$ rpki-client -vvf rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft File: 3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft (raw, json) Hash identifier: sawCTvwOe1wnjFz2iLV6RV2g7aZpwfmTHV+KXlM9bzI= Subject key identifier: AA:7D:D0:3A:83:66:3B:27:B9:52:39:A4:06:DB:4B:0B:6C:76:1B:3F Authority key identifier: 3D:BE:C7:71:F5:B3:B1:E1:95:09:34:62:3A:EE:C5:51:9C:E7:1A:05 Certificate issuer: /CN=3DBEC771F5B3B1E1950934623AEEC5519CE71A05 Certificate serial: 5976DA78D9EAE0E1B50951BF08945B65C383DEA1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer Subject info access: rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft Manifest number: 030B Signing time: Wed 05 Nov 2025 10:23:43 +0000 Manifest this update: Wed 05 Nov 2025 10:18:43 +0000 Manifest next update: Thu 06 Nov 2025 13:06:43 +0000 Files and hashes: 1: 3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl (hash: JGaHe9bHdl2sphGrDpEbnUoozhZoFSJJv4vwsBhYf08=) 2: 323830343a363866383a3a2f33322d3438203d3e20323730323430.roa (hash: Zf5J1vo0exwtyULcPbQWl9oqPv7UiP9VJcKCX094QC8=) 3: 34352e3139312e3234302e302f32322d3234203d3e20323730323430.roa (hash: 334eFyhe5qHaD8UdK0Gjl0ftTL+be+I51bBwMtBerMU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 13:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:76:da:78:d9:ea:e0:e1:b5:09:51:bf:08:94:5b:65:c3:83:de:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DBEC771F5B3B1E1950934623AEEC5519CE71A05 Validity Not Before: Nov 5 10:18:43 2025 GMT Not After : Nov 6 13:06:43 2025 GMT Subject: CN=AA7DD03A83663B27B95239A406DB4B0B6C761B3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:35:e4:f0:00:82:af:35:40:79:b9:03:5a:b7: 6d:24:db:63:c1:ad:37:2e:d6:85:c9:a3:c3:b8:99: bd:a3:c3:0b:56:59:1e:f8:e3:88:58:0d:f2:75:ad: 71:3a:f3:22:b3:2a:47:49:c7:ec:fc:64:a5:05:3e: 72:ea:b9:05:2e:09:ca:1e:f7:b0:37:48:19:29:00: dc:ec:dd:b0:30:ff:b8:11:07:8f:4e:bb:b0:f5:ca: e3:36:c6:a6:c1:d7:e4:ff:5f:4f:1c:a4:f4:78:ea: fc:67:9a:a4:bc:d1:39:4a:02:26:40:ae:7a:70:ec: 31:60:c7:c6:e9:0e:31:b7:3d:9d:b7:06:2a:6b:1b: de:e7:c5:65:e2:60:80:58:de:c5:24:60:46:0a:96: cc:cc:f8:cd:68:07:c0:cc:55:1d:b4:0a:ed:c2:e9: 51:bf:1f:27:6d:71:26:09:34:74:2d:62:6c:cf:5b: 83:17:7f:61:73:82:5c:7e:23:78:99:e3:98:35:4d: 63:44:25:58:53:c7:fd:88:53:8c:81:b3:a1:bf:ee: 91:fb:26:a6:af:9a:1f:87:61:8a:76:e6:c5:c9:bf: 68:3b:e6:ba:3f:f8:9c:8b:a3:5e:df:d0:87:7a:dc: 2d:7c:c6:06:45:1e:49:07:bc:01:bd:bc:88:32:d6: 35:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7D:D0:3A:83:66:3B:27:B9:52:39:A4:06:DB:4B:0B:6C:76:1B:3F X509v3 Authority Key Identifier: