$ rpki-client -vvf rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/B3657B8FB4EB30CE9527876A777BA3A7E3045837.mft File: B3657B8FB4EB30CE9527876A777BA3A7E3045837.mft (raw, json) Hash identifier: 1lyqscD8JbtizPQADCh+dUh03wbxc+GkC5JTDn0F5Rs= Subject key identifier: 0C:84:F7:C0:88:4A:63:1F:5A:5D:D6:1E:0C:08:31:AE:D1:9E:0B:57 Authority key identifier: B3:65:7B:8F:B4:EB:30:CE:95:27:87:6A:77:7B:A3:A7:E3:04:58:37 Certificate issuer: /CN=B3657B8FB4EB30CE9527876A777BA3A7E3045837 Certificate serial: 241F0398538F3CBC1BEF8012715A1927F37D55C4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3657B8FB4EB30CE9527876A777BA3A7E3045837.cer Subject info access: rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/B3657B8FB4EB30CE9527876A777BA3A7E3045837.mft Manifest number: 02CD Signing time: Mon 20 Oct 2025 06:40:20 +0000 Manifest this update: Mon 20 Oct 2025 06:35:20 +0000 Manifest next update: Tue 21 Oct 2025 08:08:20 +0000 Files and hashes: 1: B3657B8FB4EB30CE9527876A777BA3A7E3045837.crl (hash: Bj08xAzLtEdjW3syLK0BxRvsXgRDA1tFVr8tVwTJ4/o=) 2: 34352e3233322e3232382e302f32322d3234203d3e20323637323830.roa (hash: 6dfvRLdZYb5gbeWgM0hHgNhVg795W+Qnuu4WC4PcQx8=) 3: 323830343a346230633a3a2f33322d3438203d3e20323637323830.roa (hash: WeMzcV0KpVfu3uVkExuUx+l1MUED+V9UAKqRhB9Z89k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/B3657B8FB4EB30CE9527876A777BA3A7E3045837.crl rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/B3657B8FB4EB30CE9527876A777BA3A7E3045837.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3657B8FB4EB30CE9527876A777BA3A7E3045837.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1f:03:98:53:8f:3c:bc:1b:ef:80:12:71:5a:19:27:f3:7d:55:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3657B8FB4EB30CE9527876A777BA3A7E3045837 Validity Not Before: Oct 20 06:35:20 2025 GMT Not After : Oct 21 08:08:20 2025 GMT Subject: CN=0C84F7C0884A631F5A5DD61E0C0831AED19E0B57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:12:8a:01:a9:75:81:92:79:7f:0f:9d:17:84: a0:a5:bf:e4:af:2f:7d:f2:ea:80:4e:64:a9:6b:6d: e8:f6:5e:ce:1f:e0:76:58:b4:04:f4:b4:5e:fb:33: bd:e1:02:15:f8:25:19:28:b8:03:f8:5a:f6:79:92: 67:30:69:91:e4:a9:ce:be:c4:65:b0:72:97:03:a1: b3:b3:4f:da:ff:6c:be:bc:e9:98:1b:fa:b7:48:2d: 45:79:5b:ff:71:83:d3:68:e8:37:5d:d4:01:3f:b4: 48:48:0c:e0:38:f1:66:79:2b:88:d7:7a:42:9b:e0: 17:3f:63:df:b9:fa:3e:2d:00:dd:d3:13:94:0f:6b: 2d:1a:44:94:51:7c:90:6a:70:51:a3:40:59:83:37: 84:cc:cf:0e:1c:f6:40:15:2f:f8:38:2a:e2:80:b7: ab:39:32:a6:75:79:6d:db:a0:e2:14:58:ed:11:f8: f1:52:b7:0c:90:2d:8d:af:15:d2:33:1e:4f:c9:6e: a2:ec:78:da:01:cd:c6:a4:f6:e7:8b:9d:25:f1:80: 60:81:7b:df:d5:15:59:b7:86:ce:84:32:e1:a9:f1: e3:fb:9c:ac:00:16:48:b2:d5:25:16:7a:c0:3c:3a: db:61:52:45:93:ce:a5:c7:28:86:6e:a7:2e:d1:10: 57:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:84:F7:C0:88:4A:63:1F:5A:5D:D6:1E:0C:08:31:AE:D1:9E:0B:57 X509v3 Authority Key Identifier: keyid:B3:65:7B:8F:B4:EB:30:CE:95:27:87:6A:77:7B:A3:A7:E3:04:58:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/B3657B8FB4EB30CE9527876A777BA3A7E3045837.