$ rpki-client -vvf rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.mft File: C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.mft (raw, json) Hash identifier: bF9NJEBkZXk1qo94nHFiUynGQXER/ZeMoNQ0fnZfx4M= Subject key identifier: 1A:91:2F:28:B8:60:11:D3:02:F5:5B:1B:0A:66:13:0A:52:CE:3A:15 Authority key identifier: C3:EB:30:A1:53:10:A6:A8:DC:30:7B:E0:3C:15:13:ED:B5:F0:7C:0D Certificate issuer: /CN=C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D Certificate serial: 2D08D6B31FA56C5CCD7B129A77F61AD7782E7553 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.cer Subject info access: rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.mft Manifest number: 01A5 Signing time: Mon 20 Oct 2025 07:21:38 +0000 Manifest this update: Mon 20 Oct 2025 07:16:38 +0000 Manifest next update: Tue 21 Oct 2025 08:30:38 +0000 Files and hashes: 1: 3133312e3232312e3136382e302f32322d3234203d3e20323634343337.roa (hash: hdXS3cBWxcWAa0FXXqV2/dShzql2hC+Fz3MUHRV+mB8=) 2: 323830343a316539343a3a2f33322d3336203d3e20323634343337.roa (hash: MgVlKe1yKItHNgKRZ26qLyUwnQMiH7DFwNd9it24ld8=) 3: C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.crl (hash: 5QEoi1qfz5fjlLcRyizywq/uatdvP5MoWMq9h+XEG24=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.crl rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:08:d6:b3:1f:a5:6c:5c:cd:7b:12:9a:77:f6:1a:d7:78:2e:75:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D Validity Not Before: Oct 20 07:16:38 2025 GMT Not After : Oct 21 08:30:38 2025 GMT Subject: CN=1A912F28B86011D302F55B1B0A66130A52CE3A15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4d:50:fa:d9:ee:fb:30:37:15:4d:74:19:46: d6:b0:81:4d:dd:09:61:3d:d4:e9:9b:31:a8:dd:e3: 9d:94:08:ca:5d:c1:f4:d1:70:9d:60:6a:9a:75:ba: 23:7a:08:bb:f1:7e:35:b2:4b:a0:d1:14:bb:28:50: 99:6d:9d:a3:a9:18:1b:10:73:8c:c5:41:56:1b:78: b2:74:3e:2b:12:ce:51:a0:ca:3f:d9:cb:e1:46:97: a9:1b:40:45:b1:51:f3:de:b4:40:ee:35:89:ab:dc: 19:d4:5c:5d:ec:30:d6:4f:d5:e1:d1:25:89:9d:ed: 7c:c5:49:42:57:c1:22:4a:46:83:d8:e1:c1:53:82: 5a:b6:6f:70:04:d9:e3:4e:24:77:d4:74:a5:12:81: a5:81:41:bb:b1:36:c9:c4:dc:ca:60:80:f6:08:cb: 42:a1:ce:8d:11:43:46:38:f6:ad:ef:cc:f4:56:55: 32:25:5b:a8:5f:92:91:07:ff:cd:de:32:84:ec:f4: b1:ed:a4:dd:01:c5:2f:fd:fe:2e:fc:8f:dd:ca:28: a1:12:6e:01:2e:dd:46:23:20:b5:6e:e6:1a:ca:6b: 08:4b:91:05:eb:ea:c2:08:94:23:7e:44:df:b9:ee: 5f:75:cc:02:f3:31:89:3a:21:7b:21:4b:c9:f8:8a: 43:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:91:2F:28:B8:60:11:D3:02:F5:5B:1B:0A:66:13:0A:52:CE:3A:15 X509v3 Authority Key Identifier: