$ rpki-client -vvf rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A3EDDFE04A45C8B895057324A100C0F681DF4A77.mft File: A3EDDFE04A45C8B895057324A100C0F681DF4A77.mft (raw, json) Hash identifier: vC+4VUYEic0o4D3FKE/d5sLOOUnORLizcWum+JME7yY= Subject key identifier: 33:AE:93:13:5F:BA:E1:FA:31:C2:B4:A8:43:84:CE:57:09:88:32:A2 Authority key identifier: A3:ED:DF:E0:4A:45:C8:B8:95:05:73:24:A1:00:C0:F6:81:DF:4A:77 Certificate issuer: /CN=A3EDDFE04A45C8B895057324A100C0F681DF4A77 Certificate serial: 09B2C52CEE5E58FE26C5D56BF0727E42A7C4B6EC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3EDDFE04A45C8B895057324A100C0F681DF4A77.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A3EDDFE04A45C8B895057324A100C0F681DF4A77.mft Manifest number: 4B Signing time: Mon 20 Oct 2025 00:47:28 +0000 Manifest this update: Mon 20 Oct 2025 00:42:28 +0000 Manifest next update: Tue 21 Oct 2025 02:55:28 +0000 Files and hashes: 1: A3EDDFE04A45C8B895057324A100C0F681DF4A77.crl (hash: b97eCWEmjRdj4JcQKrncNlZUJttH000KY8UYxBvFqoA=) 2: 323830343a323932343a3a2f33322d3438203d3e20323634303030.roa (hash: 425fRHipWeVVhwQE9GftMQzYng6sGZHWVyNs2OmtrKw=) 3: 3134332e302e3132342e302f32322d3234203d3e20323634303030.roa (hash: ijHgzffF1WmSmPVPdsbjAHJZ2LyVKnmtEMBPuBZWZB4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A3EDDFE04A45C8B895057324A100C0F681DF4A77.crl rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A3EDDFE04A45C8B895057324A100C0F681DF4A77.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3EDDFE04A45C8B895057324A100C0F681DF4A77.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 02:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b2:c5:2c:ee:5e:58:fe:26:c5:d5:6b:f0:72:7e:42:a7:c4:b6:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3EDDFE04A45C8B895057324A100C0F681DF4A77 Validity Not Before: Oct 20 00:42:28 2025 GMT Not After : Oct 21 02:55:28 2025 GMT Subject: CN=33AE93135FBAE1FA31C2B4A84384CE57098832A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cc:24:9b:fb:7d:e9:48:e4:05:6a:8a:31:29: 3f:64:32:0f:26:57:56:55:de:41:9c:9c:d8:99:5b: cc:2e:a3:1b:25:c2:14:cb:a5:2a:e0:4d:10:d6:e2: 3d:b7:4a:2c:d1:ad:24:43:49:0a:3a:79:9e:70:c3: 4b:38:75:c7:f5:e5:32:c6:8c:49:72:ce:a7:ab:d3: 87:97:1d:04:c0:6a:b9:9d:eb:48:c8:60:c1:7d:1d: 63:e5:8e:6e:03:b7:24:0e:9b:f3:82:2d:cc:44:ab: 02:2b:b6:87:3e:f7:ae:ad:80:3b:db:4d:55:77:a5: 4e:66:40:06:a7:ea:ef:36:fb:9a:0c:9c:f9:d5:f7: a3:25:0a:fa:f4:76:74:2d:27:e5:ea:a7:5b:54:f7: 88:f9:c1:6a:12:36:26:87:73:ea:fa:59:2c:1a:c9: 07:44:a0:fc:cf:27:0f:55:fb:31:d8:21:a0:10:03: 28:92:04:eb:b9:6a:20:5d:6b:27:32:af:ff:19:ef: 6d:00:44:da:45:1b:4d:e3:14:df:52:46:78:29:22: 8b:45:e4:0e:08:62:38:e9:f0:69:ee:8b:4e:60:1a: d7:da:da:1e:2b:4e:ac:84:3a:56:f2:63:b4:19:7f: 73:83:0f:24:e5:b9:12:80:ce:11:93:c4:24:38:3d: ff:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AE:93:13:5F:BA:E1:FA:31:C2:B4:A8:43:84:CE:57:09:88:32:A2 X509v3 Authority Key Identifier: keyid:A3:ED:DF:E0:4A:45:C8:B8:95:05:73:24:A1:00:C0:F6:81:DF:4A:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A3EDDFE04A45C8B895057324A100C0F681DF4A77.