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3657B8FB4EB30CE9527876A777BA3A7E3045837.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qaAvEQsWYm6xhJghD7A9EatK4yTjcWw7sPhucdqiPoM/0/B3657B8FB4EB30CE9527876A777BA3A7E3045837.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b3:be:f2:cb:4a:37:41:46:ff:7d:15:37:52:b7:5c:cd:4a: 24:33:63:a4:c6:4b:75:45:50:e1:6e:ea:42:2a:3d:1a:71:a4: 3b:ef:b1:20:7d:75:28:f4:cd:f9:87:54:19:6f:df:95:05:b0: ad:6c:c3:bc:c0:fb:14:49:e7:7a:a9:72:17:6a:9a:62:10:39: a6:ac:5a:3d:d9:82:0b:b5:d9:6d:fd:df:10:c5:07:97:d8:0c: 3a:6e:d9:8d:ac:8b:4e:70:e6:b9:68:f1:bd:a6:7e:9b:bf:d8: e7:e7:9f:7d:66:a7:3e:ba:2a:db:e1:e8:91:e5:52:8e:ad:07: e3:8d:0d:10:eb:c2:a2:82:86:f7:be:45:9d:50:43:0f:c9:d1: cc:50:a9:e9:4c:b4:41:70:c9:32:c0:c4:16:17:e9:77:c0:76: 87:50:1b:73:f9:97:97:2b:a4:01:6c:3e:0d:90:6f:cb:91:76: 16:49:21:08:86:a9:62:8f:af:a0:c0:cc:83:ac:62:14:62:34: d1:95:9d:e8:dc:aa:9a:d1:e1:bb:b7:ae:7c:4e:28:37:c5:b9: 6f:25:60:3c:18:15:3e:c8:b0:c1:aa:73:9f:c6:ad:b4:31:4d: c0:9d:47:a3:5e:af:fa:cd:c0:dc:a8:d1:3e:8e:6d:97:89:70: 76:fc:2f:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJB8DmFOPPLwb74AScVoZJ/N9VcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM2NTdCOEZCNEVCMzBDRTk1Mjc4NzZBNzc3QkEzQTdF MzA0NTgzNzAeFw0yNTEwMjAwNjM1MjBaFw0yNTEwMjEwODA4MjBaMDMxMTAvBgNV BAMTKDBDODRGN0MwODg0QTYzMUY1QTVERDYxRTBDMDgzMUFFRDE5RTBCNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxEooBqXWBknl/D50XhKClv+Sv L33y6oBOZKlrbej2Xs4f4HZYtAT0tF77M73hAhX4JRkouAP4WvZ5kmcwaZHkqc6+ xGWwcpcDobOzT9r/bL686Zgb+rdILUV5W/9xg9No6Ddd1AE/tEhIDOA48WZ5K4jX ekKb4Bc/Y9+5+j4tAN3TE5QPay0aRJRRfJBqcFGjQFmDN4TMzw4c9kAVL/g4KuKA t6s5MqZ1eW3boOIUWO0R+PFStwyQLY2vFdIzHk/JbqLseNoBzcak9ueLnSXxgGCB e9/VFVm3hs6EMuGp8eP7nKwAFkiy1SUWesA8OtthUkWTzqXHKIZupy7REFfBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDIT3wIhKYx9aXdYeDAgxrtGeC1cwHwYDVR0j BBgwFoAUs2V7j7TrMM6VJ4dqd3ujp+MEWDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNnFhQXZFUXNXWW02eGhKZ2hEN0E5RWF0SzR5VGpjV3c3c1BodWNkcWlQ b00vMC9CMzY1N0I4RkI0RUIzMENFOTUyNzg3NkE3NzdCQTNBN0UzMDQ1ODM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzNjU3QjhGQjRFQjMwQ0U5 NTI3ODc2QTc3N0JBM0E3RTMwNDU4MzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NnFhQXZFUXNXWW02eGhKZ2hEN0E5RWF0SzR5VGpjV3c3c1BodWNkcWlQb00vMC9C MzY1N0I4RkI0RUIzMENFOTUyNzg3NkE3NzdCQTNBN0UzMDQ1ODM3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdLO+8stKN0FG/30VN1K3XM1KJDNjpMZLdUVQ4W7qQio9GnGkO++xIH11KPTN +YdUGW/flQWwrWzDvMD7FEnneqlyF2qaYhA5pqxaPdmCC7XZbf3fEMUHl9gMOm7Z jayLTnDmuWjxvaZ+m7/Y5+effWanProq2+HokeVSjq0H440NEOvCooKG975FnVBD D8nRzFCp6Uy0QXDJMsDEFhfpd8B2h1Abc/mXlyukAWw+DZBvy5F2FkkhCIapYo+v oMDMg6xiFGI00ZWd6NyqmtHhu7eufE4oN8W5byVgPBgVPsiwwapzn8attDFNwJ1H o16v+s3A3KjRPo5tl4lwdvwvtg== -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:35 2025 by rpki-client