keyid:C3:EB:30:A1:53:10:A6:A8:DC:30:7B:E0:3C:15:13:ED:B5:F0:7C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:c0:4a:81:51:92:0c:12:2e:05:8b:f1:11:b3:62:1c:5b:3a: 5a:b8:03:a4:9c:d2:ab:c1:ad:61:44:ed:86:ec:d1:32:9b:cb: 12:e6:af:2d:05:c2:2c:27:52:18:4e:49:97:3e:30:6c:d0:b2: 4a:42:ba:7d:85:66:5e:3b:8a:73:0a:c8:4c:c4:11:ec:7f:be: 10:25:54:9c:38:27:03:ad:65:87:0b:8c:fd:74:8e:d7:46:3c: d6:aa:58:ee:33:88:af:f2:7d:bd:5a:85:b8:4a:83:da:80:bc: 42:af:2c:16:b2:89:97:90:1c:ff:d0:c5:fe:11:f6:9a:fc:23: d8:74:e0:5d:51:f5:8e:54:6e:a8:92:2a:06:47:a5:64:37:9d: 5d:2b:44:cc:fa:91:72:bd:7b:a6:da:63:08:a2:62:98:d1:d3: 64:0a:02:96:3a:c5:96:f4:68:66:b0:2c:f4:ba:23:f9:60:55: e2:19:37:ba:95:20:48:1e:7e:62:d2:30:39:c0:9f:e7:e7:f2: 9d:9f:ec:ca:58:9a:ec:b2:89:68:99:55:61:13:e8:33:46:6d: 14:6d:8f:c2:7e:ed:87:85:57:d2:6e:ac:d9:54:7d:16:b9:18: 7c:7b:00:05:58:1f:52:19:78:49:e6:46:90:2f:7c:8d:3d:6c: de:21:c0:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULQjWsx+lbFzNexKad/Ya13gudVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNFQjMwQTE1MzEwQTZBOERDMzA3QkUwM0MxNTEzRURC NUYwN0MwRDAeFw0yNTEwMjAwNzE2MzhaFw0yNTEwMjEwODMwMzhaMDMxMTAvBgNV BAMTKDFBOTEyRjI4Qjg2MDExRDMwMkY1NUIxQjBBNjYxMzBBNTJDRTNBMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCTVD62e77MDcVTXQZRtawgU3d CWE91OmbMajd452UCMpdwfTRcJ1gapp1uiN6CLvxfjWyS6DRFLsoUJltnaOpGBsQ c4zFQVYbeLJ0PisSzlGgyj/Zy+FGl6kbQEWxUfPetEDuNYmr3BnUXF3sMNZP1eHR JYmd7XzFSUJXwSJKRoPY4cFTglq2b3AE2eNOJHfUdKUSgaWBQbuxNsnE3MpggPYI y0Khzo0RQ0Y49q3vzPRWVTIlW6hfkpEH/83eMoTs9LHtpN0BxS/9/i78j93KKKES bgEu3UYjILVu5hrKawhLkQXr6sIIlCN+RN+57l91zALzMYk6IXshS8n4ikNhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGpEvKLhgEdMC9VsbCmYTClLOOhUwHwYDVR0j BBgwFoAUw+swoVMQpqjcMHvgPBUT7bXwfA0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1VLZ3FXYXNZV2NXY2tFM2QxWkFObUw3RVRVTm1LOGZ5czRLTnVSVUJt TDcvMC9DM0VCMzBBMTUzMTBBNkE4REMzMDdCRTAzQzE1MTNFREI1RjA3QzBELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzRUIzMEExNTMxMEE2QThE QzMwN0JFMDNDMTUxM0VEQjVGMDdDMEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1VLZ3FXYXNZV2NXY2tFM2QxWkFObUw3RVRVTm1LOGZ5czRLTnVSVUJtTDcvMC9D M0VCMzBBMTUzMTBBNkE4REMzMDdCRTAzQzE1MTNFREI1RjA3QzBELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABMBKgVGSDBIuBYvxEbNiHFs6WrgDpJzSq8GtYUTthuzRMpvLEuavLQXCLCdS GE5Jlz4wbNCySkK6fYVmXjuKcwrITMQR7H++ECVUnDgnA61lhwuM/XSO10Y81qpY 7jOIr/J9vVqFuEqD2oC8Qq8sFrKJl5Ac/9DF/hH2mvwj2HTgXVH1jlRuqJIqBkel ZDedXStEzPqRcr17ptpjCKJimNHTZAoCljrFlvRoZrAs9Loj+WBV4hk3upUgSB5+ YtIwOcCf5+fynZ/sylia7LKJaJlVYRPoM0ZtFG2Pwn7th4VX0m6s2VR9FrkYfHsA BVgfUhl4SeZGkC98jT1s3iHA7Q== -----END CERTIFICATE-----Generated at Mon Oct 20 15:00:17 2025 by rpki-client