$ rpki-client -vvf rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/3C935E1CA93E646630F422D7A5C05C4398641455.mft File: 3C935E1CA93E646630F422D7A5C05C4398641455.mft (raw, json) Hash identifier: KJ0KtbNu+1gTc1VYKJCWQJnSUpPRPV++gMRNDDR8BnQ= Subject key identifier: 71:AC:76:DB:24:56:C2:58:11:30:33:0C:67:5B:E0:DB:86:D2:E9:E8 Authority key identifier: 3C:93:5E:1C:A9:3E:64:66:30:F4:22:D7:A5:C0:5C:43:98:64:14:55 Certificate issuer: /CN=3C935E1CA93E646630F422D7A5C05C4398641455 Certificate serial: 320093E79EA911F046F350FAED7C7E6C4B7FDF09 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C935E1CA93E646630F422D7A5C05C4398641455.cer Subject info access: rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/3C935E1CA93E646630F422D7A5C05C4398641455.mft Manifest number: 68 Signing time: Mon 20 Oct 2025 09:33:52 +0000 Manifest this update: Mon 20 Oct 2025 09:28:52 +0000 Manifest next update: Tue 21 Oct 2025 11:11:52 +0000 Files and hashes: 1: 323830343a343339303a3a2f33322d3438203d3e203238313934.roa (hash: YKvuDNIHyw3NBnRCbWj16Uwongrcmr0GD6QVxxTjIG4=) 2: 3138372e33332e35362e302f32312d3234203d3e203238313934.roa (hash: eAOvJwa8cDL+zwdJYLUzbPPAEm5iZnhfT4ZIZGXqltQ=) 3: 3C935E1CA93E646630F422D7A5C05C4398641455.crl (hash: upsnsKiq+mHThyPbIlVYY/c/1L2wp49GdJiQ7wiUXE0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/3C935E1CA93E646630F422D7A5C05C4398641455.crl rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/3C935E1CA93E646630F422D7A5C05C4398641455.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C935E1CA93E646630F422D7A5C05C4398641455.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 21 Oct 2025 11:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:00:93:e7:9e:a9:11:f0:46:f3:50:fa:ed:7c:7e:6c:4b:7f:df:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C935E1CA93E646630F422D7A5C05C4398641455 Validity Not Before: Oct 20 09:28:52 2025 GMT Not After : Oct 21 11:11:52 2025 GMT Subject: CN=71AC76DB2456C2581130330C675BE0DB86D2E9E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f2:d7:77:48:14:b3:79:eb:f9:d8:dc:a6:3b: 1e:5b:4b:25:4c:58:d1:a2:67:6c:9a:d1:1f:06:fb: e1:d2:5b:9c:cf:10:9c:4a:51:b3:4b:19:5f:9b:d6: 65:51:05:dc:df:ca:b6:55:62:8a:c8:3f:66:0d:e7: 29:20:8e:90:17:13:dc:c9:f8:e9:bc:cc:b7:04:a0: eb:d7:97:73:7d:03:d6:41:74:4f:a2:d3:de:25:f1: d7:cb:8a:e3:c4:d1:44:97:c5:dd:19:e8:92:c7:75: bd:74:26:93:69:50:d6:9e:31:31:90:4c:08:c2:b3: 0c:47:a4:22:b2:1d:40:b4:9c:e2:84:a9:69:3b:fd: 6b:47:3c:f5:8c:6b:91:e0:cb:21:5a:ac:f4:c8:29: ed:e7:05:9e:d4:90:88:60:1f:b7:96:80:9a:e8:ed: e7:d4:32:c4:62:2d:5e:01:3f:0c:f3:dc:a0:fe:45: d4:2a:ee:92:27:73:f5:b8:b3:18:11:fa:9f:ca:f8: 39:88:3d:17:4f:15:56:33:82:f6:c3:1c:17:44:94: 0e:df:82:f1:62:bb:41:18:68:0a:04:59:a2:b0:bd: c3:f9:12:83:fe:67:11:66:d8:d9:f7:3a:d1:3e:a9: 54:1b:3f:57:5f:0f:90:8d:c8:7f:29:b5:23:c3:17: bb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AC:76:DB:24:56:C2:58:11:30:33:0C:67:5B:E0:DB:86:D2:E9:E8 X509v3 Authority Key Identifier: keyid:3C:93:5E:1C:A9:3E:64:66:30:F4:22:D7:A5:C0:5C:43:98:64:14:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/3C935E1CA93E646630F422D7A5C05C4398641455.