$ rpki-client -vvf rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft File: 3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft (raw, json) Hash identifier: tnKRkUQ6p7+1WJwzCV61ZSYgEwL9tXuW3jiinSZYWLw= Subject key identifier: 2C:62:57:66:42:ED:0F:58:56:70:31:EC:65:28:C9:1D:E8:C0:7D:1C Authority key identifier: 3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41 Certificate issuer: /CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41 Certificate serial: 3D9DE907916CC32F22707E895C49D6C484AA3592 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer Subject info access: rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft Manifest number: AC Signing time: Fri 08 Aug 2025 09:38:20 +0000 Manifest this update: Fri 08 Aug 2025 09:33:20 +0000 Manifest next update: Sat 09 Aug 2025 12:16:20 +0000 Files and hashes: 1: 3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl (hash: vq+5nbDls9ybLPDJdoJWC+ePkaKO+VSA6U9Ur6N5td0=) 2: 323830343a383136633a3a2f33322d3333203d3e20323732343533.roa (hash: km/ah8tdGnSbAEE8eMAVgMkElj1zG/cbsgnk+5b2q5E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 12:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:9d:e9:07:91:6c:c3:2f:22:70:7e:89:5c:49:d6:c4:84:aa:35:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41 Validity Not Before: Aug 8 09:33:20 2025 GMT Not After : Aug 9 12:16:20 2025 GMT Subject: CN=2C62576642ED0F58567031EC6528C91DE8C07D1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:89:8e:6f:d7:df:93:84:26:96:f8:f8:6a:fb: bb:c9:6a:6c:11:71:01:0e:07:04:25:55:46:66:96: dc:0e:30:35:d8:ec:91:5c:4d:db:1f:7a:0c:a2:07: e7:27:83:0b:34:30:4f:66:e9:ad:ba:b4:eb:83:f9: 0a:93:df:aa:07:7d:69:c7:5e:df:65:6e:b7:96:f7: 7e:a7:e6:b6:9c:c8:37:0c:e7:3a:34:47:50:dd:a5: d0:f3:68:a7:95:b3:0b:86:5f:e1:5d:a6:a2:e1:d4: d9:8c:2e:f7:00:5e:7b:54:e6:c2:62:c9:6b:17:a7: 01:f3:7e:43:be:d6:7d:8c:9d:bb:5b:4c:d6:78:04: 6d:3a:fd:7c:b6:b2:d3:cd:05:a8:82:09:3b:45:db: 38:2f:17:1d:de:e8:fb:ac:a8:18:8b:3b:70:32:80: 92:e7:fa:5c:c0:3b:ec:0d:fc:64:d6:dd:d9:02:00: 1b:40:c5:35:5a:36:6a:4d:4d:51:9d:07:76:0a:69: 56:98:64:cb:bb:1d:82:c6:23:51:10:9e:83:7a:74: 46:21:6e:04:d8:47:b5:81:ba:19:43:c1:40:88:6c: b6:06:54:38:da:95:51:a9:32:b9:4a:d3:9c:9c:51: 14:84:ba:6f:4d:2b:8d:ba:92:00:a3:a4:0c:bd:91: ee:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:62:57:66:42:ED:0F:58:56:70:31:EC:65:28:C9:1D:E8:C0:7D:1C X509v3 Authority Key Identifier: keyid:3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:49:f5:8e:28:fa:e8:6c:c2:55:90:b9:a5:1c:b8:1d:c7:df: 