$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft File: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft (raw, json) Hash identifier: pbpGRqBoadkbcHXg5W9SVNtqib0656lpfPiueoTlYes= Subject key identifier: BD:7F:24:C9:02:0A:54:EA:30:C1:FB:2D:35:1D:5B:45:D3:77:DD:67 Authority key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 Certificate issuer: /CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Certificate serial: 52F63E61269BB7D4F79574A1B6F71CD189A566D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject info access: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft Manifest number: 9F Signing time: Wed 02 Jul 2025 06:11:57 +0000 Manifest this update: Wed 02 Jul 2025 06:06:57 +0000 Manifest next update: Thu 03 Jul 2025 07:23:57 +0000 Files and hashes: 1: 323830343a6335383a3a2f33322d313238203d3e203532363934.roa (hash: 9O2EZ1ZOA5SxIxzwzkyeRpvslbdGVqnJeJ0v8OoeGGs=) 2: 3137372e37332e33362e302f32322d3332203d3e203532363934.roa (hash: OGK41uRpAQwllRubLCRfh+WKpYG39IFoFH08wloP1PA=) 3: 3230302e362e3132382e302f32322d3332203d3e203532363934.roa (hash: cmMBAa8apGKZWHWfvXo7rXbYWd2EI5yW46+IKqeCJjo=) 4: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl (hash: veS7AsP6nh9hCmn4BsdTh9VRmSEXwMnzwOCcPykOl48=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 07:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:f6:3e:61:26:9b:b7:d4:f7:95:74:a1:b6:f7:1c:d1:89:a5:66:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Validity Not Before: Jul 2 06:06:57 2025 GMT Not After : Jul 3 07:23:57 2025 GMT Subject: CN=BD7F24C9020A54EA30C1FB2D351D5B45D377DD67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:95:42:58:f4:13:36:bc:74:df:72:d0:2a:10: 8a:12:e2:7b:c1:a2:51:31:98:c5:f5:65:12:97:1a: 38:cf:e8:7c:22:77:b3:ea:2d:13:a3:e4:ee:26:cd: b1:6c:df:19:5d:c4:d5:73:14:2f:4c:05:fe:21:3a: 80:03:42:f9:07:12:63:b4:d5:14:8b:d0:4f:e9:43: f7:59:dd:2c:20:46:75:6b:2c:df:f3:8e:5f:85:ac: 10:76:df:1e:a6:4f:60:c0:7a:dc:b6:c3:cd:57:a7: a1:11:39:66:27:21:93:29:85:93:5e:e9:f0:d7:30: e3:6e:51:a4:0b:ae:f5:d4:e4:84:09:e7:3f:09:05: c0:9b:42:ff:48:19:58:31:e0:3c:52:c7:ec:86:d2: b3:7d:46:e3:73:ff:ae:ec:05:ad:38:19:2b:1e:ec: 98:f9:ab:70:9e:07:1d:6f:56:c5:a5:87:7b:1b:f1: af:c6:58:e3:cb:f5:28:65:52:6a:fd:0a:b8:86:3b: b0:70:90:82:6b:99:3b:99:23:e8:f9:4b:9e:50:d0: 57:96:fa:e7:1e:3c:b6:9f:1e:af:92:d2:e3:f5:63: 0b:16:b4:a9:3d:26:d1:70:33:f8:36:91:d4:60:1b: df:0b:cb:18:f5:b8:16:94:8f:55:39:5d:39:65:ad: 