keyid:3D:BE:C7:71:F5:B3:B1:E1:95:09:34:62:3A:EE:C5:51:9C:E7:1A:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e8:dc:0e:18:53:3b:8b:ab:a9:fb:4e:50:86:60:77:31:c9: 47:85:0b:81:3b:ea:f8:3d:c5:e3:85:e5:21:6f:f8:31:24:03: ac:a8:96:25:ec:2c:67:12:9c:61:b1:0a:41:ad:c2:13:1f:15: ee:e2:dc:df:06:b0:d4:a1:50:98:97:55:58:23:42:66:25:59: 1b:64:f8:10:75:f4:fa:46:5e:e1:67:0d:95:12:0b:f4:71:9c: df:a8:a3:59:e0:ef:d8:df:0a:ed:ec:bf:b4:1d:1f:16:45:c3: aa:e3:28:46:9e:46:61:3d:0b:22:d3:79:34:5e:2e:3d:d7:98: 42:17:80:63:79:22:63:fa:f0:1e:8c:46:e7:85:ea:47:53:79: f9:a0:71:45:6d:ac:e2:56:84:df:3b:41:f1:0d:d3:4e:d3:fa: 95:e8:f5:39:89:bc:f9:ee:7b:b6:d5:33:ce:ab:c0:33:be:e0: 44:06:88:96:bf:9a:0a:ba:9b:f2:cd:9e:22:2a:59:82:de:7b: ee:28:b5:e8:5a:d0:72:6b:04:b2:8b:40:50:94:3d:e8:21:dd: 68:b1:55:0a:27:0e:97:b6:0a:2a:24:2e:88:67:10:2e:f2:76: f4:1c:a9:10:85:aa:cb:12:5c:10:cf:df:a1:a8:e0:2b:08:e6: 68:e5:49:5d -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUWXbaeNnq4OG1CVG/CJRbZcOD3qEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RCRUM3NzFGNUIzQjFFMTk1MDkzNDYyM0FFRUM1NTE5 Q0U3MUEwNTAeFw0yNTExMDUxMDE4NDNaFw0yNTExMDYxMzA2NDNaMDMxMTAvBgNV BAMTKEFBN0REMDNBODM2NjNCMjdCOTUyMzlBNDA2REI0QjBCNkM3NjFCM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnNeTwAIKvNUB5uQNat20k22PB rTcu1oXJo8O4mb2jwwtWWR7444hYDfJ1rXE68yKzKkdJx+z8ZKUFPnLquQUuCcoe 97A3SBkpANzs3bAw/7gRB49Ou7D1yuM2xqbB1+T/X08cpPR46vxnmqS80TlKAiZA rnpw7DFgx8bpDjG3PZ23BiprG97nxWXiYIBY3sUkYEYKlszM+M1oB8DMVR20Cu3C 6VG/HydtcSYJNHQtYmzPW4MXf2Fzglx+I3iZ45g1TWNEJVhTx/2IU4yBs6G/7pH7 Jqavmh+HYYp25sXJv2g75ro/+JyLo17f0Id63C18xgZFHkkHvAG9vIgy1jUzAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUqn3QOoNmOye5UjmkBttLC2x2Gz8wHwYDVR0j BBgwFoAUPb7HcfWzseGVCTRiOu7FUZznGgUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9xNmdVTm1xSDFjaHF2VEpiZFJDTFVCVHdRYzNKejZwTG1INkZub2VNREJv LzEvM0RCRUM3NzFGNUIzQjFFMTk1MDkzNDYyM0FFRUM1NTE5Q0U3MUEwNS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zREJFQzc3MUY1QjNCMUUxOTUw OTM0NjIzQUVFQzU1MTlDRTcxQTA1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3E2 Z1VObXFIMWNocXZUSmJkUkNMVUJUd1FjM0p6NnBMbUg2Rm5vZU1EQm8vMS8zREJF Qzc3MUY1QjNCMUUxOTUwOTM0NjIzQUVFQzU1MTlDRTcxQTA1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA HejcDhhTO4urqftOUIZgdzHJR4ULgTvq+D3F44XlIW/4MSQDrKiWJewsZxKcYbEK Qa3CEx8V7uLc3waw1KFQmJdVWCNCZiVZG2T4EHX0+kZe4WcNlRIL9HGc36ijWeDv 2N8K7ey/tB0fFkXDquMoRp5GYT0LItN5NF4uPdeYQheAY3kiY/rwHoxG54XqR1N5 +aBxRW2s4laE3ztB8Q3TTtP6lej1OYm8+e57ttUzzqvAM77gRAaIlr+aCrqb8s2e IipZgt577ii16FrQcmsEsotAUJQ96CHdaLFVCicOl7YKKiQuiGcQLvJ29BypEIWq yxJcEM/foajgKwjmaOVJXQ== -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:07 2025 by rpki-client