$ rpki-client -vvf rpki-repo.registro.br/repo/3JytBtNNmXupZVL381xuJt2NxhU6cUmQqpN8No8VbC2J/0/C1107F3AA9659ECBD1DF0576BD7054B4135DD10B.mft File: C1107F3AA9659ECBD1DF0576BD7054B4135DD10B.mft (raw, json) Hash identifier: 3yhY0Yhr1dbCcMdyZdSnRZFnkPJ4t5ttIN6cw78XQc0= Subject key identifier: C1:29:7C:5F:2D:72:B4:C7:7F:80:B8:CB:82:DB:83:08:67:7D:D8:87 Authority key identifier: C1:10:7F:3A:A9:65:9E:CB:D1:DF:05:76:BD:70:54:B4:13:5D:D1:0B Certificate issuer: /CN=C1107F3AA9659ECBD1DF0576BD7054B4135DD10B Certificate serial: 4BEEE820EE8F5B04E3044E1B8A1FC645DFB63F6D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1107F3AA9659ECBD1DF0576BD7054B4135DD10B.cer Subject info access: rsync://rpki-repo.registro.br/repo/3JytBtNNmXupZVL381xuJt2NxhU6cUmQqpN8No8VbC2J/0/C1107F3AA9659ECBD1DF0576BD7054B4135DD10B.mft Manifest number: 019E Signing time: Mon 20 Oct 2025 04:07:20 +0000 Manifest this update: Mon 20 Oct 2025 04:02:20 +0000 Manifest next update: Tue 21 Oct 2025 05:33:20 +0000 Files and hashes: 1: 323830343a343436343a3a2f33322d3334203d3e20323633303333.roa (hash: WTbSXUK2qvvokb1lUpPk8R4MM2dCgAsn1ynu3TcvgWY=) 2: C1107F3AA9659ECBD1DF0576BD7054B4135DD10B.crl (hash: 3yclOiGzMTKe7K0VfmmB36I7oOYDvVvTPC9oV9Xib/g=) 3: 3137372e31322e3137362e302f32302d3332203d3e20323633303333.roa (hash: WxPhzSFOCiG6Ks9KvuSznd16ouJ1fV2dd4k3QeMZBKQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3JytBtNNmXupZVL381xuJt2NxhU6cUmQqpN8No8VbC2J/0/C1107F3AA9659ECBD1DF0576BD7054B4135DD10B.crl rsync://rpki-repo.registro.br/repo/3JytBtNNmXupZVL381xuJt2NxhU6cUmQqpN8No8VbC2J/0/C1107F3AA9659ECBD1DF0576BD7054B4135DD10B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1107F3AA9659ECBD1DF0576BD7054B4135DD10B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 05:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ee:e8:20:ee:8f:5b:04:e3:04:4e:1b:8a:1f:c6:45:df:b6:3f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1107F3AA9659ECBD1DF0576BD7054B4135DD10B Validity Not Before: Oct 20 04:02:20 2025 GMT Not After : Oct 21 05:33:20 2025 GMT Subject: CN=C1297C5F2D72B4C77F80B8CB82DB8308677DD887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:06:7c:ce:f6:82:86:31:7b:29:52:3d:99:cb: 16:9d:ca:dd:0b:28:14:6f:ad:92:05:30:ae:3c:da: df:da:98:aa:0f:a6:aa:8a:2b:5c:da:a9:b1:11:a2: ce:51:ed:cd:31:85:e8:67:5f:55:8a:18:db:3c:3e: c4:bb:35:a0:a7:31:ee:22:e1:f7:60:5b:26:55:21: 40:5d:7d:00:3a:47:f3:e8:39:d7:fc:a5:0f:ac:d8: 78:f1:bf:ea:73:ad:fc:80:67:dc:5b:83:04:a3:60: 5e:9c:ed:9f:67:bf:90:41:2b:26:ba:38:6e:f0:14: f6:0e:70:df:0a:d7:2c:a6:80:56:73:59:df:57:2e: ce:98:e5:ca:f9:4a:14:57:de:80:e7:6b:19:f1:56: e1:3c:7c:ca:88:2a:a8:9e:92:21:1f:02:35:7d:5a: dd:cc:90:4a:9c:16:9a:67:63:b5:c7:bd:87:41:d7: 5d:76:a7:9e:e2:d7:40:12:69:09:63:26:2b:ee:6e: f9:1c:2d:d0:70:53:cc:21:1a:19:74:3b:b6:3c:41: 98:1c:d2:72:83:e9:51:aa:5b:d1:a9:c4:6b:c7:39: 49:be:aa:93:84:7b:9d:c3:95:73:61:4e:ae:83:c4: aa:19:1f:9f:ec:85:92:27:93:5f:be:5a:ca:50:58: f4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:29:7C:5F:2D:72:B4:C7:7F:80:B8:CB:82:DB:83:08:67:7D:D8:87 X509v3 Authority