$ rpki-client -vvf rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft File: B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft (raw, json) Hash identifier: jR/Q8w+xEY90B1FbZWB+1Q777Ky6NyaE70f/NbbdNnw= Subject key identifier: 3E:C4:F7:32:22:34:DB:29:EA:05:2E:2D:A8:78:7A:E2:0F:3D:2F:9A Authority key identifier: B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B Certificate issuer: /CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B Certificate serial: 3FDBEDF0B279BE5CBAA221F3FA438568219F2BE2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer Subject info access: rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft Manifest number: 029C Signing time: Sat 12 Jul 2025 23:00:00 +0000 Manifest this update: Sat 12 Jul 2025 22:55:00 +0000 Manifest next update: Sun 13 Jul 2025 23:00:00 +0000 Files and hashes: 1: 3137392e3132372e38302e302f32302d3234203d3e203238323932.roa (hash: fWDx1Fi6mw6Ca6ZucRKlJCI/fMGdFESCD3/Jzd0xj/o=) 2: B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl (hash: QGmJlQw9h7AiT6D7B89i6Ver3nC4lMULT+yfIoVt9x0=) 3: 323030313a313261303a3a2f33322d3438203d3e203238323932.roa (hash: dKQt4v2JdWqatl/R0rZkWZ5H3UnSmexxO6GH5f47Zss=) 4: 3138392e3132342e3131322e302f32302d3234203d3e203238323932.roa (hash: Iq9Imp3qaQEaGFQWqL4EpTLVcZyaAgjQqWljK8thbFo=) 5: 3138392e32382e3137362e302f32302d3234203d3e203238323932.roa (hash: Bnl9bp41rgXoRcKOfyv6fT3qi9QRw6WJNdIPgdsg8NI=) 6: 3137372e35342e34382e302f32302d3234203d3e203238323932.roa (hash: 40IYTjHiZO7EvGhruJ83FGAT4mQNUc8uvivoD/9QYP0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Jul 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:db:ed:f0:b2:79:be:5c:ba:a2:21:f3:fa:43:85:68:21:9f:2b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B Validity Not Before: Jul 12 22:55:00 2025 GMT Not After : Jul 19 23:00:00 2025 GMT Subject: CN=3082010A0282010100C3B63A826F556E653E46C19CC778E40C0141EB32640DB779C359944E12436EDB3ADA8D56B0638DB49649C39C435C00F7811FFCD4C3CDB0B7AA5E319C4264BB65C7D01F43F70DD43150F17A5413843A3F2DFE608642B889547A3F1D568DEAADD84BA948019C056FBB32C53CE7888E3341AAA57CA89DDA3E01BB2DDE7B1DCE188E3140AFBD8139AA947CF41408B5E3D6957775B760B7F2C584AF6784ED8F11E96F52EC665497C17390656373CD1199BE34B5A4D7DEDF29BCEF5D4D10C6148D9BDD73BC2DC0C40EFED72A3B8B1C39CCCCE66E0DF5A0AF203F4A1A9F77E843200E7C2F0001D9B48A839324EF9CB05A04860FFEAAFDE7CA7F4A454A33883CE71E2C0D0203010001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:3a:82:6f:55:6e:65:3e:46:c1:9c:c7:78: