$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.mft File: 1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.mft (raw, json) Hash identifier: wjAfi1S8QT45Kri31nDBd0Ksc7+tBA10ifQMkBBpjkk= Subject key identifier: B9:6C:94:A0:A6:E5:98:39:F1:73:E5:8A:C1:9F:5D:04:53:9B:6D:73 Authority key identifier: 1B:82:7C:9E:BC:31:D4:8D:C1:0A:B5:2A:CE:52:BF:27:C8:9E:90:AC Certificate issuer: /CN=1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC Certificate serial: 4F4B3F2CDAF1B02BB69B51964C6F777BEC32244B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer Subject info access: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.mft Manifest number: CA Signing time: Thu 03 Jul 2025 08:37:40 +0000 Manifest this update: Thu 03 Jul 2025 08:32:40 +0000 Manifest next update: Fri 04 Jul 2025 09:51:40 +0000 Files and hashes: 1: 3133382e3230342e3137352e302f32342d3234203d3e20323633393131.roa (hash: jw++sipOVn3pFZNqWvRQYE8TkrvwJHbo3/CkBKdTNiw=) 2: 3133382e3230342e3137342e302f32342d3234203d3e20323633393131.roa (hash: UkIAzTtv7zNHC6mEiZX9b0Rmj5mT/9ghpLrDu2jgBAo=) 3: 1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.crl (hash: inXb5CwD7cmyEtZKMqwClU7l3E6zFSENweREQ6PM5d8=) 4: 3133382e3230342e3137322e302f32332d3233203d3e20323633393131.roa (hash: u8mFZpedjB2s6UvM73xXjHzoFGbLZOF1jm5AvhQpWI8=) 5: 3133382e3230342e3137342e302f32332d3233203d3e20323633393131.roa (hash: fUVzjxbCYkQsYHGoBVdanJJYpdVT0cBcZPQxWyQ0p94=) 6: 323830343a323739343a3a2f33322d3332203d3e20323633393131.roa (hash: lYKhM1T8j33p24NP9/yeVAvmbB8g8I24YnOMAaE6hqs=) 7: 3133382e3230342e3137322e302f32342d3234203d3e20323633393131.roa (hash: jRRmpkYINt6f7Kh0pdTxWCvw9ovtGEVlyUA0cJo4gA4=) 8: 3133382e3230342e3137322e302f32322d3232203d3e20323633393131.roa (hash: WCaZcjrnKocLt6j31MgkjeiXOEWEJ3zUU0iemvoeAv0=) 9: 3133382e3230342e3137332e302f32342d3234203d3e20323633393131.roa (hash: TyAo+zvMN960iqHQNkyo/Q9EZScApo7LPT/B3Y1KOvc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.crl rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Jul 2025 09:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:4b:3f:2c:da:f1:b0:2b:b6:9b:51:96:4c:6f:77:7b:ec:32:24:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC Validity Not Before: Jul 3 08:32:40 2025 GMT Not After : Jul 4 09:51:40 2025 GMT Subject: CN=B96C94A0A6E59839F173E58AC19F5D04539B6D73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a3:6f:eb:08:d3:b3:01:d8:ce:97:70:2b:b8: 5f:f3:09:6f:36:36:a2:b1:3d:94:af:0a:b7:0c:04: 39:a2:34:e6:62:73:3f:b8:97:eb:bf:95:bb:d4:38: 5c:50:df:13:56:87:31:2a:51:af:ba:7f:20:d2:93: da:3d:52:ae:7e:d6:11:66:e5:67:b9:c8:dc:a4:3f: 8c:56:f4:2e:df:72:40:23:72:47:36:10:85:60:98: a3:b9:1a:e0:c5:0f:ea:13:c5:ec:ab:13:bd:fb:e4: f8:df:be:ec:31:22:a3:ae:54:d8:99:d6:79:a9:9f: 96:02:6b:4c:9b:5c:e4:b9:d4:66:1e:6a:7c:65:27: f7:ff:8b:77:05:a5:1f:06:f0:11:f7:8b:26:eb:cd: 24:05:f9:6b:e7:41:c9:bb:0e:a8:d9:07:c4:1c:c9: f6:af:92:b4:4e:90:c3:50:ca:88:7b:ac:98:3a:1d: 6f:4b:88:6a:02:f2:e9:88:e5:57:1d:94:88:c8:88: 