$ rpki-client -vvf rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.mft File: 3C8F07685F793211CE3D58E8AE40E3335D01AC65.mft (raw, json) Hash identifier: E3yjDAT/vOGraKpKUchMbE4s5DMpU5g24B8CQgQlvV4= Subject key identifier: 0D:F6:B7:57:B9:95:F6:C9:4D:B3:BF:D1:77:2F:D6:2A:72:0E:F0:33 Authority key identifier: 3C:8F:07:68:5F:79:32:11:CE:3D:58:E8:AE:40:E3:33:5D:01:AC:65 Certificate issuer: /CN=3C8F07685F793211CE3D58E8AE40E3335D01AC65 Certificate serial: 4E5D9D8B8A8A7E567AF6B38BA878A0A63177F9B3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer Subject info access: rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.mft Manifest number: 40 Signing time: Mon 20 Oct 2025 02:15:48 +0000 Manifest this update: Mon 20 Oct 2025 02:10:48 +0000 Manifest next update: Tue 21 Oct 2025 04:16:48 +0000 Files and hashes: 1: 323830343a356336383a3a2f33322d313238203d3e20323638393037.roa (hash: ydeiKw+dDRQOyoxa0XqUWRDqo3xlSdNN3y9kxTu5DL0=) 2: 3C8F07685F793211CE3D58E8AE40E3335D01AC65.crl (hash: FeY6/OFOwjMJhITxu1s9xTBPJqmZsoBzLCcklrGL70g=) 3: 34352e3137352e39362e302f32322d3332203d3e20323638393037.roa (hash: gWzg9YpbqycEBcqFyDV9C2c1ifzIdZhpIdaqvGl1vpE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.crl rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 04:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5d:9d:8b:8a:8a:7e:56:7a:f6:b3:8b:a8:78:a0:a6:31:77:f9:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C8F07685F793211CE3D58E8AE40E3335D01AC65 Validity Not Before: Oct 20 02:10:48 2025 GMT Not After : Oct 21 04:16:48 2025 GMT Subject: CN=0DF6B757B995F6C94DB3BFD1772FD62A720EF033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f5:2b:c6:b0:d7:e4:c2:8d:98:5c:eb:f0:b2: 7b:91:e4:fb:1d:6b:ba:3d:ce:b1:d2:bb:10:6a:76: 40:02:25:a5:4d:68:fe:74:6e:e0:34:56:b5:2c:f7: 3f:84:09:6e:9c:5f:64:60:1a:5b:7f:63:fc:cf:af: 23:db:5d:e6:cd:46:b9:04:4c:41:0c:1c:78:1b:8b: a0:a8:df:f0:af:4a:1d:98:0f:33:8b:ca:3a:0b:0d: 21:03:37:44:8b:a4:c9:b3:73:36:b8:c9:5c:a9:88: 67:f3:d4:cf:3d:b9:55:28:ed:84:27:e4:3f:77:12: 2c:03:8d:42:b7:2f:2d:00:68:26:4a:69:1e:02:e3: 71:d9:ab:09:4f:e4:16:68:4f:31:68:24:48:9a:31: 27:cc:ee:61:20:65:94:eb:fb:dd:83:56:14:d9:24: 86:fe:ff:47:ff:b7:74:3d:2e:fb:7c:aa:0f:11:25: 1c:96:ff:5b:57:b1:f8:87:cc:38:2e:82:a9:af:0e: 9e:33:73:f3:bc:f8:c3:9a:ef:91:b1:70:c1:c6:35: 67:70:f8:e4:a2:ac:19:c5:35:01:e8:cd:a4:cb:db: 2c:3a:ea:72:5c:b1:c5:27:06:19:7e:1f:90:ab:e2: 25:24:ad:8f:65:e1:1f:a1:8b:cb:cf:a5:a5:d8:9c: 1d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F6:B7:57:B9:95:F6:C9:4D:B3:BF:D1:77:2F:D6:2A:72:0E:F0:33 X509v3 Authority Key Identifier: keyid:3C:8F:07:68:5F:79:32:11:CE:3D:58:E8:AE:40:E3:33:5D:01:AC:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F07685F793211CE3D58E8AE40E3335D01AC65.