$ rpki-client -vvf rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft File: 3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft (raw, json) Hash identifier: 6eK4gcMH/ierJ0KxADwvur+hF6X4zytoZneX9z/nXaI= Subject key identifier: 12:72:D7:A2:72:D0:CA:B4:0D:09:E2:83:2F:0F:51:DA:93:04:35:7C Authority key identifier: 35:02:23:1E:80:F0:11:7D:D8:B1:1A:5E:9D:1C:FD:0C:46:B2:78:59 Certificate issuer: /CN=3502231E80F0117DD8B11A5E9D1CFD0C46B27859 Certificate serial: 56BB32438BBC041EEFDB5CA68FE66DF50ECB6E19 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.cer Subject info access: rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft Manifest number: 34 Signing time: Sun 19 Oct 2025 20:41:03 +0000 Manifest this update: Sun 19 Oct 2025 20:36:03 +0000 Manifest next update: Mon 20 Oct 2025 23:33:03 +0000 Files and hashes: 1: 3502231E80F0117DD8B11A5E9D1CFD0C46B27859.crl (hash: X4pgSRwyCgLJZ9IUwriMbq2WCGRrR1j4kVK5phCSxz4=) 2: 323830343a356132303a3a2f33322d313238203d3e20323638373530.roa (hash: KTpCP5+yYRNR+V93Ak7K+33CiAxupoTZH+z8ERWiROk=) 3: 34352e3137312e3130342e302f32322d3332203d3e20323638373530.roa (hash: FnqYyjRTYfkNNd38hYxVbI+10+vM4PYCwzmDz8TKA/4=) 4: 34352e3137322e35322e302f32322d3332203d3e20323638373530.roa (hash: /BDeZPrUv8+PcsdMOixik9++54jka+M6eyu4nPvnr5g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.crl rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 23:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:bb:32:43:8b:bc:04:1e:ef:db:5c:a6:8f:e6:6d:f5:0e:cb:6e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3502231E80F0117DD8B11A5E9D1CFD0C46B27859 Validity Not Before: Oct 19 20:36:03 2025 GMT Not After : Oct 20 23:33:03 2025 GMT Subject: CN=1272D7A272D0CAB40D09E2832F0F51DA9304357C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:84:02:bd:91:af:ac:67:d2:9e:6d:ce:f7: 89:d4:b9:b1:29:dc:29:f4:01:3a:4d:a4:9d:4b:0c: 26:e7:d1:64:68:1c:a4:14:3e:91:ef:39:a4:da:e3: 53:66:2c:77:c2:b4:0b:cb:78:a0:2f:db:86:45:2e: b1:f2:7d:34:f1:a6:e0:4e:cc:67:59:ae:ab:2b:75: 2a:a9:1f:f0:84:16:b6:5b:84:fe:87:d8:9e:da:e9: 9e:0d:71:f5:6e:0a:65:b9:ee:07:b7:47:9d:05:3e: 03:99:45:7a:79:6f:e5:2d:80:42:7e:76:48:9c:62: f1:65:8e:58:0e:61:20:5a:77:a3:cc:9a:c3:c9:74: f5:63:5c:99:51:43:9d:39:a2:b1:2f:a3:69:34:f8: b5:fb:15:e4:0f:bf:fb:1d:b5:f6:77:4a:c1:ad:c2: 8a:30:7b:27:bb:22:4d:c1:85:95:d9:42:8c:a2:b6: 4f:fa:d7:90:6e:20:1a:fc:8e:e4:2a:2a:e2:1f:33: 4b:9b:8f:47:44:24:fd:92:4c:39:dc:e7:11:7c:21: 37:03:59:86:65:0e:aa:91:f4:45:b9:c5:91:a9:d7: 7b:7c:ce:fd:27:ce:4a:35:5c:43:71:a0:91:5a:df: c7:fe:8d:48:ff:17:99:d9:66:59:14:9d:10:34:4a: 34:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:72:D7:A2:72:D0:CA:B4:0D:09:E2:83:2F:0F:51:DA:93:04:35:7C X509v3 Authority Key Identifier: keyid:35:02:23:1E:80:F0:11:7D:D8:B1:1A:5E:9D:1C:FD:0C:46:B2:78:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7iDf2mnuFY6oV4ajKbMvxnGLx526MKqbsbxQmjaYTZv/0/3502231E80F0117DD8B11A5E9D1CFD0C46B27859.