$ rpki-client -vvf rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft File: 3BA0E4707E0361E96A25CFBC6104551202B34011.mft (raw, json) Hash identifier: lXQPXbZd+sBHMA7qh3XAezfWcocJ1Yyvo2uqAMxhD68= Subject key identifier: 96:53:D9:36:7F:D8:CF:BE:33:24:95:46:D5:B0:17:D1:FB:DC:85:48 Authority key identifier: 3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 Certificate issuer: /CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Certificate serial: 1199F5B9A8A0BCB61CD63EF666CF12A8B3CA0A50 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft Manifest number: 02E4 Signing time: Mon 20 Oct 2025 02:31:36 +0000 Manifest this update: Mon 20 Oct 2025 02:26:36 +0000 Manifest next update: Tue 21 Oct 2025 05:28:36 +0000 Files and hashes: 1: 3136382e302e33322e302f32322d3234203d3e20323635323232.roa (hash: FfWivJ4gNEyGVTWyPXQlAoFJfcDTKU2BxPer5WjncSs=) 2: 3BA0E4707E0361E96A25CFBC6104551202B34011.crl (hash: QLLEZxQiHJ6Bs3Z77h+nnXfae9amCKQAF+qQyl2FPRU=) 3: 323830343a326337633a3a2f33322d3438203d3e20323635323232.roa (hash: gZh/j6TTWYlb6HfDh0Q2BiPD8Rby4m6dl3mVzy3MH6M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 05:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:99:f5:b9:a8:a0:bc:b6:1c:d6:3e:f6:66:cf:12:a8:b3:ca:0a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Validity Not Before: Oct 20 02:26:36 2025 GMT Not After : Oct 21 05:28:36 2025 GMT Subject: CN=9653D9367FD8CFBE33249546D5B017D1FBDC8548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e9:10:d7:df:b8:10:8a:ca:21:eb:51:ed:59: fa:10:8f:64:3e:dd:e5:42:21:6d:7b:18:ae:2a:72: 32:a0:21:cb:59:e5:a0:e2:2d:35:13:a6:99:b9:ea: 54:ab:e2:49:33:c2:55:d8:7f:b0:bc:98:9c:ca:52: 4a:5e:4f:a8:6b:10:8d:f9:06:ad:21:0d:2d:a9:a5: b0:40:f8:ba:73:d8:e9:f7:36:a7:c0:93:ad:d0:68: 0a:d5:9e:d9:7a:ce:13:5b:cc:14:fd:97:b5:7e:1a: 47:d1:ea:2f:07:69:45:7c:d5:63:d8:47:57:ba:e3: b7:54:db:cd:0e:66:67:08:97:bc:cb:b0:ce:42:dd: d1:54:a8:f2:d0:70:04:22:a3:fd:93:71:69:3f:a1: 09:31:46:bd:6f:a6:40:5c:3a:2b:df:a4:63:d3:60: 1c:32:ff:c7:8e:b1:9c:8f:37:97:54:a8:62:13:a3: cc:71:a0:4a:46:ed:11:a6:03:6c:c3:1d:77:71:4d: 41:1f:53:f0:a9:05:e7:e3:7e:95:b9:b5:a3:db:bb: a4:ed:e4:46:e3:d7:aa:40:f0:a7:a7:2e:54:aa:d1: 15:40:0e:65:b1:0c:a3:01:f5:06:2e:00:20:4c:d4: c3:23:1f:69:20:c9:55:7b:b7:cc:0b:44:03:9f:a4: da:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:53:D9:36:7F:D8:CF:BE:33:24:95:46:D5:B0:17:D1:FB:DC:85:48 X509v3 Authority