$ rpki-client -vvf rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft File: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft (raw, json) Hash identifier: Xik5Dlq1reoDjNu++ZBka3Gh3qWCXfzi9afEFsvIKoc= Subject key identifier: 1C:C8:69:4C:CB:C4:E3:64:7E:34:6E:BC:3A:5E:7C:72:D4:9F:AD:19 Authority key identifier: 9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC Certificate issuer: /CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Certificate serial: 083BAB69CA74336A52896B2C371961AB3BEAAE55 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft Manifest number: C8 Signing time: Tue 01 Jul 2025 00:19:44 +0000 Manifest this update: Tue 01 Jul 2025 00:14:44 +0000 Manifest next update: Wed 02 Jul 2025 02:49:44 +0000 Files and hashes: 1: 323830343a326634303a3a2f33322d3438203d3e20323634383830.roa (hash: 3g8/sjxV8E647/HAZRmu2PV+IP7H3yOgtmHvSu2jRew=) 2: 3136382e3232372e35362e302f32322d3234203d3e20323634383830.roa (hash: ZIjfSo+Y8U8r36JCVeoF2b5UMYHuJK9csANlSvslsHk=) 3: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl (hash: e9JtDcv4Ng9x0fvyw+R+9eQWFoZcMDXgPgpQg6mEh3o=) 4: 3137302e3234362e3138342e302f32322d3234203d3e20323634383830.roa (hash: vIm2Zj8tyzVDc+8CKc8N8ILHLVLvBtHG21RZkNA4OZE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 02:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:3b:ab:69:ca:74:33:6a:52:89:6b:2c:37:19:61:ab:3b:ea:ae:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Validity Not Before: Jul 1 00:14:44 2025 GMT Not After : Jul 2 02:49:44 2025 GMT Subject: CN=1CC8694CCBC4E3647E346EBC3A5E7C72D49FAD19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4f:40:30:b0:ac:e9:da:34:7f:e9:62:91:71: 38:0f:66:4b:f4:4b:3e:e6:ca:ad:20:bd:d4:20:fb: e7:12:27:98:02:d4:a4:48:f9:3f:7c:59:21:7c:c6: 58:eb:54:17:de:2a:d6:87:c2:dd:54:e6:6b:0e:c9: 4d:ef:00:d4:d6:13:c3:30:74:2f:48:3b:9c:f4:ee: bc:0a:13:88:79:b5:37:25:d9:00:35:c8:ff:5a:b0: cb:93:a5:53:ff:85:76:73:23:9b:4f:a2:40:29:3d: e9:59:a3:57:e2:87:42:62:9d:b1:97:8e:48:71:b9: 80:d1:ef:dd:5b:f4:a6:db:f7:04:f7:e6:65:8d:9b: e7:a6:8a:7d:4c:6c:3f:6b:e1:1d:be:6a:a3:11:92: 70:4c:f9:f2:e9:18:5c:6b:33:d8:76:21:6a:21:2f: e3:09:43:20:c7:79:e2:6c:8d:eb:2b:ee:e6:50:00: 86:42:6b:9c:c0:4c:00:79:df:84:60:ef:4c:fb:d5: cc:cb:59:9a:43:b9:af:b1:5f:3d:77:0a:db:f1:e5: 0d:bf:7b:8c:ce:62:0b:c7:38:9e:4a:dc:2c:75:f1: 60:9b:2d:13:db:05:d0:69:36:45:5c:07:e8:60:9f: 6a:d8:5e:01:65:08:b4:3b:2e:ec:61:8c:8c:79:bf: d9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C8:69:4C:CB:C4:E3:64:7E:34:6E:BC:3A:5E:7C:72:D4:9F:AD:19 