$ rpki-client -vvf rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft File: 3CB1370100AB2291FE24983311386BE8544EB443.mft (raw, json) Hash identifier: tLTEcCP2B0gQlSs0gxWpOMaKnAjBLxv4ZbC8EANzpIM= Subject key identifier: 76:28:58:AF:3C:75:07:5F:AB:A3:D5:5A:64:B7:0B:FA:CD:4B:64:7F Authority key identifier: 3C:B1:37:01:00:AB:22:91:FE:24:98:33:11:38:6B:E8:54:4E:B4:43 Certificate issuer: /CN=3CB1370100AB2291FE24983311386BE8544EB443 Certificate serial: 129B8B455E2081518AD897EA746C598FC3C0B431 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer Subject info access: rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft Manifest number: 21 Signing time: Thu 19 Jun 2025 07:42:19 +0000 Manifest this update: Thu 19 Jun 2025 07:37:19 +0000 Manifest next update: Fri 20 Jun 2025 08:39:19 +0000 Files and hashes: 1: 3138362e3233372e3234302e302f32312d3332203d3e203631353833.roa (hash: HZaQGYZhuYbPmiSYTQlFoQ9P/XaoPw+zfSwUczQKaGk=) 2: 3230302e3139362e3133322e302f32322d3332203d3e203631353833.roa (hash: uzmm5ylcizot7exAeSTtRzar+lRNmKPD7UUlSCP1Mvo=) 3: 3CB1370100AB2291FE24983311386BE8544EB443.crl (hash: hRaPe91ZLrCLibcMKd2O/FbT9Q+cjTqE69u12HYqwWs=) 4: 323830343a313864383a3a2f33322d313238203d3e203631353833.roa (hash: ALrk4GkwzW/CUCGGH5nZ+mNUu7DGUl6592H+MPhd8GQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.crl rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 08:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:9b:8b:45:5e:20:81:51:8a:d8:97:ea:74:6c:59:8f:c3:c0:b4:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CB1370100AB2291FE24983311386BE8544EB443 Validity Not Before: Jun 19 07:37:19 2025 GMT Not After : Jun 20 08:39:19 2025 GMT Subject: CN=762858AF3C75075FABA3D55A64B70BFACD4B647F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cd:33:c8:76:06:d2:c3:84:2a:49:e7:a9:99: 74:e1:fa:8d:07:4e:ab:db:06:75:e8:c7:22:60:67: 0f:ea:71:91:20:db:dc:55:c8:94:2c:79:b0:f4:2e: 0c:1a:5f:65:e1:05:eb:79:c4:83:f3:3a:23:0f:04: ca:65:2f:67:3b:10:ba:c1:57:bf:91:42:4d:ed:4a: 6c:2a:ad:92:21:48:34:d5:2d:ae:40:ad:78:3e:e5: 16:d2:c8:3f:9e:69:a4:64:00:42:9d:1e:af:7e:7f: 1b:37:fb:08:95:6b:ad:4a:19:79:80:aa:6a:c8:8d: 78:b8:15:e9:de:b6:93:27:de:32:81:7a:58:a7:fa: af:a6:8f:52:ce:1d:72:9b:0a:0b:c5:f7:d2:07:57: bd:13:7d:e8:30:cb:db:7b:3b:5f:c1:6d:8f:d5:73: 25:ea:15:0f:78:4d:fe:06:f5:34:cb:aa:fa:60:92: c4:78:38:1d:40:61:94:68:dd:10:28:43:77:c6:f7: 0b:17:89:ab:7b:82:4b:9b:32:bd:76:a1:c0:96:f0: 27:e6:9c:bf:71:53:28:8d:a1:20:18:6e:27:69:11: 2c:c6:96:eb:50:2a:a0:72:ac:ac:1a:e9:9b:c8:df: c2:7e:7f:40:b9:d2:d9:26:d5:79:33:e2:8b:1e:1b: 48:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:28:58:AF:3C:75:07:5F:AB:A3:D5:5A:64:B7:0B:FA:CD:4B:64:7F