$ rpki-client -vvf rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft File: 3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft (raw, json) Hash identifier: ST6OI+b385CK+NEhuSNurUQsfXALUEtvLQ/4BMEv9KU= Subject key identifier: 94:2F:68:F9:C8:9E:58:9C:81:12:0D:BF:C4:AA:1F:F3:55:99:2C:00 Authority key identifier: 33:24:A1:D7:2C:5C:01:91:DA:1B:47:B8:BF:D1:BC:84:5B:5A:A4:07 Certificate issuer: /CN=3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407 Certificate serial: 517C77B4E901FB1ACB1CD9CEF077F8C3DE0A6E37 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer Subject info access: rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft Manifest number: D3 Signing time: Tue 04 Nov 2025 19:48:20 +0000 Manifest this update: Tue 04 Nov 2025 19:43:20 +0000 Manifest next update: Wed 05 Nov 2025 22:26:20 +0000 Files and hashes: 1: 3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl (hash: r0XqfOznHUBoeovDtnaVRB9+seYYrltue17VYSw6nNU=) 2: 323830343a393235633a3a2f33322d313238203d3e20323734373037.roa (hash: mkUEVYmV0c5j9aXcvowOcLDEfBOaxNE6dpYUouTdU24=) 3: 3230302e31342e33322e302f32332d3332203d3e20323734373037.roa (hash: ODzRAQKGld4F+Y8wHBsCe+2piAWpl3+jbl1sLUSozuE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 05 Nov 2025 22:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:7c:77:b4:e9:01:fb:1a:cb:1c:d9:ce:f0:77:f8:c3:de:0a:6e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407 Validity Not Before: Nov 4 19:43:20 2025 GMT Not After : Nov 5 22:26:20 2025 GMT Subject: CN=942F68F9C89E589C81120DBFC4AA1FF355992C00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:12:fc:02:df:fb:3d:13:88:a8:69:48:c0:d8: 14:78:20:fd:ea:6c:97:9f:ae:ee:b7:75:36:30:58: 4e:09:da:33:ce:fe:1b:5c:63:ec:e2:e2:5f:76:84: 50:e6:65:a9:fa:c2:c9:9a:9d:c9:69:36:75:04:aa: ee:17:07:53:64:e9:51:fc:51:5e:6a:66:dd:cd:1d: de:90:3d:63:9c:54:f8:87:35:13:19:7f:0a:8f:2a: 8a:cc:b0:37:93:87:1b:88:fa:e9:75:65:7a:e1:15: 8d:19:2f:ac:97:91:df:53:78:76:de:e2:9e:8a:a4: c9:8b:8e:2c:63:b0:d7:89:fc:a3:65:90:f5:aa:f7: 5d:88:45:d1:9b:a1:30:be:86:47:d8:b9:1e:40:9f: 01:b5:19:5c:ed:93:c6:ad:9a:c8:75:d9:0d:cd:1f: c2:2a:61:0b:67:87:13:b0:a5:0f:16:7e:eb:67:07: b6:2b:eb:a8:bd:78:46:77:06:99:53:d6:01:78:01: d9:d1:13:db:63:73:db:72:67:67:d6:75:97:fa:7e: 28:5a:c6:86:16:bf:ab:41:c0:26:6e:dc:d3:a0:85: b7:a4:d6:06:12:67:e7:83:d9:1d:68:f4:38:08:9d: 58:dc:5f:b4:5d:24:4a:cf:de:0d:f0:aa:cd:27:9c: 2e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2F:68:F9:C8:9E:58:9C:81:12:0D:BF:C4:AA:1F:F3:55:99:2C:00 X509v3 Authority Key Identifier: keyid:33:24:A1:D7:2C:5C:01:91:DA:1B:47:B8:BF:D1:BC:84:5B:5A:A4:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/etSLVnxx52Xm1vGKuXNk4brPEnRGE3VQQE7qUb6EpQJ/0/3324A1D72C5C0191DA1B47B8BFD1BC845B5AA407.