Key Identifier: keyid:3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:9a:1d:c5:d4:40:75:21:95:af:ab:e0:94:92:79:7b:50:d6: fb:d9:a1:06:65:58:68:88:77:2a:8d:17:64:a4:b6:5c:d3:a4: e6:04:4b:01:1b:c6:7b:bf:a8:aa:5f:29:c3:b3:4c:20:24:f0: 78:3e:fe:2e:8d:80:31:7d:a1:8c:c6:8f:c1:a6:20:a9:0f:de: 28:dc:ca:1f:06:ba:32:f9:9c:4d:51:29:71:17:de:f1:d4:a2: c0:a6:64:cc:72:e3:d4:0e:12:a9:23:d0:9b:b0:08:43:e7:fc: fa:a0:77:c8:95:e8:7d:2c:47:66:c5:be:fc:23:24:06:b1:3e: d3:18:6b:88:97:bd:07:ff:c2:d1:e0:70:be:17:c1:65:b3:22: 3c:d4:e0:0c:27:eb:f6:11:e6:3c:93:c3:f7:6f:42:25:00:d7: 2c:51:d8:4c:58:75:85:11:f8:b1:95:4a:98:53:79:79:81:8c: e4:8d:3e:2e:64:27:8c:0f:72:18:92:9e:a6:a4:cc:c2:7a:9a: 0f:09:b5:d7:5e:39:1d:1c:f8:41:c0:dd:36:ed:9b:8e:ec:ae: 46:e8:75:35:85:d3:54:b7:d0:ca:e0:10:c5:6e:54:2c:be:83: c9:62:b6:90:81:6b:99:94:c9:dc:8a:ba:bc:aa:36:e9:ad:7b: 88:59:d4:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEZn1uaigvLYc1j72Zs8SqLPKClAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMEU0NzA3RTAzNjFFOTZBMjVDRkJDNjEwNDU1MTIw MkIzNDAxMTAeFw0yNTEwMjAwMjI2MzZaFw0yNTEwMjEwNTI4MzZaMDMxMTAvBgNV BAMTKDk2NTNEOTM2N0ZEOENGQkUzMzI0OTU0NkQ1QjAxN0QxRkJEQzg1NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL6RDX37gQisoh61HtWfoQj2Q+ 3eVCIW17GK4qcjKgIctZ5aDiLTUTppm56lSr4kkzwlXYf7C8mJzKUkpeT6hrEI35 Bq0hDS2ppbBA+Lpz2On3NqfAk63QaArVntl6zhNbzBT9l7V+GkfR6i8HaUV81WPY R1e647dU280OZmcIl7zLsM5C3dFUqPLQcAQio/2TcWk/oQkxRr1vpkBcOivfpGPT YBwy/8eOsZyPN5dUqGITo8xxoEpG7RGmA2zDHXdxTUEfU/CpBefjfpW5taPbu6Tt 5Ebj16pA8KenLlSq0RVADmWxDKMB9QYuACBM1MMjH2kgyVV7t8wLRAOfpNrbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUllPZNn/Yz74zJJVG1bAX0fvchUgwHwYDVR0j BBgwFoAUO6DkcH4DYelqJc+8YQRVEgKzQBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5q c2UvMS8zQkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCQTBFNDcwN0UwMzYxRTk2 QTI1Q0ZCQzYxMDQ1NTEyMDJCMzQwMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5qc2UvMS8z QkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm5odxdRAdSGVr6vglJJ5e1DW+9mhBmVYaIh3Ko0XZKS2XNOk5gRLARvGe7+o ql8pw7NMICTweD7+Lo2AMX2hjMaPwaYgqQ/eKNzKHwa6MvmcTVEpcRfe8dSiwKZk zHLj1A4SqSPQm7AIQ+f8+qB3yJXofSxHZsW+/CMkBrE+0xhriJe9B//C0eBwvhfB ZbMiPNTgDCfr9hHmPJPD929CJQDXLFHYTFh1hRH4sZVKmFN5eYGM5I0+LmQnjA9y GJKepqTMwnqaDwm11145HRz4QcDdNu2bjuyuRuh1NYXTVLfQyuAQxW5ULL6DyWK2 kIFrmZTJ3Iq6vKo26a17iFnU0Q== -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:04 2025 by rpki-client