X509v3 Authority Key Identifier: keyid:9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:5f:5e:62:4f:db:49:28:4d:87:05:95:79:93:1e:3a:41:5e: 78:25:50:5b:ee:a8:ba:30:b0:a0:9d:85:04:17:31:8a:36:9b: 7a:30:88:4e:1e:37:ae:29:1d:d7:6a:12:86:ea:64:1e:82:d7: e0:47:da:85:58:ae:4a:93:ef:11:a5:45:95:25:4d:20:9a:1a: 61:33:6d:fe:c5:7a:91:5c:99:97:97:96:48:5b:00:e2:00:4e: 0f:aa:eb:5c:a1:7c:bb:a7:e5:89:ff:2b:2a:c0:7f:79:63:93: 21:79:73:52:4e:44:11:11:3d:70:80:17:19:5d:e1:dc:b1:44: ab:c4:fd:71:18:e9:12:e7:1c:a8:32:21:5d:cc:c1:c7:8c:07: 7b:35:5e:4f:11:bb:a8:fb:d1:46:97:95:f1:b3:3e:26:d8:ce: bf:ab:b2:aa:95:84:80:45:a6:e9:2e:2b:6b:44:41:3a:9c:e9: a0:fa:cb:54:51:d0:c9:61:04:d1:58:e7:05:25:6e:18:c6:b4: 05:43:d1:25:c4:47:ef:49:e1:7b:ad:96:cb:7a:e1:fc:f6:fc: c9:62:4f:8f:c3:7a:19:7d:57:0b:26:0a:67:e2:06:c8:16:bb: 83:de:63:a9:3b:b0:53:0b:c7:cd:53:6d:cc:51:f5:3d:6e:df: cf:bb:80:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCDuracp0M2pSiWssNxlhqzvqrlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEzMkNEOTFGQ0U5Q0FEQkYyOEJFREY0QzcyMEU2N0I3 OUFGQjlDQzAeFw0yNTA3MDEwMDE0NDRaFw0yNTA3MDIwMjQ5NDRaMDMxMTAvBgNV BAMTKDFDQzg2OTRDQ0JDNEUzNjQ3RTM0NkVCQzNBNUU3QzcyRDQ5RkFEMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvT0AwsKzp2jR/6WKRcTgPZkv0 Sz7myq0gvdQg++cSJ5gC1KRI+T98WSF8xljrVBfeKtaHwt1U5msOyU3vANTWE8Mw dC9IO5z07rwKE4h5tTcl2QA1yP9asMuTpVP/hXZzI5tPokApPelZo1fih0JinbGX jkhxuYDR791b9Kbb9wT35mWNm+emin1MbD9r4R2+aqMRknBM+fLpGFxrM9h2IWoh L+MJQyDHeeJsjesr7uZQAIZCa5zATAB534Rg70z71czLWZpDua+xXz13Ctvx5Q2/ e4zOYgvHOJ5K3Cx18WCbLRPbBdBpNkVcB+hgn2rYXgFlCLQ7LuxhjIx5v9m/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHMhpTMvE42R+NG68Ol58ctSfrRkwHwYDVR0j BBgwFoAUmjLNkfzpytvyi+30xyDme3mvucwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1 Q2gvMC85QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBMzJDRDkxRkNFOUNBREJG MjhCRURGNEM3MjBFNjdCNzlBRkI5Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1Q2gvMC85 QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP19eYk/bSShNhwWVeZMeOkFeeCVQW+6oujCwoJ2FBBcxijabejCITh43rikd 12oShupkHoLX4EfahViuSpPvEaVFlSVNIJoaYTNt/sV6kVyZl5eWSFsA4gBOD6rr XKF8u6flif8rKsB/eWOTIXlzUk5EERE9cIAXGV3h3LFEq8T9cRjpEuccqDIhXczB x4wHezVeTxG7qPvRRpeV8bM+JtjOv6uyqpWEgEWm6S4ra0RBOpzpoPrLVFHQyWEE 0VjnBSVuGMa0BUPRJcRH70nhe62Wy3rh/Pb8yWJPj8N6GX1XCyYKZ+IGyBa7g95j qTuwUwvHzVNtzFH1PW7fz7uAEg== -----END CERTIFICATE-----Generated at Tue Jul 1 06:29:11 2025 by rpki-client