$ rpki-client -vvf rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft File: D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft (raw, json) Hash identifier: APCfmHGLV+cZ4hTNHPwenLYwznFgFkbOqoZCGXpHe8M= Subject key identifier: FB:C3:A8:AE:8D:C1:BA:F2:08:05:E3:D7:31:74:6A:E4:91:9B:1B:13 Authority key identifier: D1:40:32:9A:9C:2C:7F:8E:F6:7D:07:AE:69:78:FC:F2:C2:57:CB:DC Certificate issuer: /CN=D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC Certificate serial: 39CE4539138169B5D9F45F81A1B1ADF8CEA93ED3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer Subject info access: rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft Manifest number: 4C Signing time: Sun 19 Oct 2025 18:37:22 +0000 Manifest this update: Sun 19 Oct 2025 18:32:22 +0000 Manifest next update: Mon 20 Oct 2025 22:21:22 +0000 Files and hashes: 1: D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl (hash: tgzI0RXjuRmWeTDWqG2IJQkdI+UAhtdTVfEknIm9Meo=) 2: 3139302e392e3132362e302f32342d3332203d3e20323731353936.roa (hash: uGWB+dLXvJyRVohmeQH5EDKbrZFb7329DIF62AsG+G4=) 3: 323830343a376530303a3a2f33322d313238203d3e20323731353936.roa (hash: atkpFiuFx9gI+NQUYhUM8BLIYtiVv1QBW1r3n1UGNww=) 4: 3133382e39392e38302e302f32332d3332203d3e20323731353936.roa (hash: HLRC3ILU1/Q0mbHQEP1oVDDagjnMAzt8TFJhqxGdn2k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 22:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ce:45:39:13:81:69:b5:d9:f4:5f:81:a1:b1:ad:f8:ce:a9:3e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC Validity Not Before: Oct 19 18:32:22 2025 GMT Not After : Oct 20 22:21:22 2025 GMT Subject: CN=FBC3A8AE8DC1BAF20805E3D731746AE4919B1B13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8a:cd:cc:80:1c:26:e0:f0:54:c7:d1:6c:b4: 3d:b0:46:83:7c:67:09:7a:75:4c:84:a6:7e:51:9c: 35:17:89:2e:5e:46:86:30:0d:74:89:f6:8e:8f:59: 4a:e0:2b:57:2f:8c:e2:e3:03:92:4b:7e:53:20:ca: 5f:8a:e6:b9:84:d0:ef:ce:7c:48:88:2a:6d:60:3d: 02:7b:52:52:0e:a3:a7:13:d0:2f:30:f7:58:02:94: ff:38:83:dd:02:a1:6c:cf:cf:8e:f2:a1:91:87:e2: 2b:be:82:cc:95:75:04:f7:d5:6b:20:c3:3c:da:64: 16:8c:49:50:59:c6:1c:a8:b2:26:a9:8c:6c:18:71: 3c:d5:ef:c0:7f:b1:6a:f5:c6:0b:fe:f3:58:3a:58: 17:18:1f:58:f6:01:42:ec:d8:0b:ae:68:e4:76:bb: 11:38:08:a2:ad:f9:31:c7:e3:dd:5c:3a:da:0d:f5: 9b:c3:c5:72:a9:ed:8d:8d:a7:3b:cc:65:32:3c:dc: ff:37:7b:85:6a:fb:ae:ac:0b:7b:af:49:60:64:98: eb:63:1a:ff:f8:03:ed:60:1d:fb:ba:c0:d6:1d:58: e4:7f:b8:70:f9:a8:32:2a:14:c4:1b:bb:2f:c0:65: 35:79:9e:92:35:50:7e:3e:6d:fb:45:76:7e:5d:a9: 59:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C3:A8:AE:8D:C1:BA:F2:08:05:E3:D7:31:74:6A:E4:91:9B:1B:13 X509v3 Authority Key Identifier: