$ rpki-client -vvf rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft File: 3BA0E4707E0361E96A25CFBC6104551202B34011.mft (raw, json) Hash identifier: BeKnVaHe+IJGZlBjh6+e7BQksrjHWL5Tps0U463mKO8= Subject key identifier: 14:B2:6B:CE:D0:EA:54:8B:63:C2:F0:CA:7D:76:A1:74:57:0E:95:73 Authority key identifier: 3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 Certificate issuer: /CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Certificate serial: 3E0FA07D218076ABA41F5A38CE729A6C322538E8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft Manifest number: 0244 Signing time: Fri 20 Jun 2025 03:42:06 +0000 Manifest this update: Fri 20 Jun 2025 03:37:06 +0000 Manifest next update: Sat 21 Jun 2025 05:12:06 +0000 Files and hashes: 1: 3136382e302e33322e302f32322d3234203d3e20323635323232.roa (hash: FfWivJ4gNEyGVTWyPXQlAoFJfcDTKU2BxPer5WjncSs=) 2: 323830343a326337633a3a2f33322d3438203d3e20323635323232.roa (hash: gZh/j6TTWYlb6HfDh0Q2BiPD8Rby4m6dl3mVzy3MH6M=) 3: 3BA0E4707E0361E96A25CFBC6104551202B34011.crl (hash: 6QpYdFFta95KZKgWl2uyhb49eYY+Jr3OUoWr+0FY6U4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 05:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:0f:a0:7d:21:80:76:ab:a4:1f:5a:38:ce:72:9a:6c:32:25:38:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Validity Not Before: Jun 20 03:37:06 2025 GMT Not After : Jun 21 05:12:06 2025 GMT Subject: CN=14B26BCED0EA548B63C2F0CA7D76A174570E9573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:67:d9:60:95:61:e8:79:34:2c:9d:1c:bc: 3a:d2:3a:75:1d:c5:53:10:00:10:8a:33:d3:98:bc: b4:8f:ad:15:e9:de:3a:5e:fc:16:d6:fa:d1:02:19: b2:fb:26:94:78:fa:12:5c:b4:4e:6d:9f:58:70:c7: b1:e0:42:65:fc:79:e0:e5:1c:97:a9:d7:23:20:a4: 4c:e9:91:1b:f5:ca:21:b8:67:8c:2b:e0:2b:6c:72: 3b:49:66:e7:f7:0e:bb:dc:a2:b2:36:b4:04:e5:d5: 24:13:27:25:d5:e1:47:b1:6a:86:e5:d3:15:6c:80: 05:2a:69:e8:23:a1:00:7d:2f:e1:af:95:43:bb:14: 5c:1c:f4:df:d8:9e:6d:2e:82:e2:6f:98:60:13:c6: c3:d8:6e:ea:0c:12:fc:fe:8e:0b:bb:7e:00:a0:82: f7:15:94:2a:47:ce:f5:92:96:40:66:ab:cc:42:3d: cd:6a:c5:71:41:e3:cd:92:03:b8:c4:05:dd:b5:71: 8b:20:77:b5:0b:bf:06:17:4d:49:4c:17:60:8b:6c: ee:61:fd:b4:0a:06:eb:78:af:a1:64:b3:a3:78:a7: 7e:96:5e:a5:3e:c4:43:bd:bf:24:83:d0:b7:af:63: cf:b6:3a:1b:e4:e5:31:6b:cc:80:36:26:ce:c1:53: 35:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B2:6B:CE:D0:EA:54:8B:63:C2:F0:CA:7D:76:A1:74:57:0E:95:73 X509v3 Authority