$ rpki-client -vvf rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/1/3FFE15782BD94F0739D4F13B603819B73D5FE247.mft File: 3FFE15782BD94F0739D4F13B603819B73D5FE247.mft (raw, json) Hash identifier: O7f90mlE+Z39olsE6SVXBER1VJJOtXo9CRrQL9Jhqjk= Subject key identifier: 54:D3:FD:14:9C:3E:E9:50:A3:93:15:F8:04:BB:1C:54:5D:CD:D5:17 Authority key identifier: 3F:FE:15:78:2B:D9:4F:07:39:D4:F1:3B:60:38:19:B7:3D:5F:E2:47 Certificate issuer: /CN=3FFE15782BD94F0739D4F13B603819B73D5FE247 Certificate serial: 5D6832268A478B5C60E4CBD0657F5B35C912BD3B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FFE15782BD94F0739D4F13B603819B73D5FE247.cer Subject info access: rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/1/3FFE15782BD94F0739D4F13B603819B73D5FE247.mft Manifest number: 88 Signing time: Mon 20 Oct 2025 08:22:56 +0000 Manifest this update: Mon 20 Oct 2025 08:17:56 +0000 Manifest next update: Tue 21 Oct 2025 12:03:56 +0000 Files and hashes: 1: 34352e3233312e3137322e302f32322d3234203d3e20323637323136.roa (hash: hyY2W6Ll4NzqY6UfGPEMkMjEtSDFpOv8+dqaMkLetYI=) 2: 323830343a346131303a3a2f33322d3336203d3e20323637323136.roa (hash: XCbJ6YhUzITiqtik8ujZwym4Yw7MH88do0lDDjj/ItU=) 3: 3FFE15782BD94F0739D4F13B603819B73D5FE247.crl (hash: vZ9ywCo9zg0/jfbXzn+CjyBnDOv1Glry+UpfbgoDF7I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/1/3FFE15782BD94F0739D4F13B603819B73D5FE247.crl rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/1/3FFE15782BD94F0739D4F13B603819B73D5FE247.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FFE15782BD94F0739D4F13B603819B73D5FE247.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 12:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:68:32:26:8a:47:8b:5c:60:e4:cb:d0:65:7f:5b:35:c9:12:bd:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFE15782BD94F0739D4F13B603819B73D5FE247 Validity Not Before: Oct 20 08:17:56 2025 GMT Not After : Oct 21 12:03:56 2025 GMT Subject: CN=54D3FD149C3EE950A39315F804BB1C545DCDD517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3b:49:58:82:e8:c9:1e:40:12:40:8c:cc:b9: 78:eb:16:a1:fd:31:b9:fd:d8:4f:23:23:95:b2:68: 24:5d:5b:24:00:cb:81:f1:24:37:c6:9f:43:b4:eb: 6a:3a:21:36:e2:b1:ef:89:bd:a8:95:25:19:37:5a: 48:2a:31:91:4d:e1:45:35:03:58:3d:20:cf:88:d9: be:44:8f:40:ef:19:c1:82:3b:08:19:aa:e2:bb:5a: cc:ac:8e:36:8b:c1:b0:8c:e8:cc:f5:39:ae:00:36: 45:72:c9:10:2c:c1:70:fd:e1:51:90:8f:50:86:97: 3a:59:76:2a:56:5c:50:81:c8:10:74:cb:a4:a3:60: 7d:c3:96:18:04:41:9c:8d:32:6b:10:fd:5a:90:61: b3:0a:f5:37:83:72:75:d4:7f:bc:ff:e2:f0:8a:91: e2:1a:4c:b3:b7:b5:ed:e1:a7:82:38:45:0c:29:71: fa:24:e8:e0:b4:d5:14:e2:ea:c8:60:59:c2:c1:7f: c7:d7:36:99:9d:ac:02:1d:95:e2:b8:06:c9:ec:de: f5:f1:7e:cd:a8:33:f0:4a:b3:9a:6f:7f:ef:f6:9b: e6:26:f5:25:fd:20:5d:04:26:35:a9:66:5d:33:f2: 75:81:fe:e6:c4:35:7d:2b:e3:89:ee:42:ec:4a:fa: 5b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D3:FD:14:9C:3E:E9:50:A3:93:15:F8:04:BB:1C:54:5D:CD:D5:17 X509v3 Authority Key Identifier: keyid:3F:FE:15:78:2B:D9:4F:07:39:D4:F1:3B:60:38:19:B7:3D:5F:E2:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/1/3FFE15782BD94F0739D4F13B603819B73D5FE247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FFE15782BD94F0739D4F13B603819B73D5FE247.