$ rpki-client -vvf rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft File: 3DFAB11D75C819D05773554EBACF15CD75341EF8.mft (raw, json) Hash identifier: JmS2UrWTVwxfUirP2PGB6VZwKoXmX278OiuCuUONO1Q= Subject key identifier: 4C:BC:4A:04:0A:29:43:00:0C:EA:E3:51:2A:27:59:14:F1:96:65:4C Authority key identifier: 3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8 Certificate issuer: /CN=3DFAB11D75C819D05773554EBACF15CD75341EF8 Certificate serial: 413A53897BB2A09A7920CB9962529C91799DDD98 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer Subject info access: rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft Manifest number: 0352 Signing time: Mon 20 Oct 2025 11:00:00 +0000 Manifest this update: Mon 20 Oct 2025 10:55:00 +0000 Manifest next update: Tue 21 Oct 2025 11:00:00 +0000 Files and hashes: 1: 323830343a373963633a3a2f33322d3334203d3e20323731333238.roa (hash: ioQjGfieQHF3yV2fgI8Chw4pCzVaqcleon3vtaTviRw=) 2: 3230302e392e3131362e302f32322d3234203d3e20323731333238.roa (hash: oltG1noOnbrRoM0sS15kDu8e6YFzCzXI+kuYiuRIpNo=) 3: 3DFAB11D75C819D05773554EBACF15CD75341EF8.crl (hash: +QF7D1WsKe5NJzcbOKyTW7ZyBnlLfKgCJNZ+lxQWy5c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.crl rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:3a:53:89:7b:b2:a0:9a:79:20:cb:99:62:52:9c:91:79:9d:dd:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DFAB11D75C819D05773554EBACF15CD75341EF8 Validity Not Before: Oct 20 10:55:00 2025 GMT Not After : Oct 21 11:00:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:76:60:64:12:1d:45:6f:d8:9a:fb:60:bf:36: 1c:62:90:25:b7:66:38:b8:8c:b9:a6:19:f3:a7:c8: 76:c1:d4:86:f9:26:88:ae:7f:f8:68:ed:6d:16:3d: 9d:5b:1c:ec:04:14:39:23:7c:c5:c3:43:29:fc:9b: 91:c6:34:af:d8:3b:87:fa:ae:fc:6c:33:97:94:36: 7d:5f:92:3e:c2:af:fc:e4:ae:ee:05:66:f8:64:39: bb:45:d5:db:71:e9:b0:fe:e6:56:67:7e:fe:09:34: cd:31:57:73:a8:3a:7d:ae:01:26:a7:e7:70:8d:2d: 20:9e:47:6b:96:bf:b6:bc:2f:28:23:a9:4f:be:ca: 6d:43:04:60:fb:0d:b7:a2:4e:b4:2d:9c:05:7c:65: 0c:6a:7f:7e:c0:d6:7d:cf:83:00:2f:a4:27:35:dc: 55:05:43:d5:50:3a:30:54:c8:63:e9:6b:73:e7:ce: de:7b:8e:44:ba:7e:6d:3b:6d:ff:e7:fc:ab:6b:58: b8:7d:55:b6:c3:46:c4:f3:1d:ca:59:bd:7a:3b:df: 79:c7:61:ad:c3:fe:03:70:8f:0f:ab:27:68:9a:d9: 6a:08:75:2d:4d:b0:8d:b2:6c:ff:2a:ee:5e:10:d3: f2:20:87:23:46:ea:51:df:d8:17:0c:0b:83:c1:72: 52:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BC:4A:04:0A:29:43:00:0C:EA:E3:51:2A:27:59:14:F1:96:65:4C X509v3 Authority Key Identifier: keyid:3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:56:ba:29:47:ed:3b:1e:9b:bf:a4:d0:90:d8:c5:f9:79:85: d6:54:ab:b7:30:aa:8b:18:ea:53:ae:06:4c:9a:cd:aa:93:aa: 61:62:69:05:f9:ce:e6:d0:f8:18:95:8d:fd:fb:5e:18:54:a8: 35:9a:5e:ac:8c:4c:f1:ec:73:35:81:59:51:fc:97:f4:1e:d1: 47:d2:51:8f:68:a8:76:2c:90:20:e0:1e:c2:fe:9f:a7:c3:4c: 08:d2:bf:d7:ae:87:43:ee:88:84:15:a1:7a:0f:2e:64:d4:d4: db:6e:fb:c7:31:8b:0c:97:5e:3b:a2:ec:15:92:2f:38:ff:79: 