7c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7F:24:C9:02:0A:54:EA:30:C1:FB:2D:35:1D:5B:45:D3:77:DD:67 X509v3 Authority Key Identifier: keyid:3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:53:db:62:fd:44:ec:01:5e:57:21:f3:8b:91:7c:75:2b:e2: e8:05:01:26:17:5d:38:39:c6:bf:45:c8:d8:20:fd:39:5d:68: 18:c5:af:7f:85:0b:91:39:e4:54:0c:a7:58:a3:27:bb:b7:9f: c5:08:fb:d2:89:47:e4:1a:c7:2b:39:37:00:12:8f:a2:d5:21: 97:5a:99:fd:9c:05:fd:d6:a2:15:6f:d0:6a:ec:0f:30:83:21: 3b:c0:48:de:10:c7:09:ed:d4:32:e7:34:6e:6d:ff:a9:88:f8: 94:0e:33:42:19:59:d7:30:39:0b:f0:2e:ce:41:a6:d5:e6:44: d1:f5:23:87:f4:6f:5f:24:37:1f:8c:e7:7a:18:4a:df:51:a7: a8:a1:14:e6:f5:71:20:0b:44:80:9a:1f:aa:e3:4f:60:0a:7a: 3c:de:37:d0:90:1c:e3:26:92:b0:f0:3b:91:92:d7:ec:f7:74: 67:62:f1:a0:e3:86:63:15:65:9e:9a:66:9c:9e:11:0a:5b:09: 01:e3:6d:86:6c:87:bc:10:88:55:48:95:b6:b2:ad:a6:5b:90: 5e:41:2e:ed:f5:11:05:82:54:5b:3f:ba:8a:a1:a9:c7:ee:c7: 30:a3:fc:e1:d4:34:4e:c0:f5:86:2b:af:93:3e:65:d2:38:30: b7:ef:b3:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUvY+YSabt9T3lXShtvcc0YmlZtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RBRjFDQTQ4NjMzRDQyRjM4OTU1QzQ3QzhCQTBGQURB NzNENzAwNzAeFw0yNTA3MDIwNjA2NTdaFw0yNTA3MDMwNzIzNTdaMDMxMTAvBgNV BAMTKEJEN0YyNEM5MDIwQTU0RUEzMEMxRkIyRDM1MUQ1QjQ1RDM3N0RENjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDClUJY9BM2vHTfctAqEIoS4nvB olExmMX1ZRKXGjjP6Hwid7PqLROj5O4mzbFs3xldxNVzFC9MBf4hOoADQvkHEmO0 1RSL0E/pQ/dZ3SwgRnVrLN/zjl+FrBB23x6mT2DAety2w81Xp6EROWYnIZMphZNe 6fDXMONuUaQLrvXU5IQJ5z8JBcCbQv9IGVgx4DxSx+yG0rN9RuNz/67sBa04GSse 7Jj5q3CeBx1vVsWlh3sb8a/GWOPL9ShlUmr9CriGO7BwkIJrmTuZI+j5S55Q0FeW +ucePLafHq+S0uP1YwsWtKk9JtFwM/g2kdRgG98Lyxj1uBaUj1U5XTllrXzTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvX8kyQIKVOowwfstNR1bRdN33WcwHwYDVR0j BBgwFoAUPa8cpIYz1C84lVxHyLoPrac9cAcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3 cGQvMC8zREFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEQUYxQ0E0ODYzM0Q0MkYz ODk1NUM0N0M4QkEwRkFEQTczRDcwMDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3cGQvMC8z REFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkVPbYv1E7AFeVyHzi5F8dSvi6AUBJhddODnGv0XI2CD9OV1oGMWvf4ULkTnk VAynWKMnu7efxQj70olH5BrHKzk3ABKPotUhl1qZ/ZwF/daiFW/QauwPMIMhO8BI 3hDHCe3UMuc0bm3/qYj4lA4zQhlZ1zA5C/AuzkGm1eZE0fUjh/RvXyQ3H4znehhK 31GnqKEU5vVxIAtEgJofquNPYAp6PN430JAc4yaSsPA7kZLX7Pd0Z2LxoOOGYxVl nppmnJ4RClsJAeNthmyHvBCIVUiVtrKtpluQXkEu7fURBYJUWz+6iqGpx+7HMKP8 4dQ0TsD1hiuvkz5l0jgwt++z3Q== -----END CERTIFICATE-----Generated at Wed Jul 2 16:16:36 2025 by rpki-client