$ rpki-client -vvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft File: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft (raw, json) Hash identifier: FXO3iiyD6FH4wlfJJcFqBuNpUuKPSN1FfZmyhXFb554= Subject key identifier: 67:4B:DF:CC:E9:CC:8F:0A:1A:7D:96:95:DE:39:94:B6:5A:54:21:7B Authority key identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 Certificate issuer: /CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Certificate serial: 7AFC30198878A956AF9F6499ED11E64E69BADE0F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer Subject info access: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft Manifest number: 02F1 Signing time: Mon 20 Oct 2025 02:32:48 +0000 Manifest this update: Mon 20 Oct 2025 02:27:48 +0000 Manifest next update: Tue 21 Oct 2025 03:07:48 +0000 Files and hashes: 1: 323830343a386563383a3a2f33322d3438203d3e203631363136.roa (hash: lyXwR8szxK6wAklIFmsSWrdvlecUEfLPCwBeu/gOa+0=) 2: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl (hash: 653WFvxlIUvi/UwajuwqNrCjgz8XkbxAuKsGCwv/72g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 03:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:fc:30:19:88:78:a9:56:af:9f:64:99:ed:11:e6:4e:69:ba:de:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Validity Not Before: Oct 20 02:27:48 2025 GMT Not After : Oct 21 03:07:48 2025 GMT Subject: CN=674BDFCCE9CC8F0A1A7D9695DE3994B65A54217B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a5:1a:c1:f7:3a:3d:f5:5d:c8:f3:48:61:14: c6:8d:d2:1b:51:20:b3:b5:8f:ea:d4:28:c6:62:53: 14:68:5c:c9:cf:70:0b:a2:8c:fa:49:16:e0:a0:20: 4f:00:a9:f7:d3:90:dc:7f:38:8b:80:01:bb:77:52: 3f:1e:06:6b:f0:f0:c0:0a:e9:eb:ab:df:2b:e8:9d: ad:68:21:12:b5:96:f6:a0:85:5e:3c:27:5f:b9:ea: 24:ed:4d:1a:9c:6b:9d:0d:99:72:af:36:27:81:c1: ce:8d:19:41:f1:0b:af:55:92:ae:49:b4:85:ab:59: 0b:6c:6d:40:e1:67:d3:72:12:30:28:fc:b9:85:37: 7c:36:c5:28:1f:48:99:54:43:45:5e:6a:aa:fe:f3: 47:7b:9a:d5:53:a8:01:62:05:67:db:13:f1:18:15: 8d:10:27:b2:1e:92:6b:51:93:22:d5:b3:ee:7a:49: fd:66:7a:85:ab:4e:44:40:d1:ef:51:b8:e6:04:46: b5:43:da:1e:21:45:d1:ac:1c:d3:4f:48:d7:02:85: fb:ea:2b:3c:29:92:a1:a2:3a:21:5f:f0:eb:e4:cb: 4c:4a:28:0c:af:1b:34:f5:89:9f:d8:4c:49:3b:8d: 45:77:27:5a:a3:de:0c:9b:9d:04:a1:1b:29:92:b3: 2f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4B:DF:CC:E9:CC:8F:0A:1A:7D:96:95:DE:39:94:B6:5A:54:21:7B X509v3 Authority Key Identifier: keyid:36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:f5:a0:1a:17:9f:1e:c3:44:91:45:45:eb:99:9d:1c:68:f6: 9e:cc:1e:ea:10:fe:d1:33:ac:0f:bb:cb:e8:92:3c:fd:5c:7f: 57:d8:f8:c0:1a:25:49:1c:f9:49:06:b1:83:a9:f6:7a:45:90: f7:7f:ea:c6:0a:0a:54:70:b6:7c:c8:cb:cd:e1:b5:e0:e0:03: e6:28:0c:e4:eb:8b:ce:df:c8:60:b5:b9:f0:6b:71:89:35:67: 75:91:e6:ba:76:81:c7:37:12:f9:e1:8d:1a:b0:4c:22:91:90: ed:d4:cf:5b:9f:aa:a9:54:88:c5:0a:45:72:9f:29:a1:9c:b9: 27:7e:f1:df:b0:19:5d:db:74:7d:38:77:1b:dc:c2:80:47:e2: d7:ac:a3:9c:98:78:26:e0:c1:e5:1b:76:d9:19:2a:63:0a:3a: 48:03:f0:69:49:a8:7a:3f:3c:60:c3:20:62:ac:d5:a8:c6:17: 92:18:42:36:d6:7c:82:45:d9:84:15:d0:c6:1f:ad:ce:08:01: d8:14:5f:55:b4:14:49:2b:12:07:7f:cd:e5:15:be:ef:b6:82: a9:fa:6d:be:50:1b:a5:26:cd:ab:57:64:eb:f3:6a:ec:e2:24: 88:85:4a:3b:00:5d:12:70:31:83:0b:9e:63:72:64:f8:a9:e0: 2c:ba:0c:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUevwwGYh4qVavn2SZ7RHmTmm63g8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYyNUE1RTE2NThFRTRCMzc5M0FCQUMwMTkyNEEzM0U1 N0MzRkMyMTAeFw0yNTEwMjAwMjI3NDhaFw0yNTEwMjEwMzA3NDhaMDMxMTAvBgNV BAMTKDY3NEJERkNDRTlDQzhGMEExQTdEOTY5NURFMzk5NEI2NUE1NDIxN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpRrB9zo99V3I80hhFMaN0htR ILO1j+rUKMZiUxRoXMnPcAuijPpJFuCgIE8AqffTkNx/OIuAAbt3Uj8eBmvw8MAK 6eur3yvona1oIRK1lvaghV48J1+56iTtTRqca50NmXKvNieBwc6NGUHxC69Vkq5J tIWrWQtsbUDhZ9NyEjAo/LmFN3w2xSgfSJlUQ0Veaqr+80d7mtVTqAFiBWfbE/EY FY0QJ7IekmtRkyLVs+56Sf1meoWrTkRA0e9RuOYERrVD2h4hRdGsHNNPSNcChfvq KzwpkqGiOiFf8Ovky0xKKAyvGzT1iZ/YTEk7jUV3J1qj3gybnQShGymSsy/1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZ0vfzOnMjwoafZaV3jmUtlpUIXswHwYDVR0j BBgwFoAUNiWl4WWO5LN5OrrAGSSjPlfD/CEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFO UFcvMS8zNjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2MjVBNUUxNjU4RUU0QjM3 OTNBQkFDMDE5MjRBMzNFNTdDM0ZDMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFOUFcvMS8z NjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy/WgGhefHsNEkUVF65mdHGj2nswe6hD+0TOsD7vL6JI8/Vx/V9j4wBolSRz5 SQaxg6n2ekWQ93/qxgoKVHC2fMjLzeG14OAD5igM5OuLzt/IYLW58GtxiTVndZHm unaBxzcS+eGNGrBMIpGQ7dTPW5+qqVSIxQpFcp8poZy5J37x37AZXdt0fTh3G9zC gEfi16yjnJh4JuDB5Rt22RkqYwo6SAPwaUmoej88YMMgYqzVqMYXkhhCNtZ8gkXZ hBXQxh+tzggB2BRfVbQUSSsSB3/N5RW+77aCqfptvlAbpSbNq1dk6/Nq7OIkiIVK OwBdEnAxgwueY3Jk+KngLLoMCQ== -----END CERTIFICATE-----Generated at Mon Oct 20 18:27:10 2025 by rpki-client