56:41:21:e8:78:d4:cd:a6:6b:69:2b:71:ef:9a:d9:4d:55:98: c2:17:28:7f:56:28:d9:88:e8:26:6c:b7:e6:ae:0f:31:aa:93: 87:c3:59:8f:df:6f:44:ea:6e:17:c6:d6:7a:7d:51:25:79:ab: 41:5c:27:50:01:85:47:16:fc:d8:ac:74:25:27:12:15:ec:ad: 30:ad:c3:7a:1d:89:0a:03:f2:16:64:d1:a5:2d:dc:16:7f:af: 71:7a:a6:50:ab:a1:a7:e4:49:b8:50:5c:11:e7:11:11:21:d4: a5:83:14:2d:71:91:77:08:fb:85:6f:40:09:f3:84:6a:82:03: 18:e3:5a:43 -----BEGIN CERTIFICATE----- MIIHSDCCBjCgAwIBAgIUQTpTiXuyoJp5IMuZYlKckXmd3ZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RGQUIxMUQ3NUM4MTlEMDU3NzM1NTRFQkFDRjE1Q0Q3 NTM0MUVGODAeFw0yNTEwMjAxMDU1MDBaFw0yNTEwMjExMTAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzk3NjYwNjQxMjFENDU2RkQ4 OUFGQjYwQkYzNjFDNjI5MDI1Qjc2NjM4Qjg4Q0I5QTYxOUYzQTdDODc2QzFENDg2 RjkyNjg4QUU3RkY4NjhFRDZEMTYzRDlENUIxQ0VDMDQxNDM5MjM3Q0M1QzM0MzI5 RkM5QjkxQzYzNEFGRDgzQjg3RkFBRUZDNkMzMzk3OTQzNjdENUY5MjNFQzJBRkZD RTRBRUVFMDU2NkY4NjQzOUJCNDVENURCNzFFOUIwRkVFNjU2Njc3RUZFMDkzNENE MzE1NzczQTgzQTdEQUUwMTI2QTdFNzcwOEQyRDIwOUU0NzZCOTZCRkI2QkMyRjI4 MjNBOTRGQkVDQTZENDMwNDYwRkIwREI3QTI0RUI0MkQ5QzA1N0M2NTBDNkE3RjdF QzBENjdEQ0Y4MzAwMkZBNDI3MzVEQzU1MDU0M0Q1NTAzQTMwNTRDODYzRTk2Qjcz RTdDRURFN0I4RTQ0QkE3RTZEM0I2REZGRTdGQ0FCNkI1OEI4N0Q1NUI2QzM0NkM0 RjMxRENBNTlCRDdBM0JERjc5Qzc2MUFEQzNGRTAzNzA4RjBGQUIyNzY4OUFEOTZB MDg3NTJENERCMDhEQjI2Q0ZGMkFFRTVFMTBEM0YyMjA4NzIzNDZFQTUxREZEODE3 MEMwQjgzQzE3MjUyRTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAyXZgZBIdRW/YmvtgvzYcYpAlt2Y4uIy5phnzp8h2wdSG+SaIrn/4 aO1tFj2dWxzsBBQ5I3zFw0Mp/JuRxjSv2DuH+q78bDOXlDZ9X5I+wq/85K7uBWb4 ZDm7RdXbcemw/uZWZ37+CTTNMVdzqDp9rgEmp+dwjS0gnkdrlr+2vC8oI6lPvspt QwRg+w23ok60LZwFfGUMan9+wNZ9z4MAL6QnNdxVBUPVUDowVMhj6Wtz587ee45E un5tO23/5/yra1i4fVW2w0bE8x3KWb16O995x2Gtw/4DcI8PqydomtlqCHUtTbCN smz/Ku5eENPyIIcjRupR39gXDAuDwXJS4wIDAQABo4ICVjCCAlIwHQYDVR0OBBYE FEy8SgQKKUMADOrjUSonWRTxlmVMMB8GA1UdIwQYMBaAFD36sR11yBnQV3NVTrrP Fc11NB74MA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSkVZM0hvN0dFY0ViTUVn a3NlUkY2b3JaUTliQXA5V1hWUlY5ejJhMkRiZC8xLzNERkFCMTFENzVDODE5RDA1 NzczNTU0RUJBQ0YxNUNENzUzNDFFRjguY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi cl9yZXBvLzEvM0RGQUIxMUQ3NUM4MTlEMDU3NzM1NTRFQkFDRjE1Q0Q3NTM0MUVG OC5jZXIwgZwGCCsGAQUFBwELBIGPMIGMMIGJBggrBgEFBQcwC4Z9cnN5bmM6Ly9y cGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KRVkzSG83R0VjRWJNRWdrc2VSRjZv clpROWJBcDlXWFZSVjl6MmEyRGJkLzEvM0RGQUIxMUQ3NUM4MTlEMDU3NzM1NTRF QkFDRjE1Q0Q3NTM0MUVGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJdWuilH7Tsem7+k0JDYxfl5hdZU q7cwqosY6lOuBkyazaqTqmFiaQX5zubQ+BiVjf37XhhUqDWaXqyMTPHsczWBWVH8 l/Qe0UfSUY9oqHYskCDgHsL+n6fDTAjSv9euh0PuiIQVoXoPLmTU1Ntu+8cxiwyX Xjui7BWSLzj/eVZBIeh41M2ma2krce+a2U1VmMIXKH9WKNmI6CZst+auDzGqk4fD WY/fb0TqbhfG1np9USV5q0FcJ1ABhUcW/NisdCUnEhXsrTCtw3odiQoD8hZk0aUt 3BZ/r3F6plCroafkSbhQXBHnEREh1KWDFC1xkXcI+4VvQAnzhGqCAxjjWkM= -----END CERTIFICATE-----Generated at Mon Oct 20 20:59:10 2025 by rpki-client