$ rpki-client -vvf rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft File: 3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft (raw, json) Hash identifier: lQuj9gFl1D4AfjFyjRoaC9kUjT7MBhwuwQ711vkw37A= Subject key identifier: A5:9C:A1:CC:6B:5D:41:13:46:52:F7:C6:77:5F:18:CC:96:04:FA:56 Authority key identifier: 30:87:C3:71:0F:B1:C5:ED:2A:38:12:24:F1:E8:1B:AC:39:DA:7F:CE Certificate issuer: /CN=3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE Certificate serial: 44F0D67DDA69B1AAD43F9A3B2D7B8CB786A32369 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer Subject info access: rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft Manifest number: 0295 Signing time: Mon 11 Aug 2025 02:50:36 +0000 Manifest this update: Mon 11 Aug 2025 02:45:36 +0000 Manifest next update: Tue 12 Aug 2025 05:11:36 +0000 Files and hashes: 1: 3136382e3230352e37362e302f32322d3234203d3e20323635333535.roa (hash: 8d7fb9ij+PooSWUf38BeSaVdGp1TOm0K0uvvCP+F8NI=) 2: 323830343a326539633a3a2f33322d3438203d3e20323635333535.roa (hash: OGY/LrMrlfQKwjbab8G09HMM8TnKgSFSf9D0yjKBpNA=) 3: 3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.crl (hash: Ife0tVKBKQPug2GkGwhxDbbeq9DtoHwpzD05x9vZCrg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.crl rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 12 Aug 2025 04:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f0:d6:7d:da:69:b1:aa:d4:3f:9a:3b:2d:7b:8c:b7:86:a3:23:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE Validity Not Before: Aug 11 02:45:36 2025 GMT Not After : Aug 12 05:11:36 2025 GMT Subject: CN=A59CA1CC6B5D41134652F7C6775F18CC9604FA56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c3:d9:72:3b:39:9f:14:25:21:da:4b:d0:28: e3:97:32:dc:32:1c:cd:13:c6:42:ac:49:33:50:d5: 4c:f3:4a:9a:01:ed:2c:45:20:03:7a:9f:1b:58:8f: 1e:90:fc:f8:8d:87:bb:11:a0:d3:ef:69:6e:e9:3a: d6:7b:0e:a3:62:28:2e:de:db:a1:1f:6a:ca:cd:b7: 50:9b:ba:0f:e8:60:60:1e:76:f4:3a:31:bb:7c:a9: 08:6e:58:a6:35:d1:79:56:79:f4:c2:42:d9:2b:c4: 24:1d:b9:3c:1f:eb:46:7c:39:b5:8b:98:f9:b0:3c: dc:17:0e:de:0a:a0:e5:c9:99:29:06:f9:82:3d:3f: 1e:88:44:0f:11:c6:fb:d3:61:8f:3d:91:13:8a:2b: ca:91:50:92:1d:a7:7d:de:17:17:7b:fc:1f:0b:56: 0e:95:fe:1c:0b:1b:cf:19:29:f9:17:fc:7c:12:54: 3c:a0:76:99:41:58:dc:ef:65:02:f8:21:ba:42:57: da:95:50:64:c9:be:3a:36:6c:fa:c3:26:1a:77:ab: 51:e2:ee:62:cb:a6:39:22:30:87:f7:20:55:81:99: a8:d0:4f:6a:24:c1:b8:b8:4b:0a:6b:60:7b:d0:28: 8e:cb:b2:8d:48:46:b6:b7:8b:16:74:b8:b7:bf:0e: 64:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9C:A1:CC:6B:5D:41:13:46:52:F7:C6:77:5F:18:CC:96:04:FA:56 X509v3 Authority Key Identifier: keyid:30:87:C3:71:0F:B1:C5:ED:2A:38:12:24:F1:E8:1B:AC:39:DA:7F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BvgVLsf1qVRyeqgSYekiacdg9YE4nHTCbsxwWsuofi3/1/3087C3710FB1C5ED2A381224F1E81BAC39DA7FCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:bd:03:33:9c:a4:41:74:49:e1:02:53:79:8b:1e:9f:5a:f9: d2:6e:84:5b:b5:79:7b:83:ad:cf:3a:56:75:cf:c4:b6:7c:18: b8:0e:ca:52:3a:d5:29:ae:66:12:b3:e0:21:98:26:2e:25:03: 96:c6:3a:53:86:b1:b4:70:b3:e4:18:9e:ca:33:42:44:d6:bc: 78:d6:65:4a:11:c3:00:fc:b3:da:76:38:07:9d:c4:21:ba:9e: c4:8d:f6:07:6a:85:56:e1:8e:f2:04:1b:14:33:d4:a5:68:71: 94:20:0f:d3:13:b1:25:53:6b:96:93:d1:56:24:83:58:fe:85: af:c3:82:34:bf:60:38:a0:af:33:96:bb:57:31:f9:b5:52:df: 7a:67:8f:a4:80:e5:3e:75:5c:83:f8:7e:98:ab:bf:c8:9d:cb: a9:26:63:5d:74:a1:6a:9a:60:89:da:0b:c5:d5:a7:89:f1:6c: 38:81:18:fd:74:7f:0d:78:fd:ec:1b:b2:d6:59:bb:49:9d:22: cd:4d:95:17:85:88:0d:2f:db:74:bd:ad:57:f3:82:29:0d:91: 58:a2:2e:75:9d:70:42:97:06:c4:0d:5f:2d:61:bc:8c:dc:4e: c0:81:e9:c6:ca:8e:c3:31:16:14:05:52:a3:80:6b:fe:6f:1a: 44:62:8e:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURPDWfdppsarUP5o7LXuMt4ajI2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4N0MzNzEwRkIxQzVFRDJBMzgxMjI0RjFFODFCQUMz OURBN0ZDRTAeFw0yNTA4MTEwMjQ1MzZaFw0yNTA4MTIwNTExMzZaMDMxMTAvBgNV BAMTKEE1OUNBMUNDNkI1RDQxMTM0NjUyRjdDNjc3NUYxOENDOTYwNEZBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqw9lyOzmfFCUh2kvQKOOXMtwy HM0TxkKsSTNQ1UzzSpoB7SxFIAN6nxtYjx6Q/PiNh7sRoNPvaW7pOtZ7DqNiKC7e 26EfasrNt1Cbug/oYGAedvQ6Mbt8qQhuWKY10XlWefTCQtkrxCQduTwf60Z8ObWL mPmwPNwXDt4KoOXJmSkG+YI9Px6IRA8RxvvTYY89kROKK8qRUJIdp33eFxd7/B8L Vg6V/hwLG88ZKfkX/HwSVDygdplBWNzvZQL4IbpCV9qVUGTJvjo2bPrDJhp3q1Hi 7mLLpjkiMIf3IFWBmajQT2okwbi4SwprYHvQKI7Lso1IRra3ixZ0uLe/DmTtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpZyhzGtdQRNGUvfGd18YzJYE+lYwHwYDVR0j BBgwFoAUMIfDcQ+xxe0qOBIk8egbrDnaf84wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkJ2Z1ZMc2YxcVZSeWVxZ1NZZWtpYWNkZzlZRTRuSFRDYnN4d1dzdW9m aTMvMS8zMDg3QzM3MTBGQjFDNUVEMkEzODEyMjRGMUU4MUJBQzM5REE3RkNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwODdDMzcxMEZCMUM1RUQy QTM4MTIyNEYxRTgxQkFDMzlEQTdGQ0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkJ2Z1ZMc2YxcVZSeWVxZ1NZZWtpYWNkZzlZRTRuSFRDYnN4d1dzdW9maTMvMS8z MDg3QzM3MTBGQjFDNUVEMkEzODEyMjRGMUU4MUJBQzM5REE3RkNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYL0DM5ykQXRJ4QJTeYsen1r50m6EW7V5e4OtzzpWdc/EtnwYuA7KUjrVKa5m ErPgIZgmLiUDlsY6U4axtHCz5BieyjNCRNa8eNZlShHDAPyz2nY4B53EIbqexI32 B2qFVuGO8gQbFDPUpWhxlCAP0xOxJVNrlpPRViSDWP6Fr8OCNL9gOKCvM5a7VzH5 tVLfemePpIDlPnVcg/h+mKu/yJ3LqSZjXXShappgidoLxdWnifFsOIEY/XR/DXj9 7Buy1lm7SZ0izU2VF4WIDS/bdL2tV/OCKQ2RWKIudZ1wQpcGxA1fLWG8jNxOwIHp xsqOwzEWFAVSo4Br/m8aRGKOsQ== -----END CERTIFICATE-----Generated at Mon Aug 11 04:23:55 2025 by rpki-client