$ rpki-client -vvf rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft File: 3BA0E4707E0361E96A25CFBC6104551202B34011.mft (raw, json) Hash identifier: vhOEC/LWVz+lhfRVrNR2MLR6gzMhguTU1PjCv9NLzFI= Subject key identifier: AD:DA:B8:59:82:79:1B:AF:D3:91:C2:D7:F6:05:88:79:59:64:E0:8F Authority key identifier: 3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 Certificate issuer: /CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Certificate serial: 716698EAC238CA3C15AB19C42D8DD34DFB6B516C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft Manifest number: 0297 Signing time: Fri 22 Aug 2025 17:52:59 +0000 Manifest this update: Fri 22 Aug 2025 17:47:59 +0000 Manifest next update: Sat 23 Aug 2025 19:55:59 +0000 Files and hashes: 1: 3BA0E4707E0361E96A25CFBC6104551202B34011.crl (hash: ++hgs+g0ZCjp9FHjK1e6VIQadEGc8os5ee8EBEkLcXI=) 2: 323830343a326337633a3a2f33322d3438203d3e20323635323232.roa (hash: gZh/j6TTWYlb6HfDh0Q2BiPD8Rby4m6dl3mVzy3MH6M=) 3: 3136382e302e33322e302f32322d3234203d3e20323635323232.roa (hash: FfWivJ4gNEyGVTWyPXQlAoFJfcDTKU2BxPer5WjncSs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 19:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:66:98:ea:c2:38:ca:3c:15:ab:19:c4:2d:8d:d3:4d:fb:6b:51:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Validity Not Before: Aug 22 17:47:59 2025 GMT Not After : Aug 23 19:55:59 2025 GMT Subject: CN=ADDAB85982791BAFD391C2D7F60588795964E08F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:25:79:13:6f:40:2d:49:be:dd:c2:99:b9:be: 26:66:33:15:48:f1:65:9c:2d:d2:85:9a:56:1d:f2: 24:3b:b4:d7:d8:6c:1c:b2:d8:a5:64:77:82:a0:ad: 7a:b6:0b:a1:cb:c6:5d:1a:82:73:6f:6e:11:72:2f: 40:2e:c9:9b:2f:a0:03:4f:8b:14:c9:a9:04:8e:21: 30:99:9f:80:f1:3e:7a:76:cf:d5:17:57:3d:06:60: f7:b8:a3:16:d8:6e:59:18:97:c9:69:83:84:10:72: 44:9b:91:7d:9b:62:30:84:d7:1c:25:8b:0f:9c:dd: 25:16:ce:84:eb:39:d3:9f:db:b8:df:59:ac:d7:15: ae:c8:8b:a4:76:59:02:1d:41:dc:72:17:ce:cb:fb: 91:7b:65:48:82:58:9c:85:14:9d:63:23:3f:8a:4e: 68:4c:ba:fd:bb:00:3f:d5:df:cf:54:b0:3b:ee:ff: 95:4f:69:f4:95:e5:8a:ec:b1:d9:dd:ef:c6:94:5d: 75:a7:ce:70:75:2f:9a:39:2f:1f:65:f2:fc:79:43: 73:49:df:f6:f5:4c:b2:f9:bd:69:e8:2f:42:1a:bf: 1e:c9:bb:d3:57:11:5e:ab:40:52:f9:97:29:06:e3: 5b:78:d1:9e:30:8b:72:e0:68:f5:86:8d:0e:4f:16: 49:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DA:B8:59:82:79:1B:AF:D3:91:C2:D7:F6:05:88:79:59:64:E0:8F X509v3 Authority