) 10: 323830343a3662633a3a2f33322d3438203d3e203533303738.roa (hash: 22jKhp6IQBEep/A5PAYZ6IjnqJvqll8uYCP1oyLN4to=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:26:32:9e:6d:d5:2c:b7:fc:29:92:81:a7:25:c9:0a:0d:21:15:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21 Validity Not Before: Nov 4 23:43:30 2025 GMT Not After : Nov 6 00:15:30 2025 GMT Subject: CN=63C42F00647B6CDBE9D2763D2B5810D12D530376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:11:de:32:5a:76:0f:64:11:3f:78:d4:51:19: c2:9d:7a:72:34:99:be:19:9b:fa:69:4a:17:0f:ed: a7:79:e9:cf:ec:b6:27:40:d0:2f:85:96:6a:9b:b1: 2a:af:20:23:5e:29:a7:7b:2a:54:40:68:51:ec:94: 79:34:8c:10:1b:42:8c:67:e2:ce:9d:61:7a:e2:b2: 25:85:a5:20:68:7d:6a:4a:79:bb:a9:9c:c1:c4:91: 7f:32:14:37:a0:03:c4:a5:a7:e3:cc:c2:6a:7c:c0: 26:6d:f9:9f:54:87:b9:32:03:1b:b7:4b:ee:df:05: 91:80:24:85:31:9e:8e:7c:64:f5:a8:73:57:6d:ae: 43:7e:24:14:83:84:50:8f:c8:e0:e1:fb:e1:2f:08: 34:01:4f:00:75:c7:ef:0d:3d:8f:3f:01:05:ab:8d: fa:4b:fd:0d:13:b7:70:8b:76:fc:ff:b6:cb:f3:ca: 59:96:cd:3e:e4:bd:b3:b6:2c:e8:87:d6:b3:d0:6b: af:15:e4:e7:9c:f2:4e:67:ba:24:dc:b7:d9:ef:88: 57:ad:0b:7d:b0:03:19:0e:12:6f:08:e1:6d:56:8d: 8b:31:7d:bf:8a:2c:e0:06:f2:bc:fc:b5:c7:00:87: f4:11:0a:c2:75:de:98:8d:20:0a:88:c5:ce:71:0d: 55:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C4:2F:00:64:7B:6C:DB:E9:D2:76:3D:2B:58:10:D1:2D:53:03:76 X509v3 Authority Key Identifier: keyid:3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:76:d3:16:ea:e3:e2:a0:87:c6:47:88:bb:d8:23:2e:79:75: 8e:fa:92:f5:6a:cb:07:02:8e:df:e3:ab:8e:87:07:c5:a4:14: a5:48:39:b1:15:c1:d1:5f:55:dc:c4:d1:ee:f2:f7:3f:35:12: c8:d4:52:2d:74:36:04:6c:60:96:ae:6c:f5:d2:b9:f3:d7:32: fe:56:a6:2f:e7:3c:f8:e5:b8:2b:c5:b1:32:39:6c:d8:c0:31: cf:31:74:05:ab:e5:99:85:27:64:0c:ac:b3:3b:c7:f3:b5:7a: 5f:14:2a:20:bd:39:d3:bd:30:22:ea:7d:64:23:87:5f:40:2e: 05:d3:53:40:6b:a4:09:f4:5e:b5:e4:55:47:d6:02:78:c1:31: e3:08:85:78:8d:84:8e:a4:e8:c3:1f:6f:2b:9b:bd:9a:39:5e: 62:5d:0e:d8:30:fb:1a:cf:71:2f:6d:85:ec:eb:47:87:24:ec: b1:f2:5f:b0:f0:98:15:23:1c:3a:9a:dc:aa:9a:69:e6:d9:30: ae:77:b8:da:a8:ce:e6:2d:3a:65:63:14:82:f1:af:0f:1c:f0: 79:fe:fd:f8:b7:77:49:f4:06:32:4b:5b:d8:51:b1:6a:31:bd: 2e:0b:74:33:6b:d4:ea:d4:f6:1f:4a:4a:28:b4:49:35:4f:ec: a3:dc:21:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUESYynm3VLLf8KZKBpyXJCg0hFY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M4RTVGNDFGM0FGNzQwRTk0MjdGOEVEMjM1QzEyMDA5 OEFBMEMyMTAeFw0yNTExMDQyMzQzMzBaFw0yNTExMDYwMDE1MzBaMDMxMTAvBgNV BAMTKDYzQzQyRjAwNjQ3QjZDREJFOUQyNzYzRDJCNTgxMEQxMkQ1MzAzNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiEd4yWnYPZBE/eNRRGcKdenI0 mb4Zm/ppShcP7ad56c/stidA0C+FlmqbsSqvICNeKad7KlRAaFHslHk0jBAbQoxn 4s6dYXrisiWFpSBofWpKebupnMHEkX8yFDegA8Slp+PMwmp8wCZt+Z9Uh7kyAxu3 S+7fBZGAJIUxno58ZPWoc1dtrkN+JBSDhFCPyODh++EvCDQBTwB1x+8NPY8/AQWr jfpL/Q0Tt3CLdvz/tsvzylmWzT7kvbO2LOiH1rPQa68V5Oec8k5nuiTct9nviFet C32wAxkOEm8I4W1WjYsxfb+KLOAG8rz8tccAh/QRCsJ13piNIAqIxc5xDVVPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUY8QvAGR7bNvp0nY9K1gQ0S1TA3YwHwYDVR0j BBgwFoAUPI5fQfOvdA6UJ/jtI1wSAJiqDCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0txYWJTeEpEbTlLZGtoM3kzRk0zVkZVVEtZQVFIVWI1WFZzRnFwbndp U2IvMC8zQzhFNUY0MUYzQUY3NDBFOTQyN0Y4RUQyMzVDMTIwMDk4QUEwQzIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDOEU1RjQxRjNBRjc0MEU5 NDI3RjhFRDIzNUMxMjAwOThBQTBDMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0txYWJTeEpEbTlLZGtoM3kzRk0zVkZVVEtZQVFIVWI1WFZzRnFwbndpU2IvMC8z QzhFNUY0MUYzQUY3NDBFOTQyN0Y4RUQyMzVDMTIwMDk4QUEwQzIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApHbTFurj4qCHxkeIu9gjLnl1jvqS9WrLBwKO3+OrjocHxaQUpUg5sRXB0V9V 3MTR7vL3PzUSyNRSLXQ2BGxglq5s9dK589cy/lamL+c8+OW4K8WxMjls2MAxzzF0 BavlmYUnZAysszvH87V6XxQqIL05070wIup9ZCOHX0AuBdNTQGukCfReteRVR9YC eMEx4wiFeI2EjqTowx9vK5u9mjleYl0O2DD7Gs9xL22F7OtHhyTssfJfsPCYFSMc Oprcqppp5tkwrne42qjO5i06ZWMUgvGvDxzwef79+Ld3SfQGMktb2FGxajG9Lgt0 M2vU6tT2H0pKKLRJNU/so9whEA== -----END CERTIFICATE-----Generated at Wed Nov 5 13:31:46 2025 by rpki-client