$ rpki-client -vvf rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/3A0B596F0C66E75776A6946984E881410C5B85C3.mft File: 3A0B596F0C66E75776A6946984E881410C5B85C3.mft (raw, json) Hash identifier: El0PilT8Nd8wks+O6NONzl/94tcvkeWtMl10XsCbdig= Subject key identifier: 05:67:04:EA:6E:00:60:53:99:0E:83:DC:83:8E:BB:59:75:44:E0:4F Authority key identifier: 3A:0B:59:6F:0C:66:E7:57:76:A6:94:69:84:E8:81:41:0C:5B:85:C3 Certificate issuer: /CN=3A0B596F0C66E75776A6946984E881410C5B85C3 Certificate serial: 2D99B4738BC7B6C333D22BCFCE263ED111500753 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A0B596F0C66E75776A6946984E881410C5B85C3.cer Subject info access: rsync://rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/3A0B596F0C66E75776A6946984E881410C5B85C3.mft Manifest number: 13 Signing time: Mon 20 Oct 2025 02:59:54 +0000 Manifest this update: Mon 20 Oct 2025 02:54:54 +0000 Manifest next update: Tue 21 Oct 2025 06:06:54 +0000 Files and hashes: 1: 34352e3137302e3133392e302f32342d3332203d3e20323733353334.roa (hash: xa+Le74wVRLZrfDoWLitPfZgwKbXYEypRAw46UpBJ3I=) 2: 323830313a38313a33303a3a2f34382d313238203d3e20323733353334.roa (hash: 985BOJw0h5QIitCbptHOi/svlDEzMQiQTV2qlrnF6Fw=) 3: 3A0B596F0C66E75776A6946984E881410C5B85C3.crl (hash: yyx4OeezAM373bJwN8axXnE1kHcHbbGQwox/UDbqyZg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/3A0B596F0C66E75776A6946984E881410C5B85C3.crl rsync://rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/3A0B596F0C66E75776A6946984E881410C5B85C3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A0B596F0C66E75776A6946984E881410C5B85C3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 06:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:99:b4:73:8b:c7:b6:c3:33:d2:2b:cf:ce:26:3e:d1:11:50:07:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A0B596F0C66E75776A6946984E881410C5B85C3 Validity Not Before: Oct 20 02:54:54 2025 GMT Not After : Oct 21 06:06:54 2025 GMT Subject: CN=056704EA6E006053990E83DC838EBB597544E04F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6a:b4:92:ba:35:5e:c1:4c:43:48:a9:d5:d0: 6a:54:d7:2f:5a:c2:32:cc:0b:b5:f2:8f:c8:d7:ac: 4b:c4:d3:aa:55:a9:f2:44:70:1f:6e:e1:bf:82:0b: 7f:84:a7:71:96:e3:fe:02:8e:02:0b:0c:6a:a3:10: 28:e3:a0:60:a5:fa:20:76:99:72:cc:7f:72:a2:c1: 48:9d:bd:bc:31:7f:23:a7:63:e1:ab:bf:67:1e:d9: f6:c8:a7:94:b8:03:4d:d5:53:37:a4:f7:11:8e:56: c1:2a:40:46:b7:05:18:3f:e8:48:64:72:0a:e6:b3: a4:32:6e:fb:53:69:09:2e:9e:8f:8a:4a:e3:17:03: d1:d5:2f:82:b2:07:d4:01:3e:ca:05:ab:38:ac:d8: 63:a9:01:b2:45:e4:f8:d0:c0:b6:de:9f:6a:4c:51: c8:8c:a7:e4:e3:49:61:1c:42:22:bf:fb:37:7f:33: 8a:21:fa:41:2d:09:e1:87:3a:4d:b1:35:bc:83:7a: 9c:ad:25:8f:76:5b:3a:af:3b:8f:e6:6c:98:1b:65: 02:86:e9:44:90:76:b5:2c:e0:a0:85:b8:a0:a5:b5: c7:be:0d:ca:7f:ff:9a:20:40:41:19:2a:f8:86:af: fd:f0:b1:9a:2a:54:78:11:1a:d5:be:00:f1:4a:1c: 9a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:67:04:EA:6E:00:60:53:99:0E:83:DC:83:8E:BB:59:75:44:E0:4F X509v3 Authority Key Identifier: keyid:3A:0B:59:6F:0C:66:E7:57:76:A6:94:69:84:E8:81:41:0C:5B:85:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/3A0B596F0C66E75776A6946984E881410C5B85C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A0B596F0C66E75776A6946984E881410C5B85C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uC2hDsozSTeGpiQBXSJbZcb2jbgYz1h3EuoKQLKsWAr/0/3A0B596F0C66E75776A6946984E881410C5B85C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:55:9e:98:d3:c8:b0:16:c1:91:44:3b:24:74:7b:fa:21:43: a1:c6:d4:77:2f:be:34:a4:43:ef:4c:31:31:a1:ff:2d:29:60: 14:c5:a9:d7:5c:8b:cb:1d:9b:34:aa:c6:e1:8b:23:3d:3d:db: 55:1e:d9:dc:a1:dc:db:74:34:a1:eb:89:81:80:82:f8:d5:fa: 33:c8:44:1d:6e:04:ab:29:65:b5:57:3b:a1:d0:48:6c:a1:00: a7:d9:f2:c0:bb:93:1c:06:55:1a:1f:f4:ae:fc:27:78:cf:e3: 63:2d:cd:fc:12:1c:bd:08:36:01:e0:c8:3a:f3:ad:09:d5:3a: 49:95:9d:6d:65:ac:d9:75:5c:61:aa:42:5a:d3:28:88:cc:c0: d5:5c:eb:8b:ff:4e:8d:36:cd:7e:fe:82:66:7b:f2:aa:4c:ab: 11:a0:1b:92:c1:82:9c:fc:12:7f:5d:c2:2e:3f:f7:81:78:bf: 39:21:9e:91:c2:e3:b6:13:a1:b3:8c:61:7d:9c:3c:a5:96:d1: d5:7a:5b:89:08:45:91:0f:1a:4f:c0:d5:8c:7f:80:ed:fb:e0: d4:f1:26:91:5f:61:d1:3c:8e:be:68:89:24:57:47:b1:01:d2: 13:91:4b:20:49:8f:f4:c8:5a:d9:4c:00:05:ab:84:26:5b:59: ef:dc:20:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULZm0c4vHtsMz0ivPziY+0RFQB1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwQjU5NkYwQzY2RTc1Nzc2QTY5NDY5ODRFODgxNDEw QzVCODVDMzAeFw0yNTEwMjAwMjU0NTRaFw0yNTEwMjEwNjA2NTRaMDMxMTAvBgNV BAMTKDA1NjcwNEVBNkUwMDYwNTM5OTBFODNEQzgzOEVCQjU5NzU0NEUwNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCearSSujVewUxDSKnV0GpU1y9a wjLMC7Xyj8jXrEvE06pVqfJEcB9u4b+CC3+Ep3GW4/4CjgILDGqjECjjoGCl+iB2 mXLMf3KiwUidvbwxfyOnY+Grv2ce2fbIp5S4A03VUzek9xGOVsEqQEa3BRg/6Ehk cgrms6QybvtTaQkuno+KSuMXA9HVL4KyB9QBPsoFqzis2GOpAbJF5PjQwLben2pM UciMp+TjSWEcQiK/+zd/M4oh+kEtCeGHOk2xNbyDepytJY92WzqvO4/mbJgbZQKG 6USQdrUs4KCFuKCltce+Dcp//5ogQEEZKviGr/3wsZoqVHgRGtW+APFKHJrlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBWcE6m4AYFOZDoPcg467WXVE4E8wHwYDVR0j BBgwFoAUOgtZbwxm51d2ppRphOiBQQxbhcMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHVDMmhEc296U1RlR3BpUUJYU0piWmNiMmpiZ1l6MWgzRXVvS1FMS3NX QXIvMC8zQTBCNTk2RjBDNjZFNzU3NzZBNjk0Njk4NEU4ODE0MTBDNUI4NUMzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBMEI1OTZGMEM2NkU3NTc3 NkE2OTQ2OTg0RTg4MTQxMEM1Qjg1QzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHVDMmhEc296U1RlR3BpUUJYU0piWmNiMmpiZ1l6MWgzRXVvS1FMS3NXQXIvMC8z QTBCNTk2RjBDNjZFNzU3NzZBNjk0Njk4NEU4ODE0MTBDNUI4NUMzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARFWemNPIsBbBkUQ7JHR7+iFDocbUdy++NKRD70wxMaH/LSlgFMWp11yLyx2b NKrG4YsjPT3bVR7Z3KHc23Q0oeuJgYCC+NX6M8hEHW4EqylltVc7odBIbKEAp9ny wLuTHAZVGh/0rvwneM/jYy3N/BIcvQg2AeDIOvOtCdU6SZWdbWWs2XVcYapCWtMo iMzA1Vzri/9OjTbNfv6CZnvyqkyrEaAbksGCnPwSf13CLj/3gXi/OSGekcLjthOh s4xhfZw8pZbR1XpbiQhFkQ8aT8DVjH+A7fvg1PEmkV9h0TyOvmiJJFdHsQHSE5FL IEmP9Mha2UwABauEJltZ79wgyA== -----END CERTIFICATE-----Generated at Mon Oct 20 10:09:56 2025 by rpki-client