Key Identifier: keyid:3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:3b:d6:ca:f6:72:3b:57:fc:21:dc:99:fd:01:25:21:3f:a0: 75:ce:d9:a2:45:6f:24:47:2c:11:a1:17:ba:fb:0c:26:97:86: 09:a8:86:6e:40:43:d7:aa:b9:32:41:92:a9:c2:51:b1:bc:e6: e6:71:90:23:5a:97:4b:31:7a:33:48:a7:af:c5:83:38:12:5b: 25:6b:fb:bf:c3:0f:9b:fd:8d:7b:ed:0d:95:d6:ba:e1:e8:4d: 33:d0:7f:20:85:ec:4e:07:82:e8:60:f4:6d:4b:b5:ab:b4:c3: 0f:91:d7:62:91:16:33:52:d1:72:c2:e9:ce:b4:54:65:4d:17: 94:6f:77:97:87:e4:88:c4:e6:e7:f9:f9:2f:99:1b:e2:d0:d3: 46:6a:46:7f:71:bb:50:f9:2a:92:aa:16:2d:48:bf:a2:aa:ff: d4:3b:6f:b9:7d:bf:b3:c4:11:fa:a2:e5:c8:06:8a:73:8a:c5: 34:4c:0c:bf:8e:3a:99:ba:57:ba:de:5d:5a:ec:79:7a:6c:f6: b7:00:d5:0d:b8:ef:5f:b4:66:cb:76:9a:f2:51:eb:5a:ee:01: a7:40:07:0d:ed:f0:67:dc:65:03:b9:d7:78:4b:c0:4a:5f:6e: 52:cd:75:3b:57:52:ec:a5:11:27:f4:b6:bd:a5:60:d0:a4:9d: 23:9e:bc:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcWaY6sI4yjwVqxnELY3TTftrUWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMEU0NzA3RTAzNjFFOTZBMjVDRkJDNjEwNDU1MTIw MkIzNDAxMTAeFw0yNTA4MjIxNzQ3NTlaFw0yNTA4MjMxOTU1NTlaMDMxMTAvBgNV BAMTKEFEREFCODU5ODI3OTFCQUZEMzkxQzJEN0Y2MDU4ODc5NTk2NEUwOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkJXkTb0AtSb7dwpm5viZmMxVI 8WWcLdKFmlYd8iQ7tNfYbByy2KVkd4KgrXq2C6HLxl0agnNvbhFyL0AuyZsvoANP ixTJqQSOITCZn4DxPnp2z9UXVz0GYPe4oxbYblkYl8lpg4QQckSbkX2bYjCE1xwl iw+c3SUWzoTrOdOf27jfWazXFa7Ii6R2WQIdQdxyF87L+5F7ZUiCWJyFFJ1jIz+K TmhMuv27AD/V389UsDvu/5VPafSV5Yrssdnd78aUXXWnznB1L5o5Lx9l8vx5Q3NJ 3/b1TLL5vWnoL0Iavx7Ju9NXEV6rQFL5lykG41t40Z4wi3LgaPWGjQ5PFkmZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrdq4WYJ5G6/TkcLX9gWIeVlk4I8wHwYDVR0j BBgwFoAUO6DkcH4DYelqJc+8YQRVEgKzQBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5q c2UvMS8zQkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCQTBFNDcwN0UwMzYxRTk2 QTI1Q0ZCQzYxMDQ1NTEyMDJCMzQwMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5qc2UvMS8z QkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcDvWyvZyO1f8IdyZ/QElIT+gdc7ZokVvJEcsEaEXuvsMJpeGCaiGbkBD16q5 MkGSqcJRsbzm5nGQI1qXSzF6M0inr8WDOBJbJWv7v8MPm/2Ne+0Nlda64ehNM9B/ IIXsTgeC6GD0bUu1q7TDD5HXYpEWM1LRcsLpzrRUZU0XlG93l4fkiMTm5/n5L5kb 4tDTRmpGf3G7UPkqkqoWLUi/oqr/1DtvuX2/s8QR+qLlyAaKc4rFNEwMv446mbpX ut5dWux5emz2twDVDbjvX7Rmy3aa8lHrWu4Bp0AHDe3wZ9xlA7nXeEvASl9uUs11 O1dS7KURJ/S2vaVg0KSdI568ag== -----END CERTIFICATE-----Generated at Sat Aug 23 12:44:04 2025 by rpki-client