$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft File: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft (raw, json) Hash identifier: XYNQb3f4MSUYbtd1vorY6IfBuOQPBh6oMyStnkS2/58= Subject key identifier: 10:43:DF:45:AC:1F:1B:C7:36:06:13:08:D4:22:00:55:C3:D3:25:C4 Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 Certificate issuer: /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Certificate serial: 62477C766DAB88DD26B38573641A6630BF68BB73 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject info access: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft Manifest number: 025E Signing time: Tue 01 Jul 2025 06:48:36 +0000 Manifest this update: Tue 01 Jul 2025 06:43:36 +0000 Manifest next update: Wed 02 Jul 2025 10:33:36 +0000 Files and hashes: 1: 34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (hash: cHOQoX8+QBdwYQGhnsohZ0k1iqnuoavS/B7p944uAlM=) 2: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl (hash: h3zK8sNafmO7iFLLH4xoHuLarWbZX/jjqb8LVhlMmOI=) 3: 34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa (hash: mLL7psbKfiKaGnpbVWEJoTKcK/IxrSqWRS37Ju8bJQQ=) 4: 34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa (hash: I4lnOLHJxZjbb3Rjorlm2O4yGEV8irB1EDwevjkQU7A=) 5: 34352e3137352e3232382e302f32342d3234203d3e20323638393133.roa (hash: cXY6PhWUBNWJmbKk4RKtBWwU4LfTGX87FWGJlKUeqPM=) 6: 323830343a356338343a3a2f33322d313238203d3e20323638393133.roa (hash: Ec9hIaDkp+aDDW4FFpB4Fl3AQwvF5+e3QIn8T/v0bXM=) 7: 34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa (hash: dvZmaJKiFIhzuB+mWc62fkHLhWOlTP21drygDtaN74Y=) 8: 34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa (hash: YBBTkiHSOgUVAXZZp1wx9Ur96wrUs7rREvi/PLPwCpY=) 9: 34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa (hash: AeBka8A3KQatx5ylf8efYG/0aqDgMHQ/4DLsZ9vgq54=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 10:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:47:7c:76:6d:ab:88:dd:26:b3:85:73:64:1a:66:30:bf:68:bb:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Validity Not Before: Jul 1 06:43:36 2025 GMT Not After : Jul 2 10:33:36 2025 GMT Subject: CN=1043DF45AC1F1BC736061308D4220055C3D325C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:11:af:1f:51:62:48:f0:8e:d5:62:7f:e2:fb: 11:ae:7c:1c:0c:cd:e3:17:67:1d:c3:03:b2:e7:28: 88:55:d7:f0:ac:b2:4c:2e:3b:6e:67:a2:3c:04:3b: 42:11:11:de:76:b3:1a:bc:e3:73:d7:66:d0:c3:ea: df:c0:37:37:f7:6b:5f:ef:0e:69:2f:b9:a2:e6:cf: de:af:0d:42:7c:4d:7f:fe:bd:61:07:53:b3:a1:7d: 50:f5:bc:2a:6d:e3:1b:5c:b5:2d:90:1f:81:76:54: d0:b7:5e:5c:e4:ef:7f:24:86:60:0a:6a:e0:90:14: 49:31:f5:b9:4a:5e:f1:92:37:9d:f4:7d:8e:38:4d: b3:b3:a3:fb:9b:d7:e3:30:7f:a3:1f:d1:9c:71:a3: bd:8a:a3:76:40:76:24:99:94:c9:48:92:65:21:42: ec:7d:45:ef:c3:5a:66:6c:67:5d:7c:9e:e7:15:69: