$ rpki-client -vvf rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft File: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft (raw, json) Hash identifier: l1r1oO/xesNaQppMQk40nt+DAYTfx+lZ/fpYT0JIjMY= Subject key identifier: DF:FF:2F:EF:F0:FD:92:30:4A:96:36:6B:78:60:80:D4:DD:70:FD:74 Authority key identifier: 3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56 Certificate issuer: /CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156 Certificate serial: 291CC056BEAD70894C36364D340F4DDAE01FF2BE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer Subject info access: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft Manifest number: 02F3 Signing time: Sun 19 Oct 2025 22:23:17 +0000 Manifest this update: Sun 19 Oct 2025 22:18:17 +0000 Manifest next update: Mon 20 Oct 2025 23:56:17 +0000 Files and hashes: 1: 323830343a343934343a3a2f33322d3438203d3e20323637313734.roa (hash: /98gqYovjRwsWAOUZz7FJqYoYsB4E7lW4Ll5DwBrRaQ=) 2: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl (hash: CnjR1UwQRYKZVKRcU18ZrmTzSOy+Gz4LCPpdSKlYjck=) 3: 34352e3233302e39322e302f32322d3234203d3e20323637313734.roa (hash: pqluJp9dP8BehPp8wAJ7d4shVc60G8J0RZCSVM3YKrY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 23:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1c:c0:56:be:ad:70:89:4c:36:36:4d:34:0f:4d:da:e0:1f:f2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156 Validity Not Before: Oct 19 22:18:17 2025 GMT Not After : Oct 20 23:56:17 2025 GMT Subject: CN=DFFF2FEFF0FD92304A96366B786080D4DD70FD74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:8c:98:20:1d:d4:78:3d:68:ff:f7:88:b9: e1:a2:02:af:b5:7a:08:5d:3f:5a:ac:59:45:45:64: 6f:c7:03:cd:ca:30:04:1c:d9:8e:ca:cc:ee:5e:00: b9:8b:fb:48:5f:8e:3b:6e:ab:da:22:23:14:91:f1: a1:11:a0:ee:50:f2:1c:e3:c5:35:96:15:bf:b2:4f: 68:22:d5:ec:25:d1:6e:7d:3e:2d:32:b1:65:24:e2: 43:07:3f:6f:22:51:09:1b:88:18:91:52:5e:c4:47: 7c:e1:be:12:2c:bf:f2:a8:2f:89:26:fc:75:fc:dd: 29:07:38:cb:89:e5:64:c2:7c:10:dd:5c:57:bb:00: 2b:44:7d:0d:50:e3:e3:39:93:58:72:75:eb:b9:f0: 39:08:d8:18:66:43:8c:f7:14:2e:98:d5:b8:07:56: 63:d2:cc:34:a6:05:36:6b:43:66:66:64:00:2a:14: 59:f2:6d:f7:cc:35:05:3c:8f:1a:c4:df:dd:68:42: ee:b5:63:b4:4e:c7:37:9b:fa:c2:39:fd:39:c1:39: 1a:2d:3a:12:45:2e:ab:09:f9:52:a3:c4:a3:c4:5b: ad:a9:78:cf:75:ea:cf:a3:56:52:14:6a:72:81:57: 0d:2e:9a:cd:fd:69:ad:af:34:59:f6:c1:da:fc:9a: e6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FF:2F:EF:F0:FD:92:30:4A:96:36:6B:78:60:80:D4:DD:70:FD:74 X509v3 Authority Key Identifier: