$ rpki-client -vvf rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/3F84F51408CD88D165CE931B15E48DC9CB8084BE.mft File: 3F84F51408CD88D165CE931B15E48DC9CB8084BE.mft (raw, json) Hash identifier: Y92khImYADGFAd9SaxR+aUP3klAZCLX4G79T9TZik5g= Subject key identifier: D2:03:05:6F:09:21:5F:58:B6:2B:FE:1F:6C:5D:79:4C:00:8D:A5:9C Authority key identifier: 3F:84:F5:14:08:CD:88:D1:65:CE:93:1B:15:E4:8D:C9:CB:80:84:BE Certificate issuer: /CN=3F84F51408CD88D165CE931B15E48DC9CB8084BE Certificate serial: 3F0D8694EDE7C303B6E757FDAC6F0884326EB45D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F84F51408CD88D165CE931B15E48DC9CB8084BE.cer Subject info access: rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/3F84F51408CD88D165CE931B15E48DC9CB8084BE.mft Manifest number: 021C Signing time: Tue 04 Nov 2025 22:10:26 +0000 Manifest this update: Tue 04 Nov 2025 22:05:26 +0000 Manifest next update: Thu 06 Nov 2025 00:27:26 +0000 Files and hashes: 1: 3F84F51408CD88D165CE931B15E48DC9CB8084BE.crl (hash: dW4ivHh71CarbyMbHIntoNKbn8X8FB521EQzobPXV3s=) 2: 34352e3137362e3232342e302f32322d3234203d3e20323638393535.roa (hash: GGWd5jzuDUBCkCA1dxXKUcZ2IT21ETYcfHfZL/qe2Xg=) 3: 323830343a356432633a3a2f33322d3438203d3e20323638393535.roa (hash: 73J1seQFy7gN9PvO2G0tV2jiq6MbO1z9ZU1/Z/I21Ac=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/3F84F51408CD88D165CE931B15E48DC9CB8084BE.crl rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/3F84F51408CD88D165CE931B15E48DC9CB8084BE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F84F51408CD88D165CE931B15E48DC9CB8084BE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:0d:86:94:ed:e7:c3:03:b6:e7:57:fd:ac:6f:08:84:32:6e:b4:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F84F51408CD88D165CE931B15E48DC9CB8084BE Validity Not Before: Nov 4 22:05:26 2025 GMT Not After : Nov 6 00:27:26 2025 GMT Subject: CN=D203056F09215F58B62BFE1F6C5D794C008DA59C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:aa:99:59:86:cf:f5:92:03:81:df:e5:81:42: c3:a9:cd:c2:8a:cf:19:27:36:fb:a0:f1:4f:13:e2: 11:68:33:7d:34:f6:a8:bb:8e:df:75:27:25:4d:5a: ae:a6:38:9f:11:cd:23:fa:b9:84:d5:a3:50:10:2d: 9e:12:e6:c7:ef:a1:e8:50:7c:73:81:1e:b9:41:d3: f0:03:d7:df:27:76:88:08:ca:74:f6:f6:41:fb:c1: d4:08:90:89:a9:79:c2:eb:c1:32:69:dd:ac:bd:4b: 24:d1:61:cc:dd:99:c1:b5:4e:92:14:47:8d:57:43: bf:29:2a:c7:37:2a:57:21:c6:76:aa:5f:8a:fe:e7: db:3f:74:31:fc:a2:aa:d7:32:bb:84:ac:ef:4d:88: 1e:da:0e:2a:c2:f9:cd:b5:41:a6:08:25:2f:b6:75: 80:f0:f6:ab:3f:38:30:62:23:00:dd:e7:4a:36:e1: a9:3c:6f:7d:98:d0:3d:8b:21:a7:ef:7c:4b:6a:c0: e2:cf:46:1a:9a:7e:b6:5d:bd:60:3e:34:b8:92:ad: c5:23:9f:67:cb:3c:e9:54:55:6b:97:06:96:bc:0c: 5e:f5:e8:7f:32:15:d0:df:49:9e:f6:a5:a6:02:d8: 68:e2:57:1f:94:89:e8:57:b1:e1:97:1d:e6:9b:1d: 1d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:03:05:6F:09:21:5F:58:B6:2B:FE:1F:6C:5D:79:4C:00:8D:A5:9C X509v3 Authority Key Identifier: keyid:3F:84:F5:14:08:CD:88:D1:65:CE:93:1B:15:E4:8D:C9:CB:80:84:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/3F84F51408CD88D165CE931B15E48DC9CB8084BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F84F51408CD88D165CE931B15E48DC9CB8084BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/3F84F51408CD88D165CE931B15E48DC9CB8084BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f6:05:1d:c7:0e:ad:63:aa:c4:ae:86:aa:38:ca:29:6a:0d: 29:27:20:03:ee:53:05:a7:6b:18:73:f9:62:06:00:5f:dd:4d: 86:d9:01:64:fc:98:1c:de:ec:96:07:2e:1c:fb:48:eb:d1:ba: d4:c8:f5:37:5f:e7:9e:b2:32:43:1e:62:42:0a:5f:4c:89:f4: 8a:3f:4b:50:a7:0b:cb:8e:79:be:c6:3f:96:1b:3d:a5:7c:31: f2:14:27:98:5d:37:8e:80:ab:15:be:52:81:79:0d:95:c3:d6: db:ce:05:07:ee:f8:cf:a0:e1:ae:8d:e6:18:20:3f:f0:d9:1e: 81:66:b3:ac:80:79:e4:da:3f:d6:33:63:2b:29:76:31:3e:fd: 0b:80:0d:17:14:bf:82:6a:4a:c3:a8:40:c3:92:15:0f:59:f5: 13:a5:7d:37:6c:76:28:f8:19:df:56:07:4f:03:67:91:15:ee: c2:7d:c4:42:ee:e7:f8:5c:5e:e9:79:a0:dd:a5:17:c4:5d:6f: 91:f2:bf:56:24:cb:1d:b6:4f:d2:7d:50:45:2e:e1:bc:6e:ca: c9:29:fe:cd:91:ea:f0:2f:66:b5:97:af:6e:52:48:8b:40:e3: 03:bc:45:60:ba:34:2d:f1:e8:c0:ee:10:7e:b2:30:f4:93:f6: ca:ad:93:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPw2GlO3nwwO251f9rG8IhDJutF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y4NEY1MTQwOENEODhEMTY1Q0U5MzFCMTVFNDhEQzlD QjgwODRCRTAeFw0yNTExMDQyMjA1MjZaFw0yNTExMDYwMDI3MjZaMDMxMTAvBgNV BAMTKEQyMDMwNTZGMDkyMTVGNThCNjJCRkUxRjZDNUQ3OTRDMDA4REE1OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVqplZhs/1kgOB3+WBQsOpzcKK zxknNvug8U8T4hFoM3009qi7jt91JyVNWq6mOJ8RzSP6uYTVo1AQLZ4S5sfvoehQ fHOBHrlB0/AD198ndogIynT29kH7wdQIkImpecLrwTJp3ay9SyTRYczdmcG1TpIU R41XQ78pKsc3KlchxnaqX4r+59s/dDH8oqrXMruErO9NiB7aDirC+c21QaYIJS+2 dYDw9qs/ODBiIwDd50o24ak8b32Y0D2LIafvfEtqwOLPRhqafrZdvWA+NLiSrcUj n2fLPOlUVWuXBpa8DF716H8yFdDfSZ72paYC2GjiVx+UiehXseGXHeabHR2/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0gMFbwkhX1i2K/4fbF15TACNpZwwHwYDVR0j BBgwFoAUP4T1FAjNiNFlzpMbFeSNycuAhL4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUNwMjUzcEg5cERzRWs5UG5YeTI2N2ZrZkNlNW00cnVnVXZZazd0bkpm TTYvMC8zRjg0RjUxNDA4Q0Q4OEQxNjVDRTkzMUIxNUU0OERDOUNCODA4NEJFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGODRGNTE0MDhDRDg4RDE2 NUNFOTMxQjE1RTQ4REM5Q0I4MDg0QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUNwMjUzcEg5cERzRWs5UG5YeTI2N2ZrZkNlNW00cnVnVXZZazd0bkpmTTYvMC8z Rjg0RjUxNDA4Q0Q4OEQxNjVDRTkzMUIxNUU0OERDOUNCODA4NEJFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAfYFHccOrWOqxK6GqjjKKWoNKScgA+5TBadrGHP5YgYAX91NhtkBZPyYHN7s lgcuHPtI69G61Mj1N1/nnrIyQx5iQgpfTIn0ij9LUKcLy455vsY/lhs9pXwx8hQn mF03joCrFb5SgXkNlcPW284FB+74z6Dhro3mGCA/8NkegWazrIB55No/1jNjKyl2 MT79C4ANFxS/gmpKw6hAw5IVD1n1E6V9N2x2KPgZ31YHTwNnkRXuwn3EQu7n+Fxe 6Xmg3aUXxF1vkfK/ViTLHbZP0n1QRS7hvG7KySn+zZHq8C9mtZevblJIi0DjA7xF YLo0LfHowO4QfrIw9JP2yq2T/Q== -----END CERTIFICATE-----Generated at Wed Nov 5 03:19:02 2025 by rpki-client