$ rpki-client -vvf rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.mft File: 3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.mft (raw, json) Hash identifier: bUsSzdikKeXM8xXQmZtik8KkOthuo+vJgTnJzp5NqAI= Subject key identifier: 82:EE:E1:84:DB:AC:15:1A:DE:51:E4:B8:4A:99:10:68:9A:15:CD:F9 Authority key identifier: 3E:F1:B4:A1:73:03:BC:CB:EA:C0:94:AF:B5:54:1F:D4:DC:8D:26:17 Certificate issuer: /CN=3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617 Certificate serial: 4989624D8F0DC198B75E1BA31FE70468BD6EAF68 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.mft Manifest number: D8 Signing time: Mon 20 Oct 2025 12:17:08 +0000 Manifest this update: Mon 20 Oct 2025 12:12:08 +0000 Manifest next update: Tue 21 Oct 2025 13:38:08 +0000 Files and hashes: 1: 34352e3139312e32382e302f32322d3234203d3e20323639363638.roa (hash: IzrzkicHFaIGqJbPc1jlyB/n7wteumcfqv74D8w6z3c=) 2: 3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.crl (hash: K58UdU0tGoHDHCo6p2jzmdtBp8cynaqt0Wb/Ajhftsk=) 3: 323830343a363831343a3a2f33322d3438203d3e20323639363638.roa (hash: XvS6eoH1lZvjRpKOj0vv4+N67wnCEsZQ3Fuf8EOws7I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.crl rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 13:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:89:62:4d:8f:0d:c1:98:b7:5e:1b:a3:1f:e7:04:68:bd:6e:af:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617 Validity Not Before: Oct 20 12:12:08 2025 GMT Not After : Oct 21 13:38:08 2025 GMT Subject: CN=82EEE184DBAC151ADE51E4B84A9910689A15CDF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:29:23:2b:81:b7:09:2e:48:b2:2a:43:f1:f4: 9b:6f:de:c1:d6:ce:5e:0c:0a:a3:3b:ef:a2:32:9d: 21:89:b3:39:1c:57:f8:73:88:92:8f:25:06:4f:c0: 2f:f7:03:a0:67:6c:d9:45:d6:f8:8a:ed:9d:97:71: 55:e4:eb:ef:f5:08:03:37:62:e3:6d:6a:b6:ac:a9: 44:ac:82:94:ad:86:c7:9f:51:20:17:c1:b2:65:32: 69:04:6e:92:26:78:50:43:bb:50:d3:fb:39:4b:c8: 66:58:01:08:79:a4:a8:2c:e1:46:fe:c9:a3:43:3c: 69:a3:76:87:37:fd:1a:47:0d:c7:2b:ab:ce:44:c1: fd:a9:4e:8c:5b:27:0c:85:56:b6:d7:d6:b0:f7:64: ef:4f:44:b6:b8:3d:f6:4c:0b:af:b6:d1:67:61:04: c4:5b:52:80:4c:7f:3b:b1:60:ef:19:42:3d:47:cd: 35:10:2a:49:32:70:53:b3:43:1e:6a:92:d2:06:ea: 13:80:fd:bd:ab:40:24:f8:8e:49:00:12:bd:af:d6: 06:08:ba:16:c0:df:71:2a:cb:f2:fb:bf:26:aa:56: a9:7e:2e:70:59:ea:5e:08:e5:ca:5f:f4:92:59:5e: a7:4b:5b:d2:75:ca:e2:2e:74:9d:bc:63:41:0d:15: b2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EE:E1:84:DB:AC:15:1A:DE:51:E4:B8:4A:99:10:68:9A:15:CD:F9 X509v3 Authority Key Identifier: keyid:3E:F1:B4:A1:73:03:BC:CB:EA:C0:94:AF:B5:54:1F:D4:DC:8D:26:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a7:92:67:5e:6d:40:99:56:1e:c9:e1:da:fa:42:22:f8:30: 0c:c3:8b:39:c1:7b:98:7f:8e:7c:65:69:63:04:81:1a:d6:fd: 52:32:2e:d6:16:49:9c:9c:1c:91:36:95:d0:65:fd:85:83:f8: 83:90:75:04:51:77:91:32:ed:5a:58:bc:dd:f8:47:88:86:14: 4f:7d:97:fa:90:6d:4c:36:6e:6b:a5:13:ec:91:1d:ad:1e:34: e0:2a:19:94:6f:46:68:54:41:4e:ea:cc:ec:e9:0d:9c:8c:2f: 07:73:b5:5d:5f:97:e9:ba:b4:63:11:5e:90:0b:f0:65:fc:e2: b0:84:6a:50:39:4e:f2:45:53:76:bc:20:73:82:f4:e6:67:ad: c6:c7:7b:92:70:8c:47:0d:05:4d:22:f3:bb:cd:59:0d:31:d6: 1b:23:79:e3:82:78:e6:00:c9:5b:76:37:aa:4f:b6:9b:7f:12: 91:40:b1:2e:f0:13:81:93:60:95:3e:18:82:ae:30:f8:78:db: 3f:d6:df:f3:97:50:49:57:8c:dc:43:bd:de:3e:9a:42:0a:fb: 9c:9d:02:34:61:f7:23:73:3b:11:92:7d:4c:f2:4c:e1:b6:8b: 91:d5:04:0d:3d:7d:b9:1f:98:4e:ae:67:ed:36:5d:6d:94:59: 54:ff:3b:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSYliTY8NwZi3XhujH+cEaL1ur2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VGMUI0QTE3MzAzQkNDQkVBQzA5NEFGQjU1NDFGRDRE QzhEMjYxNzAeFw0yNTEwMjAxMjEyMDhaFw0yNTEwMjExMzM4MDhaMDMxMTAvBgNV BAMTKDgyRUVFMTg0REJBQzE1MUFERTUxRTRCODRBOTkxMDY4OUExNUNERjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnKSMrgbcJLkiyKkPx9Jtv3sHW zl4MCqM776IynSGJszkcV/hziJKPJQZPwC/3A6BnbNlF1viK7Z2XcVXk6+/1CAM3 YuNtarasqUSsgpSthsefUSAXwbJlMmkEbpImeFBDu1DT+zlLyGZYAQh5pKgs4Ub+ yaNDPGmjdoc3/RpHDccrq85Ewf2pToxbJwyFVrbX1rD3ZO9PRLa4PfZMC6+20Wdh BMRbUoBMfzuxYO8ZQj1HzTUQKkkycFOzQx5qktIG6hOA/b2rQCT4jkkAEr2v1gYI uhbA33Eqy/L7vyaqVql+LnBZ6l4I5cpf9JJZXqdLW9J1yuIudJ28Y0ENFbJjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgu7hhNusFRreUeS4SpkQaJoVzfkwHwYDVR0j BBgwFoAUPvG0oXMDvMvqwJSvtVQf1NyNJhcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRnQ4aWlhMndlNDRaVU5hWFAxNnM3VlE3YlRDUnVxVWs0VG5uUjQzaFRz ZDgvMC8zRUYxQjRBMTczMDNCQ0NCRUFDMDk0QUZCNTU0MUZENERDOEQyNjE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFRjFCNEExNzMwM0JDQ0JF QUMwOTRBRkI1NTQxRkQ0REM4RDI2MTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RnQ4aWlhMndlNDRaVU5hWFAxNnM3VlE3YlRDUnVxVWs0VG5uUjQzaFRzZDgvMC8z RUYxQjRBMTczMDNCQ0NCRUFDMDk0QUZCNTU0MUZENERDOEQyNjE3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADKeSZ15tQJlWHsnh2vpCIvgwDMOLOcF7mH+OfGVpYwSBGtb9UjIu1hZJnJwc kTaV0GX9hYP4g5B1BFF3kTLtWli83fhHiIYUT32X+pBtTDZua6UT7JEdrR404CoZ lG9GaFRBTurM7OkNnIwvB3O1XV+X6bq0YxFekAvwZfzisIRqUDlO8kVTdrwgc4L0 5metxsd7knCMRw0FTSLzu81ZDTHWGyN544J45gDJW3Y3qk+2m38SkUCxLvATgZNg lT4Ygq4w+HjbP9bf85dQSVeM3EO93j6aQgr7nJ0CNGH3I3M7EZJ9TPJM4baLkdUE DT19uR+YTq5n7TZdbZRZVP87vg== -----END CERTIFICATE-----Generated at Mon Oct 20 15:22:56 2025 by rpki-client