keyid:3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:35:8c:b3:6a:f9:bf:77:91:05:41:a9:3d:4e:fb:07:3c:e1: 39:bc:aa:6f:c9:f9:25:f7:b6:26:92:8a:8d:fe:a0:f1:bc:cf: 6b:18:ca:53:c5:04:14:46:9b:bb:ed:ef:1f:f0:35:aa:57:cf: 97:8d:a0:31:58:33:2e:35:43:00:c6:8b:7d:c1:a4:8c:4c:31: 0d:4f:9a:fa:bf:89:e7:a5:84:19:40:1e:a6:ae:65:5a:8c:fd: a7:1e:79:b6:74:8c:60:f5:c7:c3:68:b9:c1:a2:e9:48:52:a3: c3:72:21:15:d0:f7:80:1b:95:93:8b:75:37:88:9a:52:94:b7: 8a:3f:c4:f3:b8:2e:c8:58:6e:39:d6:57:6f:20:11:5d:68:b1: c6:1d:d0:3c:82:e4:26:a6:fc:f2:1f:18:05:f0:34:06:c1:d3: ee:3c:d9:1d:9f:16:a5:95:49:c5:df:7b:ca:ab:0c:40:6f:71: ce:f0:68:e7:19:73:d4:dd:b1:58:2c:51:f4:a2:85:9b:08:40: 16:ab:c8:bd:ab:19:1a:a7:35:71:91:d1:17:00:af:c5:10:1b: 3b:24:d3:50:df:21:40:f2:37:d6:4e:de:1b:db:ae:5e:6b:ca: c9:5b:e4:f8:28:b6:ef:f6:f9:32:b0:4e:22:c3:d8:02:64:65: d7:28:01:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKRzAVr6tcIlMNjZNNA9N2uAf8r4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFMjdFOTM4MjREMUE4Q0JCQThDOUE0RUYxMTVFRjlE Q0EwMDE1NjAeFw0yNTEwMTkyMjE4MTdaFw0yNTEwMjAyMzU2MTdaMDMxMTAvBgNV BAMTKERGRkYyRkVGRjBGRDkyMzA0QTk2MzY2Qjc4NjA4MEQ0REQ3MEZENzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCipoyYIB3UeD1o//eIueGiAq+1 eghdP1qsWUVFZG/HA83KMAQc2Y7KzO5eALmL+0hfjjtuq9oiIxSR8aERoO5Q8hzj xTWWFb+yT2gi1ewl0W59Pi0ysWUk4kMHP28iUQkbiBiRUl7ER3zhvhIsv/KoL4km /HX83SkHOMuJ5WTCfBDdXFe7ACtEfQ1Q4+M5k1hydeu58DkI2BhmQ4z3FC6Y1bgH VmPSzDSmBTZrQ2ZmZAAqFFnybffMNQU8jxrE391oQu61Y7ROxzeb+sI5/TnBORot OhJFLqsJ+VKjxKPEW62peM916s+jVlIUanKBVw0ums39aa2vNFn2wdr8muZPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3/8v7/D9kjBKljZreGCA1N1w/XQwHwYDVR0j BBgwFoAUPOJ+k4JNGoy7qMmk7xFe+dygAVYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVhKTEJhbXZ5c2h6WVBnQkVzeXdwUnJHNUZvRWVaTm12Z0FEYzZleDg4 bmUvMS8zQ0UyN0U5MzgyNEQxQThDQkJBOEM5QTRFRjExNUVGOURDQTAwMTU2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRTI3RTkzODI0RDFBOENC QkE4QzlBNEVGMTE1RUY5RENBMDAxNTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVhKTEJhbXZ5c2h6WVBnQkVzeXdwUnJHNUZvRWVaTm12Z0FEYzZleDg4bmUvMS8z Q0UyN0U5MzgyNEQxQThDQkJBOEM5QTRFRjExNUVGOURDQTAwMTU2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAizWMs2r5v3eRBUGpPU77BzzhObyqb8n5Jfe2JpKKjf6g8bzPaxjKU8UEFEab u+3vH/A1qlfPl42gMVgzLjVDAMaLfcGkjEwxDU+a+r+J56WEGUAepq5lWoz9px55 tnSMYPXHw2i5waLpSFKjw3IhFdD3gBuVk4t1N4iaUpS3ij/E87guyFhuOdZXbyAR XWixxh3QPILkJqb88h8YBfA0BsHT7jzZHZ8WpZVJxd97yqsMQG9xzvBo5xlz1N2x WCxR9KKFmwhAFqvIvasZGqc1cZHRFwCvxRAbOyTTUN8hQPI31k7eG9uuXmvKyVvk +Ci27/b5MrBOIsPYAmRl1ygBhA== -----END CERTIFICATE-----Generated at Mon Oct 20 13:41:41 2025 by rpki-client