e4:0c:01:41:eb:32:64:0d:b7:79:c3:59:94:4e:12: 43:6e:db:3a:da:8d:56:b0:63:8d:b4:96:49:c3:9c: 43:5c:00:f7:81:1f:fc:d4:c3:cd:b0:b7:aa:5e:31: 9c:42:64:bb:65:c7:d0:1f:43:f7:0d:d4:31:50:f1: 7a:54:13:84:3a:3f:2d:fe:60:86:42:b8:89:54:7a: 3f:1d:56:8d:ea:ad:d8:4b:a9:48:01:9c:05:6f:bb: 32:c5:3c:e7:88:8e:33:41:aa:a5:7c:a8:9d:da:3e: 01:bb:2d:de:7b:1d:ce:18:8e:31:40:af:bd:81:39: aa:94:7c:f4:14:08:b5:e3:d6:95:77:75:b7:60:b7: f2:c5:84:af:67:84:ed:8f:11:e9:6f:52:ec:66:54: 97:c1:73:90:65:63:73:cd:11:99:be:34:b5:a4:d7: de:df:29:bc:ef:5d:4d:10:c6:14:8d:9b:dd:73:bc: 2d:c0:c4:0e:fe:d7:2a:3b:8b:1c:39:cc:cc:e6:6e: 0d:f5:a0:af:20:3f:4a:1a:9f:77:e8:43:20:0e:7c: 2f:00:01:d9:b4:8a:83:93:24:ef:9c:b0:5a:04:86: 0f:fe:aa:fd:e7:ca:7f:4a:45:4a:33:88:3c:e7:1e: 2c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C4:F7:32:22:34:DB:29:EA:05:2E:2D:A8:78:7A:E2:0F:3D:2F:9A X509v3 Authority Key Identifier: keyid:B4:35:88:C8:AB:54:53:3C:6B:AF:EC:39:CA:9E:C4:E2:6E:05:D7:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vDxPPhpkxp3NKiUXeTmQebBLN5KUaPxs72ZQPriHENW/4/B43588C8AB54533C6BAFEC39CA9EC4E26E05D77B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f6:1d:47:70:58:e6:f8:e3:25:11:8c:35:1a:fd:81:2f:18: dd:9b:13:36:5a:a7:a7:a6:24:3f:10:c7:d2:cc:15:6a:3d:db: b6:ee:07:90:18:25:07:fe:f5:74:b8:b0:02:71:c7:4e:71:30: 39:7a:b7:ce:46:97:11:58:ba:6e:10:ab:c7:32:ce:cc:c5:59: ef:4c:2a:7e:a5:6e:6a:ef:3e:67:14:43:1f:b6:46:1f:1f:1b: a4:cd:94:39:2a:22:36:78:a8:12:98:6c:db:fc:ef:5d:c9:23: e1:81:f6:39:d9:d3:0f:aa:b3:b2:53:d4:f0:06:dd:32:79:26: 81:40:0f:03:12:01:cb:f4:f8:38:10:a3:f3:8c:73:48:c6:3e: 9b:12:82:8e:95:b0:bb:d3:9c:00:13:4c:bf:5b:c6:c7:4c:bb: 9c:e8:00:84:df:8c:76:c5:be:00:34:03:8b:72:13:c3:15:40: 33:24:75:5f:aa:37:26:16:48:a0:35:75:fb:d2:5a:c2:12:d3: 9a:5e:d2:0f:3c:ae:44:e8:6f:03:66:34:24:22:0c:66:1e:05: cb:26:dd:43:a1:29:ab:cc:42:97:4e:f8:b7:8f:da:e2:11:d8: 81:2c:23:cf:b4:85:42:9f:60:43:e3:b1:c4:14:9d:06:05:bb: 7a:4f:44:b4 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUP9vt8LJ5vly6oiHz+kOFaCGfK+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQzNTg4QzhBQjU0NTMzQzZCQUZFQzM5Q0E5RUM0RTI2 