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e8:14:bb:e0:5d:5f:9e:b1:79:cd:75:01:2a:06:71:16:16: 43:f3:ea:b2:54:a1:2a:f5:b6:74:69:42:69:cc:6d:29:fa:d5: 57:43:33:b6:1d:26:4e:1e:34:a5:bb:06:05:24:7c:49:24:fd: 69:02:cd:c1:34:61:7c:43:42:7c:0a:92:df:b7:62:9a:e8:f3: 8a:b7:01:cd:f9:f6:ef:43:6e:b3:51:df:b1:df:c0:f0:80:1b: 23:77:3d:21:f7:30:58:57:93:b5:6b:d0:25:4d:e2:dd:bf:c3: 9f:3d:9f:c1:94:20:6b:ea:5a:c2:f8:f7:5d:7b:cd:7f:4c:07: 09:5c:97:c6:e2:00:8f:9a:0d:ec:4c:a3:b8:88:a7:30:df:42: 11:23:a1:05:de:71:d2:82:5a:de:e7:9c:69:19:7e:59:7e:38: 01:f2:9b:d9:d0:fc:db:ff:4c:8a:55:ea:15:27:70:20:bb:e6: 71:44:62:9e:41:28:e9:d2:98:35:0b:3f:c5:10:4f:0a:64:39: 21:c7:73:88:d3:b6:79:96:9f:ca:fb:d5:a9:28:eb:fc:a2:c0: 8e:80:29:30:15:35:f7:37:8f:f8:dc:91:d1:92:8f:d7:2d:9e: 4d:1a:f7:ec:3d:ac:0b:41:6c:cc:7d:e0:56:ef:be:d1:97:a6: 2d:de:8e:04 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUUXx3tOkB+xrLHNnO8Hf4w94KbjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMyNEExRDcyQzVDMDE5MURBMUI0N0I4QkZEMUJDODQ1 QjVBQTQwNzAeFw0yNTExMDQxOTQzMjBaFw0yNTExMDUyMjI2MjBaMDMxMTAvBgNV BAMTKDk0MkY2OEY5Qzg5RTU4OUM4MTEyMERCRkM0QUExRkYzNTU5OTJDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAEvwC3/s9E4ioaUjA2BR4IP3q bJefru63dTYwWE4J2jPO/htcY+zi4l92hFDmZan6wsmanclpNnUEqu4XB1Nk6VH8 UV5qZt3NHd6QPWOcVPiHNRMZfwqPKorMsDeThxuI+ul1ZXrhFY0ZL6yXkd9TeHbe 4p6KpMmLjixjsNeJ/KNlkPWq912IRdGboTC+hkfYuR5AnwG1GVztk8atmsh12Q3N H8IqYQtnhxOwpQ8WfutnB7Yr66i9eEZ3BplT1gF4AdnRE9tjc9tyZ2fWdZf6fiha xoYWv6tBwCZu3NOghbek1gYSZ+eD2R1o9DgInVjcX7RdJErP3g3wqs0nnC77AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUlC9o+cieWJyBEg2/xKof81WZLAAwHwYDVR0j BBgwFoAUMySh1yxcAZHaG0e4v9G8hFtapAcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9ldFNMVm54eDUyWG0xdkdLdVhOazRiclBFblJHRTNWUVFFN3FVYjZFcFFK LzAvMzMyNEExRDcyQzVDMDE5MURBMUI0N0I4QkZEMUJDODQ1QjVBQTQwNy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zMzI0QTFENzJDNUMwMTkxREEx QjQ3QjhCRkQxQkM4NDVCNUFBNDA3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2V0 U0xWbnh4NTJYbTF2R0t1WE5rNGJyUEVuUkdFM1ZRUUU3cVViNkVwUUovMC8zMzI0 QTFENzJDNUMwMTkxREExQjQ3QjhCRkQxQkM4NDVCNUFBNDA3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA YOgUu+BdX56xec11ASoGcRYWQ/PqslShKvW2dGlCacxtKfrVV0Mzth0mTh40pbsG BSR8SST9aQLNwTRhfENCfAqS37dimujzircBzfn270Nus1Hfsd/A8IAbI3c9Ifcw WFeTtWvQJU3i3b/Dnz2fwZQga+pawvj3XXvNf0wHCVyXxuIAj5oN7EyjuIinMN9C ESOhBd5x0oJa3uecaRl+WX44AfKb2dD82/9MilXqFSdwILvmcURinkEo6dKYNQs/ xRBPCmQ5IcdziNO2eZafyvvVqSjr/KLAjoApMBU19zeP+NyR0ZKP1y2eTRr37D2s C0FszH3gVu++0ZemLd6OBA== -----END CERTIFICATE-----Generated at Wed Nov 5 05:10:23 2025 by rpki-client