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/1/3FFE15782BD94F0739D4F13B603819B73D5FE247.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:84:eb:1b:50:16:4d:16:d1:6c:33:fb:4f:1c:67:d9:8d:c4: c7:1c:38:ec:df:29:31:2d:40:b7:dc:41:55:b9:6c:fc:88:26: e2:8e:44:24:81:54:dd:94:eb:fe:55:e3:64:85:82:43:5f:cd: 1f:2d:17:2c:c7:47:0c:84:49:58:d2:44:2c:ad:33:2b:e2:16: 80:b2:03:fd:95:93:32:4f:ce:61:f5:03:95:a6:68:67:b0:1a: e9:68:4b:f0:14:78:41:52:94:0d:e4:80:05:11:03:33:79:ff: 75:5a:b9:88:32:b1:9d:72:1e:5d:30:7b:03:73:d0:c9:ea:13: 78:20:0d:23:c5:80:e8:cd:e7:d2:56:a5:cd:d2:c4:08:77:43: 18:a5:28:8b:cd:45:53:e3:b8:b7:45:50:e5:2c:c7:fc:68:05: 68:bc:e0:6c:52:d9:0d:c1:35:ad:89:b2:ec:71:db:bf:fd:93: 74:a0:8e:ac:a6:be:44:7c:c3:c6:08:bd:ba:7d:cc:f4:28:b8: 8c:95:f7:5b:79:32:b2:56:66:76:53:8a:8c:52:44:f2:24:fd: 3a:e2:4c:1d:6a:5f:5d:f0:0c:93:b5:5f:e9:27:f5:8c:ea:29: 36:b4:ed:53:37:c1:7e:88:12:80:1b:26:d9:98:0c:ef:43:49: 1b:96:7d:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXWgyJopHi1xg5MvQZX9bNckSvTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGRTE1NzgyQkQ5NEYwNzM5RDRGMTNCNjAzODE5Qjcz RDVGRTI0NzAeFw0yNTEwMjAwODE3NTZaFw0yNTEwMjExMjAzNTZaMDMxMTAvBgNV BAMTKDU0RDNGRDE0OUMzRUU5NTBBMzkzMTVGODA0QkIxQzU0NURDREQ1MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKO0lYgujJHkASQIzMuXjrFqH9 Mbn92E8jI5WyaCRdWyQAy4HxJDfGn0O062o6ITbise+JvaiVJRk3WkgqMZFN4UU1 A1g9IM+I2b5Ej0DvGcGCOwgZquK7WsysjjaLwbCM6Mz1Oa4ANkVyyRAswXD94VGQ j1CGlzpZdipWXFCByBB0y6SjYH3DlhgEQZyNMmsQ/VqQYbMK9TeDcnXUf7z/4vCK keIaTLO3te3hp4I4RQwpcfok6OC01RTi6shgWcLBf8fXNpmdrAIdleK4Bsns3vXx fs2oM/BKs5pvf+/2m+Ym9SX9IF0EJjWpZl0z8nWB/ubENX0r44nuQuxK+luRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVNP9FJw+6VCjkxX4BLscVF3N1RcwHwYDVR0j BBgwFoAUP/4VeCvZTwc51PE7YDgZtz1f4kcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjViUDFTMkZmc2I3Nk5lbnR6S0g5czVXczZzd0pWaGM3ajlvNHVMUHhV VnUvMS8zRkZFMTU3ODJCRDk0RjA3MzlENEYxM0I2MDM4MTlCNzNENUZFMjQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGRkUxNTc4MkJEOTRGMDcz OUQ0RjEzQjYwMzgxOUI3M0Q1RkUyNDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NjViUDFTMkZmc2I3Nk5lbnR6S0g5czVXczZzd0pWaGM3ajlvNHVMUHhVVnUvMS8z RkZFMTU3ODJCRDk0RjA3MzlENEYxM0I2MDM4MTlCNzNENUZFMjQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANITrG1AWTRbRbDP7Txxn2Y3Exxw47N8pMS1At9xBVbls/Igm4o5EJIFU3ZTr /lXjZIWCQ1/NHy0XLMdHDIRJWNJELK0zK+IWgLID/ZWTMk/OYfUDlaZoZ7Aa6WhL 8BR4QVKUDeSABREDM3n/dVq5iDKxnXIeXTB7A3PQyeoTeCANI8WA6M3n0lalzdLE CHdDGKUoi81FU+O4t0VQ5SzH/GgFaLzgbFLZDcE1rYmy7HHbv/2TdKCOrKa+RHzD xgi9un3M9Ci4jJX3W3kyslZmdlOKjFJE8iT9OuJMHWpfXfAMk7Vf6Sf1jOopNrTt UzfBfogSgBsm2ZgM70NJG5Z9Fw== -----END CERTIFICATE-----Generated at Mon Oct 20 19:12:35 2025 by rpki-client