$ rpki-client -vvf rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.mft File: 3A039835A68C92594BA889BF185A560E86C0CFD1.mft (raw, json) Hash identifier: sc3AQpyl6ebB8slkUr5Xny0LVwGe7go5G0+S4rG9EVI= Subject key identifier: 76:CE:05:60:8E:8E:D6:01:0B:40:03:03:B8:9F:9F:DB:45:02:62:5E Authority key identifier: 3A:03:98:35:A6:8C:92:59:4B:A8:89:BF:18:5A:56:0E:86:C0:CF:D1 Certificate issuer: /CN=3A039835A68C92594BA889BF185A560E86C0CFD1 Certificate serial: 24124A224CA64CB786A13A0FA30D984F74D90B6F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer Subject info access: rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.mft Manifest number: 12 Signing time: Sun 29 Jun 2025 23:09:42 +0000 Manifest this update: Sun 29 Jun 2025 23:04:42 +0000 Manifest next update: Tue 01 Jul 2025 02:30:42 +0000 Files and hashes: 1: 323830343a393435633a3a2f33322d3332203d3e203631363234.roa (hash: O5a/in+ZSMm/aJV2VJLL+YxhXUuvZKOUdRvUKrq3RIo=) 2: 323830343a393435633a363a3a2f34382d3438203d3e203631363234.roa (hash: grV4HIWn/ymWH/bJnnLr6SwzuCZFSH/DBgecy+7gXO8=) 3: 3A039835A68C92594BA889BF185A560E86C0CFD1.crl (hash: lUPi+gXZzIinPgDMNSIYV97BS3S6k40t2v7HVIzu1qk=) 4: 323830343a393435633a313030303a3a2f34382d3438203d3e203631363234.roa (hash: zS/bJNuceZb7NmBvP1/JJiijlMlSqOLFQVIErnpnTaI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.crl rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 02:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:12:4a:22:4c:a6:4c:b7:86:a1:3a:0f:a3:0d:98:4f:74:d9:0b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A039835A68C92594BA889BF185A560E86C0CFD1 Validity Not Before: Jun 29 23:04:42 2025 GMT Not After : Jul 1 02:30:42 2025 GMT Subject: CN=76CE05608E8ED6010B400303B89F9FDB4502625E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:82:9d:b7:55:25:b9:c3:d8:6a:de:a2:12:3b: 3a:99:ce:d1:73:4a:2e:27:98:25:ed:0a:ac:25:f6: a0:6b:fd:c7:1c:af:bd:c3:e8:c3:ab:86:ed:4c:94: e8:e2:c9:db:f2:c8:16:58:ca:e2:96:e1:c8:5b:4f: 03:7e:68:a4:47:4a:28:06:b6:81:bf:5a:d4:29:ee: 89:7d:a1:6a:56:fc:34:51:55:f2:9f:ef:15:00:18: e0:19:b3:59:d9:21:ac:cb:2e:f0:d6:08:fa:bf:7f: 3e:47:87:b3:be:f7:c3:f8:73:52:e4:80:a7:2d:f3: 20:be:06:2f:5c:40:3d:3a:4d:14:dd:98:9a:3d:cc: fd:82:81:fb:14:e0:71:b7:1f:2a:1e:a9:79:c2:b9: 4b:c7:97:ee:a4:7a:ed:06:43:d8:1c:88:4f:f0:42: 14:92:0a:ca:67:7f:da:57:22:2c:e1:e9:b9:39:a4: d0:cb:41:eb:7b:7a:17:a6:8e:1c:11:54:da:6b:73: 84:8d:9f:ef:a1:e4:49:62:d8:34:87:e3:62:10:d8: 59:82:18:78:fc:01:06:f1:16:99:62:2b:10:b1:17: 58:9f:40:4d:77:81:03:a1:46:43:96:3c:82:0e:55: 88:7b:33:48:a7:6a:66:3d:1b:a9:b6:8b:d8:f7:e5: 3e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CE:05:60:8E:8E:D6:01:0B:40:03:03:B8:9F:9F:DB:45:02:62:5E X509v3 Authority Key Identifier: