$ rpki-client -vvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft File: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft (raw, json) Hash identifier: KYATRCPzQxuC6kQ36JGToCjL/n2Wla4OBrOMBwLjimI= Subject key identifier: 27:95:05:3C:46:63:35:57:02:53:51:18:A8:FB:4B:DF:3B:49:29:50 Authority key identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 Certificate issuer: /CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Certificate serial: 6C3731272AA90458444AF10A86274B9DC98B65ED Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer Subject info access: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft Manifest number: 021B Signing time: Sun 11 May 2025 04:21:31 +0000 Manifest this update: Sun 11 May 2025 04:16:31 +0000 Manifest next update: Mon 12 May 2025 08:10:31 +0000 Files and hashes: 1: 323830343a386563383a3a2f33322d3438203d3e203631363136.roa (hash: lyXwR8szxK6wAklIFmsSWrdvlecUEfLPCwBeu/gOa+0=) 2: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl (hash: 3IgCDhu8crsFV+l1kdrf24XWh2YA2lUOVMwn9scDhgQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 12 May 2025 02:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:37:31:27:2a:a9:04:58:44:4a:f1:0a:86:27:4b:9d:c9:8b:65:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Validity Not Before: May 11 04:16:31 2025 GMT Not After : May 12 08:10:31 2025 GMT Subject: CN=2795053C4663355702535118A8FB4BDF3B492950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:d5:a7:3f:84:91:13:1d:a4:97:ec:c0:cd: 98:0e:73:00:5f:e0:e4:be:7e:38:e4:14:6f:f9:f8: 27:e8:04:d0:42:ac:44:32:9e:27:3b:ac:3f:18:64: ba:49:ec:4c:cd:dc:9e:ea:a2:56:19:9b:11:97:1c: 47:56:3e:a7:50:83:fa:29:dd:d1:68:11:ce:71:3d: 6f:d2:d5:45:a0:86:51:d0:15:ac:55:b2:e0:b7:fa: af:50:87:85:78:35:45:83:46:3c:03:6a:7f:2e:ac: 87:31:25:3c:2e:2f:79:ca:91:67:9d:4c:2f:34:d6: 33:3a:a9:99:28:6b:08:1e:f5:2e:81:3c:8c:7a:54: 81:af:72:88:d7:b0:65:f6:a6:d9:b1:f3:a2:a9:b2: 1d:7e:3b:55:0d:88:b2:b1:64:e3:e4:71:83:72:47: f3:99:7e:9b:3b:bb:81:0e:f5:89:d9:bf:96:72:40: 6e:8f:bd:ca:9f:6d:85:4d:8c:f9:e5:10:cb:fd:f5: 83:0f:87:4c:6a:10:00:05:96:bc:e3:15:d9:42:f4: 9c:62:4f:9f:48:e6:16:2d:19:a2:b8:b7:40:1b:1b: 92:c6:fa:ea:70:e9:4a:e6:98:bf:60:14:9b:a5:d6: 9d:8b:7a:51:3d:e2:3c:1d:09:84:18:2d:1e:58:9c: b9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:95:05:3C:46:63:35:57:02:53:51:18:A8:FB:4B:DF:3B:49:29:50 X509v3 Authority Key Identifier: keyid:36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:80:f6:da:5a:c1:3b:9e:cc:36:5f:f1:b5:48:83:de:d6:56: 74:6f:d4:4f:07:95:d0:0a:0c:85:96:49:53:66:1d:c4:f7:80: 9f:0c:cc:6a:19:18:dc:f8:20:9c:a9:7f:f6:19:65:4d:e6:ed: 42:6b:42:36:81:8e:b9:50:3c:7e:9c:34:84:a8:d9:55:46:39: 90:4c:e3:e0:e7:cd:18:2b:f2:de:2c:87:84:dd:4a:19:c6:04: 9d:73:a0:4c:9d:cf:e9:d9:4e:cc:b8:d1:77:14:ff:eb:23:66: c8:e9:02:12:93:19:df:b4:c4:e7:7c:10:0e:2e:15:18:43:06: f5:69:d4:a6:60:5a:44:16:b3:61:6c:e9:16:15:0c:2b:7d:1f: ea:e3:ac:77:a5:b1:fd:94:cc:b6:a0:0f:c1:55:89:42:81:87: 1b:ad:22:d2:75:98:bd:fa:60:c1:8e:0f:30:0a:10:b9:66:c7: 97:7a:3a:97:17:f8:d2:ff:d4:a8:82:00:08:9b:eb:1c:5f:26: aa:ce:9d:59:bb:75:f3:97:b0:20:2a:5b:04:ba:b8:60:f4:62: 92:ec:73:63:c1:5b:a0:88:ba:ae:09:91:ca:75:8c:5b:77:f8: 3f:af:db:a2:2e:f8:f3:06:b7:78:24:58:eb:b2:38:ce:81:72: cb:14:e6:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbDcxJyqpBFhESvEKhidLncmLZe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYyNUE1RTE2NThFRTRCMzc5M0FCQUMwMTkyNEEzM0U1 N0MzRkMyMTAeFw0yNTA1MTEwNDE2MzFaFw0yNTA1MTIwODEwMzFaMDMxMTAvBgNV BAMTKDI3OTUwNTNDNDY2MzM1NTcwMjUzNTExOEE4RkI0QkRGM0I0OTI5NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+2tWnP4SREx2kl+zAzZgOcwBf 4OS+fjjkFG/5+CfoBNBCrEQynic7rD8YZLpJ7EzN3J7qolYZmxGXHEdWPqdQg/op 3dFoEc5xPW/S1UWghlHQFaxVsuC3+q9Qh4V4NUWDRjwDan8urIcxJTwuL3nKkWed TC801jM6qZkoawge9S6BPIx6VIGvcojXsGX2ptmx86Kpsh1+O1UNiLKxZOPkcYNy R/OZfps7u4EO9YnZv5ZyQG6PvcqfbYVNjPnlEMv99YMPh0xqEAAFlrzjFdlC9Jxi T59I5hYtGaK4t0AbG5LG+upw6UrmmL9gFJul1p2LelE94jwdCYQYLR5YnLk3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJ5UFPEZjNVcCU1EYqPtL3ztJKVAwHwYDVR0j BBgwFoAUNiWl4WWO5LN5OrrAGSSjPlfD/CEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFO UFcvMS8zNjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2MjVBNUUxNjU4RUU0QjM3 OTNBQkFDMDE5MjRBMzNFNTdDM0ZDMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFOUFcvMS8z NjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHYD22lrBO57MNl/xtUiD3tZWdG/UTweV0AoMhZZJU2YdxPeAnwzMahkY3Pgg nKl/9hllTebtQmtCNoGOuVA8fpw0hKjZVUY5kEzj4OfNGCvy3iyHhN1KGcYEnXOg TJ3P6dlOzLjRdxT/6yNmyOkCEpMZ37TE53wQDi4VGEMG9WnUpmBaRBazYWzpFhUM K30f6uOsd6Wx/ZTMtqAPwVWJQoGHG60i0nWYvfpgwY4PMAoQuWbHl3o6lxf40v/U qIIACJvrHF8mqs6dWbt185ewICpbBLq4YPRikuxzY8FboIi6rgmRynWMW3f4P6/b oi748wa3eCRY67I4zoFyyxTmxQ== -----END CERTIFICATE-----Generated at Sun May 11 16:52:53 2025 by rpki-client