86:67:03:b4:98:99:11:9f:ec:d0:8b:b5:08:d0:6f:c5:44:bf: 79:1b:80:21:cc:4c:5f:2c:97:a0:dd:89:c0:75:89:a8:06:9f: 1c:7b:82:44:57:21:db:0b:26:13:fc:87:5a:e3:dc:ba:24:88: 61:24:ee:e6:fb:93:20:f7:8b:43:78:56:76:b4:3f:37:37:64: 97:9d:14:85:1f:c3:6d:d1:fa:f4:a1:0f:95:02:13:ce:06:40: 31:23:f8:d4:35:51:1b:ee:53:62:29:1d:04:57:b2:a0:78:f9: 6d:31:70:5d:4a:e6:53:59:22:95:a2:e1:b1:36:84:c0:5a:ab: 4d:ae:cb:92:f1:7f:67:e4:75:0d:7b:17:c8:c5:5b:cf:dd:b6: 9d:1e:d1:a0:6f:58:ad:61:bd:9d:c9:a6:f4:c3:6b:13:db:57: 30:4c:35:d7:f9:60:d5:9e:f1:9e:8c:49:dd:3f:83:eb:62:11: ce:cd:1a:e2:0c:0f:72:32:ce:bd:00:1e:17:12:4b:23:a1:a4: d1:c5:47:62:49:6e:24:79:7d:aa:79:a3:48:65:06:61:d7:a3: a8:cf:4e:41:a6:2d:96:dc:1b:b9:a9:84:c9:dd:eb:56:db:1f: 98:3e:65:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPZ3pB5Fswy8icH6JXEnWxISqNZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQjlBRjYwM0IzRTI2NkVDNTE3OEMxNTg5MkNCQjM3 RDhDQ0Q0MTAeFw0yNTA4MDgwOTMzMjBaFw0yNTA4MDkxMjE2MjBaMDMxMTAvBgNV BAMTKDJDNjI1NzY2NDJFRDBGNTg1NjcwMzFFQzY1MjhDOTFERThDMDdEMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQiY5v19+ThCaW+Phq+7vJamwR cQEOBwQlVUZmltwOMDXY7JFcTdsfegyiB+cngws0ME9m6a26tOuD+QqT36oHfWnH Xt9lbreW936n5racyDcM5zo0R1DdpdDzaKeVswuGX+FdpqLh1NmMLvcAXntU5sJi yWsXpwHzfkO+1n2MnbtbTNZ4BG06/Xy2stPNBaiCCTtF2zgvFx3e6PusqBiLO3Ay gJLn+lzAO+wN/GTW3dkCABtAxTVaNmpNTVGdB3YKaVaYZMu7HYLGI1EQnoN6dEYh bgTYR7WBuhlDwUCIbLYGVDjalVGpMrlK05ycURSEum9NK426kgCjpAy9ke59AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULGJXZkLtD1hWcDHsZSjJHejAfRwwHwYDVR0j BBgwFoAUOjua9gOz4mbsUXjBWJLLs32MzUEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmh2M21FZzVMem5keHcyRDh0Uk5LSkd4SHExbm9BYUtTMTJ6TG5DdnhI N1ovMC8zQTNCOUFGNjAzQjNFMjY2RUM1MTc4QzE1ODkyQ0JCMzdEOENDRDQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBM0I5QUY2MDNCM0UyNjZF QzUxNzhDMTU4OTJDQkIzN0Q4Q0NENDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mmh2M21FZzVMem5keHcyRDh0Uk5LSkd4SHExbm9BYUtTMTJ6TG5DdnhIN1ovMC8z QTNCOUFGNjAzQjNFMjY2RUM1MTc4QzE1ODkyQ0JCMzdEOENDRDQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYEn1jij66GzCVZC5pRy4HcffhmcDtJiZEZ/s0Iu1CNBvxUS/eRuAIcxMXyyX oN2JwHWJqAafHHuCRFch2wsmE/yHWuPcuiSIYSTu5vuTIPeLQ3hWdrQ/Nzdkl50U hR/DbdH69KEPlQITzgZAMSP41DVRG+5TYikdBFeyoHj5bTFwXUrmU1kilaLhsTaE wFqrTa7LkvF/Z+R1DXsXyMVbz922nR7RoG9YrWG9ncmm9MNrE9tXMEw11/lg1Z7x noxJ3T+D62IRzs0a4gwPcjLOvQAeFxJLI6Gk0cVHYkluJHl9qnmjSGUGYdejqM9O QaYtltwbuamEyd3rVtsfmD5lDw== -----END CERTIFICATE-----Generated at Sat Aug 9 02:52:13 2025 by rpki-client