$ rpki-client -vvf rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.mft File: 3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.mft (raw, json) Hash identifier: DwwCuCVRNKxff+qvOuQKJkeWPcS1MDfZxPtZ50rpZOY= Subject key identifier: 54:4A:02:61:A7:F2:56:88:21:1F:0F:66:C2:30:60:BF:87:9F:0F:56 Authority key identifier: 3A:7A:08:E1:E3:3E:38:B8:2F:E4:69:E9:4F:06:C3:17:4B:5F:8C:F9 Certificate issuer: /CN=3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9 Certificate serial: 3F3FDB67DD43A56FDC2DC93328C036C5120EAF5E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.cer Subject info access: rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.mft Manifest number: 02A2 Signing time: Sat 23 Aug 2025 12:14:49 +0000 Manifest this update: Sat 23 Aug 2025 12:09:49 +0000 Manifest next update: Sun 24 Aug 2025 12:45:49 +0000 Files and hashes: 1: 3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.crl (hash: 1xTRDMBZz3ZnzOT+wMI1IRAlFvPD0EYbd0FNAM6cc10=) 2: 3138312e3137342e3234302e302f32322d3332203d3e20323731343531.roa (hash: xQm2PYvgNI75n8ZKaEiMNbnP1wrcZYMwPXPGeAGlycY=) 3: 323830343a376262633a3a2f33322d313238203d3e20323731343531.roa (hash: kMnD+RyvuJ0NL+O9RGy/c5aIAQvWBC3Y02pHCInQNkM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.crl rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 12:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:3f:db:67:dd:43:a5:6f:dc:2d:c9:33:28:c0:36:c5:12:0e:af:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9 Validity Not Before: Aug 23 12:09:49 2025 GMT Not After : Aug 24 12:45:49 2025 GMT Subject: CN=544A0261A7F25688211F0F66C23060BF879F0F56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fa:85:14:59:40:15:22:2c:93:ea:c7:72:0a: 66:31:b2:19:9f:78:cd:94:ca:cb:49:8e:89:fc:32: d2:b0:f2:54:ac:6e:a9:72:67:b8:4f:7d:38:60:98: a5:a6:7f:73:7c:3f:8d:ac:0d:4f:db:a8:c8:00:7b: 6e:fd:e5:82:8c:37:c3:c9:fd:30:18:f5:07:7f:10: 04:9a:f5:9f:8a:0d:9c:54:6d:20:81:ff:a5:24:da: d5:a9:3c:1e:d2:4f:b6:95:3a:ca:38:21:9d:4e:c4: d3:81:dd:21:77:64:e2:99:12:af:08:72:d9:e4:a7: a4:df:c4:2f:47:1a:68:e1:2f:91:9e:a3:63:2d:c4: 4b:bb:d9:c3:c0:fc:61:a1:e9:c4:0e:19:c0:07:ef: cc:5d:3c:d8:a0:ed:ee:db:61:07:d7:4b:07:9a:3a: 77:3f:f1:2f:74:9b:9a:24:88:ed:0f:58:cd:31:ca: aa:93:64:94:6d:16:76:68:ba:99:3a:14:2a:81:0d: 3e:7b:65:1b:30:70:b8:74:94:15:6b:6c:36:b6:b2: 50:d9:ca:59:9b:f9:ea:46:2e:8f:b0:b7:66:c8:2d: 14:a5:14:0c:61:c0:19:ad:3e:9b:be:c4:e3:e6:0f: 39:ad:11:d5:78:ed:ad:1e:80:cc:13:3d:be:c6:59: f5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4A:02:61:A7:F2:56:88:21:1F:0F:66:C2:30:60:BF:87:9F:0F:56 X509v3 Authority Key Identifier: keyid:3A:7A:08:E1:E3:3E:38:B8:2F:E4:69:E9:4F:06:C3:17:4B:5F:8C:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:34:da:42:b2:40:dc:3b:88:4e:ab:d0:aa:1e:78:de:fa:7e: d9:1d:20:a4:7b:d2:07:7d:f7:9d:53:d5:48:bf:16:d5:34:4b: b0:7e:5a:26:8a:48:6b:0b:4d:e5:13:d5:db:9d:13:a0:a6:7e: 57:46:bf:02:f8:e5:9c:0e:10:62:c3:63:97:23:6d:de:45:53: 60:db:41:d9:3a:e1:66:4b:84:2b:b6:b6:1e:f6:2c:2f:b6:48: bd:d9:ef:96:a5:d0:1d:47:46:a9:e9:42:fe:8a:92:63:f5:77: 60:74:5c:d8:e4:e8:f7:b3:77:57:df:cb:98:4b:36:62:1d:40: a9:ce:3e:4b:59:8c:99:75:73:19:46:21:f6:bf:6f:c2:0e:19: 24:ba:45:47:d1:b7:ff:dd:e3:95:8d:c2:99:eb:48:66:4b:16: 71:91:83:72:9f:0b:40:fd:3d:d1:6f:c2:e8:ff:25:ea:f4:4f: 2b:76:0c:74:b2:f4:97:73:cd:d9:df:32:69:c4:86:37:df:85: 81:b8:6e:ab:96:b6:7d:ff:34:d7:9c:56:5e:3b:33:ae:7a:43: 00:01:1d:97:a4:59:27:d4:07:23:16:08:61:ff:86:9a:48:77: a6:a5:62:e7:ea:99:c8:4a:6c:7d:80:43:1e:46:81:bf:74:f5: 05:98:4e:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPz/bZ91DpW/cLckzKMA2xRIOr14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E3QTA4RTFFMzNFMzhCODJGRTQ2OUU5NEYwNkMzMTc0 QjVGOENGOTAeFw0yNTA4MjMxMjA5NDlaFw0yNTA4MjQxMjQ1NDlaMDMxMTAvBgNV BAMTKDU0NEEwMjYxQTdGMjU2ODgyMTFGMEY2NkMyMzA2MEJGODc5RjBGNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs+oUUWUAVIiyT6sdyCmYxshmf eM2UystJjon8MtKw8lSsbqlyZ7hPfThgmKWmf3N8P42sDU/bqMgAe2795YKMN8PJ /TAY9Qd/EASa9Z+KDZxUbSCB/6Uk2tWpPB7ST7aVOso4IZ1OxNOB3SF3ZOKZEq8I ctnkp6TfxC9HGmjhL5Geo2MtxEu72cPA/GGh6cQOGcAH78xdPNig7e7bYQfXSwea Onc/8S90m5okiO0PWM0xyqqTZJRtFnZoupk6FCqBDT57ZRswcLh0lBVrbDa2slDZ ylmb+epGLo+wt2bILRSlFAxhwBmtPpu+xOPmDzmtEdV47a0egMwTPb7GWfWZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVEoCYafyVoghHw9mwjBgv4efD1YwHwYDVR0j BBgwFoAUOnoI4eM+OLgv5GnpTwbDF0tfjPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNnJVUlhXMjhtYjF4cjVLVlVKZ0g2b0xGNGNIamtXUlRQN0t1M0NNcDRL QTcvMS8zQTdBMDhFMUUzM0UzOEI4MkZFNDY5RTk0RjA2QzMxNzRCNUY4Q0Y5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBN0EwOEUxRTMzRTM4Qjgy RkU0NjlFOTRGMDZDMzE3NEI1RjhDRjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NnJVUlhXMjhtYjF4cjVLVlVKZ0g2b0xGNGNIamtXUlRQN0t1M0NNcDRLQTcvMS8z QTdBMDhFMUUzM0UzOEI4MkZFNDY5RTk0RjA2QzMxNzRCNUY4Q0Y5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmzTaQrJA3DuITqvQqh543vp+2R0gpHvSB333nVPVSL8W1TRLsH5aJopIawtN 5RPV250ToKZ+V0a/AvjlnA4QYsNjlyNt3kVTYNtB2TrhZkuEK7a2HvYsL7ZIvdnv lqXQHUdGqelC/oqSY/V3YHRc2OTo97N3V9/LmEs2Yh1Aqc4+S1mMmXVzGUYh9r9v wg4ZJLpFR9G3/93jlY3CmetIZksWcZGDcp8LQP090W/C6P8l6vRPK3YMdLL0l3PN 2d8yacSGN9+Fgbhuq5a2ff8015xWXjszrnpDAAEdl6RZJ9QHIxYIYf+Gmkh3pqVi 5+qZyEpsfYBDHkaBv3T1BZhOgg== -----END CERTIFICATE-----Generated at Sun Aug 24 00:14:26 2025 by rpki-client