$ rpki-client -vvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft File: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft (raw, json) Hash identifier: dC9nHgPvjmcs7NCK0l9FU3HAdzavd1V23RWduQEzeos= Subject key identifier: A2:4A:52:F6:11:20:48:AD:27:DA:A1:61:73:09:12:55:2C:D9:B4:6E Authority key identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 Certificate issuer: /CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Certificate serial: 24A92E192A7C02385353239B47D11B662A069A16 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer Subject info access: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft Manifest number: 02A5 Signing time: Sat 23 Aug 2025 09:57:31 +0000 Manifest this update: Sat 23 Aug 2025 09:52:31 +0000 Manifest next update: Sun 24 Aug 2025 11:53:31 +0000 Files and hashes: 1: 323830343a386563383a3a2f33322d3438203d3e203631363136.roa (hash: lyXwR8szxK6wAklIFmsSWrdvlecUEfLPCwBeu/gOa+0=) 2: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl (hash: qo3dLNXksXvGFvLndkGsbEfUMpmqJPgbdrMq8MtkqJw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 11:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a9:2e:19:2a:7c:02:38:53:53:23:9b:47:d1:1b:66:2a:06:9a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Validity Not Before: Aug 23 09:52:31 2025 GMT Not After : Aug 24 11:53:31 2025 GMT Subject: CN=A24A52F6112048AD27DAA161730912552CD9B46E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f1:69:d4:64:1a:00:22:f7:19:a8:61:c8:2c: 86:4a:b1:4a:9d:b0:ba:e7:3f:23:ca:3b:24:e4:7c: 9a:37:a1:37:b5:a2:49:ab:64:62:1e:29:52:50:8c: fb:99:81:7d:17:0c:50:e3:ac:bf:41:e5:be:c4:60: f3:87:eb:61:f3:20:d0:1c:b3:a0:e1:05:2a:53:8a: 2d:85:85:b7:fb:9d:b9:e1:2e:e0:ea:da:78:5e:57: 77:17:92:f9:72:e5:24:50:6e:fc:da:86:e4:e4:a2: 91:90:a4:17:a8:aa:a6:7b:18:ce:7b:79:e6:d0:1e: 97:78:6c:21:c8:63:ff:b0:38:6b:66:b7:c9:af:c0: fb:3f:38:fa:f2:bd:c6:e1:45:54:00:89:24:fa:51: 8b:cd:c6:93:d7:ba:0b:2b:23:0b:59:0f:21:19:e8: ed:0e:eb:79:9d:d9:34:5a:47:a8:73:68:e0:95:bb: dd:56:fb:53:2d:47:12:e2:3d:ad:c9:e4:5f:dc:90: eb:af:96:f0:43:49:45:6f:d5:a4:d5:f0:dc:86:95: 6e:c2:f6:89:f0:38:a2:ad:9e:c8:ba:bf:86:af:fc: ba:5b:b1:54:bb:c0:c7:22:60:9c:7c:d6:67:38:48: 58:55:85:87:38:f1:32:c1:dd:d1:ce:e2:ee:c8:f5: a1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4A:52:F6:11:20:48:AD:27:DA:A1:61:73:09:12:55:2C:D9:B4:6E X509v3 Authority Key Identifier: keyid:36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:20:58:43:df:2c:15:26:6a:11:36:f2:27:0f:36:b3:e4:65: 61:9b:f8:27:ef:4f:f3:a1:64:19:fd:85:d9:d6:87:e3:7d:05: 3e:4c:94:d9:39:9d:5d:eb:7b:f7:84:3e:16:06:0e:83:34:e3: c6:17:8d:dc:b7:06:a0:2b:22:91:15:b2:77:8a:6c:0e:33:09: b0:24:44:f7:81:62:6d:41:5b:23:f3:e2:0f:58:b1:6b:43:a4: 49:2f:42:6f:48:f5:33:de:d6:4c:fb:76:59:6e:2a:94:47:0b: 7c:66:b5:4c:81:87:07:a5:28:9b:70:c8:17:a9:e3:67:43:39: 9b:15:c2:a8:ce:c3:57:e0:4c:d0:10:e5:b0:a0:b3:06:8c:0b: da:4c:7a:c8:fc:48:f5:ec:4b:7a:ed:3a:23:55:6a:74:ec:aa: 58:eb:54:0c:a2:58:95:3e:ec:09:0e:1a:62:21:73:07:77:d9: 2f:f4:be:68:86:2c:3f:b8:ef:9d:83:f7:59:58:04:aa:2e:2c: 4b:04:4a:02:d5:ba:56:f6:59:60:78:6d:5d:01:dc:f5:bf:18: 65:60:68:14:aa:ef:cc:fe:40:9f:bd:75:86:5f:14:9c:17:d3: 0a:1b:f4:1f:11:16:88:b9:1a:c6:15:6b:d5:ee:c9:0a:60:bd: f9:2c:4b:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJKkuGSp8AjhTUyObR9EbZioGmhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYyNUE1RTE2NThFRTRCMzc5M0FCQUMwMTkyNEEzM0U1 N0MzRkMyMTAeFw0yNTA4MjMwOTUyMzFaFw0yNTA4MjQxMTUzMzFaMDMxMTAvBgNV BAMTKEEyNEE1MkY2MTEyMDQ4QUQyN0RBQTE2MTczMDkxMjU1MkNEOUI0NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8WnUZBoAIvcZqGHILIZKsUqd sLrnPyPKOyTkfJo3oTe1okmrZGIeKVJQjPuZgX0XDFDjrL9B5b7EYPOH62HzINAc s6DhBSpTii2Fhbf7nbnhLuDq2nheV3cXkvly5SRQbvzahuTkopGQpBeoqqZ7GM57 eebQHpd4bCHIY/+wOGtmt8mvwPs/OPryvcbhRVQAiST6UYvNxpPXugsrIwtZDyEZ 6O0O63md2TRaR6hzaOCVu91W+1MtRxLiPa3J5F/ckOuvlvBDSUVv1aTV8NyGlW7C 9onwOKKtnsi6v4av/LpbsVS7wMciYJx81mc4SFhVhYc48TLB3dHO4u7I9aFXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUokpS9hEgSK0n2qFhcwkSVSzZtG4wHwYDVR0j BBgwFoAUNiWl4WWO5LN5OrrAGSSjPlfD/CEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFO UFcvMS8zNjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2MjVBNUUxNjU4RUU0QjM3 OTNBQkFDMDE5MjRBMzNFNTdDM0ZDMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFOUFcvMS8z NjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1iBYQ98sFSZqETbyJw82s+RlYZv4J+9P86FkGf2F2daH430FPkyU2TmdXet7 94Q+FgYOgzTjxheN3LcGoCsikRWyd4psDjMJsCRE94FibUFbI/PiD1ixa0OkSS9C b0j1M97WTPt2WW4qlEcLfGa1TIGHB6Uom3DIF6njZ0M5mxXCqM7DV+BM0BDlsKCz BowL2kx6yPxI9exLeu06I1VqdOyqWOtUDKJYlT7sCQ4aYiFzB3fZL/S+aIYsP7jv nYP3WVgEqi4sSwRKAtW6VvZZYHhtXQHc9b8YZWBoFKrvzP5An711hl8UnBfTChv0 HxEWiLkaxhVr1e7JCmC9+SxLCQ== -----END CERTIFICATE-----Generated at Sat Aug 23 12:34:24 2025 by rpki-client