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3EDDFE04A45C8B895057324A100C0F681DF4A77.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKjCdShkv4Y9bhvCJyyGz94FNYY7yPbi52dTPZzVLKpr/0/A3EDDFE04A45C8B895057324A100C0F681DF4A77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e1:90:cb:8d:e0:36:fc:5d:42:ca:5a:c9:d9:06:a5:dd:3a: d2:86:4a:35:14:e0:d9:75:b5:8f:8d:01:2c:00:14:60:ac:37: d1:1d:2b:30:17:d6:ad:2c:d7:f9:4e:4e:f6:85:1c:61:16:3c: d6:07:cd:9e:80:a4:4d:d5:32:99:8c:a3:92:37:52:2a:e7:68: b1:40:b2:e7:a1:7f:69:4b:59:18:27:37:41:6b:9d:5a:5e:b6: 73:22:6d:9c:59:b2:da:9d:06:e6:64:73:bc:3a:e7:4c:33:00: 01:5a:25:4d:ab:15:4e:9e:d6:ce:29:b6:44:df:3f:05:4b:8f: 96:53:6f:67:8a:c7:7d:f1:37:9d:38:5b:7f:a9:e7:da:bf:90: ed:74:ac:2b:06:09:73:c1:69:7d:9f:50:16:9c:7a:45:d2:22: fd:f1:ca:e1:b8:99:6a:c7:ee:54:aa:a1:2c:40:9a:66:02:0b: 8e:7e:3f:ff:4a:32:ba:a2:ef:b4:34:3f:55:84:f6:8f:3b:8c: 64:26:e1:96:ad:b5:7c:3a:41:07:2d:82:3e:71:6c:5d:44:00: 4f:6a:df:18:65:8a:a2:13:6f:e8:f0:2b:15:e5:55:61:16:21: 64:24:bd:e8:da:b9:24:5a:9d:e4:96:db:20:4d:fa:c7:4a:c1: e7:5f:e9:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCbLFLO5eWP4mxdVr8HJ+QqfEtuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFRERGRTA0QTQ1QzhCODk1MDU3MzI0QTEwMEMwRjY4 MURGNEE3NzAeFw0yNTEwMjAwMDQyMjhaFw0yNTEwMjEwMjU1MjhaMDMxMTAvBgNV BAMTKDMzQUU5MzEzNUZCQUUxRkEzMUMyQjRBODQzODRDRTU3MDk4ODMyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzCSb+33pSOQFaooxKT9kMg8m V1ZV3kGcnNiZW8wuoxslwhTLpSrgTRDW4j23SizRrSRDSQo6eZ5ww0s4dcf15TLG jElyzqer04eXHQTAarmd60jIYMF9HWPljm4DtyQOm/OCLcxEqwIrtoc+966tgDvb TVV3pU5mQAan6u82+5oMnPnV96MlCvr0dnQtJ+Xqp1tU94j5wWoSNiaHc+r6WSwa yQdEoPzPJw9V+zHYIaAQAyiSBOu5aiBdaycyr/8Z720ARNpFG03jFN9SRngpIotF 5A4IYjjp8Gnui05gGtfa2h4rTqyEOlbyY7QZf3ODDyTluRKAzhGTxCQ4Pf8xAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUM66TE1+64foxwrSoQ4TOVwmIMqIwHwYDVR0j BBgwFoAUo+3f4EpFyLiVBXMkoQDA9oHfSncwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUtqQ2RTaGt2NFk5Ymh2Q0p5eUd6OTRGTllZN3lQYmk1MmRUUFp6VkxL cHIvMC9BM0VEREZFMDRBNDVDOEI4OTUwNTczMjRBMTAwQzBGNjgxREY0QTc3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EzRURERkUwNEE0NUM4Qjg5 NTA1NzMyNEExMDBDMEY2ODFERjRBNzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUtqQ2RTaGt2NFk5Ymh2Q0p5eUd6OTRGTllZN3lQYmk1MmRUUFp6VkxLcHIvMC9B M0VEREZFMDRBNDVDOEI4OTUwNTczMjRBMTAwQzBGNjgxREY0QTc3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhOGQy43gNvxdQspaydkGpd060oZKNRTg2XW1j40BLAAUYKw30R0rMBfWrSzX +U5O9oUcYRY81gfNnoCkTdUymYyjkjdSKudosUCy56F/aUtZGCc3QWudWl62cyJt nFmy2p0G5mRzvDrnTDMAAVolTasVTp7Wzim2RN8/BUuPllNvZ4rHffE3nThbf6nn 2r+Q7XSsKwYJc8FpfZ9QFpx6RdIi/fHK4biZasfuVKqhLECaZgILjn4//0oyuqLv tDQ/VYT2jzuMZCbhlq21fDpBBy2CPnFsXUQAT2rfGGWKohNv6PArFeVVYRYhZCS9 6Nq5JFqd5JbbIE36x0rB51/pBg== -----END CERTIFICATE-----Generated at Mon Oct 20 15:28:17 2025 by rpki-client