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C935E1CA93E646630F422D7A5C05C4398641455.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ntvfDPmRr3Q4VNuMjCJ1k1NXHrB6Joq8N3tABSyuiPA/0/3C935E1CA93E646630F422D7A5C05C4398641455.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:95:36:1c:2d:a3:b2:83:04:f3:4b:be:95:83:a8:b6:ab:0d: f6:09:8d:48:5c:f8:e1:ea:11:e6:5d:2b:6e:7a:ae:81:43:65: fa:7e:b4:8d:a6:79:de:3c:91:92:8d:f1:ec:47:c4:60:61:f8: 2e:4c:67:d6:a9:5d:38:74:43:5a:db:6a:7c:a3:0e:3c:6d:79: 57:8b:0f:3d:f9:8d:d7:62:51:c0:ee:60:14:3a:ae:45:2e:8c: f8:4a:21:23:64:1b:c1:5b:e6:09:70:7e:f0:4a:b4:1a:5e:b5: 50:c5:92:b8:09:b2:c3:0d:28:85:9f:46:7b:ba:db:36:e2:8c: a2:cc:5b:50:16:3f:9d:8c:72:b7:81:4d:5b:6d:28:85:62:13: d1:ee:77:00:eb:85:33:91:81:75:98:8b:56:de:68:b3:7c:8b: b5:3d:ee:12:55:24:45:20:c7:cc:6b:31:e9:6a:0b:36:6a:c7: d4:e0:1b:6c:ea:c2:d7:8d:22:c7:49:67:ea:62:3c:a6:91:87: 57:bf:5d:1e:0e:47:c1:41:40:30:3a:0e:a6:60:8c:b0:e4:4c: b6:fa:22:85:82:b5:ed:65:bd:e0:1c:2a:52:e4:21:8d:0a:6a: d5:08:69:57:4f:46:59:d0:23:17:ae:16:04:45:35:bc:f3:50: fd:59:47:2b -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUMgCT556pEfBG81D67Xx+bEt/3wkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5MzVFMUNBOTNFNjQ2NjMwRjQyMkQ3QTVDMDVDNDM5 ODY0MTQ1NTAeFw0yNTEwMjAwOTI4NTJaFw0yNTEwMjExMTExNTJaMDMxMTAvBgNV BAMTKDcxQUM3NkRCMjQ1NkMyNTgxMTMwMzMwQzY3NUJFMERCODZEMkU5RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa8td3SBSzeev52NymOx5bSyVM WNGiZ2ya0R8G++HSW5zPEJxKUbNLGV+b1mVRBdzfyrZVYorIP2YN5ykgjpAXE9zJ +Om8zLcEoOvXl3N9A9ZBdE+i094l8dfLiuPE0USXxd0Z6JLHdb10JpNpUNaeMTGQ TAjCswxHpCKyHUC0nOKEqWk7/WtHPPWMa5HgyyFarPTIKe3nBZ7UkIhgH7eWgJro 7efUMsRiLV4BPwzz3KD+RdQq7pInc/W4sxgR+p/K+DmIPRdPFVYzgvbDHBdElA7f gvFiu0EYaAoEWaKwvcP5EoP+ZxFm2Nn3OtE+qVQbP1dfD5CNyH8ptSPDF7vNAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUcax22yRWwlgRMDMMZ1vg24bS6egwHwYDVR0j BBgwFoAUPJNeHKk+ZGYw9CLXpcBcQ5hkFFUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9udHZmRFBtUnIzUTRWTnVNakNKMWsxTlhIckI2Sm9xOE4zdEFCU3l1aVBB LzAvM0M5MzVFMUNBOTNFNjQ2NjMwRjQyMkQ3QTVDMDVDNDM5ODY0MTQ1NS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zQzkzNUUxQ0E5M0U2NDY2MzBG NDIyRDdBNUMwNUM0Mzk4NjQxNDU1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL250 dmZEUG1ScjNRNFZOdU1qQ0oxazFOWEhyQjZKb3E4TjN0QUJTeXVpUEEvMC8zQzkz NUUxQ0E5M0U2NDY2MzBGNDIyRDdBNUMwNUM0Mzk4NjQxNDU1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA opU2HC2jsoME80u+lYOotqsN9gmNSFz44eoR5l0rbnqugUNl+n60jaZ53jyRko3x 7EfEYGH4Lkxn1qldOHRDWttqfKMOPG15V4sPPfmN12JRwO5gFDquRS6M+EohI2Qb wVvmCXB+8Eq0Gl61UMWSuAmyww0ohZ9Ge7rbNuKMosxbUBY/nYxyt4FNW20ohWIT 0e53AOuFM5GBdZiLVt5os3yLtT3uElUkRSDHzGsx6WoLNmrH1OAbbOrC140ix0ln 6mI8ppGHV79dHg5HwUFAMDoOpmCMsORMtvoihYK17WW94BwqUuQhjQpq1QhpV09G WdAjF64WBEU1vPNQ/VlHKw== -----END CERTIFICATE-----Generated at Tue Oct 21 01:02:32 2025 by rpki-client