RTA1RDc3QjAeFw0yNTA3MTIyMjU1MDBaFw0yNTA3MTkyMzAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzNCNjNBODI2RjU1NkU2NTNF NDZDMTlDQzc3OEU0MEMwMTQxRUIzMjY0MERCNzc5QzM1OTk0NEUxMjQzNkVEQjNB REE4RDU2QjA2MzhEQjQ5NjQ5QzM5QzQzNUMwMEY3ODExRkZDRDRDM0NEQjBCN0FB NUUzMTlDNDI2NEJCNjVDN0QwMUY0M0Y3MERENDMxNTBGMTdBNTQxMzg0M0EzRjJE RkU2MDg2NDJCODg5NTQ3QTNGMUQ1NjhERUFBREQ4NEJBOTQ4MDE5QzA1NkZCQjMy QzUzQ0U3ODg4RTMzNDFBQUE1N0NBODlEREEzRTAxQkIyRERFN0IxRENFMTg4RTMx NDBBRkJEODEzOUFBOTQ3Q0Y0MTQwOEI1RTNENjk1Nzc3NUI3NjBCN0YyQzU4NEFG Njc4NEVEOEYxMUU5NkY1MkVDNjY1NDk3QzE3MzkwNjU2MzczQ0QxMTk5QkUzNEI1 QTREN0RFREYyOUJDRUY1RDREMTBDNjE0OEQ5QkRENzNCQzJEQzBDNDBFRkVENzJB M0I4QjFDMzlDQ0NDRTY2RTBERjVBMEFGMjAzRjRBMUE5Rjc3RTg0MzIwMEU3QzJG MDAwMUQ5QjQ4QTgzOTMyNEVGOUNCMDVBMDQ4NjBGRkVBQUZERTdDQTdGNEE0NTRB MzM4ODNDRTcxRTJDMEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAw7Y6gm9VbmU+RsGcx3jkDAFB6zJkDbd5w1mUThJDbts62o1WsGON tJZJw5xDXAD3gR/81MPNsLeqXjGcQmS7ZcfQH0P3DdQxUPF6VBOEOj8t/mCGQriJ VHo/HVaN6q3YS6lIAZwFb7syxTzniI4zQaqlfKid2j4Buy3eex3OGI4xQK+9gTmq lHz0FAi149aVd3W3YLfyxYSvZ4TtjxHpb1LsZlSXwXOQZWNzzRGZvjS1pNfe3ym8 711NEMYUjZvdc7wtwMQO/tcqO4scOczM5m4N9aCvID9KGp936EMgDnwvAAHZtIqD kyTvnLBaBIYP/qr958p/SkVKM4g85x4sDQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FD7E9zIiNNsp6gUuLah4euIPPS+aMB8GA1UdIwQYMBaAFLQ1iMirVFM8a6/sOcqe xOJuBdd7MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzd2RHhQUGhwa3hwM05L aVVYZVRtUWViQkxONUtVYVB4czcyWlFQcmlIRU5XLzQvQjQzNTg4QzhBQjU0NTMz QzZCQUZFQzM5Q0E5RUM0RTI2RTA1RDc3Qi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9CNDM1ODhDOEFCNTQ1MzNDNkJBRkVDMzlDQTlFQzRFMjZFMDVE NzdCLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzd2RHhQUGhwa3hwM05LaVVYZVRt UWViQkxONUtVYVB4czcyWlFQcmlIRU5XLzQvQjQzNTg4QzhBQjU0NTMzQzZCQUZF QzM5Q0E5RUM0RTI2RTA1RDc3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI32HUdwWOb44yURjDUa/YEv GN2bEzZap6emJD8Qx9LMFWo927buB5AYJQf+9XS4sAJxx05xMDl6t85GlxFYum4Q q8cyzszFWe9MKn6lbmrvPmcUQx+2Rh8fG6TNlDkqIjZ4qBKYbNv8713JI+GB9jnZ 0w+qs7JT1PAG3TJ5JoFADwMSAcv0+DgQo/OMc0jGPpsSgo6VsLvTnAATTL9bxsdM u5zoAITfjHbFvgA0A4tyE8MVQDMkdV+qNyYWSKA1dfvSWsIS05pe0g88rkTobwNm NCQiDGYeBcsm3UOhKavMQpdO+LeP2uIR2IEsI8+0hUKfYEPjscQUnQYFu3pPRLQ= -----END CERTIFICATE-----Generated at Sun Jul 13 03:51:44 2025 by rpki-client