$ rpki-client -vvf rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft File: 3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft (raw, json) Hash identifier: 3t8mg2K7/hKh7LLcB9EQXiGk5w4BJ6+jCVKaX1Cx0mo= Subject key identifier: 9B:8E:32:6A:A0:F2:A8:42:18:59:E4:D1:34:81:06:32:D7:0F:78:D5 Authority key identifier: 3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8 Certificate issuer: /CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8 Certificate serial: 26E42CF12BF2F16FA0C756E0C3778ABFB9CE5E1F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft Manifest number: CA Signing time: Mon 30 Jun 2025 21:02:22 +0000 Manifest this update: Mon 30 Jun 2025 20:57:22 +0000 Manifest next update: Tue 01 Jul 2025 23:21:22 +0000 Files and hashes: 1: 3137302e3233312e3135362e302f32322d3332203d3e20323635303632.roa (hash: SeYU5404iSokv/Gz5rw5RNitLBwfn0VjE4GkNS2MnrE=) 2: 3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl (hash: X4jC4HVN7ZRAVDhUJRWth6r729lPzvKWdTrDjlX6/zU=) 3: 323830343a333233343a3a2f33322d313238203d3e20323635303632.roa (hash: tbkH5yeZvuDlAXrYeHvJYz6TwGXhqVtSN5MEPVbKHTU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 23:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e4:2c:f1:2b:f2:f1:6f:a0:c7:56:e0:c3:77:8a:bf:b9:ce:5e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8 Validity Not Before: Jun 30 20:57:22 2025 GMT Not After : Jul 1 23:21:22 2025 GMT Subject: CN=9B8E326AA0F2A8421859E4D134810632D70F78D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e0:2d:a1:0b:d2:2e:b0:8f:df:8d:a8:fb:1e: 72:55:07:d3:c0:d2:7a:c1:ab:be:04:ec:4e:32:fd: f2:d3:42:ca:2d:37:e6:bc:33:87:52:55:f4:bb:45: 83:59:b7:6e:e6:6a:12:47:1f:2c:f2:7e:86:58:0a: 55:74:77:9b:24:87:5e:9c:d8:70:dc:28:31:c6:13: 55:63:c4:57:46:d0:cc:c7:0c:5d:af:47:39:91:fa: 99:8c:89:a8:fc:d6:cc:fb:c3:0e:0a:11:3d:c4:85: 81:2d:3e:fd:a1:2e:a8:fe:ff:0f:f8:6f:25:7c:bd: 76:bc:42:56:8c:9d:78:79:06:80:c3:61:47:c2:71: d0:8c:d3:90:16:b8:d7:cf:ce:4f:b1:0e:af:95:38: 08:d9:01:91:0a:57:ae:94:3d:a7:7c:f1:7b:52:bb: ee:b4:e2:5a:93:03:bb:14:88:71:29:78:1f:a9:ca: b6:9e:b1:94:45:ad:49:df:33:70:74:9c:c5:1e:cd: 86:57:f3:da:40:78:f2:46:92:75:5e:d0:09:94:ed: af:cd:cc:3f:79:45:f8:d6:9c:66:5c:16:f8:da:69: 25:4c:c8:77:c1:01:d6:c3:4e:ed:87:d8:9b:00:8b: d5:a9:b4:58:a0:a8:df:bb:b2:25:03:89:40:87:01: e7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8E:32:6A:A0:F2:A8:42:18:59:E4:D1:34:81:06:32:D7:0F:78:D5 X509v3 Authority Key Identifier: keyid:3F:B5:A4:D9:E6:7E:9A:59:FC:56:42:B0:23:C3:E2:E0:2B:0C:91:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJAfCT98P6kREumuVRWcfuE1QzGACGLHCCLQty1rqpZ4/0/3FB5A4D9E67E9A59FC5642B023C3E2E02B0C91C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:63:7f:23:8a:f5:0b:6d:a9:53:bb:32:40:6c:7a:6d:f7:59: 2c:66:45:4f:72:1d:f9:eb:ce:d7:2f:24:6b:c9:45:d5:78:b7: 6c:da:09:1b:4a:2b:b0:3b:de:54:e3:fd:34:55:2c:48:14:f7: d4:1f:71:48:94:c1:03:1c:0c:a9:ef:e1:67:b8:0a:1e:59:a2: bc:74:b8:8d:a8:2b:a0:48:f3:ad:29:ef:32:b2:dd:d1:02:a9: 5a:e3:26:b9:2e:5e:bf:09:cc:13:4c:ef:00:31:7e:03:75:86: 2e:68:f4:3e:37:cd:09:ce:57:80:65:27:e8:b4:d3:f5:13:9c: d6:cc:be:ed:2f:6b:49:e4:30:d1:f4:0c:9b:ae:b4:60:9c:31: 40:92:e6:62:86:cd:9b:ee:4e:7d:e9:28:97:1b:7a:c2:f9:88: fe:af:03:f9:b0:10:39:9e:d5:f7:8e:60:a9:b5:af:0a:42:77: e7:12:d5:90:63:33:3e:0e:d1:77:49:de:7f:26:93:c5:14:44: 3d:3b:bb:b1:1d:eb:dc:15:3b:b3:52:b2:af:90:ad:eb:fa:54: 96:02:b9:2e:b1:6e:19:33:fe:13:f7:6c:6b:de:ae:df:31:fb: 82:b5:a2:cf:bb:60:bc:1a:b7:32:0e:a6:15:4e:12:cb:dd:8f: 22:99:30:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJuQs8Svy8W+gx1bgw3eKv7nOXh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCNUE0RDlFNjdFOUE1OUZDNTY0MkIwMjNDM0UyRTAy QjBDOTFDODAeFw0yNTA2MzAyMDU3MjJaFw0yNTA3MDEyMzIxMjJaMDMxMTAvBgNV BAMTKDlCOEUzMjZBQTBGMkE4NDIxODU5RTREMTM0ODEwNjMyRDcwRjc4RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR4C2hC9IusI/fjaj7HnJVB9PA 0nrBq74E7E4y/fLTQsotN+a8M4dSVfS7RYNZt27mahJHHyzyfoZYClV0d5skh16c 2HDcKDHGE1VjxFdG0MzHDF2vRzmR+pmMiaj81sz7ww4KET3EhYEtPv2hLqj+/w/4 byV8vXa8QlaMnXh5BoDDYUfCcdCM05AWuNfPzk+xDq+VOAjZAZEKV66UPad88XtS u+604lqTA7sUiHEpeB+pyraesZRFrUnfM3B0nMUezYZX89pAePJGknVe0AmU7a/N zD95RfjWnGZcFvjaaSVMyHfBAdbDTu2H2JsAi9WptFigqN+7siUDiUCHAedRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUm44yaqDyqEIYWeTRNIEGMtcPeNUwHwYDVR0j BBgwFoAUP7Wk2eZ+mln8VkKwI8Pi4CsMkcgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFw WjQvMC8zRkI1QTREOUU2N0U5QTU5RkM1NjQyQjAyM0MzRTJFMDJCMEM5MUM4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQjVBNEQ5RTY3RTlBNTlG QzU2NDJCMDIzQzNFMkUwMkIwQzkxQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0pBZkNUOThQNmtSRXVtdVZSV2NmdUUxUXpHQUNHTEhDQ0xRdHkxcnFwWjQvMC8z RkI1QTREOUU2N0U5QTU5RkM1NjQyQjAyM0MzRTJFMDJCMEM5MUM4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwGN/I4r1C22pU7syQGx6bfdZLGZFT3Id+evO1y8ka8lF1Xi3bNoJG0orsDve VOP9NFUsSBT31B9xSJTBAxwMqe/hZ7gKHlmivHS4jagroEjzrSnvMrLd0QKpWuMm uS5evwnME0zvADF+A3WGLmj0PjfNCc5XgGUn6LTT9ROc1sy+7S9rSeQw0fQMm660 YJwxQJLmYobNm+5Ofekolxt6wvmI/q8D+bAQOZ7V945gqbWvCkJ35xLVkGMzPg7R d0nefyaTxRREPTu7sR3r3BU7s1Kyr5Ct6/pUlgK5LrFuGTP+E/dsa96u3zH7grWi z7tgvBq3Mg6mFU4Sy92PIpkwcQ== -----END CERTIFICATE-----Generated at Tue Jul 1 14:01:17 2025 by rpki-client