$ rpki-client -vvf rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.mft File: 3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.mft (raw, json) Hash identifier: XrqHaUFu2vkwOc/58W4vTMxaYB6wh2h+KNdtrHUpc08= Subject key identifier: 8C:56:8F:D2:5D:9C:A9:D8:1E:CD:C3:BE:6C:90:55:E6:93:63:11:CD Authority key identifier: 3B:DC:BF:73:A9:FD:02:DE:55:AD:C9:07:7B:21:6E:28:EC:64:59:2A Certificate issuer: /CN=3BDCBF73A9FD02DE55ADC9077B216E28EC64592A Certificate serial: 11E8A34923D86132FB00C6C6A26897963004F834 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer Subject info access: rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.mft Manifest number: 026C Signing time: Mon 20 Oct 2025 06:33:30 +0000 Manifest this update: Mon 20 Oct 2025 06:28:30 +0000 Manifest next update: Tue 21 Oct 2025 08:34:30 +0000 Files and hashes: 1: 3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.crl (hash: D19xOI6yLk0hUMouVJJ3xaBaGjgza4YlzcksCQuzf3E=) 2: 323830343a336663633a3a2f33322d313238203d3e20323635393135.roa (hash: IqZiGjuwlwLCeDHTutM5pp1/892ZrhTDRe59rjwMYak=) 3: 3133312e3139362e3136382e302f32322d3332203d3e20323635393135.roa (hash: M7pdtYs6Nb3rw+nJtbBZzxuLhgUtWYawsz/eaqx2qxA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.crl rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 08:34:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e8:a3:49:23:d8:61:32:fb:00:c6:c6:a2:68:97:96:30:04:f8:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BDCBF73A9FD02DE55ADC9077B216E28EC64592A Validity Not Before: Oct 20 06:28:30 2025 GMT Not After : Oct 21 08:34:30 2025 GMT Subject: CN=8C568FD25D9CA9D81ECDC3BE6C9055E6936311CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:36:e5:1b:d9:2a:7c:47:fb:20:78:b4:e0:58: f4:1e:ab:6b:1c:43:41:69:1e:65:fe:83:56:ad:35: 85:35:73:a8:65:e0:eb:e5:ce:99:c4:cb:f0:82:7d: 52:84:22:d0:fe:d0:1c:9f:77:62:d0:81:2e:36:f0: 89:bd:d9:53:47:ee:6e:c2:9c:a3:82:53:1d:0e:30: bc:f1:4f:d0:65:c5:56:d5:c9:92:a6:00:36:59:8a: 0d:4e:c5:d9:14:af:90:03:57:6f:53:b6:5f:0d:9e: 0c:fa:01:9f:9f:82:f8:4c:10:a7:f9:b9:ca:25:1b: d6:64:d6:8d:e0:f0:a2:f7:0d:8c:19:75:2e:9d:b5: cc:25:41:24:e1:0b:78:a8:d3:ae:cc:4a:3a:ec:68: 9d:8c:76:c6:08:9f:45:e1:a2:af:d2:99:5c:0b:10: a4:3a:5a:ba:5f:3b:0f:41:6f:02:22:7b:e9:f1:93: 99:54:c6:ad:87:b9:85:ff:3d:13:b2:43:6f:04:9d: 77:26:8c:30:6e:90:3a:96:f6:31:de:e7:35:f8:24: d9:ae:4a:85:b1:35:65:83:88:4f:2d:c4:93:f4:13: 36:6d:9c:8b:3d:1d:fe:f5:33:23:49:a9:12:79:58: 6d:5a:23:d1:41:68:06:7a:4f:bc:53:71:11:b6:3c: 4f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:56:8F:D2:5D:9C:A9:D8:1E:CD:C3:BE:6C:90:55:E6:93:63:11:CD X509v3 Authority Key Identifier: keyid:3B:DC:BF:73:A9:FD:02:DE:55:AD:C9:07:7B:21:6E:28:EC:64:59:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:7a:b8:fd:11:f4:47:c9:46:42:78:de:fb:fc:b0:ca:c2:be: ce:c8:55:5c:37:d2:85:d9:90:66:74:b7:5a:3a:46:f3:9b:04: d7:93:a9:21:c2:8c:66:20:89:97:86:4f:18:9c:33:c2:54:77: c9:08:f4:18:e4:71:28:17:e3:31:c6:35:77:f3:87:a1:a0:bd: be:e5:a4:df:d1:2c:a4:2e:22:5a:bb:14:33:80:a6:3d:28:f1: d6:f8:44:7b:39:42:e0:04:93:8f:79:23:0b:94:3d:47:9d:c3: 45:3a:20:76:56:86:5f:07:c1:ea:d1:b2:16:d7:71:fd:9e:fc: 14:27:d3:c1:8c:1a:a3:d7:5a:29:f0:4a:77:83:76:41:6f:65: af:a3:59:dc:36:e8:82:ae:d4:05:13:98:56:a8:fb:b1:5c:8a: ae:1f:0c:14:4e:89:bd:ff:c6:cd:1f:6e:17:a6:f3:ee:c5:5f: 58:df:68:82:51:f4:19:cf:88:13:ca:08:b8:b2:a4:c7:6f:8c: a8:34:32:9f:fc:01:92:c8:93:8f:37:07:e9:db:77:ec:cc:a4: d1:10:e8:c7:42:77:d5:2f:39:fa:19:ac:85:c7:02:a7:e2:bc: 14:11:fb:c8:10:84:fa:2f:71:61:aa:45:8b:05:80:cf:33:c7: 49:38:e8:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEeijSSPYYTL7AMbGomiXljAE+DQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JEQ0JGNzNBOUZEMDJERTU1QURDOTA3N0IyMTZFMjhF QzY0NTkyQTAeFw0yNTEwMjAwNjI4MzBaFw0yNTEwMjEwODM0MzBaMDMxMTAvBgNV BAMTKDhDNTY4RkQyNUQ5Q0E5RDgxRUNEQzNCRTZDOTA1NUU2OTM2MzExQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMNuUb2Sp8R/sgeLTgWPQeq2sc Q0FpHmX+g1atNYU1c6hl4OvlzpnEy/CCfVKEItD+0Byfd2LQgS428Im92VNH7m7C nKOCUx0OMLzxT9BlxVbVyZKmADZZig1OxdkUr5ADV29Ttl8Nngz6AZ+fgvhMEKf5 ucolG9Zk1o3g8KL3DYwZdS6dtcwlQSThC3io067MSjrsaJ2MdsYIn0Xhoq/SmVwL EKQ6WrpfOw9BbwIie+nxk5lUxq2HuYX/PROyQ28EnXcmjDBukDqW9jHe5zX4JNmu SoWxNWWDiE8txJP0EzZtnIs9Hf71MyNJqRJ5WG1aI9FBaAZ6T7xTcRG2PE99AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjFaP0l2cqdgezcO+bJBV5pNjEc0wHwYDVR0j BBgwFoAUO9y/c6n9At5VrckHeyFuKOxkWSowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUI5VVRHZVhFRGFSSkVMWkJucGJTbnBBQmpXaXZ5NkNLWHdOV0V5YzdM a1EvMC8zQkRDQkY3M0E5RkQwMkRFNTVBREM5MDc3QjIxNkUyOEVDNjQ1OTJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCRENCRjczQTlGRDAyREU1 NUFEQzkwNzdCMjE2RTI4RUM2NDU5MkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUI5VVRHZVhFRGFSSkVMWkJucGJTbnBBQmpXaXZ5NkNLWHdOV0V5YzdMa1EvMC8z QkRDQkY3M0E5RkQwMkRFNTVBREM5MDc3QjIxNkUyOEVDNjQ1OTJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQHq4/RH0R8lGQnje+/ywysK+zshVXDfShdmQZnS3WjpG85sE15OpIcKMZiCJ l4ZPGJwzwlR3yQj0GORxKBfjMcY1d/OHoaC9vuWk39EspC4iWrsUM4CmPSjx1vhE ezlC4ASTj3kjC5Q9R53DRTogdlaGXwfB6tGyFtdx/Z78FCfTwYwao9daKfBKd4N2 QW9lr6NZ3Dbogq7UBROYVqj7sVyKrh8MFE6Jvf/GzR9uF6bz7sVfWN9oglH0Gc+I E8oIuLKkx2+MqDQyn/wBksiTjzcH6dt37Myk0RDox0J31S85+hmshccCp+K8FBH7 yBCE+i9xYapFiwWAzzPHSTjoJg== -----END CERTIFICATE-----Generated at Mon Oct 20 09:42:51 2025 by rpki-client