$ rpki-client -vvf rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.mft File: 3D10000E40C545C40D0B40A419954E6B6B94E80F.mft (raw, json) Hash identifier: gt4SbfNV3GbqV6Bm7NenO9drm8Yej4Tus8ejXAMA1XY= Subject key identifier: 30:D8:AD:93:3C:42:66:64:A7:B9:8D:3F:48:3E:F8:79:31:89:A3:61 Authority key identifier: 3D:10:00:0E:40:C5:45:C4:0D:0B:40:A4:19:95:4E:6B:6B:94:E8:0F Certificate issuer: /CN=3D10000E40C545C40D0B40A419954E6B6B94E80F Certificate serial: 72C245E31BFF730C031088118F5B4E533D51E689 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.mft Manifest number: 02E3 Signing time: Tue 04 Nov 2025 22:07:58 +0000 Manifest this update: Tue 04 Nov 2025 22:02:58 +0000 Manifest next update: Thu 06 Nov 2025 00:16:58 +0000 Files and hashes: 1: 323830343a313363383a3a2f33322d3438203d3e20323633353531.roa (hash: /hIpNtuEzhiojgRNiztWaFYPpbFP5H++w4j3J6l6unA=) 2: 3D10000E40C545C40D0B40A419954E6B6B94E80F.crl (hash: p3U18dO71R7l4Uc9n6XUyDy0zTZULy9JTIu8EvcrP6w=) 3: 3137372e38342e3135362e302f32322d3234203d3e20323633353531.roa (hash: hOarYccXAAG/SirinUShOfvyMPiIxns5fD4Nagfcr+E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.crl rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 00:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c2:45:e3:1b:ff:73:0c:03:10:88:11:8f:5b:4e:53:3d:51:e6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D10000E40C545C40D0B40A419954E6B6B94E80F Validity Not Before: Nov 4 22:02:58 2025 GMT Not After : Nov 6 00:16:58 2025 GMT Subject: CN=30D8AD933C426664A7B98D3F483EF8793189A361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:87:40:aa:c7:ac:3d:79:1b:31:5c:24:cd:b0: 39:a5:5a:d8:bb:51:03:a3:f6:36:d4:94:e6:23:a6: 7e:ac:be:43:54:18:d5:ee:09:0e:6e:f7:2d:c2:54: 26:7f:6e:fc:d9:8b:9b:90:b0:c2:93:5a:dd:a3:f1: f7:e7:56:e9:80:4d:2a:0a:03:42:8e:3d:ef:88:8c: ba:6c:39:34:77:c6:33:f2:21:cf:7b:af:a4:b3:6b: 5d:10:26:13:ea:45:a1:1a:c3:fd:32:65:36:9f:c4: eb:2c:73:8a:53:89:42:b9:f0:39:dd:ad:cc:eb:ce: 3d:3b:26:16:f6:21:68:f3:3e:dc:b8:d1:91:ed:0a: 96:ee:db:bf:07:0b:81:8c:80:b2:e1:e7:5e:5e:a0: eb:4a:5a:f9:33:8e:6b:66:1f:78:85:81:47:77:2d: 03:93:d8:86:36:d3:5c:19:ac:c3:f9:17:b9:9d:2b: e5:b1:54:70:2f:2a:5d:a1:41:e1:e3:56:cd:b6:43: 97:98:6a:8d:f6:1d:78:31:e6:37:a3:a7:24:56:37: 8a:c6:9f:a9:3e:12:a5:e6:3f:64:11:e4:9d:0b:88: b0:5a:47:f6:5f:0f:00:f0:5f:cb:33:54:f7:43:7b: b5:b1:83:a5:69:68:57:db:32:75:7b:0d:7f:a1:3d: ea:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D8:AD:93:3C:42:66:64:A7:B9:8D:3F:48:3E:F8:79:31:89:A3:61 X509v3 Authority Key Identifier: keyid:3D:10:00:0E:40:C5:45:C4:0D:0B:40:A4:19:95:4E:6B:6B:94:E8:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:4f:fc:9e:ad:5f:a0:ae:74:72:b2:ec:1f:94:9d:f2:35:42: 57:97:f8:75:b6:49:eb:5c:85:f0:3f:99:f5:19:b8:57:a9:b1: 28:89:fa:4c:97:a3:1c:8a:40:be:a7:cf:40:21:5d:19:64:a8: 43:e2:ed:f0:e3:cf:b7:ce:d3:61:15:22:13:d3:6f:f4:98:33: 60:98:f2:2e:fa:bb:4b:8c:39:69:63:b2:46:c5:bf:9b:32:e0: bd:d3:b0:6a:df:3a:66:a1:f1:d4:b4:6e:c2:06:06:9d:f4:63: 86:1d:35:55:ad:89:07:aa:0c:d5:ee:57:df:ff:2d:e0:43:a7: dd:fb:bd:74:45:81:ce:eb:13:60:7a:47:4e:03:7c:47:37:99: bf:33:55:61:14:21:3e:a2:88:c1:20:bd:6c:f7:a1:e4:fa:df: 58:1c:d1:61:a8:ed:a0:a1:c2:05:ea:be:a9:dc:4d:12:e8:e3: 79:fb:47:4d:fc:af:5c:52:ca:ba:6b:f9:74:d5:80:00:c6:db: cf:91:20:9c:e6:93:2c:bb:6e:cf:1d:a0:e8:cf:6a:e1:00:b4: 76:43:74:2f:9d:6d:54:c7:04:d3:b3:86:71:66:d6:42:d8:b3: 60:fe:34:02:d1:8e:89:1b:ba:c5:85:90:36:c6:55:12:24:35: 2b:76:fc:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcsJF4xv/cwwDEIgRj1tOUz1R5okwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QxMDAwMEU0MEM1NDVDNDBEMEI0MEE0MTk5NTRFNkI2 Qjk0RTgwRjAeFw0yNTExMDQyMjAyNThaFw0yNTExMDYwMDE2NThaMDMxMTAvBgNV BAMTKDMwRDhBRDkzM0M0MjY2NjRBN0I5OEQzRjQ4M0VGODc5MzE4OUEzNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXh0Cqx6w9eRsxXCTNsDmlWti7 UQOj9jbUlOYjpn6svkNUGNXuCQ5u9y3CVCZ/bvzZi5uQsMKTWt2j8ffnVumATSoK A0KOPe+IjLpsOTR3xjPyIc97r6Sza10QJhPqRaEaw/0yZTafxOssc4pTiUK58Dnd rczrzj07Jhb2IWjzPty40ZHtCpbu278HC4GMgLLh515eoOtKWvkzjmtmH3iFgUd3 LQOT2IY201wZrMP5F7mdK+WxVHAvKl2hQeHjVs22Q5eYao32HXgx5jejpyRWN4rG n6k+EqXmP2QR5J0LiLBaR/ZfDwDwX8szVPdDe7Wxg6VpaFfbMnV7DX+hPep/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMNitkzxCZmSnuY0/SD74eTGJo2EwHwYDVR0j BBgwFoAUPRAADkDFRcQNC0CkGZVOa2uU6A8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGMxZUI4OW4xbWJ1b3Zacno3RnBmWnNXNnF6QUVKYzRMc0xSRHpwem5H RWcvMC8zRDEwMDAwRTQwQzU0NUM0MEQwQjQwQTQxOTk1NEU2QjZCOTRFODBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEMTAwMDBFNDBDNTQ1QzQw RDBCNDBBNDE5OTU0RTZCNkI5NEU4MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGMxZUI4OW4xbWJ1b3Zacno3RnBmWnNXNnF6QUVKYzRMc0xSRHpwem5HRWcvMC8z RDEwMDAwRTQwQzU0NUM0MEQwQjQwQTQxOTk1NEU2QjZCOTRFODBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA0/8nq1foK50crLsH5Sd8jVCV5f4dbZJ61yF8D+Z9Rm4V6mxKIn6TJejHIpA vqfPQCFdGWSoQ+Lt8OPPt87TYRUiE9Nv9JgzYJjyLvq7S4w5aWOyRsW/mzLgvdOw at86ZqHx1LRuwgYGnfRjhh01Va2JB6oM1e5X3/8t4EOn3fu9dEWBzusTYHpHTgN8 RzeZvzNVYRQhPqKIwSC9bPeh5PrfWBzRYajtoKHCBeq+qdxNEujjeftHTfyvXFLK umv5dNWAAMbbz5EgnOaTLLtuzx2g6M9q4QC0dkN0L51tVMcE07OGcWbWQtizYP40 AtGOiRu6xYWQNsZVEiQ1K3b8ng== -----END CERTIFICATE-----Generated at Wed Nov 5 11:46:51 2025 by rpki-client