$ rpki-client -vvf rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft File: 3895E2089A93A58E1062DE9612B321CA505C51FA.mft (raw, json) Hash identifier: VC35nGHrf5ahPrbXFs0mhzDieAPlFS8u+jIYoSL58Hw= Subject key identifier: FD:56:C6:3A:25:9E:6D:15:DB:1E:80:42:4E:C3:5A:FC:3C:10:93:23 Authority key identifier: 38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA Certificate issuer: /CN=3895E2089A93A58E1062DE9612B321CA505C51FA Certificate serial: 4C8B6949C67B278F29DB0BBF5D09CD4F2ECBB8D7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer Subject info access: rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft Manifest number: 034E Signing time: Sun 19 Oct 2025 23:26:00 +0000 Manifest this update: Sun 19 Oct 2025 23:21:00 +0000 Manifest next update: Mon 20 Oct 2025 23:26:00 +0000 Files and hashes: 1: 3895E2089A93A58E1062DE9612B321CA505C51FA.crl (hash: ny+o4aRQiM+DD0ngOJ7F1v+2wVWGLWhugyAcMn1mJLE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.crl rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 23:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:8b:69:49:c6:7b:27:8f:29:db:0b:bf:5d:09:cd:4f:2e:cb:b8:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3895E2089A93A58E1062DE9612B321CA505C51FA Validity Not Before: Oct 19 23:21:00 2025 GMT Not After : Oct 26 23:26:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f5:b2:aa:dc:0d:1d:92:d5:66:ce:c5:10:04: b1:76:c2:62:4e:bb:17:90:6f:37:17:d7:71:02:29: 28:c7:05:38:53:57:d2:9e:a5:d7:a4:b6:0b:73:58: 10:b2:ad:04:30:b0:6f:f5:e5:13:5d:99:ac:25:f7: 16:c5:35:47:0c:67:87:81:0d:1f:b2:32:cf:47:cd: b0:de:8f:64:b9:85:53:e0:49:e3:96:df:0a:7c:69: 67:e6:32:26:f2:06:df:d3:78:a7:30:13:db:25:ac: 29:95:13:ae:6f:b4:db:d3:e6:fb:58:df:4e:7b:d6: 70:2f:52:e1:5e:7b:2d:62:bf:ae:82:d1:88:4e:71: 12:8a:28:a4:c8:cd:27:6b:75:6b:e7:58:1f:0f:81: 7a:69:1f:e6:67:0c:fa:7d:0e:ac:32:9b:d5:cc:10: e5:92:04:f7:b4:7d:b9:ab:37:11:9e:36:db:21:e8: 94:41:4d:b4:e6:5d:81:31:68:91:7f:ba:49:06:84: 4a:b4:89:78:68:81:58:58:2c:64:eb:fc:ed:e9:ab: 92:77:96:7b:d5:ca:0f:44:03:4b:6a:6e:15:fb:d2: 34:4b:ba:25:31:ca:f6:d7:0b:76:48:58:98:d7:a5: f6:29:78:ee:93:a9:5f:53:e7:77:a6:1c:3b:c1:64: 3d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:56:C6:3A:25:9E:6D:15:DB:1E:80:42:4E:C3:5A:FC:3C:10:93:23 X509v3 Authority Key Identifier: keyid:38:95:E2:08:9A:93:A5:8E:10:62:DE:96:12:B3:21:CA:50:5C:51:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3895E2089A93A58E1062DE9612B321CA505C51FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hgrWskYpUzgYkSTFThYAwJ6upvYBbNXyd5TJZTx1aSX/1/3895E2089A93A58E1062DE9612B321CA505C51FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:a5:8e:7f:ac:fe:e2:2f:2e:48:fe:5e:f9:89:c2:6d:12:36: 60:ec:d8:4b:c7:e9:19:5b:45:a9:4a:19:df:56:d8:d9:1d:42: d1:13:79:89:63:87:67:4b:88:e8:3c:30:e2:b2:36:ed:7f:61: aa:8f:e9:7c:1c:e1:61:b4:3f:2a:eb:2d:e4:f3:8e:ae:6a:84: 26:53:00:1d:85:ab:43:f5:da:39:77:dc:7b:71:f1:db:16:c1: 