$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft File: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft (raw, json) Hash identifier: eA3ydw/YalmvKGWuFKW44/bW/NEnPRHzGWDYcP9RRBk= Subject key identifier: 37:55:A6:88:F3:89:E6:5B:0F:70:35:FE:59:F2:0E:0E:9A:1D:81:90 Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 Certificate issuer: /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Certificate serial: 3CC70DAF72449B7B2655F9E6520209C533B6054B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject info access: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft Manifest number: 02A5 Signing time: Sat 23 Aug 2025 02:09:27 +0000 Manifest this update: Sat 23 Aug 2025 02:04:27 +0000 Manifest next update: Sun 24 Aug 2025 03:27:27 +0000 Files and hashes: 1: 34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (hash: cHOQoX8+QBdwYQGhnsohZ0k1iqnuoavS/B7p944uAlM=) 2: 34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa (hash: dvZmaJKiFIhzuB+mWc62fkHLhWOlTP21drygDtaN74Y=) 3: 34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa (hash: mLL7psbKfiKaGnpbVWEJoTKcK/IxrSqWRS37Ju8bJQQ=) 4: 34352e3137352e3232382e302f32342d3234203d3e20323638393133.roa (hash: cXY6PhWUBNWJmbKk4RKtBWwU4LfTGX87FWGJlKUeqPM=) 5: 323830343a356338343a3a2f33322d313238203d3e20323638393133.roa (hash: Ec9hIaDkp+aDDW4FFpB4Fl3AQwvF5+e3QIn8T/v0bXM=) 6: 34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa (hash: YBBTkiHSOgUVAXZZp1wx9Ur96wrUs7rREvi/PLPwCpY=) 7: 34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa (hash: AeBka8A3KQatx5ylf8efYG/0aqDgMHQ/4DLsZ9vgq54=) 8: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl (hash: f63cTJBaSnLKrH5paqt78aeh/IgVO/NtgyKQW1P9Ogc=) 9: 34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa (hash: I4lnOLHJxZjbb3Rjorlm2O4yGEV8irB1EDwevjkQU7A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 03:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c7:0d:af:72:44:9b:7b:26:55:f9:e6:52:02:09:c5:33:b6:05:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Validity Not Before: Aug 23 02:04:27 2025 GMT Not After : Aug 24 03:27:27 2025 GMT Subject: CN=3755A688F389E65B0F7035FE59F20E0E9A1D8190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d1:fd:08:03:73:e3:2a:ff:a3:a7:05:e1:e7: 94:d1:1f:e6:63:1d:33:69:90:f7:33:20:5b:5a:d8: 42:3a:47:0d:3c:f7:52:8f:bb:a1:d5:72:9b:e3:77: d1:72:31:d6:ac:02:3c:d6:ec:b6:e4:d2:a1:c1:60: de:cd:0d:0d:07:48:4f:4c:2d:d6:36:ed:26:09:a2: 92:98:97:2f:18:db:4c:db:e5:53:f1:9d:b4:f7:22: a0:0d:49:c4:ba:b3:4f:41:91:34:67:ef:8e:ef:ec: c9:18:26:e6:2d:85:17:63:8e:41:93:91:b4:b1:22: 71:be:43:03:54:01:3e:5e:9f:08:27:9a:44:f5:7c: 49:cb:fe:c5:c0:d6:78:70:e7:77:49:68:61:fa:4c: 0e:f4:d1:14:62:90:d9:ca:3d:b2:f5:42:58:0e:ec: cf:05:2b:81:ee:6e:03:fa:c8:31:1c:f3:28:13:98: 