$ rpki-client -vvf rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft File: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft (raw, json) Hash identifier: KBtyzqNzSLKHSTXk4diUURHaEeztbc2OX19DllFtwP4= Subject key identifier: 08:39:F3:C1:2D:F3:FB:0F:E1:60:42:18:0B:9A:E4:19:41:69:F7:70 Authority key identifier: 39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 Certificate issuer: /CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Certificate serial: 1060017333BE370233E3F725F01054B435BC5AB0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer Subject info access: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft Manifest number: 42 Signing time: Wed 05 Nov 2025 01:53:37 +0000 Manifest this update: Wed 05 Nov 2025 01:48:37 +0000 Manifest next update: Thu 06 Nov 2025 05:41:37 +0000 Files and hashes: 1: 3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl (hash: c4qiS3DpV64w/iyAezTxRyKRuc3ikrhZnXSkU9rg+HM=) 2: 3138362e3139322e3234302e302f32302d3332203d3e203533313338.roa (hash: rs7ZZAZg46x8jtp0XLIVsq+UbLhT8CF4hnhCIIsyQAI=) 3: 3137372e35332e3232342e302f32312d3332203d3e203533313338.roa (hash: +d3EaGdR1hOJ5rzIOKKHnD4g/YmIXL9GdS7cQwdyqnc=) 4: 323830343a3134303a3a2f33322d313238203d3e203533313338.roa (hash: LqeZnwKDXDTNwr+ak5RShDJ/CXx7aCz5TV0Xv6trEoI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 04:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:60:01:73:33:be:37:02:33:e3:f7:25:f0:10:54:b4:35:bc:5a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3917E4BBB4D1FD99400ED98C98A323ADAAB38977 Validity Not Before: Nov 5 01:48:37 2025 GMT Not After : Nov 6 05:41:37 2025 GMT Subject: CN=0839F3C12DF3FB0FE16042180B9AE4194169F770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:50:bd:d7:98:75:c8:0d:53:9a:cb:7e:68:2c: b9:f0:24:82:50:33:f5:6e:53:10:e5:c6:5e:3b:4f: 8c:88:ea:3a:50:ba:c7:fc:43:24:9c:8a:35:eb:b3: d7:af:38:0e:14:80:34:c8:3e:61:ed:b6:6d:a9:bd: 37:4b:14:91:e3:b3:73:4a:7b:c7:9d:60:33:7d:e5: 8e:2c:11:19:75:cb:fa:3c:4c:0e:de:25:34:81:f0: 59:84:8d:cf:3b:87:d0:6e:7f:bf:af:54:05:d6:20: d4:05:25:98:b0:30:62:a4:fb:cb:2a:db:ca:6f:c4: e0:8f:6b:10:c8:96:b5:4e:dd:8a:cb:a6:d4:8f:a3: 12:dc:2a:39:d1:42:4a:97:dd:7d:10:72:68:d2:af: e6:3a:f9:cd:af:1c:b0:82:e1:49:1e:a1:68:6d:7d: e3:54:9f:25:a2:67:33:63:c7:b7:84:b4:5d:2b:e0: 6e:4a:98:4a:d8:e5:e0:4f:d0:93:5e:14:64:50:b5: c8:79:78:ed:c2:31:da:f8:7f:4e:7c:df:f1:15:9b: 2d:72:f9:53:68:4b:8c:7f:d5:cc:b8:d2:91:ea:bd: 63:8e:15:07:37:80:b3:55:52:a9:d4:06:2c:77:c5: 32:08:6d:1f:18:e0:eb:a3:f0:94:4c:e7:b5:22:a6: be:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:39:F3:C1:2D:F3:FB:0F:E1:60:42:18:0B:9A:E4:19:41:69:F7:70 X509v3 Authority Key Identifier: keyid:39:17:E4:BB:B4:D1:FD:99:40:0E:D9:8C:98:A3:23:AD:AA:B3:89:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYXq3CJK32GiXqGbYSMkmke2FM2xf4FxVegn75oNBdkG/0/3917E4BBB4D1FD99400ED98C98A323ADAAB38977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:40:71:b4:5f:0f:e9:38:ca:6c:83:e7:b1:a9:76:1f:dd:41: f3:a7:b1:33:3f:fa:53:21:0b:ba:ce:cc:61:b6:2f:bf:c4:57: 8d:ab:a5:6b:be:0d:3b:35:fc:cf:4a:0b:4f:34:e4:91:ac:3d: 2f:7d:03:e8:6a:0b:b7:28:ad:90:b1:78:76:4d:b9:4f:ed:1a: e1:8d:5b:0a:62:6f:ec:03:fc:64:8d:30:71:d5:80:be:12:4a: 97:3d:74:39:d2:99:22:f7:82:12:1f:d9:d0:91:84:74:0a:e9: c7:07:ef:e5:1c:46:ed:0a:3c:65:42:43:76:d4:5b:18:82:b5: ee:ea:17:d8:39:1c:83:c1:e2:e1:f2:e5:ec:e5:39:28:e6:10: 0d:4e:a4:38:c8:fa:ee:52:36:de:bb:c4:a9:75:74:6e:77:ae: 5e:09:13:72:99:18:4f:fc:96:45:40:07:3c:70:33:c1:60:0d: 3e:22:86:22:85:88:12:43:40:64:00:db:19:6c:34:cb:cc:c8: b6:80:a5:93:7d:cd:61:71:bb:bf:e7:72:df:64:60:1b:9b:f3: b8:b2:64:08:ab:15:66:35:11:62:4b:a1:c4:b0:e2:bc:4a:0b: 53:d0:57:18:0e:00:30:4b:46:e7:86:9f:84:36:7f:87:2c:57: 60:45:4a:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEGABczO+NwIz4/cl8BBUtDW8WrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzkxN0U0QkJCNEQxRkQ5OTQwMEVEOThDOThBMzIzQURB QUIzODk3NzAeFw0yNTExMDUwMTQ4MzdaFw0yNTExMDYwNTQxMzdaMDMxMTAvBgNV BAMTKDA4MzlGM0MxMkRGM0ZCMEZFMTYwNDIxODBCOUFFNDE5NDE2OUY3NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBUL3XmHXIDVOay35oLLnwJIJQ M/VuUxDlxl47T4yI6jpQusf8QyScijXrs9evOA4UgDTIPmHttm2pvTdLFJHjs3NK e8edYDN95Y4sERl1y/o8TA7eJTSB8FmEjc87h9Buf7+vVAXWINQFJZiwMGKk+8sq 28pvxOCPaxDIlrVO3YrLptSPoxLcKjnRQkqX3X0QcmjSr+Y6+c2vHLCC4UkeoWht feNUnyWiZzNjx7eEtF0r4G5KmErY5eBP0JNeFGRQtch5eO3CMdr4f0583/EVmy1y +VNoS4x/1cy40pHqvWOOFQc3gLNVUqnUBix3xTIIbR8Y4Ouj8JRM57Uipr6jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCDnzwS3z+w/hYEIYC5rkGUFp93AwHwYDVR0j BBgwFoAUORfku7TR/ZlADtmMmKMjraqziXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFlYcTNDSkszMkdpWHFHYllTTWtta2UyRk0yeGY0RnhWZWduNzVvTkJk a0cvMC8zOTE3RTRCQkI0RDFGRDk5NDAwRUQ5OEM5OEEzMjNBREFBQjM4OTc3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5MTdFNEJCQjREMUZEOTk0 MDBFRDk4Qzk4QTMyM0FEQUFCMzg5NzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFlYcTNDSkszMkdpWHFHYllTTWtta2UyRk0yeGY0RnhWZWduNzVvTkJka0cvMC8z OTE3RTRCQkI0RDFGRDk5NDAwRUQ5OEM5OEEzMjNBREFBQjM4OTc3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaEBxtF8P6TjKbIPnsal2H91B86exMz/6UyELus7MYbYvv8RXjaula74NOzX8 z0oLTzTkkaw9L30D6GoLtyitkLF4dk25T+0a4Y1bCmJv7AP8ZI0wcdWAvhJKlz10 OdKZIveCEh/Z0JGEdArpxwfv5RxG7Qo8ZUJDdtRbGIK17uoX2Dkcg8Hi4fLl7OU5 KOYQDU6kOMj67lI23rvEqXV0bneuXgkTcpkYT/yWRUAHPHAzwWANPiKGIoWIEkNA ZADbGWw0y8zItoClk33NYXG7v+dy32RgG5vzuLJkCKsVZjURYkuhxLDivEoLU9BX GA4AMEtG54afhDZ/hyxXYEVKBA== -----END CERTIFICATE-----Generated at Wed Nov 5 03:37:04 2025 by rpki-client