$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.mft File: B3C0ECC43363690F72F949D611EE62DCF8942568.mft (raw, json) Hash identifier: BIA5P+L2X/H9S773ij28J5ULkotUDtwLWsJiZKAO+eI= Subject key identifier: D8:7C:8F:30:34:46:E3:E6:B4:B4:86:43:45:42:7A:40:5F:EF:40:4B Authority key identifier: B3:C0:EC:C4:33:63:69:0F:72:F9:49:D6:11:EE:62:DC:F8:94:25:68 Certificate issuer: /CN=B3C0ECC43363690F72F949D611EE62DCF8942568 Certificate serial: 1316A2E5BC09B1732F2D41E8029E697C56429593 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer Subject info access: rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.mft Manifest number: 01D3 Signing time: Mon 20 Oct 2025 07:24:30 +0000 Manifest this update: Mon 20 Oct 2025 07:19:30 +0000 Manifest next update: Tue 21 Oct 2025 08:22:30 +0000 Files and hashes: 1: B3C0ECC43363690F72F949D611EE62DCF8942568.crl (hash: SjCjub9JGavi3lmOobVesJNEB23jJQJh55D3maiLkuk=) 2: 3134332e3230322e3132302e302f32322d3332203d3e20323633353433.roa (hash: zWq3qveuhfjY2yYC6tu5Za/hQVO2cq+c00n4sKVtMG4=) 3: 3139312e352e3233362e302f32322d3239203d3e20323633353433.roa (hash: XrmREThCWd+9FlIfHO8sDj3baPSgs5QsVANpr6RJMFs=) 4: 323830343a313361343a3a2f33322d313238203d3e20323633353433.roa (hash: NgViZU+smtrX5KI+pgc12is3Dat/7tdY4dskSSJlbWk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.crl rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:16:a2:e5:bc:09:b1:73:2f:2d:41:e8:02:9e:69:7c:56:42:95:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3C0ECC43363690F72F949D611EE62DCF8942568 Validity Not Before: Oct 20 07:19:30 2025 GMT Not After : Oct 21 08:22:30 2025 GMT Subject: CN=D87C8F303446E3E6B4B4864345427A405FEF404B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:67:9b:19:ff:a4:aa:d4:03:9b:8a:6e:42: 62:88:74:f2:94:a7:30:fd:a8:e0:15:1b:c6:35:8c: 7b:bf:bf:2d:0d:7f:47:46:90:8c:7b:04:9b:d3:32: d8:c9:8c:96:75:4e:ae:2f:e6:7b:3e:e3:cc:cc:78: 5d:d2:53:e9:2b:52:8f:69:c1:b2:6a:af:fd:43:bc: 44:90:42:a8:18:bb:a2:72:a0:09:e1:81:ce:6e:3f: 60:16:e0:7f:14:54:12:f2:89:46:2a:d1:4e:f8:ed: 8d:d6:b1:75:48:c4:f4:24:d4:3e:43:91:a8:69:55: a7:35:5f:8a:fc:7c:a2:ce:58:03:53:af:11:99:fc: 77:ed:11:24:af:90:b2:69:aa:52:c7:dd:56:64:57: 94:4d:a7:fa:7c:e9:93:a9:81:4b:d9:7f:94:2e:d0: 69:50:9e:4b:95:d2:3f:1f:e7:e5:21:6f:ed:31:59: 5c:b7:ab:be:74:2b:d5:ae:66:8d:d5:7c:dc:e6:38: 3b:8c:63:79:6a:d9:67:51:e6:5f:c7:17:e9:89:70: 52:c1:5e:4d:5f:bc:06:ac:c5:c7:12:ec:2b:5d:7d: 54:aa:d9:3a:ad:dc:3e:a3:5c:67:3f:1c:05:31:a4: 08:57:99:c5:7b:02:79:3f:f5:81:be:19:71:c9:c7: 63:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7C:8F:30:34:46:E3:E6:B4:B4:86:43:45:42:7A:40:5F:EF:40:4B X509v3 Authority Key Identifier: keyid:B3:C0:EC:C4:33:63:69:0F:72:F9:49:D6:11:EE:62:DC:F8:94:25:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:36:18:0a:00:4a:8d:ac:6f:ed:b0:b0:3d:98:26:5a:66:56: 5f:f4:69:af:00:d1:04:fa:81:42:f1:69:7c:88:aa:9c:4d:8d: a2:e8:87:16:1a:bd:54:69:5c:b4:da:0a:dd:4d:0b:1b:2c:dc: 2c:5e:b3:44:30:99:bc:bd:3b:d0:64:2c:f9:4d:c6:a1:b8:7b: ed:84:b6:03:a7:14:98:39:b6:b1:0a:fb:87:44:2a:25:a9:57: f9:49:e6:5a:58:a1:80:76:60:10:7e:46:f5:38:e3:9b:73:dc: 5f:68:19:91:36:58:03:cd:ed:1e:e0:15:3c:9a:6a:46:86:08: 6e:e0:87:ee:93:4a:78:59:b0:38:f1:25:fb:c7:54:83:e2:a8: f4:87:b6:f9:9a:63:fc:49:ca:c4:ad:b6:68:4d:4c:10:ff:92: 23:d2:9a:27:6d:4e:6b:9e:c7:62:1d:22:cd:5e:a8:fc:51:1a: 7e:3e:7d:e3:2d:2c:5e:fe:17:c5:08:8d:30:7a:76:34:55:8c: 86:2f:10:59:ab:7c:bd:97:aa:13:01:17:0c:42:03:f4:ff:ad: 66:68:59:26:d8:9c:71:4b:76:82:0c:0b:c3:07:a3:fc:b8:bc: b2:38:9b:3a:3d:db:f8:d7:22:29:78:62:27:25:04:28:39:a9: f7:89:06:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUExai5bwJsXMvLUHoAp5pfFZClZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDMEVDQzQzMzYzNjkwRjcyRjk0OUQ2MTFFRTYyRENG ODk0MjU2ODAeFw0yNTEwMjAwNzE5MzBaFw0yNTEwMjEwODIyMzBaMDMxMTAvBgNV BAMTKEQ4N0M4RjMwMzQ0NkUzRTZCNEI0ODY0MzQ1NDI3QTQwNUZFRjQwNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYGWebGf+kqtQDm4puQmKIdPKU pzD9qOAVG8Y1jHu/vy0Nf0dGkIx7BJvTMtjJjJZ1Tq4v5ns+48zMeF3SU+krUo9p wbJqr/1DvESQQqgYu6JyoAnhgc5uP2AW4H8UVBLyiUYq0U747Y3WsXVIxPQk1D5D kahpVac1X4r8fKLOWANTrxGZ/HftESSvkLJpqlLH3VZkV5RNp/p86ZOpgUvZf5Qu 0GlQnkuV0j8f5+Uhb+0xWVy3q750K9WuZo3VfNzmODuMY3lq2WdR5l/HF+mJcFLB Xk1fvAasxccS7CtdfVSq2Tqt3D6jXGc/HAUxpAhXmcV7Ank/9YG+GXHJx2N5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2HyPMDRG4+a0tIZDRUJ6QF/vQEswHwYDVR0j BBgwFoAUs8DsxDNjaQ9y+UnWEe5i3PiUJWgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0pjVXNhRUZrenR5TnF1YUVUbnQ2a3k0TnNGVGloZ0w1NTM5cVZjR3Jt V3kvMC9CM0MwRUNDNDMzNjM2OTBGNzJGOTQ5RDYxMUVFNjJEQ0Y4OTQyNTY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQzBFQ0M0MzM2MzY5MEY3 MkY5NDlENjExRUU2MkRDRjg5NDI1NjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N0pjVXNhRUZrenR5TnF1YUVUbnQ2a3k0TnNGVGloZ0w1NTM5cVZjR3JtV3kvMC9C M0MwRUNDNDMzNjM2OTBGNzJGOTQ5RDYxMUVFNjJEQ0Y4OTQyNTY4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmjYYCgBKjaxv7bCwPZgmWmZWX/RprwDRBPqBQvFpfIiqnE2NouiHFhq9VGlc tNoK3U0LGyzcLF6zRDCZvL070GQs+U3Gobh77YS2A6cUmDm2sQr7h0QqJalX+Unm WlihgHZgEH5G9Tjjm3PcX2gZkTZYA83tHuAVPJpqRoYIbuCH7pNKeFmwOPEl+8dU g+Ko9Ie2+Zpj/EnKxK22aE1MEP+SI9KaJ21Oa57HYh0izV6o/FEafj594y0sXv4X xQiNMHp2NFWMhi8QWat8vZeqEwEXDEID9P+tZmhZJticcUt2ggwLwwej/Li8sjib Oj3b+NciKXhiJyUEKDmp94kGKA== -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:33 2025 by rpki-client