90:cb:5f:e7:2b:5f:86:eb:6f:61:53:ae:4e:b4:e2: 24:54:67:57:3c:8c:b5:95:02:57:10:d1:ac:24:67: 85:1b:6d:fb:35:56:bc:6f:81:97:0a:8a:6c:8f:15: e3:61:29:1d:78:5a:cd:4f:e0:59:47:e8:e8:02:0c: 68:08:46:00:84:df:75:9d:8e:8c:ba:aa:fd:19:f0: 54:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:55:A6:88:F3:89:E6:5B:0F:70:35:FE:59:F2:0E:0E:9A:1D:81:90 X509v3 Authority Key Identifier: keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f2:29:0b:1a:c3:2c:d3:ef:36:b3:04:a7:fb:68:c8:bd:7d:65: b0:65:30:91:cf:4d:2d:b3:62:23:e8:82:2e:69:a5:39:9f:23: b0:93:0f:de:58:ec:b3:f9:81:c6:55:df:44:f4:18:68:77:2b: 72:06:45:3e:1b:dc:9e:0a:03:b8:b4:9b:1c:df:14:be:1e:0e: 84:69:78:39:c4:20:ea:db:4f:b4:5f:5a:b4:24:86:0a:92:51: c4:5e:8f:60:cb:94:57:46:d6:ac:00:c5:f1:b9:0b:90:f2:ee: 5c:81:f5:f7:25:e0:b7:21:10:5b:dc:a2:0a:99:19:68:79:3f: 93:84:68:9e:f8:a0:d7:47:05:bb:ef:6b:ff:6f:84:05:14:85: 2a:ed:a1:9d:09:2a:ee:62:df:64:07:7d:16:9b:e8:12:39:7d: 33:f8:21:df:b6:5b:f1:a6:89:f3:3d:ca:4b:67:d4:f0:65:28: c7:3e:5d:15:75:f1:bf:0b:67:ab:ba:3c:5f:92:fa:0d:91:2d: dd:e6:df:04:e3:80:b1:0f:8d:c4:70:4d:be:64:12:e4:dc:13: f3:39:67:bb:a2:35:f5:f6:18:2e:85:99:dc:9a:59:8e:17:37: 99:dc:ad:40:f1:01:30:04:b2:94:cb:08:94:3d:4f:d0:8a:7d: 36:ca:b1:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPMcNr3JEm3smVfnmUgIJxTO2BUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NGRUUyQzIxQTE3MzE0QUQwQ0ZGQzUyMEZEODE3RDE0 QjQxNDBEMTAeFw0yNTA4MjMwMjA0MjdaFw0yNTA4MjQwMzI3MjdaMDMxMTAvBgNV BAMTKDM3NTVBNjg4RjM4OUU2NUIwRjcwMzVGRTU5RjIwRTBFOUExRDgxOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU0f0IA3PjKv+jpwXh55TRH+Zj HTNpkPczIFta2EI6Rw0891KPu6HVcpvjd9FyMdasAjzW7Lbk0qHBYN7NDQ0HSE9M LdY27SYJopKYly8Y20zb5VPxnbT3IqANScS6s09BkTRn747v7MkYJuYthRdjjkGT kbSxInG+QwNUAT5enwgnmkT1fEnL/sXA1nhw53dJaGH6TA700RRikNnKPbL1QlgO 7M8FK4HubgP6yDEc8ygTmJDLX+crX4brb2FTrk604iRUZ1c8jLWVAlcQ0awkZ4Ub bfs1VrxvgZcKimyPFeNhKR14Ws1P4FlH6OgCDGgIRgCE33Wdjoy6qv0Z8FQ7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUN1WmiPOJ5lsPcDX+WfIODpodgZAwHwYDVR0j BBgwFoAUPP7iwhoXMUrQz/xSD9gX0UtBQNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5K Z2UvMS8zQ0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRkVFMkMyMUExNzMxNEFE MENGRkM1MjBGRDgxN0QxNEI0MTQwRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5KZ2UvMS8z Q0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA8ikLGsMs0+82swSn+2jIvX1lsGUwkc9NLbNiI+iCLmmlOZ8jsJMP3ljss/mB xlXfRPQYaHcrcgZFPhvcngoDuLSbHN8Uvh4OhGl4OcQg6ttPtF9atCSGCpJRxF6P YMuUV0bWrADF8bkLkPLuXIH19yXgtyEQW9yiCpkZaHk/k4Ronvig10cFu+9r/2+E BRSFKu2hnQkq7mLfZAd9FpvoEjl9M/gh37Zb8aaJ8z3KS2fU8GUoxz5dFXXxvwtn q7o8X5L6DZEt3ebfBOOAsQ+NxHBNvmQS5NwT8zlnu6I19fYYLoWZ3JpZjhc3mdyt QPEBMASylMsIlD1P0Ip9Nsqx9g== -----END CERTIFICATE-----Generated at Sat Aug 23 18:57:04 2025 by rpki-client