$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft File: 3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft (raw, json) Hash identifier: woqed0XcfMZ5JdemQGuzVlrG+GHB4eZ3u3pWzQzn0sA= Subject key identifier: 40:7E:DB:A6:2A:69:1E:1C:BF:DE:71:A8:A1:07:5D:68:E2:FD:76:38 Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0 Certificate issuer: /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0 Certificate serial: 30FB1DB50DFA7FCED0510557E939033F42894510 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft Manifest number: 02A0 Signing time: Fri 22 Aug 2025 18:50:25 +0000 Manifest this update: Fri 22 Aug 2025 18:45:25 +0000 Manifest next update: Sat 23 Aug 2025 22:20:25 +0000 Files and hashes: 1: 323830343a363031383a3a2f33322d3332203d3e20323639313435.roa (hash: pukb5lj9ipcGQlV0LxsDM+V/GjI+AEgmTgzISsvatVU=) 2: 3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl (hash: gpRyUt+qITtCrH+qBsf/YbxjH2xS72bEMXy5TJAeetk=) 3: 34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa (hash: /bpAsgSUi1LnoTyueVXmEbHEdvQmkmUVeA1xO4MqaNU=) 4: 34352e3138302e3138342e302f32322d3232203d3e20323639313435.roa (hash: kbu54ESKW1e5BIRWIv2H+d7R8holRL2gmDinoqBBatI=) 5: 323830343a363031383a383030303a3a2f33332d3333203d3e20323639313435.roa (hash: Orz/ogX6qFnRjGYGiV2xeJsYmVdzFYD63V3ZXxKfl8k=) 6: 323830343a363031383a3a2f33332d3333203d3e20323639313435.roa (hash: nPpf0hhGMugZmNdbWERrNoc79wWP0pZTB/sPp3v04wk=) 7: 34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa (hash: 2RkNWBLR029RFRbh32kFnlXtZFOD9xnYisNTVjldsO0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 22:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:fb:1d:b5:0d:fa:7f:ce:d0:51:05:57:e9:39:03:3f:42:89:45:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0 Validity Not Before: Aug 22 18:45:25 2025 GMT Not After : Aug 23 22:20:25 2025 GMT Subject: CN=407EDBA62A691E1CBFDE71A8A1075D68E2FD7638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:44:3f:5e:86:db:2c:f0:00:29:61:87:50: fd:79:c3:30:ab:4d:f5:e2:bf:4a:c7:2f:dc:6f:e5: 8f:6d:a7:f7:2b:14:d8:23:b8:91:e6:40:2e:09:f7: 6d:8b:7c:c5:13:2b:38:b9:5d:dd:7e:58:b4:de:91: a7:91:c0:6d:9d:5e:07:a0:b8:3e:cc:d8:5a:05:79: 98:1d:b6:c3:d5:c3:0e:43:16:4e:de:de:64:e9:48: 79:6a:10:ef:27:6d:25:5a:c9:f6:b3:ab:a9:27:da: d8:00:c8:02:87:40:5f:7c:78:10:0b:f9:e3:2b:e2: 2f:df:2f:8f:fb:95:9c:20:d0:ba:c6:e1:33:32:e2: bf:53:a2:39:dd:71:f3:16:32:fa:5e:2e:05:8f:d9: 8d:17:1c:21:1f:e6:c1:4d:51:25:86:52:c8:a9:0a: 35:6a:ef:42:6d:bb:c4:7a:e1:59:8e:40:ba:2e:26: a9:ba:8e:4c:1f:d1:4a:8c:9a:e2:d5:4f:ea:34:41: 53:3e:da:46:e6:2a:38:6a:b7:fe:1f:04:94:a7:6d: 4d:df:ff:56:eb:b4:71:84:ef:ec:1d:ce:18:60:03: d0:c7:30:b6:5b:70:83:c5:76:96:69:75:dd:da:16: fa:1d:89:80:d0:b2:bb:51:8f:55:74:de:b3:4d:a7: 00:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7E:DB:A6:2A:69:1E:1C:BF:DE:71:A8:A1:07:5D:68:E2:FD:76:38 X509v3 Authority Key Identifier: keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:69:0d:c8:98:56:1a:ca:8a:78:d3:f8:4c:cd:c5:3d:72:e3: 21:65:58:d3:9d:24:99:9a:8f:5c:7a:e7:72:84:08:48:b1:fc: 16:df:34:72:4d:c8:2e:b7:ed:9b:c9:3c:c9:25:e8:ae:4f:ee: 53:87:7d:0f:5a:a7:77:00:be:e1:40:3a:ce:67:70:ee:a5:f2: ed:c9:10:0c:4e:68:c0:46:2a:4f:04:c2:49:56:5d:0c:14:91: 8d:7c:01:2d:94:92:c8:0d:07:e2:91:e4:8d:01:a1:b8:48:e2: 80:0d:a5:27:56:9a:f2:57:7e:07:65:2d:0c:79:ca:87:58:56: ad:bc:07:99:f7:80:18:90:c6:fd:f8:ec:33:fe:b9:12:55:e7: d3:29:a8:81:85:67:2a:c7:8e:dd:b1:13:91:62:16:f3:7c:26: 53:bd:0b:ad:32:6d:d3:6c:a4:d4:e7:8f:1d:9f:8f:16:eb:20: 11:a1:9d:0c:dd:fd:0e:6a:58:c5:7e:6b:36:1e:c7:1a:36:91: 73:93:85:3b:2e:a5:c9:fb:55:33:60:0a:00:97:b5:65:6d:0b: ec:33:72:ef:03:25:14:33:ef:4a:01:4b:0e:f3:fb:b6:e8:9a: 83:cb:8f:68:0a:e9:90:52:e4:db:7f:b1:9c:8a:6f:e6:6c:62: f5:78:bb:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMPsdtQ36f87QUQVX6TkDP0KJRRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZBNjQ1M0ZGNkVFNDhEQUQ5QzIwQzU1MkY5QTRBRkEx M0JGNzRGMDAeFw0yNTA4MjIxODQ1MjVaFw0yNTA4MjMyMjIwMjVaMDMxMTAvBgNV BAMTKDQwN0VEQkE2MkE2OTFFMUNCRkRFNzFBOEExMDc1RDY4RTJGRDc2MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFmkQ/XobbLPAAKWGHUP15wzCr TfXiv0rHL9xv5Y9tp/crFNgjuJHmQC4J922LfMUTKzi5Xd1+WLTekaeRwG2dXgeg uD7M2FoFeZgdtsPVww5DFk7e3mTpSHlqEO8nbSVayfazq6kn2tgAyAKHQF98eBAL +eMr4i/fL4/7lZwg0LrG4TMy4r9TojndcfMWMvpeLgWP2Y0XHCEf5sFNUSWGUsip CjVq70Jtu8R64VmOQLouJqm6jkwf0UqMmuLVT+o0QVM+2kbmKjhqt/4fBJSnbU3f /1brtHGE7+wdzhhgA9DHMLZbcIPFdpZpdd3aFvodiYDQsrtRj1V03rNNpwAbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQH7bpippHhy/3nGooQddaOL9djgwHwYDVR0j BBgwFoAUP6ZFP/buSNrZwgxVL5pK+hO/dPAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmU5NkFwdUN6ZldKbnRvMXlQZjVRMlhaQzhndHEzNFZpY2t6aG9VaGRt TU4vMS8zRkE2NDUzRkY2RUU0OERBRDlDMjBDNTUyRjlBNEFGQTEzQkY3NEYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQTY0NTNGRjZFRTQ4REFE OUMyMEM1NTJGOUE0QUZBMTNCRjc0RjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmU5NkFwdUN6ZldKbnRvMXlQZjVRMlhaQzhndHEzNFZpY2t6aG9VaGRtTU4vMS8z RkE2NDUzRkY2RUU0OERBRDlDMjBDNTUyRjlBNEFGQTEzQkY3NEYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdmkNyJhWGsqKeNP4TM3FPXLjIWVY050kmZqPXHrncoQISLH8Ft80ck3ILrft m8k8ySXork/uU4d9D1qndwC+4UA6zmdw7qXy7ckQDE5owEYqTwTCSVZdDBSRjXwB LZSSyA0H4pHkjQGhuEjigA2lJ1aa8ld+B2UtDHnKh1hWrbwHmfeAGJDG/fjsM/65 ElXn0ymogYVnKseO3bETkWIW83wmU70LrTJt02yk1OePHZ+PFusgEaGdDN39DmpY xX5rNh7HGjaRc5OFOy6lyftVM2AKAJe1ZW0L7DNy7wMlFDPvSgFLDvP7tuiag8uP aArpkFLk23+xnIpv5mxi9Xi7cw== -----END CERTIFICATE-----Generated at Sat Aug 23 10:23:00 2025 by rpki-client