keyid:3A:03:98:35:A6:8C:92:59:4B:A8:89:BF:18:5A:56:0E:86:C0:CF:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A039835A68C92594BA889BF185A560E86C0CFD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3aCDWbfV4Pm9SkaxRYfEEZdJRDeWDPDVqnMGeo14opXm/0/3A039835A68C92594BA889BF185A560E86C0CFD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:59:b3:9a:48:06:d1:05:87:29:8f:d1:e5:38:d7:cb:78:01: 2f:2e:62:40:24:b1:a9:a6:5c:eb:19:b5:52:7a:51:fd:a4:aa: 5f:bd:c0:03:2a:25:25:25:d0:0b:cc:48:9e:f5:f3:61:c1:6e: f0:5b:34:d5:24:12:f7:16:24:5d:49:77:89:e1:be:ee:3b:4c: 8a:ea:98:dd:0e:5c:90:8c:63:4b:8e:c6:89:23:8f:81:47:41: 0f:91:93:9b:80:d2:1d:6d:24:35:97:d7:c9:90:66:e4:17:40: 70:44:a5:34:c1:ec:c9:fc:52:7d:32:ec:22:d8:c7:f4:d8:60: 99:52:83:ce:a9:13:81:3e:e0:cc:b8:fb:42:eb:50:78:59:14: b2:48:7e:1c:5b:0e:77:1b:7f:1a:50:cc:b8:85:bf:3f:99:56: 32:a5:d5:d8:19:27:a4:ee:26:b6:b4:9d:86:6a:cc:6f:0a:5f: 35:e0:95:51:71:6a:52:ea:c7:7c:39:fa:96:d5:ec:e6:59:72: 06:c4:ac:9c:44:30:89:ed:94:e3:91:ce:58:60:f4:42:b0:97: 5f:b1:e7:a0:f4:1b:8c:63:d8:e1:66:72:c5:5a:aa:83:46:d3: 1f:36:e3:73:da:f9:a5:fa:8f:c9:24:c9:f0:07:1d:5d:d0:97: 56:85:ee:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJBJKIkymTLeGoToPow2YT3TZC28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwMzk4MzVBNjhDOTI1OTRCQTg4OUJGMTg1QTU2MEU4 NkMwQ0ZEMTAeFw0yNTA2MjkyMzA0NDJaFw0yNTA3MDEwMjMwNDJaMDMxMTAvBgNV BAMTKDc2Q0UwNTYwOEU4RUQ2MDEwQjQwMDMwM0I4OUY5RkRCNDUwMjYyNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQgp23VSW5w9hq3qISOzqZztFz Si4nmCXtCqwl9qBr/cccr73D6MOrhu1MlOjiydvyyBZYyuKW4chbTwN+aKRHSigG toG/WtQp7ol9oWpW/DRRVfKf7xUAGOAZs1nZIazLLvDWCPq/fz5Hh7O+98P4c1Lk gKct8yC+Bi9cQD06TRTdmJo9zP2CgfsU4HG3HyoeqXnCuUvHl+6keu0GQ9gciE/w QhSSCspnf9pXIizh6bk5pNDLQet7ehemjhwRVNprc4SNn++h5Eli2DSH42IQ2FmC GHj8AQbxFpliKxCxF1ifQE13gQOhRkOWPIIOVYh7M0inamY9G6m2i9j35T4pAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUds4FYI6O1gELQAMDuJ+f20UCYl4wHwYDVR0j BBgwFoAUOgOYNaaMkllLqIm/GFpWDobAz9EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2FDRFdiZlY0UG05U2theFJZZkVFWmRKUkRlV0RQRFZxbk1HZW8xNG9w WG0vMC8zQTAzOTgzNUE2OEM5MjU5NEJBODg5QkYxODVBNTYwRTg2QzBDRkQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBMDM5ODM1QTY4QzkyNTk0 QkE4ODlCRjE4NUE1NjBFODZDMENGRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2FDRFdiZlY0UG05U2theFJZZkVFWmRKUkRlV0RQRFZxbk1HZW8xNG9wWG0vMC8z QTAzOTgzNUE2OEM5MjU5NEJBODg5QkYxODVBNTYwRTg2QzBDRkQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoFmzmkgG0QWHKY/R5TjXy3gBLy5iQCSxqaZc6xm1UnpR/aSqX73AAyolJSXQ C8xInvXzYcFu8Fs01SQS9xYkXUl3ieG+7jtMiuqY3Q5ckIxjS47GiSOPgUdBD5GT m4DSHW0kNZfXyZBm5BdAcESlNMHsyfxSfTLsItjH9NhgmVKDzqkTgT7gzLj7QutQ eFkUskh+HFsOdxt/GlDMuIW/P5lWMqXV2BknpO4mtrSdhmrMbwpfNeCVUXFqUurH fDn6ltXs5llyBsSsnEQwie2U45HOWGD0QrCXX7HnoPQbjGPY4WZyxVqqg0bTHzbj c9r5pfqPySTJ8AcdXdCXVoXuug== -----END CERTIFICATE-----Generated at Mon Jun 30 04:43:21 2025 by rpki-client