$ rpki-client -vvf rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft File: 3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft (raw, json) Hash identifier: 2unICHNNymHfp6L5oxbp7TRVZwCkrfm01f/lTNVfuBM= Subject key identifier: 79:4F:20:BE:FB:24:4E:E1:78:CF:F3:0A:7A:9F:2F:28:DC:FC:3A:E8 Authority key identifier: 3A:FD:26:C5:DB:1E:ED:C7:0A:62:75:16:CC:22:46:F7:4E:93:BA:6F Certificate issuer: /CN=3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F Certificate serial: 29E9761754C41EDFC3309C6F449C8DB6C9329A17 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer Subject info access: rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft Manifest number: 34 Signing time: Fri 22 Aug 2025 21:43:40 +0000 Manifest this update: Fri 22 Aug 2025 21:38:40 +0000 Manifest next update: Sun 24 Aug 2025 00:41:40 +0000 Files and hashes: 1: 34352e3136342e3130302e302f32322d3332203d3e20323638363639.roa (hash: iFMFtE0y8pLsQ/Cn9J7/m+D9lxMgkKqAt/nEyvjkWXM=) 2: 323830343a353463343a3a2f33322d313238203d3e20323638363639.roa (hash: i/+EMmHFMGqogYrZgaRhva6vg0d98QEkZjKWhP5qXto=) 3: 3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl (hash: pi12q66djAncNWEE3Y87BFAtSrd7fIziTDBCZiW0LgA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 00:41:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e9:76:17:54:c4:1e:df:c3:30:9c:6f:44:9c:8d:b6:c9:32:9a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F Validity Not Before: Aug 22 21:38:40 2025 GMT Not After : Aug 24 00:41:40 2025 GMT Subject: CN=794F20BEFB244EE178CFF30A7A9F2F28DCFC3AE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:41:42:7a:5b:04:9c:30:92:4c:cf:d0:89:89: f0:13:fa:c2:3f:f3:a2:d4:05:1d:9f:4c:4d:8b:89: a2:64:77:98:89:6d:6b:09:a0:91:eb:70:e3:38:ac: 25:b5:e1:4f:39:7a:7c:d6:1f:a4:04:a0:65:86:27: 84:fd:c4:7b:7e:f6:fb:f0:2e:0c:45:b8:57:70:06: 41:32:73:d5:03:41:8e:d6:af:ba:62:79:5c:7e:c5: e1:ba:96:9b:cf:3f:4f:c4:05:5d:89:16:1f:74:4c: c3:d6:93:d1:66:e0:e4:bd:5b:06:f2:ce:fc:d1:37: 9e:b3:b1:91:8c:a1:86:43:47:42:79:10:17:41:a3: 88:73:5d:38:27:71:e0:5b:d6:5b:f1:51:4e:4c:1a: 4d:03:d5:d8:7b:8c:b1:f9:66:f0:7d:6a:30:d2:51: cb:a9:b4:9b:a5:99:80:76:5d:1d:8d:bd:2e:5b:d2: ec:74:74:cc:62:8e:1d:dc:e2:a7:6f:e2:91:88:3e: 2b:74:05:b3:02:6a:fa:56:75:dd:e7:ac:59:4b:99: c0:14:c9:12:26:61:da:eb:0f:3a:ac:eb:d8:24:18: 44:bc:4f:f5:99:6c:cd:37:54:dc:69:7e:bf:de:69: 91:38:69:66:bd:2e:ac:90:7b:9f:8a:61:29:cf:0a: 5c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4F:20:BE:FB:24:4E:E1:78:CF:F3:0A:7A:9F:2F:28:DC:FC:3A:E8 X509v3 Authority Key Identifier: keyid:3A:FD:26:C5:DB:1E:ED:C7:0A:62:75:16:CC:22:46:F7:4E:93:BA:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/3AFD26C5DB1EEDC70A627516CC2246F74E93BA6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:72:1c:99:23:19:8c:63:50:95:1d:17:6a:f1:27:fb:90:27: 31:44:ec:71:78:c4:60:07:fc:f7:d4:2b:65:9d:70:87:6e:c8: 84:c3:ef:72:19:6e:86:7e:9c:0d:da:ad:ba:17:90:28:2e:26: c0:38:9b:c2:0f:f5:af:19:b1:31:a2:52:a3:2c:07:4f:6f:69: 25:6e:dd:30:3d:e0:06:57:d1:e3:9c:39:af:86:95:04:aa:42: 4d:26:56:cf:76:43:63:b7:0a:83:18:c6:0d:21:c1:38:9d:1e: 82:6b:58:de:de:37:5a:e8:c0:3e:89:ee:ca:a3:8d:63:a9:0b: 03:4a:e5:ad:00:0a:4c:ed:d7:6a:2f:6e:06:a1:02:fb:08:ff: 29:60:fe:64:e6:7c:6e:59:b9:48:73:29:ff:21:c9:63:b4:55: b7:b6:ca:f5:36:bc:84:fd:7c:f3:fa:6b:fd:f9:73:af:11:ff: f2:79:f0:9a:9f:97:8a:c4:36:62:6e:d5:d5:ed:86:85:b7:4d: da:49:40:81:4c:be:e3:79:9e:d4:d4:64:e9:4f:33:30:3c:b6: ad:84:16:33:27:10:17:f0:0b:0d:2c:c3:16:40:9b:e7:97:0c: ff:c3:ce:ae:5c:b2:d0:46:05:21:7e:e1:cf:bb:37:b1:df:b8: 37:dc:b4:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKel2F1TEHt/DMJxvRJyNtskymhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGRDI2QzVEQjFFRURDNzBBNjI3NTE2Q0MyMjQ2Rjc0 RTkzQkE2RjAeFw0yNTA4MjIyMTM4NDBaFw0yNTA4MjQwMDQxNDBaMDMxMTAvBgNV BAMTKDc5NEYyMEJFRkIyNDRFRTE3OENGRjMwQTdBOUYyRjI4RENGQzNBRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTQUJ6WwScMJJMz9CJifAT+sI/ 86LUBR2fTE2LiaJkd5iJbWsJoJHrcOM4rCW14U85enzWH6QEoGWGJ4T9xHt+9vvw LgxFuFdwBkEyc9UDQY7Wr7pieVx+xeG6lpvPP0/EBV2JFh90TMPWk9Fm4OS9Wwby zvzRN56zsZGMoYZDR0J5EBdBo4hzXTgnceBb1lvxUU5MGk0D1dh7jLH5ZvB9ajDS UcuptJulmYB2XR2NvS5b0ux0dMxijh3c4qdv4pGIPit0BbMCavpWdd3nrFlLmcAU yRImYdrrDzqs69gkGES8T/WZbM03VNxpfr/eaZE4aWa9LqyQe5+KYSnPClzNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUeU8gvvskTuF4z/MKep8vKNz8OugwHwYDVR0j BBgwFoAUOv0mxdse7ccKYnUWzCJG906Tum8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2g3aFdGcmpZR0w5Ukw3Z3Fra3NaRmgyWkRGUnVocHFaMVU2TVZOeVZz dUMvMC8zQUZEMjZDNURCMUVFREM3MEE2Mjc1MTZDQzIyNDZGNzRFOTNCQTZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBRkQyNkM1REIxRUVEQzcw QTYyNzUxNkNDMjI0NkY3NEU5M0JBNkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2g3aFdGcmpZR0w5Ukw3Z3Fra3NaRmgyWkRGUnVocHFaMVU2TVZOeVZzdUMvMC8z QUZEMjZDNURCMUVFREM3MEE2Mjc1MTZDQzIyNDZGNzRFOTNCQTZGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAknIcmSMZjGNQlR0XavEn+5AnMUTscXjEYAf899QrZZ1wh27IhMPvchluhn6c DdqtuheQKC4mwDibwg/1rxmxMaJSoywHT29pJW7dMD3gBlfR45w5r4aVBKpCTSZW z3ZDY7cKgxjGDSHBOJ0egmtY3t43WujAPonuyqONY6kLA0rlrQAKTO3Xai9uBqEC +wj/KWD+ZOZ8blm5SHMp/yHJY7RVt7bK9Ta8hP188/pr/flzrxH/8nnwmp+XisQ2 Ym7V1e2GhbdN2klAgUy+43me1NRk6U8zMDy2rYQWMycQF/ALDSzDFkCb55cM/8PO rlyy0EYFIX7hz7s3sd+4N9y0CA== -----END CERTIFICATE-----Generated at Sat Aug 23 16:25:56 2025 by rpki-client