33:5c:c4:e7:a9:c5:ef:d1:1d:33:04:69:16:1c:a0:e7:80:3d: 48:a9:7c:52:d8:ac:e9:f1:39:27:95:a7:d4:17:08:43:de:36: 40:09:7d:e1:91:3a:64:17:b0:19:1e:5c:19:8d:0c:5e:8f:3c: 23:d2:90:6b:9f:45:40:d3:c7:9b:51:10:e1:c0:b6:92:4c:aa: e4:1f:1f:20:f4:d8:8b:a7:46:7c:66:61:ab:c1:78:a3:73:c4: 26:e5:7f:98:cf:8b:4d:c6:88:35:a7:f3:92:ad:76:7a:e3:3d: 11:b7:93:ca:eb:43:3b:35:62:ec:53:be:f4:34:63:e9:1c:fb: 79:bc:c1:7f:df:4c:a2:f4:67:3f:4e:5b:4f:bd:51:84:d0:69: 1d:c5:32:03:08:41:83:44:7c:cd:e0:c5:84:52:11:16:39:15: c6:c3:1d:20 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUTItpScZ7J48p2wu/XQnNTy7LuNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg5NUUyMDg5QTkzQTU4RTEwNjJERTk2MTJCMzIxQ0E1 MDVDNTFGQTAeFw0yNTEwMTkyMzIxMDBaFw0yNTEwMjYyMzI2MDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzlGNUIyQUFEQzBEMUQ5MkQ1 NjZDRUM1MTAwNEIxNzZDMjYyNEVCQjE3OTA2RjM3MTdENzcxMDIyOTI4QzcwNTM4 NTM1N0QyOUVBNUQ3QTRCNjBCNzM1ODEwQjJBRDA0MzBCMDZGRjVFNTEzNUQ5OUFD MjVGNzE2QzUzNTQ3MEM2Nzg3ODEwRDFGQjIzMkNGNDdDREIwREU4RjY0Qjk4NTUz RTA0OUUzOTZERjBBN0M2OTY3RTYzMjI2RjIwNkRGRDM3OEE3MzAxM0RCMjVBQzI5 OTUxM0FFNkZCNERCRDNFNkZCNThERjRFN0JENjcwMkY1MkUxNUU3QjJENjJCRkFF ODJEMTg4NEU3MTEyOEEyOEE0QzhDRDI3NkI3NTZCRTc1ODFGMEY4MTdBNjkxRkU2 NjcwQ0ZBN0QwRUFDMzI5QkQ1Q0MxMEU1OTIwNEY3QjQ3REI5QUIzNzExOUUzNkRC MjFFODk0NDE0REI0RTY1RDgxMzE2ODkxN0ZCQTQ5MDY4NDRBQjQ4OTc4Njg4MTU4 NTgyQzY0RUJGQ0VERTlBQjkyNzc5NjdCRDVDQTBGNDQwMzRCNkE2RTE1RkJEMjM0 NEJCQTI1MzFDQUY2RDcwQjc2NDg1ODk4RDdBNUY2Mjk3OEVFOTNBOTVGNTNFNzc3 QTYxQzNCQzE2NDNERDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAyfWyqtwNHZLVZs7FEASxdsJiTrsXkG83F9dxAikoxwU4U1fSnqXX pLYLc1gQsq0EMLBv9eUTXZmsJfcWxTVHDGeHgQ0fsjLPR82w3o9kuYVT4Enjlt8K fGln5jIm8gbf03inMBPbJawplROub7Tb0+b7WN9Oe9ZwL1LhXnstYr+ugtGITnES iiikyM0na3Vr51gfD4F6aR/mZwz6fQ6sMpvVzBDlkgT3tH25qzcRnjbbIeiUQU20 5l2BMWiRf7pJBoRKtIl4aIFYWCxk6/zt6auSd5Z71coPRANLam4V+9I0S7olMcr2 1wt2SFiY16X2KXjuk6lfU+d3phw7wWQ91QIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FP1Wxjolnm0V2x6AQk7DWvw8EJMjMB8GA1UdIwQYMBaAFDiV4giak6WOEGLelhKz IcpQXFH6MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhoZ3JXc2tZcFV6Z1lr U1RGVGhZQXdKNnVwdllCYk5YeWQ1VEpaVHgxYVNYLzEvMzg5NUUyMDg5QTkzQTU4 RTEwNjJERTk2MTJCMzIxQ0E1MDVDNTFGQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS8zODk1RTIwODlBOTNBNThFMTA2MkRFOTYxMkIzMjFDQTUwNUM1 MUZBLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhoZ3JXc2tZcFV6Z1lrU1RGVGhZ QXdKNnVwdllCYk5YeWQ1VEpaVHgxYVNYLzEvMzg5NUUyMDg5QTkzQTU4RTEwNjJE RTk2MTJCMzIxQ0E1MDVDNTFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKSljn+s/uIvLkj+XvmJwm0S NmDs2EvH6RlbRalKGd9W2NkdQtETeYljh2dLiOg8MOKyNu1/YaqP6Xwc4WG0Pyrr LeTzjq5qhCZTAB2Fq0P12jl33Htx8dsWwTNcxOepxe/RHTMEaRYcoOeAPUipfFLY rOnxOSeVp9QXCEPeNkAJfeGROmQXsBkeXBmNDF6PPCPSkGufRUDTx5tREOHAtpJM quQfHyD02IunRnxmYavBeKNzxCblf5jPi03GiDWn85KtdnrjPRG3k8rrQzs1YuxT vvQ0Y+kc+3m8wX/fTKL0Zz9OW0+9UYTQaR3FMgMIQYNEfM3gxYRSERY5FcbDHSA= -----END CERTIFICATE-----Generated at Mon Oct 20 13:57:19 2025 by rpki-client