$ rpki-client -vvf rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft File: 3A643A755DDC15D6F86DC11230B9F76A2774D614.mft (raw, json) Hash identifier: K7FVRLkhA8E8jXc1a5U+A6duIHSPQn/lSGGiPHmdKz0= Subject key identifier: DC:B0:6D:B5:57:C0:A9:C2:19:22:E8:F5:07:B6:6A:CF:EE:A9:6D:97 Authority key identifier: 3A:64:3A:75:5D:DC:15:D6:F8:6D:C1:12:30:B9:F7:6A:27:74:D6:14 Certificate issuer: /CN=3A643A755DDC15D6F86DC11230B9F76A2774D614 Certificate serial: 6177559665EFDF1C69DA1EC8AA5ADE6F0B61962B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer Subject info access: rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft Manifest number: C1 Signing time: Sun 19 Oct 2025 21:00:00 +0000 Manifest this update: Sun 19 Oct 2025 20:55:00 +0000 Manifest next update: Tue 21 Oct 2025 00:12:00 +0000 Files and hashes: 1: 3A643A755DDC15D6F86DC11230B9F76A2774D614.crl (hash: iE6zlzvgPoVfIN+NKnf1NF85NNi1xmB292cS/0gIBzw=) 2: 3138392e35312e34302e302f32332d3332203d3e20323730373235.roa (hash: BqLQha74KDtppF7T3QZ5OxMFjGkWPH/hI5cH+aGR4ek=) 3: 3138392e35312e34322e302f32332d3332203d3e20323730373235.roa (hash: 86mbNBoxrsA5PU/6bdXPR6HwbxrKjF+4v1Ng/ngi+u8=) 4: 323830343a373036383a3a2f33322d313238203d3e20323730373235.roa (hash: Zn64V4rp5ilUi+BcA6Yz4lAJz878uFpz4QzpzKZng+o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 00:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:77:55:96:65:ef:df:1c:69:da:1e:c8:aa:5a:de:6f:0b:61:96:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A643A755DDC15D6F86DC11230B9F76A2774D614 Validity Not Before: Oct 19 20:55:00 2025 GMT Not After : Oct 21 00:12:00 2025 GMT Subject: CN=DCB06DB557C0A9C21922E8F507B66ACFEEA96D97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5e:70:cd:2e:84:8d:4f:43:33:71:cc:9b:02: af:af:1d:01:29:c6:85:ce:19:8e:89:2f:68:ca:32: 46:6e:ed:d1:93:25:c8:eb:9b:bd:93:e3:e7:a9:27: 20:ec:6e:2f:34:5c:5e:c3:f3:4a:07:f0:9b:6b:46: bd:1a:c1:89:89:b3:ae:98:02:46:9c:cb:b8:91:79: 80:61:ba:bf:4c:0a:59:49:42:e9:28:94:23:5c:be: aa:a7:81:12:00:ed:2e:60:f5:0f:1f:dc:6c:32:49: 6b:38:6a:c1:17:a1:22:c6:e6:64:86:0b:75:47:f4: 90:d9:c9:36:f9:08:73:d7:7d:a0:a9:88:6d:1b:3c: ba:54:cf:e3:2b:6a:a5:4c:fd:fd:98:84:e2:5d:98: 6c:ec:8a:4a:77:33:ac:5c:17:23:0e:66:9d:26:e2: 3b:9c:a9:4c:46:40:30:5a:4e:6d:2d:9e:98:5e:99: a4:84:49:4e:1f:0e:0f:1e:18:21:ce:26:d7:f9:63: a0:6e:70:f9:71:24:52:43:25:8a:a9:bc:66:00:75: e2:90:85:a0:33:d5:02:a8:12:38:6c:2f:62:46:38: 86:77:e2:47:a5:46:5a:73:a8:92:c4:6f:1c:b6:f5: f8:ac:93:fe:da:11:55:ed:a9:2b:37:39:72:c4:fb: 67:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B0:6D:B5:57:C0:A9:C2:19:22:E8:F5:07:B6:6A:CF:EE:A9:6D:97 X509v3 Authority Key Identifier: keyid:3A:64:3A:75:5D:DC:15:D6:F8:6D:C1:12:30:B9:F7:6A:27:74:D6:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:30:f6:4c:c5:81:f2:29:44:fb:63:22:9b:cf:d8:b8:33:ce: f0:7a:4a:87:4f:a9:5c:bb:7b:97:e4:85:6d:52:6d:c2:83:5e: 95:ed:93:94:d6:99:65:b7:0c:89:0f:13:48:76:04:89:df:5f: 22:0c:25:d3:2f:3a:6b:83:0f:72:09:85:01:70:3f:d6:ad:cc: 1a:fb:95:4b:de:a5:b1:99:da:6d:8a:7c:20:6a:23:86:03:18: 39:f1:10:6f:23:2d:9d:5c:c5:f0:b3:19:70:46:62:74:d1:19: f1:5a:9e:4e:8a:55:60:65:ab:d8:57:2b:3e:ae:ef:3f:3c:c2: dd:75:88:60:c5:b5:8f:43:bd:25:51:7d:58:d3:d4:23:0f:82: 47:c8:9a:94:91:1e:b7:80:00:68:46:ba:dc:a1:dd:58:23:66: b0:b9:8f:2f:c3:2b:1e:b5:7f:a1:84:3c:db:9d:64:a4:26:b6: 19:f8:3c:e4:2a:32:73:ee:30:7d:cb:3b:c4:6a:c0:7e:1f:13: ea:1d:08:18:0a:b0:2c:2a:0f:3f:cf:2f:91:61:93:53:52:4f: fe:cc:59:73:d2:1c:f9:30:76:5c:94:4d:1e:f7:3e:99:6d:aa: e2:f6:94:c8:ea:04:2a:c0:09:25:72:b6:04:f7:2c:3d:b0:a9: 63:97:7f:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYXdVlmXv3xxp2h7IqlrebwthliswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E2NDNBNzU1RERDMTVENkY4NkRDMTEyMzBCOUY3NkEy Nzc0RDYxNDAeFw0yNTEwMTkyMDU1MDBaFw0yNTEwMjEwMDEyMDBaMDMxMTAvBgNV BAMTKERDQjA2REI1NTdDMEE5QzIxOTIyRThGNTA3QjY2QUNGRUVBOTZEOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhXnDNLoSNT0MzccybAq+vHQEp xoXOGY6JL2jKMkZu7dGTJcjrm72T4+epJyDsbi80XF7D80oH8JtrRr0awYmJs66Y Akacy7iReYBhur9MCllJQukolCNcvqqngRIA7S5g9Q8f3GwySWs4asEXoSLG5mSG C3VH9JDZyTb5CHPXfaCpiG0bPLpUz+MraqVM/f2YhOJdmGzsikp3M6xcFyMOZp0m 4jucqUxGQDBaTm0tnphemaSESU4fDg8eGCHOJtf5Y6BucPlxJFJDJYqpvGYAdeKQ haAz1QKoEjhsL2JGOIZ34kelRlpzqJLEbxy29fisk/7aEVXtqSs3OXLE+2fTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3LBttVfAqcIZIuj1B7Zqz+6pbZcwHwYDVR0j BBgwFoAUOmQ6dV3cFdb4bcESMLn3aid01hQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNW5lNU1xa0hNazgxWWdhWnpWY2ZOM2tKcjNBVlVuWlRtYm5DcDNpV2RV S0EvMC8zQTY0M0E3NTVEREMxNUQ2Rjg2REMxMTIzMEI5Rjc2QTI3NzRENjE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBNjQzQTc1NUREQzE1RDZG ODZEQzExMjMwQjlGNzZBMjc3NEQ2MTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NW5lNU1xa0hNazgxWWdhWnpWY2ZOM2tKcjNBVlVuWlRtYm5DcDNpV2RVS0EvMC8z QTY0M0E3NTVEREMxNUQ2Rjg2REMxMTIzMEI5Rjc2QTI3NzRENjE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAITD2TMWB8ilE+2Mim8/YuDPO8HpKh0+pXLt7l+SFbVJtwoNele2TlNaZZbcM iQ8TSHYEid9fIgwl0y86a4MPcgmFAXA/1q3MGvuVS96lsZnabYp8IGojhgMYOfEQ byMtnVzF8LMZcEZidNEZ8VqeTopVYGWr2FcrPq7vPzzC3XWIYMW1j0O9JVF9WNPU Iw+CR8ialJEet4AAaEa63KHdWCNmsLmPL8MrHrV/oYQ8251kpCa2Gfg85Coyc+4w fcs7xGrAfh8T6h0IGAqwLCoPP88vkWGTU1JP/sxZc9Ic+TB2XJRNHvc+mW2q4vaU yOoEKsAJJXK2BPcsPbCpY5d/dg== -----END CERTIFICATE-----Generated at Mon Oct 20 09:32:48 2025 by rpki-client