2d:5d:bb:36:db:6d:c4:59:26:f9:14:c7:fd:02:09: 9b:5c:51:59:b0:88:fa:f6:39:5b:7d:34:15:a5:8b: 33:dc:79:11:f6:35:b8:fe:e6:b2:f2:26:63:79:ef: 30:94:a7:7c:66:32:e5:3b:35:ea:18:78:a9:e7:1b: 58:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6C:94:A0:A6:E5:98:39:F1:73:E5:8A:C1:9F:5D:04:53:9B:6D:73 X509v3 Authority Key Identifier: keyid:1B:82:7C:9E:BC:31:D4:8D:C1:0A:B5:2A:CE:52:BF:27:C8:9E:90:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:86:c7:fa:c7:ef:c0:1e:77:86:12:d5:ea:c8:68:fc:a1:92: c3:2f:95:d2:38:90:4e:66:70:64:43:54:1a:2b:42:a6:4c:49: 64:c6:cd:c8:3c:f7:83:f5:e4:0b:e1:71:de:76:7a:a8:6f:24: 01:d3:a4:04:d5:e3:a9:22:00:2e:1a:f3:94:28:a4:39:ee:b0: f1:35:5e:28:e1:5b:e3:7f:4f:f8:85:b7:08:92:17:af:a1:34: 7d:3a:23:f8:c5:fb:98:9a:e2:fa:1c:2c:e4:46:48:6f:08:fc: e0:9f:71:ff:44:54:63:0b:2e:88:7c:5e:1d:0a:ed:a8:dc:a7: 97:36:e4:28:ce:57:95:cd:0b:7d:6e:52:5f:d8:20:4f:75:45: 6e:7d:3c:c1:f0:21:65:24:6f:40:53:cd:9e:1e:e5:b7:39:7e: 43:dd:66:f4:a8:6d:7b:8b:0f:b5:04:05:f9:d7:8f:00:43:fc: 4b:d3:d5:41:2b:40:2b:7f:64:1b:7e:9b:f8:89:d9:93:b1:1d: a1:0e:da:59:2d:31:ac:5e:50:7d:8e:45:9b:30:29:70:f1:43: c4:c1:87:74:e8:46:da:09:0b:d1:ec:e4:c7:d6:0b:43:cb:64: fc:13:82:2a:46:7d:14:d8:c0:ac:f9:12:e3:d9:a1:b8:6c:a0: ff:a8:d9:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUT0s/LNrxsCu2m1GWTG93e+wyJEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI4MjdDOUVCQzMxRDQ4REMxMEFCNTJBQ0U1MkJGMjdD ODlFOTBBQzAeFw0yNTA3MDMwODMyNDBaFw0yNTA3MDQwOTUxNDBaMDMxMTAvBgNV BAMTKEI5NkM5NEEwQTZFNTk4MzlGMTczRTU4QUMxOUY1RDA0NTM5QjZENzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2o2/rCNOzAdjOl3AruF/zCW82 NqKxPZSvCrcMBDmiNOZicz+4l+u/lbvUOFxQ3xNWhzEqUa+6fyDSk9o9Uq5+1hFm 5We5yNykP4xW9C7fckAjckc2EIVgmKO5GuDFD+oTxeyrE7375PjfvuwxIqOuVNiZ 1nmpn5YCa0ybXOS51GYeanxlJ/f/i3cFpR8G8BH3iybrzSQF+WvnQcm7DqjZB8Qc yfavkrROkMNQyoh7rJg6HW9LiGoC8umI5VcdlIjIiC1duzbbbcRZJvkUx/0CCZtc UVmwiPr2OVt9NBWlizPceRH2Nbj+5rLyJmN57zCUp3xmMuU7NeoYeKnnG1gDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuWyUoKblmDnxc+WKwZ9dBFObbXMwHwYDVR0j BBgwFoAUG4J8nrwx1I3BCrUqzlK/J8iekKwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM29YUkFxd3dIRmYyaXdZam5adENCamFrWnQxNlMydlB4Yjk0d2NCcnNT clgvMC8xQjgyN0M5RUJDMzFENDhEQzEwQUI1MkFDRTUyQkYyN0M4OUU5MEFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCODI3QzlFQkMzMUQ0OERD MTBBQjUyQUNFNTJCRjI3Qzg5RTkwQUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M29YUkFxd3dIRmYyaXdZam5adENCamFrWnQxNlMydlB4Yjk0d2NCcnNTclgvMC8x QjgyN0M5RUJDMzFENDhEQzEwQUI1MkFDRTUyQkYyN0M4OUU5MEFDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0IbH+sfvwB53hhLV6sho/KGSwy+V0jiQTmZwZENUGitCpkxJZMbNyDz3g/Xk C+Fx3nZ6qG8kAdOkBNXjqSIALhrzlCikOe6w8TVeKOFb439P+IW3CJIXr6E0fToj +MX7mJri+hws5EZIbwj84J9x/0RUYwsuiHxeHQrtqNynlzbkKM5Xlc0LfW5SX9gg T3VFbn08wfAhZSRvQFPNnh7ltzl+Q91m9Khte4sPtQQF+dePAEP8S9PVQStAK39k G36b+InZk7EdoQ7aWS0xrF5QfY5FmzApcPFDxMGHdOhG2gkL0ezkx9YLQ8tk/BOC KkZ9FNjArPkS49mhuGyg/6jZYg== -----END CERTIFICATE-----Generated at Thu Jul 3 10:35:11 2025 by rpki-client