$ rpki-client -vvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft File: 3E268A146165B7580B59E044B59D275B5F824225.mft (raw, json) Hash identifier: hcbejJp5m96rabNyhHc/GiahaCgvktmaahkreZWZVHs= Subject key identifier: 97:01:17:9A:3C:57:2F:A5:65:50:35:C3:23:81:EC:40:D8:9A:E4:EE Authority key identifier: 3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25 Certificate issuer: /CN=3E268A146165B7580B59E044B59D275B5F824225 Certificate serial: 6B0766C7F16B2A2716C189688F2343A780A0A41B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer Subject info access: rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft Manifest number: 021D Signing time: Sun 11 May 2025 05:58:32 +0000 Manifest this update: Sun 11 May 2025 05:53:32 +0000 Manifest next update: Mon 12 May 2025 07:08:32 +0000 Files and hashes: 1: 3133382e3138352e38382e302f32342d3234203d3e20323730383737.roa (hash: ioVUkvkzzC9iDdiPU/PtBssAeixfet+nB6cAtl7hWkA=) 2: 3133382e3138352e39312e302f32342d3234203d3e20323730383737.roa (hash: 2sa59rYxIXkmWycuMggr9CeJuK30HANeKcCW+bW1NbQ=) 3: 323830343a373264303a3a2f33322d3332203d3e20323730383737.roa (hash: RTSv5wyKoBNrebAbYdwEcI2igT1/b44z1ROckG32uHA=) 4: 323830343a373264303a3a2f33332d3333203d3e20323730383737.roa (hash: 1kBBuIeN2y3h21/izl8ZCCdTaRn0DTx5jZ+3Qd7e4a0=) 5: 3E268A146165B7580B59E044B59D275B5F824225.crl (hash: 1G0l2eIocCaBtc7Sf8hNgPplLo7MYG2sewHUQl+eiXU=) 6: 3133382e3138352e39302e302f32342d3234203d3e20323730383737.roa (hash: CinKBFfX3ISnduxQuNq5n348SAlw/HjaXz2UB4gRxJA=) 7: 3133382e3138352e38392e302f32342d3234203d3e20323730383737.roa (hash: oJmyIq3Hgazg1gTF8Y6AArRe9UyUxSEKw4TUfKy4ghc=) 8: 323830343a373264303a663030303a3a2f34302d3430203d3e20323730383737.roa (hash: V2SiM1fUMPmFoBilwLS1QfTqZjVCErcGOSV1bvmhUYY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 07:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:07:66:c7:f1:6b:2a:27:16:c1:89:68:8f:23:43:a7:80:a0:a4:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E268A146165B7580B59E044B59D275B5F824225 Validity Not Before: May 11 05:53:32 2025 GMT Not After : May 12 07:08:32 2025 GMT Subject: CN=9701179A3C572FA5655035C32381EC40D89AE4EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:03:91:76:b7:75:6c:8c:b5:63:eb:01:09:a7: 96:f2:2f:1e:c9:ef:df:8b:c3:23:4f:34:f0:5e:f5: f9:7b:74:d2:27:69:ba:f2:c2:13:97:e9:e8:99:20: 9f:3f:5e:37:03:99:92:16:48:4c:2c:2c:35:54:3f: 4d:6d:37:b8:c5:0e:86:32:11:7c:61:b0:34:96:be: 2e:e5:51:8a:5b:4c:ee:c3:f5:ea:a6:71:3d:ab:93: e1:f2:30:6b:56:a2:66:7a:01:65:cf:0a:8c:28:6a: 4b:5f:34:06:68:d2:6c:58:35:c5:46:24:c4:c8:a8: 41:2f:f7:e9:ef:34:c4:a9:72:05:2b:d6:02:61:42: 72:97:d4:97:ad:93:de:48:02:96:30:5c:49:b2:70: 55:48:91:ee:65:ab:a1:0a:6c:43:c7:08:03:87:11: ae:f1:5c:7f:bd:67:4e:03:e5:c3:8e:2a:69:9b:09: 27:76:80:dc:74:9c:4f:c5:7c:79:96:33:db:bd:69: 75:96:28:a9:47:72:37:0a:ae:d6:73:bb:1e:9f:87: 