$ rpki-client -vvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft File: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft (raw, json) Hash identifier: 2ZxvPPRzZFrKBIFtq74HX/pEmarUxVO2g0QQmB4eEVs= Subject key identifier: A2:78:6A:E1:0A:5B:0F:F6:C0:D9:01:36:54:9A:E5:FE:D3:5A:9D:03 Authority key identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 Certificate issuer: /CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Certificate serial: 2297E8F6B82341A48FB4E1B3B5F0320BADD2B3C1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer Subject info access: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft Manifest number: 024C Signing time: Tue 17 Jun 2025 13:11:34 +0000 Manifest this update: Tue 17 Jun 2025 13:06:34 +0000 Manifest next update: Wed 18 Jun 2025 15:20:34 +0000 Files and hashes: 1: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl (hash: czylwTwHinAcAFxQUPRnq/kQfR24Fmvg0o17bX9YAyY=) 2: 323830343a386563383a3a2f33322d3438203d3e203631363136.roa (hash: lyXwR8szxK6wAklIFmsSWrdvlecUEfLPCwBeu/gOa+0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 15:20:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:97:e8:f6:b8:23:41:a4:8f:b4:e1:b3:b5:f0:32:0b:ad:d2:b3:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Validity Not Before: Jun 17 13:06:34 2025 GMT Not After : Jun 18 15:20:34 2025 GMT Subject: CN=A2786AE10A5B0FF6C0D90136549AE5FED35A9D03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:19:62:0d:6a:00:6f:06:1b:e4:a5:7b:fa:c1: b8:96:6b:13:e6:4c:82:27:86:32:71:c5:5c:9f:1e: 94:d7:90:3f:3d:92:88:c2:3b:97:53:73:bf:87:1b: 7c:ad:6e:8f:e6:4c:6b:21:c9:59:ca:8d:91:60:24: 5b:41:55:49:75:56:3b:94:a7:37:c2:29:33:ca:64: db:6e:b7:67:21:bb:d6:53:75:04:b9:fc:34:df:c8: e7:52:20:0d:6a:68:88:20:12:ce:74:e0:06:50:67: 2f:de:e6:1a:28:84:10:20:7c:73:95:2a:6a:0d:f0: 5c:a7:0a:8f:01:23:6f:e9:34:62:ee:09:79:32:81: 42:e6:3f:50:2a:bc:26:36:b2:a3:ab:45:11:f5:fa: 0a:eb:d4:e4:c8:be:a3:ca:8c:a8:cc:95:25:09:e3: 75:20:ca:b7:1c:71:96:83:b5:13:ab:69:8e:d0:eb: 83:a5:9b:33:b5:83:7e:bb:df:90:dd:e8:cd:ec:68: 8c:8a:14:00:a2:8e:a3:ea:3b:4b:c2:dd:b9:be:e8: 8f:64:22:57:b5:03:1a:46:93:73:0e:cc:e7:7b:7e: d3:55:49:2a:8b:fe:53:7e:34:97:fe:94:9e:cc:1b: de:85:e2:d5:b1:06:42:a5:ac:45:32:01:4d:eb:98: c7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:78:6A:E1:0A:5B:0F:F6:C0:D9:01:36:54:9A:E5:FE:D3:5A:9D:03 X509v3 Authority Key Identifier: keyid:36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:20:f5:8b:3e:73:23:de:1b:df:9c:72:d2:46:71:af:fc:00: 50:33:0e:2b:49:2c:b0:ed:8c:9b:d7:b5:7e:a1:96:aa:5f:2f: cb:a9:58:72:6b:11:f8:7f:0a:58:e8:30:a1:db:ad:d1:39:46: 81:15:b0:05:3b:52:5d:a3:1b:88:be:18:ef:86:ad:3a:90:59: 92:ba:7f:ba:12:ed:d8:38:f5:72:18:75:cb:55:0f:38:c3:d9: b2:3a:e1:d4:c9:23:66:96:dd:b1:59:2a:ef:39:c8:f9:8b:9c: 6f:af:6e:9c:54:60:3e:b2:8e:60:cf:36:d3:02:28:cf:4b:30: f8:2d:6c:e0:c1:79:08:45:e7:52:09:09:6b:35:69:ae:c1:d6: e3:35:9a:93:ab:26:56:7c:df:fa:92:28:c1:d3:b0:df:ba:ef: 93:54:c6:38:66:69:77:ba:4d:51:74:c9:78:a6:41:8f:57:e9: c7:0f:5e:84:6a:06:61:bf:44:8b:dc:9a:f7:cd:4c:52:8b:74: 6d:a5:74:ec:f0:29:79:c1:69:97:f9:7f:25:c8:18:89:20:a6: e2:60:40:43:00:d5:52:d5:df:c2:38:15:d4:61:9b:df:1e:d7: 8d:2f:5e:6c:81:bf:db:5f:fa:ed:b0:36:ba:4a:c4:b8:ac:53: ba:e5:73:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIpfo9rgjQaSPtOGztfAyC63Ss8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYyNUE1RTE2NThFRTRCMzc5M0FCQUMwMTkyNEEzM0U1 N0MzRkMyMTAeFw0yNTA2MTcxMzA2MzRaFw0yNTA2MTgxNTIwMzRaMDMxMTAvBgNV BAMTKEEyNzg2QUUxMEE1QjBGRjZDMEQ5MDEzNjU0OUFFNUZFRDM1QTlEMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmGWINagBvBhvkpXv6wbiWaxPm TIInhjJxxVyfHpTXkD89kojCO5dTc7+HG3ytbo/mTGshyVnKjZFgJFtBVUl1VjuU pzfCKTPKZNtut2chu9ZTdQS5/DTfyOdSIA1qaIggEs504AZQZy/e5hoohBAgfHOV KmoN8FynCo8BI2/pNGLuCXkygULmP1AqvCY2sqOrRRH1+grr1OTIvqPKjKjMlSUJ 43UgyrcccZaDtROraY7Q64OlmzO1g36735Dd6M3saIyKFACijqPqO0vC3bm+6I9k Ile1AxpGk3MOzOd7ftNVSSqL/lN+NJf+lJ7MG96F4tWxBkKlrEUyAU3rmMdfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUonhq4QpbD/bA2QE2VJrl/tNanQMwHwYDVR0j BBgwFoAUNiWl4WWO5LN5OrrAGSSjPlfD/CEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFO UFcvMS8zNjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2MjVBNUUxNjU4RUU0QjM3 OTNBQkFDMDE5MjRBMzNFNTdDM0ZDMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFOUFcvMS8z NjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoyD1iz5zI94b35xy0kZxr/wAUDMOK0kssO2Mm9e1fqGWql8vy6lYcmsR+H8K WOgwodut0TlGgRWwBTtSXaMbiL4Y74atOpBZkrp/uhLt2Dj1chh1y1UPOMPZsjrh 1MkjZpbdsVkq7znI+Yucb69unFRgPrKOYM820wIoz0sw+C1s4MF5CEXnUgkJazVp rsHW4zWak6smVnzf+pIowdOw37rvk1TGOGZpd7pNUXTJeKZBj1fpxw9ehGoGYb9E i9ya981MUot0baV07PApecFpl/l/JcgYiSCm4mBAQwDVUtXfwjgV1GGb3x7XjS9e bIG/21/67bA2ukrEuKxTuuVzTA== -----END CERTIFICATE-----Generated at Tue Jun 17 16:39:10 2025 by rpki-client