$ rpki-client -vvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft File: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft (raw, json) Hash identifier: P/giVlBr6BhzIhmSdTc6BTuTYZgkVLwDD1P7vChw2nw= Subject key identifier: 72:AC:4E:E0:E8:76:D8:1D:D1:5D:9F:00:33:A9:C5:CF:6D:47:16:68 Authority key identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 Certificate issuer: /CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Certificate serial: 0A8FE26F2E429C00CBBD7A0E2A0C5C0E710642FE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer Subject info access: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft Manifest number: 025F Signing time: Tue 01 Jul 2025 23:16:36 +0000 Manifest this update: Tue 01 Jul 2025 23:11:36 +0000 Manifest next update: Thu 03 Jul 2025 01:13:36 +0000 Files and hashes: 1: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl (hash: A7cDJudWYju+FRKKin+jO+4V07k161h7f5a5DkQO1YI=) 2: 323830343a386563383a3a2f33322d3438203d3e203631363136.roa (hash: lyXwR8szxK6wAklIFmsSWrdvlecUEfLPCwBeu/gOa+0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 01:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:8f:e2:6f:2e:42:9c:00:cb:bd:7a:0e:2a:0c:5c:0e:71:06:42:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Validity Not Before: Jul 1 23:11:36 2025 GMT Not After : Jul 3 01:13:36 2025 GMT Subject: CN=72AC4EE0E876D81DD15D9F0033A9C5CF6D471668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:6b:17:ef:52:ef:08:34:78:ef:cc:f4:38:e5: 69:d4:90:a7:5b:1b:56:f8:b6:e9:55:f4:6c:a8:37: 30:70:c3:5c:56:8a:21:9c:5e:55:25:5c:85:fe:b4: 8c:38:ab:cf:3c:0a:38:ca:a4:e0:8c:dc:7c:b6:da: ab:fd:9c:3f:0e:20:6c:56:35:c5:bd:44:c4:12:0a: 1a:78:b0:50:49:7f:42:30:20:68:1a:4f:5c:33:0e: ef:00:e3:63:08:7e:b5:39:7b:32:55:69:7f:ee:23: a7:86:69:63:5f:a4:f6:19:f5:fb:26:f0:d7:d1:65: 02:6c:0c:70:88:66:eb:99:4e:37:16:14:56:dc:88: 1b:7d:dd:46:fb:bc:5a:84:e4:48:23:e8:23:dd:5f: 74:90:05:aa:40:7b:70:b5:2e:46:ae:af:e7:c3:27: 29:7d:73:f3:a3:88:51:35:84:4d:b4:81:e8:79:0e: cd:25:97:a9:63:75:5e:3d:39:cf:7c:17:87:af:5a: 2c:b5:72:d4:5c:12:96:46:f1:df:3f:9d:5f:28:1d: 84:48:d5:da:c8:81:b1:b7:6c:6d:a0:3c:a1:ee:89: 72:1f:db:2a:47:56:3c:9b:d0:e1:69:b9:72:89:62: 90:58:f9:7d:f8:4c:ae:f8:fa:42:b0:7b:4f:1a:2d: 42:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AC:4E:E0:E8:76:D8:1D:D1:5D:9F:00:33:A9:C5:CF:6D:47:16:68 X509v3 Authority Key Identifier: keyid:36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:fb:f1:58:0e:f0:9b:eb:eb:83:9b:67:87:31:85:5e:4a:94: 88:d3:a2:a9:f6:51:e4:32:0b:5f:0f:df:8d:b7:d9:16:05:6e: e2:af:73:49:bc:73:a1:f9:a7:1d:b0:7d:77:c8:00:23:6b:43: 8b:ea:4f:b5:e6:71:5e:ba:14:78:7b:b3:d2:f7:ad:10:40:a2: 24:06:8b:df:de:bb:1e:ec:87:6f:dc:24:c9:24:c1:b1:25:bf: b4:86:d8:43:70:d7:4a:e7:8d:15:3e:0d:a4:db:e3:0a:39:70: cf:1f:ac:d3:8f:90:cd:52:c4:07:91:97:c7:e0:f3:1f:73:78: 28:0d:cc:ca:81:76:09:51:b2:80:d1:da:94:fe:a9:8d:dc:91: 72:a7:ec:0f:b9:c7:72:02:b1:b6:67:87:60:ab:ad:16:a3:30: aa:51:7f:4a:0a:33:c1:9f:4a:cb:9c:e5:92:ca:ba:22:af:6b: 22:5a:14:80:00:c8:1f:a3:5d:be:ea:40:3c:d5:43:43:62:aa: 0c:9c:ee:2d:ee:4c:4d:29:e5:9a:51:9c:ea:a3:64:a8:42:d2: 59:44:ca:fd:f3:50:4e:f2:e8:24:34:86:c2:ee:d6:7d:39:a8: 24:f1:94:a6:59:bd:ab:56:c1:4c:b3:14:bb:f6:85:3c:ca:29: 83:c5:27:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCo/iby5CnADLvXoOKgxcDnEGQv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYyNUE1RTE2NThFRTRCMzc5M0FCQUMwMTkyNEEzM0U1 N0MzRkMyMTAeFw0yNTA3MDEyMzExMzZaFw0yNTA3MDMwMTEzMzZaMDMxMTAvBgNV BAMTKDcyQUM0RUUwRTg3NkQ4MUREMTVEOUYwMDMzQTlDNUNGNkQ0NzE2NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyaxfvUu8INHjvzPQ45WnUkKdb G1b4tulV9GyoNzBww1xWiiGcXlUlXIX+tIw4q888CjjKpOCM3Hy22qv9nD8OIGxW NcW9RMQSChp4sFBJf0IwIGgaT1wzDu8A42MIfrU5ezJVaX/uI6eGaWNfpPYZ9fsm 8NfRZQJsDHCIZuuZTjcWFFbciBt93Ub7vFqE5Egj6CPdX3SQBapAe3C1Lkaur+fD Jyl9c/OjiFE1hE20geh5Ds0ll6ljdV49Oc98F4evWiy1ctRcEpZG8d8/nV8oHYRI 1drIgbG3bG2gPKHuiXIf2ypHVjyb0OFpuXKJYpBY+X34TK74+kKwe08aLUI1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcqxO4Oh22B3RXZ8AM6nFz21HFmgwHwYDVR0j BBgwFoAUNiWl4WWO5LN5OrrAGSSjPlfD/CEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFO UFcvMS8zNjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2MjVBNUUxNjU4RUU0QjM3 OTNBQkFDMDE5MjRBMzNFNTdDM0ZDMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFOUFcvMS8z NjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr/vxWA7wm+vrg5tnhzGFXkqUiNOiqfZR5DILXw/fjbfZFgVu4q9zSbxzofmn HbB9d8gAI2tDi+pPteZxXroUeHuz0vetEECiJAaL3967HuyHb9wkySTBsSW/tIbY Q3DXSueNFT4NpNvjCjlwzx+s04+QzVLEB5GXx+DzH3N4KA3MyoF2CVGygNHalP6p jdyRcqfsD7nHcgKxtmeHYKutFqMwqlF/SgozwZ9Ky5zlksq6Iq9rIloUgADIH6Nd vupAPNVDQ2KqDJzuLe5MTSnlmlGc6qNkqELSWUTK/fNQTvLoJDSGwu7WfTmoJPGU plm9q1bBTLMUu/aFPMopg8Unug== -----END CERTIFICATE-----Generated at Wed Jul 2 15:21:05 2025 by rpki-client