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tciCTnqTq3bsatDB2UXRKVEQksyLKZEaZ8kQsQsjM6B/0/3C8F07685F793211CE3D58E8AE40E3335D01AC65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:18:81:2a:03:26:14:fb:f0:64:ad:27:2c:d6:59:3e:f5:a5: 52:d6:45:dd:05:77:cb:e3:78:f6:ea:39:4b:33:2a:64:b0:3c: 38:91:59:f2:af:88:b6:c8:20:35:f4:ee:a7:eb:ce:5a:28:ff: 66:df:62:25:10:d8:b3:1b:76:f4:4a:97:24:a3:1c:91:29:49: 52:c0:65:79:e8:2a:3d:88:30:82:50:31:06:9f:b8:ea:5a:70: 99:a4:c9:c8:e3:a6:86:55:e2:e6:f3:63:87:78:77:e4:49:d1: 6f:dd:29:35:6e:e1:f1:30:59:8f:20:67:73:08:8d:b1:5a:80: 68:0b:45:06:d3:5f:8b:5f:59:88:6b:47:ee:a9:8d:03:8e:26: 4d:96:19:ba:1a:5a:d5:0e:61:9c:37:0a:e7:6c:7e:71:42:06: 91:a2:b0:ca:e7:4e:b9:f0:11:23:61:1b:89:bd:a0:31:9c:08: 0a:70:44:53:a8:f6:ad:46:67:92:1d:2b:6d:a4:d5:1f:d9:4b: 78:35:1b:dd:c8:8a:89:4d:84:32:29:62:b7:40:a2:38:74:55: f1:08:34:46:a7:23:b3:f3:d6:b0:5b:ed:a7:21:51:04:d7:e0: a7:63:7d:6e:eb:7c:eb:99:b4:c3:46:75:84:ff:c5:a9:c4:df: e7:84:f8:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTl2di4qKflZ69rOLqHigpjF3+bMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M4RjA3Njg1Rjc5MzIxMUNFM0Q1OEU4QUU0MEUzMzM1 RDAxQUM2NTAeFw0yNTEwMjAwMjEwNDhaFw0yNTEwMjEwNDE2NDhaMDMxMTAvBgNV BAMTKDBERjZCNzU3Qjk5NUY2Qzk0REIzQkZEMTc3MkZENjJBNzIwRUYwMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp9SvGsNfkwo2YXOvwsnuR5Psd a7o9zrHSuxBqdkACJaVNaP50buA0VrUs9z+ECW6cX2RgGlt/Y/zPryPbXebNRrkE TEEMHHgbi6Co3/CvSh2YDzOLyjoLDSEDN0SLpMmzcza4yVypiGfz1M89uVUo7YQn 5D93EiwDjUK3Ly0AaCZKaR4C43HZqwlP5BZoTzFoJEiaMSfM7mEgZZTr+92DVhTZ JIb+/0f/t3Q9Lvt8qg8RJRyW/1tXsfiHzDgugqmvDp4zc/O8+MOa75GxcMHGNWdw +OSirBnFNQHozaTL2yw66nJcscUnBhl+H5Cr4iUkrY9l4R+hi8vPpaXYnB3lAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDfa3V7mV9slNs7/Rdy/WKnIO8DMwHwYDVR0j BBgwFoAUPI8HaF95MhHOPVjorkDjM10BrGUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnRjaUNUbnFUcTNic2F0REIyVVhSS1ZFUWtzeUxLWkVhWjhrUXNRc2pN NkIvMC8zQzhGMDc2ODVGNzkzMjExQ0UzRDU4RThBRTQwRTMzMzVEMDFBQzY1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDOEYwNzY4NUY3OTMyMTFD RTNENThFOEFFNDBFMzMzNUQwMUFDNjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnRjaUNUbnFUcTNic2F0REIyVVhSS1ZFUWtzeUxLWkVhWjhrUXNRc2pNNkIvMC8z QzhGMDc2ODVGNzkzMjExQ0UzRDU4RThBRTQwRTMzMzVEMDFBQzY1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALBiBKgMmFPvwZK0nLNZZPvWlUtZF3QV3y+N49uo5SzMqZLA8OJFZ8q+Itsgg NfTup+vOWij/Zt9iJRDYsxt29EqXJKMckSlJUsBleegqPYgwglAxBp+46lpwmaTJ yOOmhlXi5vNjh3h35EnRb90pNW7h8TBZjyBncwiNsVqAaAtFBtNfi19ZiGtH7qmN A44mTZYZuhpa1Q5hnDcK52x+cUIGkaKwyudOufARI2Ebib2gMZwICnBEU6j2rUZn kh0rbaTVH9lLeDUb3ciKiU2EMilit0CiOHRV8Qg0Rqcjs/PWsFvtpyFRBNfgp2N9 but865m0w0Z1hP/FqcTf54T4wg== -----END CERTIFICATE-----Generated at Mon Oct 20 06:41:41 2025 by rpki-client