$ rpki-client -vvf rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft File: 3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft (raw, json) Hash identifier: a2wa9Jxc8QmDRDRxwsJdguc0a7y0q6pc9Rebc5b8FMQ= Subject key identifier: E9:A9:FC:8C:DC:52:FE:5B:16:8D:3D:43:C3:35:7A:12:19:88:A1:AE Authority key identifier: 3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D Certificate issuer: /CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D Certificate serial: 4ACC21E13A45F0DECBF641D9A602C70C50AB8A73 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer Subject info access: rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft Manifest number: D8 Signing time: Tue 17 Jun 2025 01:30:55 +0000 Manifest this update: Tue 17 Jun 2025 01:25:55 +0000 Manifest next update: Wed 18 Jun 2025 05:20:55 +0000 Files and hashes: 1: 323830343a6536383a3a2f33322d3438203d3e20323632393533.roa (hash: mHONVwFSZafTrb2bs4XTqeqR/1IxRdzcYgif/PNK+5w=) 2: 3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl (hash: bOyme1Rq5POPWwK6hQRyaPpM97NpCH+K66vMrzWHXhc=) 3: 3138362e3233352e3234382e302f32322d3234203d3e20323632393533.roa (hash: adeQrk3GHwoD07zzNg8h8DoI+T/hg8cMNdSF33h18Mw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 05:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:cc:21:e1:3a:45:f0:de:cb:f6:41:d9:a6:02:c7:0c:50:ab:8a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E586F998949245A7BA87D54C48DB6C4360CEB9D Validity Not Before: Jun 17 01:25:55 2025 GMT Not After : Jun 18 05:20:55 2025 GMT Subject: CN=E9A9FC8CDC52FE5B168D3D43C3357A121988A1AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:88:e5:f5:11:9c:82:e1:dc:51:90:cc:7a:c3: 61:e9:17:2e:3c:1d:79:d5:81:c3:1a:2b:c6:75:34: 9d:cc:e0:83:81:c4:b3:91:12:30:28:0f:09:ec:90: 5d:4b:cc:16:7f:dd:3b:68:e9:af:f4:0e:ec:25:e4: 19:fb:b7:88:55:49:61:4d:7a:e3:ea:6b:2e:01:32: 13:d9:01:b0:64:19:7b:77:33:f1:5a:bd:41:ce:37: 0e:7d:7c:c8:e7:25:00:4c:f0:a2:46:ed:07:31:38: a2:69:bc:9a:3b:8d:d4:94:ed:1a:24:fa:a8:b9:81: 2f:d3:8a:c1:46:11:57:d7:e2:7e:06:f7:1f:24:07: 08:61:08:f8:c9:64:54:ed:b8:1b:2c:ac:3f:8a:39: 6b:0a:47:30:bb:fb:9a:29:ea:22:c3:2b:c0:36:0a: 09:9b:4f:cb:07:19:a6:58:21:33:eb:00:1b:40:6e: f9:1c:37:ae:0d:e1:aa:7b:84:8e:2d:58:16:17:ff: 94:09:11:5a:bc:6a:04:b0:9a:b4:1d:57:a5:eb:79: 35:f0:25:f1:9a:89:83:ad:bf:57:5c:f3:7b:3e:b6: b8:9f:57:06:e8:99:02:c5:f9:97:bb:51:27:ff:01: e4:22:67:1d:dd:b2:98:52:59:cc:dc:75:a3:03:59: c7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A9:FC:8C:DC:52:FE:5B:16:8D:3D:43:C3:35:7A:12:19:88:A1:AE X509v3 Authority Key Identifier: keyid:3E:58:6F:99:89:49:24:5A:7B:A8:7D:54:C4:8D:B6:C4:36:0C:EB:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E586F998949245A7BA87D54C48DB6C4360CEB9D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3r9xytkktpBe1Q5BtNRwPLXzDb1Ut8a9nuebksf3XYXd/0/3E586F998949245A7BA87D54C48DB6C4360CEB9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ed:7a:ec:6d:df:d4:91:b9:2d:8e:3c:a8:c3:a2:b8:3f:8d: 5b:19:17:66:aa:a5:91:38:e3:22:95:11:55:1b:4b:b9:0b:4b: 7f:17:1b:36:51:c1:60:ee:5c:6a:aa:0f:8e:03:11:12:62:52: 09:5c:ee:e8:cb:ea:95:e7:07:63:64:b6:b6:88:aa:3a:55:11: f2:2c:cb:ed:53:3e:2a:1c:42:43:16:e6:8c:b9:a7:1c:8a:31: 99:a3:e4:b3:10:85:9d:07:71:ff:ce:10:6d:af:72:e6:27:ed: e4:53:8f:99:8a:0e:e0:32:c3:cb:80:1e:fd:60:91:86:66:6d: 1c:9a:e4:d4:fb:12:ab:d7:55:66:53:cc:42:c1:44:4a:57:58: 91:9c:ba:8c:63:15:ed:0b:1a:1f:01:db:5e:fa:61:1f:59:85: 7d:b8:ce:47:72:e6:a9:4e:86:27:ae:14:c7:f3:5a:6e:60:0e: 5f:0e:2f:fb:b1:31:93:b4:7e:bc:41:b9:f7:14:0a:3f:bb:f8: ca:73:03:18:d8:b6:f9:38:84:b2:15:f4:eb:fd:62:9b:71:c7: 99:90:5c:25:f4:91:02:c7:1e:83:8e:62:27:7c:a1:c9:b7:8e: c4:15:d9:1e:6f:3d:4b:1b:56:14:8f:76:19:12:dd:8a:9b:ad: 02:cc:a4:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSswh4TpF8N7L9kHZpgLHDFCrinMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U1ODZGOTk4OTQ5MjQ1QTdCQTg3RDU0QzQ4REI2QzQz NjBDRUI5RDAeFw0yNTA2MTcwMTI1NTVaFw0yNTA2MTgwNTIwNTVaMDMxMTAvBgNV BAMTKEU5QTlGQzhDREM1MkZFNUIxNjhEM0Q0M0MzMzU3QTEyMTk4OEExQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkiOX1EZyC4dxRkMx6w2HpFy48 HXnVgcMaK8Z1NJ3M4IOBxLOREjAoDwnskF1LzBZ/3Tto6a/0Duwl5Bn7t4hVSWFN euPqay4BMhPZAbBkGXt3M/FavUHONw59fMjnJQBM8KJG7QcxOKJpvJo7jdSU7Rok +qi5gS/TisFGEVfX4n4G9x8kBwhhCPjJZFTtuBssrD+KOWsKRzC7+5op6iLDK8A2 CgmbT8sHGaZYITPrABtAbvkcN64N4ap7hI4tWBYX/5QJEVq8agSwmrQdV6XreTXw JfGaiYOtv1dc83s+trifVwbomQLF+Ze7USf/AeQiZx3dsphSWczcdaMDWcd/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6an8jNxS/lsWjT1DwzV6EhmIoa4wHwYDVR0j BBgwFoAUPlhvmYlJJFp7qH1UxI22xDYM650wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3I5eHl0a2t0cEJlMVE1QnROUndQTFh6RGIxVXQ4YTludWVia3NmM1hZ WGQvMC8zRTU4NkY5OTg5NDkyNDVBN0JBODdENTRDNDhEQjZDNDM2MENFQjlELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFNTg2Rjk5ODk0OTI0NUE3 QkE4N0Q1NEM0OERCNkM0MzYwQ0VCOUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3I5eHl0a2t0cEJlMVE1QnROUndQTFh6RGIxVXQ4YTludWVia3NmM1hZWGQvMC8z RTU4NkY5OTg5NDkyNDVBN0JBODdENTRDNDhEQjZDNDM2MENFQjlELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIu167G3f1JG5LY48qMOiuD+NWxkXZqqlkTjjIpURVRtLuQtLfxcbNlHBYO5c aqoPjgMREmJSCVzu6MvqlecHY2S2toiqOlUR8izL7VM+KhxCQxbmjLmnHIoxmaPk sxCFnQdx/84Qba9y5ift5FOPmYoO4DLDy4Ae/WCRhmZtHJrk1PsSq9dVZlPMQsFE SldYkZy6jGMV7QsaHwHbXvphH1mFfbjOR3LmqU6GJ64Ux/NabmAOXw4v+7Exk7R+ vEG59xQKP7v4ynMDGNi2+TiEshX06/1im3HHmZBcJfSRAsceg45iJ3yhybeOxBXZ Hm89SxtWFI92GRLdiputAsykog== -----END CERTIFICATE-----Generated at Tue Jun 17 17:58:08 2025 by rpki-client