$ rpki-client -vvf rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft File: 3CF129D24760CA58DEE1B42CDACAE4407710A219.mft (raw, json) Hash identifier: 6mDmtyZ15+hgumNWSfHalpXh/P7MiMqBgr8lNX/ivc8= Subject key identifier: EF:26:82:C3:3C:A6:3D:B1:0F:14:7E:9F:4E:5E:9F:C1:8A:12:B5:34 Authority key identifier: 3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19 Certificate issuer: /CN=3CF129D24760CA58DEE1B42CDACAE4407710A219 Certificate serial: 42814B8BEA566B870FD0EF8F19C22D52C457ADE6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer Subject info access: rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft Manifest number: 02D9 Signing time: Mon 20 Oct 2025 00:43:26 +0000 Manifest this update: Mon 20 Oct 2025 00:38:26 +0000 Manifest next update: Tue 21 Oct 2025 04:37:26 +0000 Files and hashes: 1: 3139302e392e37382e302f32342d3234203d3e20323731363432.roa (hash: 3CSXvgD8gZZJY3OihNgW2wuvdgpLd+7AI9EKOovQkxU=) 2: 3139302e392e37362e302f32342d3234203d3e20323731363432.roa (hash: qS7YOdWdMSn62fYjd4tTd9FWC5HbQvc5gaTCfZGqURY=) 3: 3139302e392e37362e302f32322d3232203d3e20323731363432.roa (hash: vkdrLfrEgIF4V9ADn9mDWAlBjZbSAmaarjhEV5821lo=) 4: 3139302e392e37372e302f32342d3234203d3e20323731363432.roa (hash: qMk30ymCN/0mdqfHbnOIw7ruJwrflPlCaLrbhr/XDBE=) 5: 3139302e392e37392e302f32342d3234203d3e20323731363432.roa (hash: efOB6BUnFRkXMc/5Xb/3RhyF8NSmzmGLP+0nD5VgYIA=) 6: 3CF129D24760CA58DEE1B42CDACAE4407710A219.crl (hash: 6KwZUAblhpZe+53bRJuzWiCN3y3MnNKuzR/2N+GbbvI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 04:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:81:4b:8b:ea:56:6b:87:0f:d0:ef:8f:19:c2:2d:52:c4:57:ad:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CF129D24760CA58DEE1B42CDACAE4407710A219 Validity Not Before: Oct 20 00:38:26 2025 GMT Not After : Oct 21 04:37:26 2025 GMT Subject: CN=EF2682C33CA63DB10F147E9F4E5E9FC18A12B534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a3:95:58:a0:d1:86:d7:b3:21:78:8f:30:e5: 12:98:96:b3:07:ca:66:12:5d:e8:30:91:61:c6:ed: 82:21:7e:ab:87:67:5e:64:cd:ad:48:e9:8a:df:86: 08:68:d8:43:3e:2a:6b:7d:a4:ff:6d:12:27:17:f6: c6:6e:39:69:28:82:d0:f0:cc:3c:b4:74:2e:74:d8: 44:04:6b:d0:51:52:f2:b4:26:be:90:fc:11:ae:b7: c7:f1:23:ea:1a:1d:40:a7:6e:0b:2e:ab:d1:a9:2b: 0d:ba:c9:3e:28:07:6e:e7:19:31:75:ac:e9:a2:38: a9:2c:14:46:32:38:81:d7:e2:52:d4:8c:64:2a:9b: ed:d8:f5:90:d7:db:88:65:30:5a:b1:bf:c0:8a:2b: 7a:e8:82:05:01:4d:e4:5e:64:9f:55:4e:87:6c:73: 0d:f3:ed:2e:dc:c9:d2:ab:0a:6d:e5:f3:6a:4d:85: 92:a1:ad:a0:c8:33:f7:9d:2d:39:c9:fc:74:0a:df: 6a:ad:3b:86:ee:f2:e5:dd:d2:c1:47:83:84:4b:e1: ef:c8:30:ac:12:66:9a:89:e1:74:05:7d:64:5b:b2: 92:1a:93:fc:f3:0b:1c:22:27:24:3b:83:66:30:41: 93:fc:9c:d9:14:3c:28:9f:dd:bd:16:f7:0a:84:33: 2d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:26:82:C3:3C:A6:3D:B1:0F:14:7E:9F:4E:5E:9F:C1:8A:12:B5:34 X509v3 Authority Key Identifier: keyid:3C:F1:29:D2:47:60:CA:58:DE:E1:B4:2C:DA:CA:E4:40:77:10:A2:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/1/3CF129D24760CA58DEE1B42CDACAE4407710A219.