$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft File: 3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft (raw, json) Hash identifier: M2V9nfjkovhS6n5uWp354E2ikeR6UdCkNtDvQsETgg8= Subject key identifier: F3:A6:D7:F4:FB:9E:AC:4E:92:48:00:1C:BD:F3:E6:68:36:A5:97:A8 Authority key identifier: 3A:5A:1F:BD:FB:AC:3B:0E:47:1D:80:73:BA:46:35:F1:7B:26:60:48 Certificate issuer: /CN=3A5A1FBDFBAC3B0E471D8073BA4635F17B266048 Certificate serial: 24C2DD2DEF5D6368321125B86F173CF7D73870C4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer Subject info access: rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft Manifest number: 011D Signing time: Sun 19 Oct 2025 11:52:22 +0000 Manifest this update: Sun 19 Oct 2025 11:47:22 +0000 Manifest next update: Mon 20 Oct 2025 15:23:22 +0000 Files and hashes: 1: 3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl (hash: 6XuRPZQK5ZbI7Zg5A2+EzqCF665JRMnd3mfBIo+0YQ8=) 2: 323830343a373233303a3a2f33322d3438203d3e20323730383338.roa (hash: 8Q0j1lTtgEWTeidT42m/MaKKKMdbqnM2l9pI0A3eweM=) 3: 3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa (hash: 0U027hiG5j6MP8jXcfJ5yJvBy4z7e9JmZqPN/4bO+A4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 Oct 2025 15:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:c2:dd:2d:ef:5d:63:68:32:11:25:b8:6f:17:3c:f7:d7:38:70:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A5A1FBDFBAC3B0E471D8073BA4635F17B266048 Validity Not Before: Oct 19 11:47:22 2025 GMT Not After : Oct 20 15:23:22 2025 GMT Subject: CN=F3A6D7F4FB9EAC4E9248001CBDF3E66836A597A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a7:d0:27:97:76:7f:84:b8:09:ec:95:e6:7b: 9f:73:db:87:de:57:65:5b:2b:fc:4d:17:9c:25:01: 25:98:3f:7a:c0:1d:ad:a6:ac:e8:ac:bf:e0:a3:b6: f4:03:17:14:78:99:cb:35:63:ac:21:0a:1f:f4:9c: 9b:ed:2a:cd:e5:f7:6c:ac:c4:78:25:19:e8:57:b4: a4:71:29:41:89:c0:9c:33:ce:59:3a:35:f9:40:7c: cd:38:86:28:b1:76:fc:49:7d:d2:96:4d:33:18:e0: 98:c9:e4:4d:27:d6:fb:5e:f9:6d:7e:e2:36:34:83: 21:d3:0b:a8:88:cd:6f:1b:59:f2:75:b4:d7:ef:dc: 9f:52:f0:5a:8c:4f:0e:d3:f2:75:4e:b0:35:9f:65: 33:9f:74:cb:0d:6d:a7:e1:54:45:20:78:7b:e7:19: 38:29:78:ae:02:a5:1a:16:63:64:d1:54:f8:85:52: 21:97:37:b9:92:10:28:65:f8:70:2b:f6:1c:5b:33: 57:08:b8:c8:63:9a:11:5e:4e:32:a8:d6:cc:ac:c6: 07:af:78:d0:1d:af:d6:60:3d:df:c0:46:7c:38:92: c8:af:8a:7a:19:1f:ae:32:e5:62:07:9d:21:0e:1d: 19:aa:50:96:50:2b:5d:fa:55:a8:a0:2e:32:94:98: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A6:D7:F4:FB:9E:AC:4E:92:48:00:1C:BD:F3:E6:68:36:A5:97:A8 X509v3 Authority Key Identifier: keyid:3A:5A:1F:BD:FB:AC:3B:0E:47:1D:80:73:BA:46:35:F1:7B:26:60:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:f5:01:32:ac:47:08:b7:79:84:91:48:65:53:da:b0:12:b1: bc:6c:5e:86:6d:a3:78:2e:42:1d:9f:96:d8:30:44:fd:71:a7: da:bb:d2:2f:a5:3d:78:71:ea:20:3c:36:49:bc:ba:b8:a1:37: 9e:1f:2a:a2:d1:6a:26:9d:0f:1f:63:84:27:42:81:0b:3f:46: 7c:72:96:07:23:bc:a3:d0:c0:82:f6:20:dc:50:30:2e:f4:d9: ad:d3:03:17:3b:e2:71:0f:b7:23:62:40:f0:82:cc:0f:43:3d: 48:98:3c:b1:1a:44:8f:35:28:df:c6:51:bf:86:df:60:2d:2f: 26:a4:ea:d5:65:f1:0e:52:37:3e:8b:7d:38:46:1e:17:6e:9d: 23:07:b6:1b:39:6f:8a:29:25:3c:e7:b0:19:24:06:99:d6:fa: 49:d7:55:05:1f:84:2a:df:02:ac:5b:40:fb:58:0a:3f:4d:73: ff:ee:8c:7f:c2:58:c5:9b:d8:d7:e9:76:f4:1d:f7:8e:6b:f9: 2b:c7:59:50:1c:72:79:85:a3:d8:45:ab:5d:b0:75:59:5a:cc: 93:bd:db:a0:ae:b0:1c:eb:6d:15:4b:ca:ba:d7:a1:07:64:24: b3:da:e3:4c:d3:98:c6:c9:3c:7a:6e:21:ec:a9:08:89:e2:be: 5c:9f:5b:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJMLdLe9dY2gyESW4bxc899c4cMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1QTFGQkRGQkFDM0IwRTQ3MUQ4MDczQkE0NjM1RjE3 QjI2NjA0ODAeFw0yNTEwMTkxMTQ3MjJaFw0yNTEwMjAxNTIzMjJaMDMxMTAvBgNV BAMTKEYzQTZEN0Y0RkI5RUFDNEU5MjQ4MDAxQ0JERjNFNjY4MzZBNTk3QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCap9Anl3Z/hLgJ7JXme59z24fe V2VbK/xNF5wlASWYP3rAHa2mrOisv+CjtvQDFxR4mcs1Y6whCh/0nJvtKs3l92ys xHglGehXtKRxKUGJwJwzzlk6NflAfM04hiixdvxJfdKWTTMY4JjJ5E0n1vte+W1+ 4jY0gyHTC6iIzW8bWfJ1tNfv3J9S8FqMTw7T8nVOsDWfZTOfdMsNbafhVEUgeHvn GTgpeK4CpRoWY2TRVPiFUiGXN7mSEChl+HAr9hxbM1cIuMhjmhFeTjKo1sysxgev eNAdr9ZgPd/ARnw4ksivinoZH64y5WIHnSEOHRmqUJZQK136VaigLjKUmHlhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU86bX9PuerE6SSAAcvfPmaDall6gwHwYDVR0j BBgwFoAUOlofvfusOw5HHYBzukY18XsmYEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQlN4YmV6emVaQVp4OWRMUjdBajZCZ1R5ODhWMmMzeFhUelFZaFp6MkQ5 aWsvMC8zQTVBMUZCREZCQUMzQjBFNDcxRDgwNzNCQTQ2MzVGMTdCMjY2MDQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBNUExRkJERkJBQzNCMEU0 NzFEODA3M0JBNDYzNUYxN0IyNjYwNDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QlN4YmV6emVaQVp4OWRMUjdBajZCZ1R5ODhWMmMzeFhUelFZaFp6MkQ5aWsvMC8z QTVBMUZCREZCQUMzQjBFNDcxRDgwNzNCQTQ2MzVGMTdCMjY2MDQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArfUBMqxHCLd5hJFIZVPasBKxvGxehm2jeC5CHZ+W2DBE/XGn2rvSL6U9eHHq IDw2Sby6uKE3nh8qotFqJp0PH2OEJ0KBCz9GfHKWByO8o9DAgvYg3FAwLvTZrdMD FzvicQ+3I2JA8ILMD0M9SJg8sRpEjzUo38ZRv4bfYC0vJqTq1WXxDlI3Pot9OEYe F26dIwe2GzlviiklPOewGSQGmdb6SddVBR+EKt8CrFtA+1gKP01z/+6Mf8JYxZvY 1+l29B33jmv5K8dZUBxyeYWj2EWrXbB1WVrMk73boK6wHOttFUvKutehB2Qks9rj TNOYxsk8em4h7KkIieK+XJ9bRQ== -----END CERTIFICATE-----Generated at Mon Oct 20 09:32:15 2025 by rpki-client