X509v3 Authority Key Identifier: keyid:3C:B1:37:01:00:AB:22:91:FE:24:98:33:11:38:6B:E8:54:4E:B4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:5a:ff:32:a2:79:48:cf:65:98:32:77:2b:87:d4:55:d9:17: bd:56:53:a3:16:71:cb:47:15:ea:7f:d7:dd:89:c7:3c:1d:47: ef:22:91:93:3e:8b:ec:71:d3:da:d7:7c:7c:0c:00:25:7a:e0: 6c:53:74:81:88:b6:c4:97:94:29:f8:c4:5e:76:e6:42:89:b3: 93:61:05:9f:b3:96:49:0f:bd:d2:4c:8f:65:bf:bc:a0:6d:11: 23:f5:f4:fa:6b:29:75:ce:67:cc:ca:6c:97:32:d6:f7:e4:df: ad:1f:84:d1:25:48:a1:5f:9b:bf:87:ef:50:ee:4a:3c:da:fd: 14:5e:25:df:cb:8e:5f:84:8a:99:bd:04:77:35:f1:e9:7a:ac: fc:96:cc:5c:73:aa:ba:4b:38:4e:6f:2d:71:23:f9:3d:f9:69: 41:b2:80:58:30:d9:48:0a:74:75:87:f9:1f:fe:a4:c6:cb:ba: 82:99:32:77:33:1d:7a:d3:c6:6b:bb:69:62:9b:b5:7d:70:3e: f6:82:89:08:2e:e0:36:a6:c4:10:46:61:0b:7f:62:52:1d:9c: 03:7c:20:49:77:53:3c:bd:d4:91:9f:fb:c0:60:14:b8:7b:81: b4:d7:4c:af:90:3f:f9:ae:ae:51:20:1b:70:7e:f0:00:66:f2: b8:17:24:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEpuLRV4ggVGK2JfqdGxZj8PAtDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCMTM3MDEwMEFCMjI5MUZFMjQ5ODMzMTEzODZCRTg1 NDRFQjQ0MzAeFw0yNTA2MTkwNzM3MTlaFw0yNTA2MjAwODM5MTlaMDMxMTAvBgNV BAMTKDc2Mjg1OEFGM0M3NTA3NUZBQkEzRDU1QTY0QjcwQkZBQ0Q0QjY0N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzTPIdgbSw4QqSeepmXTh+o0H TqvbBnXoxyJgZw/qcZEg29xVyJQsebD0LgwaX2XhBet5xIPzOiMPBMplL2c7ELrB V7+RQk3tSmwqrZIhSDTVLa5ArXg+5RbSyD+eaaRkAEKdHq9+fxs3+wiVa61KGXmA qmrIjXi4FenetpMn3jKBelin+q+mj1LOHXKbCgvF99IHV70Tfegwy9t7O1/BbY/V cyXqFQ94Tf4G9TTLqvpgksR4OB1AYZRo3RAoQ3fG9wsXiat7gkubMr12ocCW8Cfm nL9xUyiNoSAYbidpESzGlutQKqByrKwa6ZvI38J+f0C50tkm1Xkz4oseG0g/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdihYrzx1B1+ro9VaZLcL+s1LZH8wHwYDVR0j BBgwFoAUPLE3AQCrIpH+JJgzEThr6FROtEMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFVvU2t2U1NOd29ZTkFkNlBNekFVdVVjaFc2WUJhdWd6cEhRTERTTVZF c0ovMC8zQ0IxMzcwMTAwQUIyMjkxRkUyNDk4MzMxMTM4NkJFODU0NEVCNDQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDQjEzNzAxMDBBQjIyOTFG RTI0OTgzMzExMzg2QkU4NTQ0RUI0NDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFVvU2t2U1NOd29ZTkFkNlBNekFVdVVjaFc2WUJhdWd6cEhRTERTTVZFc0ovMC8z Q0IxMzcwMTAwQUIyMjkxRkUyNDk4MzMxMTM4NkJFODU0NEVCNDQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT1r/MqJ5SM9lmDJ3K4fUVdkXvVZToxZxy0cV6n/X3YnHPB1H7yKRkz6L7HHT 2td8fAwAJXrgbFN0gYi2xJeUKfjEXnbmQomzk2EFn7OWSQ+90kyPZb+8oG0RI/X0 +mspdc5nzMpslzLW9+TfrR+E0SVIoV+bv4fvUO5KPNr9FF4l38uOX4SKmb0EdzXx 6Xqs/JbMXHOquks4Tm8tcSP5PflpQbKAWDDZSAp0dYf5H/6kxsu6gpkydzMdetPG a7tpYpu1fXA+9oKJCC7gNqbEEEZhC39iUh2cA3wgSXdTPL3UkZ/7wGAUuHuBtNdM r5A/+a6uUSAbcH7wAGbyuBckAg== -----END CERTIFICATE-----Generated at Thu Jun 19 18:59:44 2025 by rpki-client