keyid:D1:40:32:9A:9C:2C:7F:8E:F6:7D:07:AE:69:78:FC:F2:C2:57:CB:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HqqyEHkoWjmW8pPbpUHueeSZnwddKiEQEHTmyZ1eEJL/0/D140329A9C2C7F8EF67D07AE6978FCF2C257CBDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b7:a5:67:aa:d5:4d:70:35:29:33:ad:6b:ff:ce:44:15:dc: 79:96:86:43:db:ba:e0:38:69:a5:dd:0a:7c:94:d9:e5:76:5b: 68:6e:99:75:2d:32:d9:e2:04:a9:2e:ee:c2:2e:50:62:2f:c6: b9:61:7c:0e:7c:6e:b1:58:f2:e1:c3:e1:89:a1:a1:f3:c6:82: f8:a5:2c:f6:40:07:57:e8:01:13:99:17:ac:be:0f:dd:71:b1: c6:5f:5b:a9:4d:ed:2a:d7:8a:ac:cb:ef:fd:c8:ee:4c:db:c8: ae:b8:24:f5:80:92:d5:63:f0:fe:c4:10:74:68:de:b9:c8:a9: 23:81:4a:95:c2:6d:7f:d6:fa:0e:db:67:59:2a:f2:de:3e:30: 70:d9:93:a4:3d:5c:cb:a7:f1:e2:0f:4e:e0:b1:b8:aa:2b:c9: 13:14:19:e8:d3:7e:f5:52:db:3f:bd:43:3e:0c:ab:ac:86:2d: 0f:e3:32:49:25:8c:87:b2:99:12:8f:5b:e6:1c:66:95:56:c3: d5:ed:93:2d:91:9a:de:79:e7:5d:41:10:db:09:63:37:4c:2d: 90:9b:50:19:cf:c6:a6:c2:1d:4b:47:6e:ef:d7:3d:e0:9f:70: 47:18:9b:c7:ef:4c:0b:f8:4d:49:d4:e7:8e:cb:d6:0f:cc:52: 93:16:d6:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOc5FOROBabXZ9F+BobGt+M6pPtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE0MDMyOUE5QzJDN0Y4RUY2N0QwN0FFNjk3OEZDRjJD MjU3Q0JEQzAeFw0yNTEwMTkxODMyMjJaFw0yNTEwMjAyMjIxMjJaMDMxMTAvBgNV BAMTKEZCQzNBOEFFOERDMUJBRjIwODA1RTNENzMxNzQ2QUU0OTE5QjFCMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtis3MgBwm4PBUx9FstD2wRoN8 Zwl6dUyEpn5RnDUXiS5eRoYwDXSJ9o6PWUrgK1cvjOLjA5JLflMgyl+K5rmE0O/O fEiIKm1gPQJ7UlIOo6cT0C8w91gClP84g90CoWzPz47yoZGH4iu+gsyVdQT31Wsg wzzaZBaMSVBZxhyosiapjGwYcTzV78B/sWr1xgv+81g6WBcYH1j2AULs2AuuaOR2 uxE4CKKt+THH491cOtoN9ZvDxXKp7Y2NpzvMZTI83P83e4Vq+66sC3uvSWBkmOtj Gv/4A+1gHfu6wNYdWOR/uHD5qDIqFMQbuy/AZTV5npI1UH4+bftFdn5dqVndAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+8Ooro3BuvIIBePXMXRq5JGbGxMwHwYDVR0j BBgwFoAU0UAympwsf472fQeuaXj88sJXy9wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0hxcXlFSGtvV2ptVzhwUGJwVUh1ZWVTWm53ZGRLaUVRRUhUbXlaMWVF SkwvMC9EMTQwMzI5QTlDMkM3RjhFRjY3RDA3QUU2OTc4RkNGMkMyNTdDQkRDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxNDAzMjlBOUMyQzdGOEVG NjdEMDdBRTY5NzhGQ0YyQzI1N0NCREMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0hxcXlFSGtvV2ptVzhwUGJwVUh1ZWVTWm53ZGRLaUVRRUhUbXlaMWVFSkwvMC9E MTQwMzI5QTlDMkM3RjhFRjY3RDA3QUU2OTc4RkNGMkMyNTdDQkRDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP7elZ6rVTXA1KTOta//ORBXceZaGQ9u64Dhppd0KfJTZ5XZbaG6ZdS0y2eIE qS7uwi5QYi/GuWF8DnxusVjy4cPhiaGh88aC+KUs9kAHV+gBE5kXrL4P3XGxxl9b qU3tKteKrMvv/cjuTNvIrrgk9YCS1WPw/sQQdGjeucipI4FKlcJtf9b6DttnWSry 3j4wcNmTpD1cy6fx4g9O4LG4qivJExQZ6NN+9VLbP71DPgyrrIYtD+MySSWMh7KZ Eo9b5hxmlVbD1e2TLZGa3nnnXUEQ2wljN0wtkJtQGc/GpsIdS0du79c94J9wRxib x+9MC/hNSdTnjsvWD8xSkxbWDA== -----END CERTIFICATE-----Generated at Mon Oct 20 08:32:43 2025 by rpki-client