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:6f:ba:e2:e8:c3:ff:34:23:60:3c:9c:36:db:7b:da:57:4c: c1:92:a4:3a:dd:f0:ba:99:01:a9:2f:ef:d9:b6:a4:92:d7:db: 6f:1a:f6:5f:ae:8a:bf:ec:76:40:3e:4d:0f:5e:22:43:0c:7b: 36:d1:e8:60:10:34:89:54:53:4e:c6:23:4d:19:12:8f:8e:ec: fc:68:78:5c:b7:46:09:10:c0:c5:d2:38:92:9f:85:bf:74:c2: 47:ec:48:ba:d3:b6:81:d4:3a:b8:b9:32:86:78:b0:cd:23:48: 06:83:e6:a1:f7:dd:e5:67:4f:8b:54:2b:d3:3c:22:ff:d8:6b: 4f:0a:cc:d4:ea:ff:aa:36:82:ca:8d:77:65:5a:d5:47:0b:cd: 5a:db:e5:5b:4f:f4:4c:32:ee:13:2b:2b:d9:7f:84:9e:1f:77: c2:bf:76:45:0a:1a:d4:78:b8:74:af:06:ec:91:4d:4d:dd:91: 88:bb:08:8f:da:84:7f:bf:65:dc:61:e8:72:3d:f3:27:13:9d: 08:ea:d0:3f:89:3f:8c:79:3e:27:c6:18:69:6a:36:e3:6b:c0: 2b:60:82:ed:3a:ce:f9:70:3e:b1:7b:81:5d:0e:79:4b:58:8a: d0:7c:aa:1f:c4:b4:db:bc:27:61:ba:79:a3:33:30:c7:c6:27: 0a:a9:fa:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQoFLi+pWa4cP0O+PGcItUsRXreYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NGMTI5RDI0NzYwQ0E1OERFRTFCNDJDREFDQUU0NDA3 NzEwQTIxOTAeFw0yNTEwMjAwMDM4MjZaFw0yNTEwMjEwNDM3MjZaMDMxMTAvBgNV BAMTKEVGMjY4MkMzM0NBNjNEQjEwRjE0N0U5RjRFNUU5RkMxOEExMkI1MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDo5VYoNGG17MheI8w5RKYlrMH ymYSXegwkWHG7YIhfquHZ15kza1I6Yrfhgho2EM+Kmt9pP9tEicX9sZuOWkogtDw zDy0dC502EQEa9BRUvK0Jr6Q/BGut8fxI+oaHUCnbgsuq9GpKw26yT4oB27nGTF1 rOmiOKksFEYyOIHX4lLUjGQqm+3Y9ZDX24hlMFqxv8CKK3roggUBTeReZJ9VTods cw3z7S7cydKrCm3l82pNhZKhraDIM/edLTnJ/HQK32qtO4bu8uXd0sFHg4RL4e/I MKwSZpqJ4XQFfWRbspIak/zzCxwiJyQ7g2YwQZP8nNkUPCif3b0W9wqEMy17AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7yaCwzymPbEPFH6fTl6fwYoStTQwHwYDVR0j BBgwFoAUPPEp0kdgylje4bQs2srkQHcQohkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRlF5dktOTEF4R1hGaXkzcFFWbmcyZWh6NVJSMTFVV0I1eGk4enk1MVVL YVEvMS8zQ0YxMjlEMjQ3NjBDQTU4REVFMUI0MkNEQUNBRTQ0MDc3MTBBMjE5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRjEyOUQyNDc2MENBNThE RUUxQjQyQ0RBQ0FFNDQwNzcxMEEyMTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RlF5dktOTEF4R1hGaXkzcFFWbmcyZWh6NVJSMTFVV0I1eGk4enk1MVVLYVEvMS8z Q0YxMjlEMjQ3NjBDQTU4REVFMUI0MkNEQUNBRTQ0MDc3MTBBMjE5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaW+64ujD/zQjYDycNtt72ldMwZKkOt3wupkBqS/v2bakktfbbxr2X66Kv+x2 QD5ND14iQwx7NtHoYBA0iVRTTsYjTRkSj47s/Gh4XLdGCRDAxdI4kp+Fv3TCR+xI utO2gdQ6uLkyhniwzSNIBoPmoffd5WdPi1Qr0zwi/9hrTwrM1Or/qjaCyo13ZVrV RwvNWtvlW0/0TDLuEysr2X+Enh93wr92RQoa1Hi4dK8G7JFNTd2RiLsIj9qEf79l 3GHocj3zJxOdCOrQP4k/jHk+J8YYaWo242vAK2CC7TrO+XA+sXuBXQ55S1iK0Hyq H8S027wnYbp5ozMwx8YnCqn6sA== -----END CERTIFICATE-----Generated at Mon Oct 20 21:45:20 2025 by rpki-client