$ rpki-client -vvf rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft File: C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft (raw, json) Hash identifier: b3ZUIYzYnC41JRe03u3lrMvw4Ki8Fhjk9rjkUeB1O6k= Subject key identifier: 18:EA:D4:B2:14:02:CF:4B:AB:2D:64:A5:E3:A7:7B:5A:D9:BE:E4:1A Authority key identifier: C3:4B:76:AE:7A:49:F1:4A:5E:CE:69:B2:E0:67:E9:4E:0A:2E:BB:B1 Certificate issuer: /CN=C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1 Certificate serial: 3EF825643F699D40C7F4B099B9F686206C34E764 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer Subject info access: rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft Manifest number: 5B Signing time: Mon 20 Oct 2025 08:31:12 +0000 Manifest this update: Mon 20 Oct 2025 08:26:12 +0000 Manifest next update: Tue 21 Oct 2025 11:45:12 +0000 Files and hashes: 1: C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl (hash: CtmwRLps4pInrmYDEHCUl9E/0LwtAuzwIYjlSrKaN0s=) 2: 323830343a383734303a3a2f33322d313238203d3e203532393036.roa (hash: kfImCG2TW2PZqgdH+xcKUqqX56025AHMhP+JY16ulkg=) 3: 3137372e32332e35362e302f32312d3332203d3e20313938393439.roa (hash: mv3/jFMH/WFk97h2YglLXFAx04FlpcG2tngzh8QwfNw=) 4: 3137372e32332e35362e302f32312d3332203d3e203532393036.roa (hash: jrnwbKnlRj9X3EB+DFy9Z/5ZbRMcHXbOntOJWDZ8eCc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f8:25:64:3f:69:9d:40:c7:f4:b0:99:b9:f6:86:20:6c:34:e7:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1 Validity Not Before: Oct 20 08:26:12 2025 GMT Not After : Oct 21 11:45:12 2025 GMT Subject: CN=18EAD4B21402CF4BAB2D64A5E3A77B5AD9BEE41A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:36:19:4e:d5:10:ea:34:2a:5c:2c:22:16:10: 43:7e:34:ee:02:05:5a:50:d5:aa:d6:8c:65:00:49: 04:2d:65:51:60:dd:14:07:85:7a:fb:84:6d:ae:b6: 12:e2:4e:40:8b:32:36:83:5d:1c:f4:b2:27:be:2a: 36:ad:97:6c:75:8f:a7:db:92:ab:a2:6e:52:30:69: 60:95:61:06:c8:d8:ec:b1:c9:bb:51:2c:af:e6:57: c9:a4:29:76:40:fd:08:9e:e4:a0:b6:90:63:e4:07: 87:86:48:a7:64:39:05:14:a8:39:04:3a:8c:25:a5: ed:db:11:92:2b:5a:a9:cf:24:19:cf:32:af:bc:bc: 37:9d:37:14:1e:d6:7a:c8:87:f3:57:67:44:3a:78: b5:63:82:97:a9:c1:df:49:79:d6:68:cf:be:03:8f: ed:10:f3:c6:c6:76:d9:fa:4c:eb:42:05:59:aa:ac: 3b:18:43:5d:23:1f:ae:f2:1b:32:87:f4:e8:f5:f1: e1:c2:68:da:f7:19:4c:92:33:2a:da:b1:0c:97:79: 34:da:0b:df:0b:4f:21:12:e5:7f:15:57:84:1a:92: 97:56:e8:bf:e7:50:31:f6:6e:55:98:c9:7f:a3:62: 3c:f3:32:46:ce:fc:7d:c7:b6:b1:68:56:00:0b:7d: eb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EA:D4:B2:14:02:CF:4B:AB:2D:64:A5:E3:A7:7B:5A:D9:BE:E4:1A X509v3 Authority Key Identifier: keyid:C3:4B:76:AE:7A:49:F1:4A:5E:CE:69:B2:E0:67:E9:4E:0A:2E:BB:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:21:b7:70:7f:50:28:55:f9:80:78:c3:dc:74:84:ca:c7:ee: 8a:e8:53:d4:bc:a2:2a:4c:3c:12:39:fa:e6:af:3a:47:e6:d5: 70:69:36:79:17:1a:e5:67:34:cb:a9:bd:10:3c:78:95:ba:0e: 40:1e:c9:02:d9:ab:6f:11:7d:f7:8e:ae:c6:c7:ab:77:4a:05: 06:c5:1a:3c:80:21:95:0b:db:8e:f8:bf:30:48:56:a2:f1:ad: 22:f2:39:c1:02:5b:ef:ca:7a:e6:6e:55:26:e1:16:a9:78:53: 8e:74:b9:85:e0:50:ad:45:29:30:fe:38:66:8c:7c:5f:d5:86: d9:be:bd:b8:f7:ec:9b:23:55:80:91:0e:45:20:97:98:1b:39: e4:87:3f:06:87:32:9d:60:1e:3e:84:c8:e6:d2:83:de:f9:4c: 88:e0:a5:43:20:30:cc:7e:4d:3a:e9:9f:72:bd:84:94:4c:2f: 44:6c:fd:16:ff:74:5c:6a:98:4b:6a:76:c5:bf:24:57:29:17: 0a:26:35:4d:f3:1b:ee:4f:de:5a:af:e6:1f:f0:43:32:e7:e7: 5c:50:0a:26:a4:67:20:b8:15:5d:d7:c7:03:5e:bb:b8:50:9b: bd:91:e2:7a:e0:28:af:d5:03:5b:a2:08:7a:75:d3:ae:1b:8e: 3f:92:ba:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPvglZD9pnUDH9LCZufaGIGw052QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM0Qjc2QUU3QTQ5RjE0QTVFQ0U2OUIyRTA2N0U5NEUw QTJFQkJCMTAeFw0yNTEwMjAwODI2MTJaFw0yNTEwMjExMTQ1MTJaMDMxMTAvBgNV BAMTKDE4RUFENEIyMTQwMkNGNEJBQjJENjRBNUUzQTc3QjVBRDlCRUU0MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBNhlO1RDqNCpcLCIWEEN+NO4C BVpQ1arWjGUASQQtZVFg3RQHhXr7hG2uthLiTkCLMjaDXRz0sie+Kjatl2x1j6fb kquiblIwaWCVYQbI2OyxybtRLK/mV8mkKXZA/Qie5KC2kGPkB4eGSKdkOQUUqDkE Oowlpe3bEZIrWqnPJBnPMq+8vDedNxQe1nrIh/NXZ0Q6eLVjgpepwd9JedZoz74D j+0Q88bGdtn6TOtCBVmqrDsYQ10jH67yGzKH9Oj18eHCaNr3GUySMyrasQyXeTTa C98LTyES5X8VV4QakpdW6L/nUDH2blWYyX+jYjzzMkbO/H3HtrFoVgALfetHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGOrUshQCz0urLWSl46d7Wtm+5BowHwYDVR0j BBgwFoAUw0t2rnpJ8Upezmmy4GfpTgouu7EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2pYMWsyQWZ1ZlFTVmdhbjVIQlVjYUxad0FRYm1UaUJTUjhUdkR1WVo2 OGsvMC9DMzRCNzZBRTdBNDlGMTRBNUVDRTY5QjJFMDY3RTk0RTBBMkVCQkIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzNEI3NkFFN0E0OUYxNEE1 RUNFNjlCMkUwNjdFOTRFMEEyRUJCQjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2pYMWsyQWZ1ZlFTVmdhbjVIQlVjYUxad0FRYm1UaUJTUjhUdkR1WVo2OGsvMC9D MzRCNzZBRTdBNDlGMTRBNUVDRTY5QjJFMDY3RTk0RTBBMkVCQkIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALCG3cH9QKFX5gHjD3HSEysfuiuhT1LyiKkw8Ejn65q86R+bVcGk2eRca5Wc0 y6m9EDx4lboOQB7JAtmrbxF9946uxserd0oFBsUaPIAhlQvbjvi/MEhWovGtIvI5 wQJb78p65m5VJuEWqXhTjnS5heBQrUUpMP44Zox8X9WG2b69uPfsmyNVgJEORSCX mBs55Ic/BocynWAePoTI5tKD3vlMiOClQyAwzH5NOumfcr2ElEwvRGz9Fv90XGqY S2p2xb8kVykXCiY1TfMb7k/eWq/mH/BDMufnXFAKJqRnILgVXdfHA167uFCbvZHi euAor9UDW6IIenXTrhuOP5K6Uw== -----END CERTIFICATE-----Generated at Mon Oct 20 19:29:35 2025 by rpki-client