Key Identifier: keyid:3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:f8:e7:a8:e1:c0:e0:1d:27:70:44:ce:62:91:ed:51:40:dd: f9:52:e3:0c:d5:9a:6c:67:a2:e2:54:27:e1:4e:73:0f:ed:7a: 52:db:a5:b2:be:21:50:c3:ff:f4:fa:0f:08:4f:9f:34:01:01: 0a:03:59:2b:6f:02:1e:a4:82:62:fd:a2:fb:28:61:d1:dd:cc: 1a:69:f2:9b:1e:8f:4d:9a:f4:0b:ab:5a:5d:bf:a0:2d:05:6c: c5:26:b4:51:d1:f8:39:c7:36:3f:b4:8d:0e:ec:68:ea:70:e4: 84:0b:69:a3:c9:07:23:c8:b5:af:ab:c0:7d:36:48:af:f9:01: 8d:34:50:b5:aa:a2:6d:d5:f6:71:dc:43:16:60:4f:19:d6:f6: 0f:db:38:8e:b7:17:21:93:ca:53:2f:54:8e:c5:8d:34:fd:a4: 80:d7:c3:2a:d5:1c:ed:5e:e9:74:59:bd:b6:8d:d9:35:b7:d2: 25:e3:ff:66:a9:8b:e0:98:b6:ad:71:71:08:97:a3:2d:51:74: 8c:9c:46:6e:69:94:b0:26:6b:2d:d8:74:21:f6:ad:6e:3d:65: cd:08:41:1e:44:5a:44:16:78:94:b8:1a:db:4c:91:82:e0:3e: ea:b4:32:3b:7b:6f:15:74:50:06:aa:b9:74:33:08:15:b0:c8: 4c:bc:4c:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPg+gfSGAdqukH1o4znKabDIlOOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMEU0NzA3RTAzNjFFOTZBMjVDRkJDNjEwNDU1MTIw MkIzNDAxMTAeFw0yNTA2MjAwMzM3MDZaFw0yNTA2MjEwNTEyMDZaMDMxMTAvBgNV BAMTKDE0QjI2QkNFRDBFQTU0OEI2M0MyRjBDQTdENzZBMTc0NTcwRTk1NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKkmfZYJVh6Hk0LJ0cvDrSOnUd xVMQABCKM9OYvLSPrRXp3jpe/BbW+tECGbL7JpR4+hJctE5tn1hwx7HgQmX8eeDl HJep1yMgpEzpkRv1yiG4Z4wr4CtscjtJZuf3DrvcorI2tATl1SQTJyXV4Uexaobl 0xVsgAUqaegjoQB9L+GvlUO7FFwc9N/Ynm0uguJvmGATxsPYbuoMEvz+jgu7fgCg gvcVlCpHzvWSlkBmq8xCPc1qxXFB482SA7jEBd21cYsgd7ULvwYXTUlMF2CLbO5h /bQKBut4r6Fks6N4p36WXqU+xEO9vySD0LevY8+2Ohvk5TFrzIA2Js7BUzUlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFLJrztDqVItjwvDKfXahdFcOlXMwHwYDVR0j BBgwFoAUO6DkcH4DYelqJc+8YQRVEgKzQBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5q c2UvMS8zQkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCQTBFNDcwN0UwMzYxRTk2 QTI1Q0ZCQzYxMDQ1NTEyMDJCMzQwMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5qc2UvMS8z QkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp/jnqOHA4B0ncETOYpHtUUDd+VLjDNWabGei4lQn4U5zD+16Utulsr4hUMP/ 9PoPCE+fNAEBCgNZK28CHqSCYv2i+yhh0d3MGmnymx6PTZr0C6taXb+gLQVsxSa0 UdH4Occ2P7SNDuxo6nDkhAtpo8kHI8i1r6vAfTZIr/kBjTRQtaqibdX2cdxDFmBP Gdb2D9s4jrcXIZPKUy9UjsWNNP2kgNfDKtUc7V7pdFm9to3ZNbfSJeP/ZqmL4Ji2 rXFxCJejLVF0jJxGbmmUsCZrLdh0Ifatbj1lzQhBHkRaRBZ4lLga20yRguA+6rQy O3tvFXRQBqq5dDMIFbDITLxMUw== -----END CERTIFICATE-----Generated at Fri Jun 20 11:07:24 2025 by rpki-client