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:4b:9d:58:61:c3:ea:cf:33:e5:26:0e:be:0e:1f:40:1b:2d: 9b:37:3e:a6:83:0b:b6:6c:9d:b8:db:db:93:64:ce:0c:83:54: a6:f1:1c:77:3c:93:2b:9e:01:bb:6d:0f:54:73:c2:f1:ea:04: 58:51:e7:8d:2a:9a:98:fb:3c:38:f3:99:26:12:33:44:ef:ae: 44:9c:bd:6a:72:c5:c7:a4:d1:f7:48:4c:16:b0:1d:a3:86:74: a3:5e:6c:23:4e:86:d9:db:28:1b:28:2d:75:fe:31:6a:ae:44: b4:86:f3:c1:92:43:1f:e0:e9:ca:34:03:a9:59:3c:01:bb:a2: 26:f3:55:9e:c4:5b:02:1f:3b:0c:dc:ec:38:32:80:a7:1a:bc: 08:85:9c:bc:d0:f1:06:2a:e9:89:9d:3e:48:72:70:47:8a:89: 66:4d:c4:c3:e4:7d:f6:03:4d:d5:86:2c:e2:73:41:c0:5a:32: 34:f4:21:30:a0:8e:59:a2:bf:a6:64:7b:f8:a8:a5:9d:a6:b5: d9:d2:24:91:c7:f5:75:25:eb:59:33:15:1f:c9:02:19:93:bf: 89:7f:ee:50:19:30:6c:a8:b0:97:df:4a:af:f7:15:ea:c6:7d: 83:ac:b9:93:64:82:47:94:20:d5:f6:7d:10:1c:0b:b3:f8:ec: 87:97:69:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVrsyQ4u8BB7v21ymj+Zt9Q7LbhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUwMjIzMUU4MEYwMTE3REQ4QjExQTVFOUQxQ0ZEMEM0 NkIyNzg1OTAeFw0yNTEwMTkyMDM2MDNaFw0yNTEwMjAyMzMzMDNaMDMxMTAvBgNV BAMTKDEyNzJEN0EyNzJEMENBQjQwRDA5RTI4MzJGMEY1MURBOTMwNDM1N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+M4QCvZGvrGfSnm3O94nUubEp 3Cn0ATpNpJ1LDCbn0WRoHKQUPpHvOaTa41NmLHfCtAvLeKAv24ZFLrHyfTTxpuBO zGdZrqsrdSqpH/CEFrZbhP6H2J7a6Z4NcfVuCmW57ge3R50FPgOZRXp5b+UtgEJ+ dkicYvFljlgOYSBad6PMmsPJdPVjXJlRQ505orEvo2k0+LX7FeQPv/sdtfZ3SsGt wooweye7Ik3BhZXZQoyitk/615BuIBr8juQqKuIfM0ubj0dEJP2STDnc5xF8ITcD WYZlDqqR9EW5xZGp13t8zv0nzko1XENxoJFa38f+jUj/F5nZZlkUnRA0SjQXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEnLXonLQyrQNCeKDLw9R2pMENXwwHwYDVR0j BBgwFoAUNQIjHoDwEX3YsRpenRz9DEayeFkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjdpRGYybW51Rlk2b1Y0YWpLYk12eG5HTHg1MjZNS3Fic2J4UW1qYVlU WnYvMC8zNTAyMjMxRTgwRjAxMTdERDhCMTFBNUU5RDFDRkQwQzQ2QjI3ODU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1MDIyMzFFODBGMDExN0RE OEIxMUE1RTlEMUNGRDBDNDZCMjc4NTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QjdpRGYybW51Rlk2b1Y0YWpLYk12eG5HTHg1MjZNS3Fic2J4UW1qYVlUWnYvMC8z NTAyMjMxRTgwRjAxMTdERDhCMTFBNUU5RDFDRkQwQzQ2QjI3ODU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXEudWGHD6s8z5SYOvg4fQBstmzc+poMLtmyduNvbk2TODINUpvEcdzyTK54B u20PVHPC8eoEWFHnjSqamPs8OPOZJhIzRO+uRJy9anLFx6TR90hMFrAdo4Z0o15s I06G2dsoGygtdf4xaq5EtIbzwZJDH+DpyjQDqVk8AbuiJvNVnsRbAh87DNzsODKA pxq8CIWcvNDxBirpiZ0+SHJwR4qJZk3Ew+R99gNN1YYs4nNBwFoyNPQhMKCOWaK/ pmR7+Kilnaa12dIkkcf1dSXrWTMVH8kCGZO/iX/uUBkwbKiwl99Kr/cV6sZ9g6y5 k2SCR5Qg1fZ9EBwLs/jsh5dpnw== -----END CERTIFICATE-----Generated at Mon Oct 20 15:27:14 2025 by rpki-client