$ rpki-client -vvf rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft File: 3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft (raw, json) Hash identifier: b14SiJPHVWdYBTpyKaEcizTwvKr053cPS/EW8Kd+aeg= Subject key identifier: CC:3D:EB:54:8C:B4:FD:A3:BF:E5:6F:14:1B:46:DC:A5:63:48:0F:52 Authority key identifier: 3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41 Certificate issuer: /CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41 Certificate serial: 1D8019A924152E14E2260D5732D3795043B7A16A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer Subject info access: rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft Manifest number: 37 Signing time: Mon 12 May 2025 09:14:02 +0000 Manifest this update: Mon 12 May 2025 09:09:02 +0000 Manifest next update: Tue 13 May 2025 11:43:02 +0000 Files and hashes: 1: 3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl (hash: LoR10JWYL9mcCbJ9BMQ2KvQdzM92dD7G818rsR4v/d0=) 2: 323830343a383136633a3a2f33322d3333203d3e20323732343533.roa (hash: km/ah8tdGnSbAEE8eMAVgMkElj1zG/cbsgnk+5b2q5E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 11:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:80:19:a9:24:15:2e:14:e2:26:0d:57:32:d3:79:50:43:b7:a1:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41 Validity Not Before: May 12 09:09:02 2025 GMT Not After : May 13 11:43:02 2025 GMT Subject: CN=CC3DEB548CB4FDA3BFE56F141B46DCA563480F52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:df:fb:9d:fe:1f:8b:88:81:19:27:1d:78: 2a:67:1e:f1:d3:d5:ed:3a:7a:ca:73:03:ca:3a:b5: 1b:df:2f:1e:f4:7d:19:54:f6:6b:82:ec:3e:a9:11: 01:7d:5a:77:68:23:28:fc:d2:34:10:7e:d1:b4:e7: 21:2b:f5:ec:79:d6:96:2f:c7:76:56:64:44:45:33: f2:75:e7:e1:89:ea:60:4e:33:33:28:dc:8a:4a:f8: ee:46:f0:57:9e:b9:2f:49:38:ad:38:01:7d:5f:61: 6e:00:67:cf:df:e7:16:0c:75:32:c1:c4:4f:b1:4c: af:3d:9d:74:31:9e:e5:d0:03:df:11:a7:1b:d9:b7: c1:97:bd:54:78:a1:d7:37:e1:9c:0f:44:71:e3:1e: 44:34:68:47:6e:38:b2:b3:b5:60:89:7d:7b:df:73: 9a:90:82:1f:06:6d:d6:d1:0e:7c:0d:64:0f:48:71: 64:38:37:9a:e3:fb:8f:1c:25:e7:2a:66:6c:39:c8: c5:31:9e:c7:57:91:e2:b1:c9:1d:32:77:bf:5b:fb: 8a:5d:97:6f:f5:4b:b2:e9:d5:0f:8f:e7:17:f5:10: 33:1a:f5:83:2a:60:cb:93:e1:45:90:70:62:ff:22: ed:29:2d:fc:f6:ee:80:7d:c8:19:77:b0:f6:77:51: 26:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3D:EB:54:8C:B4:FD:A3:BF:E5:6F:14:1B:46:DC:A5:63:48:0F:52 X509v3 Authority Key Identifier: keyid:3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:d6:10:12:86:6e:93:c0:1c:90:b7:eb:19:d8:88:9b:1a:fd: ef:ed:f4:46:95:90:4d:3c:dc:47:47:c3:1e:bc:22:94:1f:47: 64:01:60:4c:c6:ab:c4:32:47:d9:55:98:58:7f:ba:b5:d9:d3: cd:9e:5e:bf:1c:20:04:a0:23:cc:c2:da:ac:a9:93:36:e5:de: ee:62:2d:39:b6:60:cd:92:93:b0:da:5d:2b:7f:22:b8:0f:e7: af:96:e6:d7:6e:5b:69:49:9a:de:55:ce:94:d4:b4:a7:b3:b3: 5b:b8:f2:ea:b2:b6:e9:39:49:b2:26:04:2b:57:7e:47:2c:7d: 42:4a:ab:7a:71:e4:94:77:53:99:a8:0d:cd:b6:f3:be:22:71: e9:ee:46:56:24:87:3d:0e:3d:0f:3e:dd:c6:e7:f2:c6:74:20: dd:36:bc:b4:62:90:3a:e7:e5:66:95:eb:48:60:db:37:88:89: e0:0f:b6:82:f6:3d:63:33:18:fa:13:11:d6:f8:c3:03:60:27: 1d:82:f8:63:da:b6:91:87:66:6c:18:31:80:09:01:b5:5f:a8: a9:df:fe:97:73:07:3c:b2:e8:64:61:58:b8:ae:ab:b3:3e:eb: aa:51:77:26:44:a9:d2:3f:d6:44:84:c3:f5:34:51:02:42:7a: d4:b4:dd:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHYAZqSQVLhTiJg1XMtN5UEO3oWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQjlBRjYwM0IzRTI2NkVDNTE3OEMxNTg5MkNCQjM3 RDhDQ0Q0MTAeFw0yNTA1MTIwOTA5MDJaFw0yNTA1MTMxMTQzMDJaMDMxMTAvBgNV BAMTKENDM0RFQjU0OENCNEZEQTNCRkU1NkYxNDFCNDZEQ0E1NjM0ODBGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3N/7nf4fi4iBGScdeCpnHvHT 1e06espzA8o6tRvfLx70fRlU9muC7D6pEQF9WndoIyj80jQQftG05yEr9ex51pYv x3ZWZERFM/J15+GJ6mBOMzMo3IpK+O5G8FeeuS9JOK04AX1fYW4AZ8/f5xYMdTLB xE+xTK89nXQxnuXQA98RpxvZt8GXvVR4odc34ZwPRHHjHkQ0aEduOLKztWCJfXvf c5qQgh8GbdbRDnwNZA9IcWQ4N5rj+48cJecqZmw5yMUxnsdXkeKxyR0yd79b+4pd l2/1S7Lp1Q+P5xf1EDMa9YMqYMuT4UWQcGL/Iu0pLfz27oB9yBl3sPZ3USajAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzD3rVIy0/aO/5W8UG0bcpWNID1IwHwYDVR0j BBgwFoAUOjua9gOz4mbsUXjBWJLLs32MzUEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmh2M21FZzVMem5keHcyRDh0Uk5LSkd4SHExbm9BYUtTMTJ6TG5DdnhI N1ovMC8zQTNCOUFGNjAzQjNFMjY2RUM1MTc4QzE1ODkyQ0JCMzdEOENDRDQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBM0I5QUY2MDNCM0UyNjZF QzUxNzhDMTU4OTJDQkIzN0Q4Q0NENDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mmh2M21FZzVMem5keHcyRDh0Uk5LSkd4SHExbm9BYUtTMTJ6TG5DdnhIN1ovMC8z QTNCOUFGNjAzQjNFMjY2RUM1MTc4QzE1ODkyQ0JCMzdEOENDRDQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJtYQEoZuk8AckLfrGdiImxr97+30RpWQTTzcR0fDHrwilB9HZAFgTMarxDJH 2VWYWH+6tdnTzZ5evxwgBKAjzMLarKmTNuXe7mItObZgzZKTsNpdK38iuA/nr5bm 125baUma3lXOlNS0p7OzW7jy6rK26TlJsiYEK1d+Ryx9QkqrenHklHdTmagNzbbz viJx6e5GViSHPQ49Dz7dxufyxnQg3Ta8tGKQOuflZpXrSGDbN4iJ4A+2gvY9YzMY +hMR1vjDA2AnHYL4Y9q2kYdmbBgxgAkBtV+oqd/+l3MHPLLoZGFYuK6rsz7rqlF3 JkSp0j/WRITD9TRRAkJ61LTdCw== -----END CERTIFICATE-----Generated at Mon May 12 16:52:46 2025 by rpki-client