47:ee:ba:27:36:fb:a8:ee:60:ef:16:a2:37:bf:2d: 2a:b5:7b:f1:69:88:5a:93:44:a2:e8:67:5f:c0:ab: ca:76:e7:f4:10:7c:fd:9f:5a:53:ed:22:c3:ef:8a: b2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:01:17:9A:3C:57:2F:A5:65:50:35:C3:23:81:EC:40:D8:9A:E4:EE X509v3 Authority Key Identifier: keyid:3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:7b:a2:84:76:61:53:bc:f8:a2:12:d1:24:03:f0:98:d7:dd: 4d:52:05:66:e0:9d:30:f9:db:1d:e8:aa:26:9f:b5:ae:79:04: 5b:fa:02:eb:f0:01:f3:b8:da:ca:1e:c7:dc:e8:1c:89:46:b5: 9f:20:14:a9:6c:f5:2a:d8:e4:e3:20:f0:a3:49:6d:fc:3a:5a: f1:7d:dc:0f:c6:09:d3:28:cb:cd:74:ba:e6:a7:00:80:51:f1: eb:c0:94:0f:0e:b6:14:51:71:77:0f:34:57:91:10:ec:89:bd: f7:e9:2d:04:07:cf:d4:b3:75:15:f4:eb:06:8b:2e:ef:9a:e8: 96:ee:bb:3e:97:9a:f5:38:15:9b:37:c7:ca:97:4c:4c:a7:45: 9a:fb:fa:53:99:3b:e7:0f:2c:54:12:2c:9a:e1:62:72:fc:53: 50:47:62:db:0d:fc:3d:f0:67:3e:22:de:90:0f:8a:c8:91:c2: e0:c9:39:66:37:05:8a:f7:bd:b6:fc:20:81:32:18:3a:2a:76: d4:34:3c:99:fd:b4:6e:18:ca:b4:68:ed:0f:34:0a:07:a2:a6: 35:49:5c:c4:56:eb:78:4c:eb:72:82:db:24:7a:be:cd:39:66: 34:f7:97:14:88:89:48:ce:57:78:0f:e4:55:f1:64:84:02:18: c8:05:1e:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUawdmx/FrKicWwYlojyNDp4CgpBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UyNjhBMTQ2MTY1Qjc1ODBCNTlFMDQ0QjU5RDI3NUI1 RjgyNDIyNTAeFw0yNTA1MTEwNTUzMzJaFw0yNTA1MTIwNzA4MzJaMDMxMTAvBgNV BAMTKDk3MDExNzlBM0M1NzJGQTU2NTUwMzVDMzIzODFFQzQwRDg5QUU0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhA5F2t3VsjLVj6wEJp5byLx7J 79+LwyNPNPBe9fl7dNInabrywhOX6eiZIJ8/XjcDmZIWSEwsLDVUP01tN7jFDoYy EXxhsDSWvi7lUYpbTO7D9eqmcT2rk+HyMGtWomZ6AWXPCowoaktfNAZo0mxYNcVG JMTIqEEv9+nvNMSpcgUr1gJhQnKX1Jetk95IApYwXEmycFVIke5lq6EKbEPHCAOH Ea7xXH+9Z04D5cOOKmmbCSd2gNx0nE/FfHmWM9u9aXWWKKlHcjcKrtZzux6fh0fu uic2+6juYO8Woje/LSq1e/FpiFqTRKLoZ1/Aq8p25/QQfP2fWlPtIsPvirIlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlwEXmjxXL6VlUDXDI4HsQNia5O4wHwYDVR0j BBgwFoAUPiaKFGFlt1gLWeBEtZ0nW1+CQiUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXFnUldORVdmc0NKZk4xdzVndEhYb3NXaGtMV1pxcVUyTUx1Ujl4aW5B RXQvMS8zRTI2OEExNDYxNjVCNzU4MEI1OUUwNDRCNTlEMjc1QjVGODI0MjI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFMjY4QTE0NjE2NUI3NTgw QjU5RTA0NEI1OUQyNzVCNUY4MjQyMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXFnUldORVdmc0NKZk4xdzVndEhYb3NXaGtMV1pxcVUyTUx1Ujl4aW5BRXQvMS8z RTI2OEExNDYxNjVCNzU4MEI1OUUwNDRCNTlEMjc1QjVGODI0MjI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKXuihHZhU7z4ohLRJAPwmNfdTVIFZuCdMPnbHeiqJp+1rnkEW/oC6/AB87ja yh7H3OgciUa1nyAUqWz1Ktjk4yDwo0lt/Dpa8X3cD8YJ0yjLzXS65qcAgFHx68CU Dw62FFFxdw80V5EQ7Im99+ktBAfP1LN1FfTrBosu75rolu67Ppea9TgVmzfHypdM TKdFmvv6U5k75w8sVBIsmuFicvxTUEdi2w38PfBnPiLekA+KyJHC4Mk5ZjcFive9 tvwggTIYOip21DQ8mf20bhjKtGjtDzQKB6KmNUlcxFbreEzrcoLbJHq+zTlmNPeX FIiJSM5XeA/kVfFkhAIYyAUeAw== -----END CERTIFICATE-----Generated at Sun May 11 22:22:45 2025 by rpki-client