$ rpki-client -vvf rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.mft File: 305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.mft (raw, json) Hash identifier: 07FImZOQYALzlgrC91cy+5BKrLV1DkQGWBwKB/03lbc= Subject key identifier: 3A:9C:0E:63:2A:50:37:41:DB:23:78:C4:B2:E0:76:11:EE:04:6E:92 Authority key identifier: 30:5A:3A:74:98:9C:2B:DD:E0:AA:26:B2:A4:EF:92:F6:21:3A:03:4C Certificate issuer: /CN=305A3A74989C2BDDE0AA26B2A4EF92F6213A034C Certificate serial: 1F25DCA858A5A91EFEDAAA93A8D90319ECF6DFE4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.cer Subject info access: rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.mft Manifest number: 013D Signing time: Mon 20 Oct 2025 14:18:24 +0000 Manifest this update: Mon 20 Oct 2025 14:13:24 +0000 Manifest next update: Tue 21 Oct 2025 17:46:24 +0000 Files and hashes: 1: 34352e3138342e3139362e302f32322d3234203d3e20323639333432.roa (hash: TEkcH+di2DqyWMwc4Z15pg3paw4sSgI5ke1q+LxliU8=) 2: 305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.crl (hash: BEpzkXrOvnB6n26AFGletrM9MzYUNtYiQpQYlVAqH18=) 3: 323830343a363332383a3a2f33322d3438203d3e20323639333432.roa (hash: HLu1IXKjueWa3zv0vz1mIike66Cq+79hjvw7eGM0Qw4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.crl rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 15:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:25:dc:a8:58:a5:a9:1e:fe:da:aa:93:a8:d9:03:19:ec:f6:df:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=305A3A74989C2BDDE0AA26B2A4EF92F6213A034C Validity Not Before: Oct 20 14:13:24 2025 GMT Not After : Oct 21 17:46:24 2025 GMT Subject: CN=3A9C0E632A503741DB2378C4B2E07611EE046E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:aa:16:90:47:0e:41:4d:5d:96:80:5e:5f:f8: 2b:a8:23:67:bf:ff:fb:57:ce:35:de:38:f2:83:34: c1:8a:9c:81:d2:ca:e7:b7:41:ea:ef:38:b7:c4:c4: 14:48:ed:8a:5d:de:4c:6b:33:b9:91:f3:c7:ea:75: fe:05:9d:31:aa:7d:8d:58:51:7e:75:d5:4e:b0:8e: 4a:26:d5:63:08:0d:d9:72:01:da:fa:4f:b5:f5:aa: 74:92:b5:7c:4e:61:f2:06:ec:7d:ea:e1:c1:0d:c4: 86:c0:4b:96:24:42:6e:22:39:2c:cf:14:63:9d:f0: f9:4b:ee:6b:77:6c:5b:57:b1:aa:ef:22:64:48:58: 46:ae:03:c1:5a:92:39:de:8d:47:d7:ba:68:1f:04: 8b:ac:a4:4c:6a:88:62:52:80:5a:c4:2d:30:67:1a: 70:75:16:5c:f6:c3:a1:d9:ec:a4:67:b6:9b:9c:df: f5:52:15:fc:df:54:c4:60:ee:5b:82:0a:0f:31:c1: 89:43:c7:3c:60:7b:7a:2c:a9:50:33:8d:77:33:20: dd:04:5a:27:9d:15:be:b1:34:ca:f7:c7:61:ca:f8: 10:f6:31:6e:fe:a5:fe:b2:70:e3:f6:03:af:da:9a: c1:c6:f5:2a:23:ad:e8:da:66:b5:81:94:e4:f1:1f: af:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9C:0E:63:2A:50:37:41:DB:23:78:C4:B2:E0:76:11:EE:04:6E:92 X509v3 Authority Key Identifier: keyid:30:5A:3A:74:98:9C:2B:DD:E0:AA:26:B2:A4:EF:92:F6:21:3A:03:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/0/305A3A74989C2BDDE0AA26B2A4EF92F6213A034C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:93:8a:cb:76:66:b8:b8:d0:d8:cb:5c:39:96:7b:0f:15:ec: e5:9f:65:d9:80:04:9d:f3:8e:4d:eb:ca:73:63:9f:f6:24:ba: a1:3b:86:5f:4f:a7:3a:9a:4a:62:99:6f:75:dc:df:cc:86:ce: 35:3f:ff:2a:3b:73:52:d8:08:d8:56:99:6d:f4:c7:7e:89:ec: 34:60:87:2d:43:14:69:f7:41:df:9d:95:33:70:cd:51:9a:76: 2e:b0:ca:ba:65:ad:ba:2b:a9:10:73:ee:58:af:ac:d4:15:21: 68:d1:0e:99:53:c8:d2:12:be:92:4b:34:84:f3:ae:56:99:ba: 4d:8a:ab:ce:df:43:91:81:23:04:ba:53:bb:47:d6:81:09:3c: 48:ab:3a:c8:b1:12:99:65:5f:c3:15:d2:1f:07:19:2d:29:6a: be:cc:a8:a7:13:4d:27:05:f1:f6:fe:07:b9:4d:78:36:fa:d4: 69:dd:78:c3:d0:b5:e5:ad:8e:ab:66:30:f4:22:7a:5d:fb:b5: 2e:40:38:e8:67:26:c3:76:17:2d:f6:25:9f:fb:f0:ed:8f:8b: 9e:88:6d:b2:ba:05:a5:29:e8:34:9e:aa:76:50:32:e4:08:29: 32:8e:71:56:63:e3:78:fc:44:44:8f:90:21:29:88:d2:ad:c0: 58:99:e3:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHyXcqFilqR7+2qqTqNkDGez23+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA1QTNBNzQ5ODlDMkJEREUwQUEyNkIyQTRFRjkyRjYy MTNBMDM0QzAeFw0yNTEwMjAxNDEzMjRaFw0yNTEwMjExNzQ2MjRaMDMxMTAvBgNV BAMTKDNBOUMwRTYzMkE1MDM3NDFEQjIzNzhDNEIyRTA3NjExRUUwNDZFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVqhaQRw5BTV2WgF5f+CuoI2e/ //tXzjXeOPKDNMGKnIHSyue3QervOLfExBRI7Ypd3kxrM7mR88fqdf4FnTGqfY1Y UX511U6wjkom1WMIDdlyAdr6T7X1qnSStXxOYfIG7H3q4cENxIbAS5YkQm4iOSzP FGOd8PlL7mt3bFtXsarvImRIWEauA8FakjnejUfXumgfBIuspExqiGJSgFrELTBn GnB1Flz2w6HZ7KRntpuc3/VSFfzfVMRg7luCCg8xwYlDxzxge3osqVAzjXczIN0E WiedFb6xNMr3x2HK+BD2MW7+pf6ycOP2A6/amsHG9SojrejaZrWBlOTxH6+9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOpwOYypQN0HbI3jEsuB2Ee4EbpIwHwYDVR0j BBgwFoAUMFo6dJicK93gqiaypO+S9iE6A0wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNENOeHlHQW1wNGpSWUdBUGVWZWk0Tml0eGtwaWVTMnRnNzhYbnV5MVdm ak0vMC8zMDVBM0E3NDk4OUMyQkRERTBBQTI2QjJBNEVGOTJGNjIxM0EwMzRDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwNUEzQTc0OTg5QzJCRERF MEFBMjZCMkE0RUY5MkY2MjEzQTAzNEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NENOeHlHQW1wNGpSWUdBUGVWZWk0Tml0eGtwaWVTMnRnNzhYbnV5MVdmak0vMC8z MDVBM0E3NDk4OUMyQkRERTBBQTI2QjJBNEVGOTJGNjIxM0EwMzRDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEJOKy3ZmuLjQ2MtcOZZ7DxXs5Z9l2YAEnfOOTevKc2Of9iS6oTuGX0+nOppK YplvddzfzIbONT//KjtzUtgI2FaZbfTHfonsNGCHLUMUafdB352VM3DNUZp2LrDK umWtuiupEHPuWK+s1BUhaNEOmVPI0hK+kks0hPOuVpm6TYqrzt9DkYEjBLpTu0fW gQk8SKs6yLESmWVfwxXSHwcZLSlqvsyopxNNJwXx9v4HuU14NvrUad14w9C15a2O q2Yw9CJ6Xfu1LkA46Gcmw3YXLfYln/vw7Y+LnohtsroFpSnoNJ6qdlAy5AgpMo5x VmPjePxERI+QISmI0q3AWJnjhQ== -----END CERTIFICATE-----Generated at Mon Oct 20 17:28:27 2025 by rpki-client