$ rpki-client -vvf rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft File: 3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft (raw, json) Hash identifier: ib+tO9pLoSegB/jMPGr0LjVpqIfMeD0RZ6MeszUugLo= Subject key identifier: D2:48:42:F4:81:EC:BE:AE:3E:BA:5F:93:D6:12:35:91:0C:BA:59:26 Authority key identifier: 35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2 Certificate issuer: /CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2 Certificate serial: 2F66F69C1E5598A5112CBE5D20F897C1B2B8511A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft Manifest number: 021A Signing time: Sun 11 May 2025 22:29:02 +0000 Manifest this update: Sun 11 May 2025 22:24:02 +0000 Manifest next update: Tue 13 May 2025 01:15:02 +0000 Files and hashes: 1: 3134332e3133372e37362e302f32322d3234203d3e20323633363638.roa (hash: jS2yt6iWqnU4Fu3w0oDSmPWdZIRbmkruFgSjKM6ouBM=) 2: 3137302e38322e3132302e302f32322d3234203d3e20323633363638.roa (hash: oLFcJDR+piIEBdqrJGQ1URlRH59LSw4XFpddQMkvr2g=) 3: 3139312e3234312e35362e302f32322d3234203d3e20323633363638.roa (hash: FKNYF9UdtLT5dzH41/M3vw86QkrwsEo9zVWfnFSF5xQ=) 4: 3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl (hash: pHvOvs5p+DzjwRsqeSb2dPxZp82+0U5MgAAz/pINnWw=) 5: 323830343a313134383a3a2f33322d3438203d3e20323633363638.roa (hash: xdHdjHLVcOu3wNmoYsUtHv/HX60zCuV6THDKgGvGDkE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 13 May 2025 01:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:66:f6:9c:1e:55:98:a5:11:2c:be:5d:20:f8:97:c1:b2:b8:51:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3536DA9FA1CF7E312AAF7721ED15384E063AE2E2 Validity Not Before: May 11 22:24:02 2025 GMT Not After : May 13 01:15:02 2025 GMT Subject: CN=D24842F481ECBEAE3EBA5F93D61235910CBA5926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:01:4b:28:74:95:95:59:a6:84:fb:df:5e:c1: 3f:63:fe:9c:75:1f:ed:af:aa:2b:fe:1e:be:2a:78: f3:78:96:04:48:e8:71:7b:e8:45:83:16:1a:3c:a2: 3f:4f:9a:69:da:51:74:71:15:4c:1b:76:e9:e5:5a: 93:e0:5f:14:67:b6:2f:4e:62:ba:96:f4:d1:66:86: 48:c2:11:df:38:af:ce:60:f5:53:b2:72:be:cb:45: 29:ea:f4:37:34:54:e5:7d:59:9b:ce:25:e5:6d:f0: 4c:d1:c4:63:0e:f7:15:bf:cc:7a:90:e5:94:5f:b4: 98:9e:91:c8:11:b3:d5:49:3a:ec:1b:46:fe:39:4f: 44:b1:05:7c:98:10:3f:49:d5:fd:60:39:30:6f:26: 6a:9d:2b:5c:21:dc:26:f3:6c:b6:83:e9:f3:a0:96: 4c:08:18:2a:7c:16:23:25:37:a9:0e:04:50:aa:38: 24:6d:ee:34:b0:a2:2b:d7:a8:f4:db:5b:e0:bf:90: b1:99:2e:b2:38:a2:20:cd:bc:c6:04:19:fd:74:f3: 44:58:37:0b:7c:cd:85:2a:30:a3:c0:df:17:c2:16: ac:b6:a9:f0:c0:05:30:48:96:b9:a0:a3:59:ee:c2: ba:c0:a4:92:97:a3:18:5a:7f:f9:b4:1b:8d:93:85: bc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:48:42:F4:81:EC:BE:AE:3E:BA:5F:93:D6:12:35:91:0C:BA:59:26 X509v3 Authority Key Identifier: keyid:35:36:DA:9F:A1:CF:7E:31:2A:AF:77:21:ED:15:38:4E:06:3A:E2:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H9QCx2HAzmUgn4Xy7inndDm2fDLyuEHmqnw74RuwDh8/1/3536DA9FA1CF7E312AAF7721ED15384E063AE2E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:64:d6:51:4f:49:91:95:cb:24:b2:94:3f:87:15:de:6e:7f: be:97:d7:9d:4b:6a:c3:b6:cf:63:45:18:26:06:31:e9:85:ab: 20:61:29:4b:83:60:7e:ed:c1:98:43:3a:06:92:d8:27:81:87: 4b:ce:7b:58:c7:da:35:7b:49:97:0a:b8:54:e3:9f:13:12:7d: a8:dc:07:5b:77:70:40:35:53:57:66:1f:58:f1:33:1a:36:16: b1:c4:4c:61:19:27:d0:f5:0c:92:95:b9:9f:4b:02:93:31:48: 78:16:32:27:bd:07:9e:1b:21:8a:f1:ec:3a:93:4d:a4:04:ff: e6:c7:d5:6c:3f:c9:e8:d8:da:26:5e:01:a4:c5:54:e9:75:7e: 12:7a:4d:65:b7:58:07:9e:00:ae:3d:e7:2e:4a:d8:23:3f:53: 22:b2:b7:d1:14:57:2f:97:31:bb:72:f9:3e:6e:81:0e:be:c1: 57:1c:c6:bd:f7:54:ae:b3:d6:6f:15:5f:db:c3:53:3a:f9:e0: 2e:e5:2f:f7:89:63:64:6b:6e:79:d3:94:be:6a:72:81:53:2d: fc:80:67:04:74:42:9c:55:98:ee:0b:33:21:8b:9b:d2:6e:05: aa:a9:15:48:86:5d:0d:28:4a:da:13:94:bb:59:1b:7b:68:7f: f1:27:63:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUL2b2nB5VmKURLL5dIPiXwbK4URowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNkRBOUZBMUNGN0UzMTJBQUY3NzIxRUQxNTM4NEUw NjNBRTJFMjAeFw0yNTA1MTEyMjI0MDJaFw0yNTA1MTMwMTE1MDJaMDMxMTAvBgNV BAMTKEQyNDg0MkY0ODFFQ0JFQUUzRUJBNUY5M0Q2MTIzNTkxMENCQTU5MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLAUsodJWVWaaE+99ewT9j/px1 H+2vqiv+Hr4qePN4lgRI6HF76EWDFho8oj9PmmnaUXRxFUwbdunlWpPgXxRnti9O YrqW9NFmhkjCEd84r85g9VOycr7LRSnq9Dc0VOV9WZvOJeVt8EzRxGMO9xW/zHqQ 5ZRftJiekcgRs9VJOuwbRv45T0SxBXyYED9J1f1gOTBvJmqdK1wh3CbzbLaD6fOg lkwIGCp8FiMlN6kOBFCqOCRt7jSwoivXqPTbW+C/kLGZLrI4oiDNvMYEGf1080RY Nwt8zYUqMKPA3xfCFqy2qfDABTBIlrmgo1nuwrrApJKXoxhaf/m0G42ThbyvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0khC9IHsvq4+ul+T1hI1kQy6WSYwHwYDVR0j BBgwFoAUNTban6HPfjEqr3ch7RU4TgY64uIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0g5UUN4MkhBem1VZ240WHk3aW5uZERtMmZETHl1RUhtcW53NzRSdXdE aDgvMS8zNTM2REE5RkExQ0Y3RTMxMkFBRjc3MjFFRDE1Mzg0RTA2M0FFMkUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1MzZEQTlGQTFDRjdFMzEy QUFGNzcyMUVEMTUzODRFMDYzQUUyRTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0g5UUN4MkhBem1VZ240WHk3aW5uZERtMmZETHl1RUhtcW53NzRSdXdEaDgvMS8z NTM2REE5RkExQ0Y3RTMxMkFBRjc3MjFFRDE1Mzg0RTA2M0FFMkUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuWTWUU9JkZXLJLKUP4cV3m5/vpfXnUtqw7bPY0UYJgYx6YWrIGEpS4Ngfu3B mEM6BpLYJ4GHS857WMfaNXtJlwq4VOOfExJ9qNwHW3dwQDVTV2YfWPEzGjYWscRM YRkn0PUMkpW5n0sCkzFIeBYyJ70HnhshivHsOpNNpAT/5sfVbD/J6NjaJl4BpMVU 6XV+EnpNZbdYB54Arj3nLkrYIz9TIrK30RRXL5cxu3L5Pm6BDr7BVxzGvfdUrrPW bxVf28NTOvngLuUv94ljZGtuedOUvmpygVMt/IBnBHRCnFWY7gszIYub0m4FqqkV SIZdDShK2hOUu1kbe2h/8SdjEQ== -----END CERTIFICATE-----Generated at Mon May 12 04:52:22 2025 by rpki-client