Key Identifier: keyid:C1:10:7F:3A:A9:65:9E:CB:D1:DF:05:76:BD:70:54:B4:13:5D:D1:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3JytBtNNmXupZVL381xuJt2NxhU6cUmQqpN8No8VbC2J/0/C1107F3AA9659ECBD1DF0576BD7054B4135DD10B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1107F3AA9659ECBD1DF0576BD7054B4135DD10B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JytBtNNmXupZVL381xuJt2NxhU6cUmQqpN8No8VbC2J/0/C1107F3AA9659ECBD1DF0576BD7054B4135DD10B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:46:89:ad:79:4d:02:91:50:07:df:44:b6:17:71:bc:3b:9a: 51:6a:12:d7:c4:87:40:ca:5e:d0:e0:cd:65:91:dc:dc:06:f3: f6:95:f7:21:cd:48:ef:f7:d8:cf:1f:78:15:ce:d5:e0:57:6a: 22:82:25:95:cf:b4:89:bb:01:63:95:7c:aa:7a:17:bd:57:c0: 23:a1:15:93:74:ae:d8:79:05:45:c3:a0:12:bc:dd:8e:23:ed: b3:ff:d5:59:bf:c5:0b:18:82:86:2a:62:8c:3c:58:37:a5:85: 25:b9:3f:72:38:91:7a:95:dd:75:21:4b:a0:69:05:19:1c:ce: 78:30:b6:25:74:49:f6:ed:fa:bc:e7:f1:89:99:85:18:00:fa: b6:ef:ed:4e:57:da:f5:38:97:56:10:50:14:10:5d:40:b9:8b: 09:59:67:bd:1c:7d:13:0c:35:ba:66:0e:a9:12:98:02:6d:18: a6:18:fb:93:bc:32:4f:cc:aa:2d:f2:ab:b8:37:93:f1:c2:6d: e2:3f:20:e0:a7:cd:c6:4b:22:4f:6f:24:68:17:a8:bd:31:95: fe:e7:f6:d1:dd:02:e1:aa:05:d0:ab:f0:a0:49:b9:4c:43:a3: 1f:d2:71:23:bb:dc:36:4b:75:7d:b4:e1:5e:c6:25:3d:d6:8f: 57:07:5a:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS+7oIO6PWwTjBE4bih/GRd+2P20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzExMDdGM0FBOTY1OUVDQkQxREYwNTc2QkQ3MDU0QjQx MzVERDEwQjAeFw0yNTEwMjAwNDAyMjBaFw0yNTEwMjEwNTMzMjBaMDMxMTAvBgNV BAMTKEMxMjk3QzVGMkQ3MkI0Qzc3RjgwQjhDQjgyREI4MzA4Njc3REQ4ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeBnzO9oKGMXspUj2Zyxadyt0L KBRvrZIFMK482t/amKoPpqqKK1zaqbERos5R7c0xhehnX1WKGNs8PsS7NaCnMe4i 4fdgWyZVIUBdfQA6R/PoOdf8pQ+s2Hjxv+pzrfyAZ9xbgwSjYF6c7Z9nv5BBKya6 OG7wFPYOcN8K1yymgFZzWd9XLs6Y5cr5ShRX3oDnaxnxVuE8fMqIKqiekiEfAjV9 Wt3MkEqcFppnY7XHvYdB1112p57i10ASaQljJivubvkcLdBwU8whGhl0O7Y8QZgc 0nKD6VGqW9GpxGvHOUm+qpOEe53DlXNhTq6DxKoZH5/shZInk1++WspQWPTlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwSl8Xy1ytMd/gLjLgtuDCGd92IcwHwYDVR0j BBgwFoAUwRB/OqllnsvR3wV2vXBUtBNd0QswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0p5dEJ0Tk5tWHVwWlZMMzgxeHVKdDJOeGhVNmNVbVFxcE44Tm84VmJD MkovMC9DMTEwN0YzQUE5NjU5RUNCRDFERjA1NzZCRDcwNTRCNDEzNUREMTBCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMTA3RjNBQTk2NTlFQ0JE MURGMDU3NkJENzA1NEI0MTM1REQxMEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0p5dEJ0Tk5tWHVwWlZMMzgxeHVKdDJOeGhVNmNVbVFxcE44Tm84VmJDMkovMC9D MTEwN0YzQUE5NjU5RUNCRDFERjA1NzZCRDcwNTRCNDEzNUREMTBCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANUaJrXlNApFQB99EthdxvDuaUWoS18SHQMpe0ODNZZHc3Abz9pX3Ic1I7/fY zx94Fc7V4FdqIoIllc+0ibsBY5V8qnoXvVfAI6EVk3Su2HkFRcOgErzdjiPts//V Wb/FCxiChipijDxYN6WFJbk/cjiRepXddSFLoGkFGRzOeDC2JXRJ9u36vOfxiZmF GAD6tu/tTlfa9TiXVhBQFBBdQLmLCVlnvRx9Eww1umYOqRKYAm0Yphj7k7wyT8yq LfKruDeT8cJt4j8g4KfNxksiT28kaBeovTGV/uf20d0C4aoF0KvwoEm5TEOjH9Jx I7vcNkt1fbThXsYlPdaPVwdasg== -----END CERTIFICATE-----Generated at Mon Oct 20 09:38:13 2025 by rpki-client