cc:88:24:a5:05:b7:1d:6f:6e:ee:1d:28:94:2a:c8: 9c:a1:de:9c:8d:57:4a:45:fc:81:d1:a6:66:73:82: 33:a3:41:86:c3:0c:f9:75:cb:93:d6:a7:1b:4b:e3: f9:f3:61:7f:cb:56:ba:61:f3:ea:d5:65:1a:48:27: c7:7f:fb:0c:bb:81:05:6d:56:45:0e:14:ed:0f:a4: 7b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:43:DF:45:AC:1F:1B:C7:36:06:13:08:D4:22:00:55:C3:D3:25:C4 X509v3 Authority Key Identifier: keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:13:52:69:9b:dd:f2:be:45:7f:64:be:3d:96:ae:b7:9e:e2: 24:7d:56:e7:77:31:bf:18:ab:a6:75:11:ba:f2:d9:0e:da:f1: 30:a4:3f:54:f4:08:29:ff:a1:2f:6e:14:6d:e2:ef:17:19:c6: 73:37:27:fb:1a:af:93:72:4f:f6:80:1d:13:60:15:bb:03:7a: 0f:cf:84:d6:81:81:3f:b6:fa:07:ab:9e:88:28:4b:6c:ba:7c: 0c:4a:ee:af:6c:db:7c:9a:3f:c3:65:68:f1:d1:e1:28:ac:fb: de:31:66:00:1d:00:64:b9:ef:e3:ab:a4:24:1f:51:b0:02:40: 83:9b:47:5f:53:a5:ca:40:70:d3:58:7d:df:9e:69:0f:30:72: 79:8d:a3:06:af:ab:d6:54:17:3f:3d:b6:c0:e8:9c:dc:e3:97: 13:8c:5f:67:01:3d:5c:6f:26:6c:ac:bb:dc:8b:6c:fe:cb:6c: d7:ca:47:47:6f:fc:bf:4c:44:81:9e:b2:2d:70:57:0e:a3:97: f2:30:78:d6:38:aa:88:a6:55:33:35:a6:6f:24:bd:5a:43:05: 72:33:ec:9a:4f:60:5a:e7:9d:7d:a5:5b:6f:63:3d:66:51:d8: 95:1c:7a:31:14:84:3e:a6:94:f7:bc:36:25:45:8e:57:13:5a: 06:98:6f:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYkd8dm2riN0ms4VzZBpmML9ou3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NGRUUyQzIxQTE3MzE0QUQwQ0ZGQzUyMEZEODE3RDE0 QjQxNDBEMTAeFw0yNTA3MDEwNjQzMzZaFw0yNTA3MDIxMDMzMzZaMDMxMTAvBgNV BAMTKDEwNDNERjQ1QUMxRjFCQzczNjA2MTMwOEQ0MjIwMDU1QzNEMzI1QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyEa8fUWJI8I7VYn/i+xGufBwM zeMXZx3DA7LnKIhV1/CsskwuO25nojwEO0IREd52sxq843PXZtDD6t/ANzf3a1/v DmkvuaLmz96vDUJ8TX/+vWEHU7OhfVD1vCpt4xtctS2QH4F2VNC3Xlzk738khmAK auCQFEkx9blKXvGSN530fY44TbOzo/ub1+Mwf6Mf0Zxxo72Ko3ZAdiSZlMlIkmUh Qux9Re/DWmZsZ118nucVacyIJKUFtx1vbu4dKJQqyJyh3pyNV0pF/IHRpmZzgjOj QYbDDPl1y5PWpxtL4/nzYX/LVrph8+rVZRpIJ8d/+wy7gQVtVkUOFO0PpHsBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEEPfRawfG8c2BhMI1CIAVcPTJcQwHwYDVR0j BBgwFoAUPP7iwhoXMUrQz/xSD9gX0UtBQNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5K Z2UvMS8zQ0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRkVFMkMyMUExNzMxNEFE MENGRkM1MjBGRDgxN0QxNEI0MTQwRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5KZ2UvMS8z Q0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcRNSaZvd8r5Ff2S+PZaut57iJH1W53cxvxirpnURuvLZDtrxMKQ/VPQIKf+h L24UbeLvFxnGczcn+xqvk3JP9oAdE2AVuwN6D8+E1oGBP7b6B6ueiChLbLp8DEru r2zbfJo/w2Vo8dHhKKz73jFmAB0AZLnv46ukJB9RsAJAg5tHX1OlykBw01h9355p DzByeY2jBq+r1lQXPz22wOic3OOXE4xfZwE9XG8mbKy73Its/sts18pHR2/8v0xE gZ6yLXBXDqOX8jB41jiqiKZVMzWmbyS9WkMFcjPsmk9gWuedfaVbb2M9ZlHYlRx6 MRSEPqaU97w2JUWOVxNaBphvWg== -----END CERTIFICATE-----Generated at Tue Jul 1 14:07:01 2025 by rpki-client