$ rpki-client -vvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft File: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft (raw, json) Hash identifier: DLhfJgxX0Pwlw5HvGw+JduwMYjramNU+GZ+sChOfevM= Subject key identifier: D0:EC:43:A4:76:E8:95:BB:F9:76:53:7D:11:56:5C:54:1C:1F:59:7D Authority key identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 Certificate issuer: /CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Certificate serial: 3F54A3DB29236104137D07268D0AC1903E29D851 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer Subject info access: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft Manifest number: 020D Signing time: Wed 30 Apr 2025 22:06:28 +0000 Manifest this update: Wed 30 Apr 2025 22:01:28 +0000 Manifest next update: Fri 02 May 2025 01:20:28 +0000 Files and hashes: 1: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl (hash: myMvIQsztWEXhxH5UmyavexdNpNsCF+F0RkqyrxgNv0=) 2: 323830343a386563383a3a2f33322d3438203d3e203631363136.roa (hash: lyXwR8szxK6wAklIFmsSWrdvlecUEfLPCwBeu/gOa+0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 01:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:54:a3:db:29:23:61:04:13:7d:07:26:8d:0a:c1:90:3e:29:d8:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Validity Not Before: Apr 30 22:01:28 2025 GMT Not After : May 2 01:20:28 2025 GMT Subject: CN=D0EC43A476E895BBF976537D11565C541C1F597D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b1:c5:c2:01:92:55:89:1d:86:44:21:df:6b: 5f:95:89:e6:d0:a3:73:39:67:2f:ac:b9:7b:83:d0: 66:3a:ba:39:fa:7b:f1:5c:3c:b1:e7:35:c8:f2:6f: 0e:a3:28:df:3f:27:50:ad:49:b5:a5:58:fe:34:8a: 45:0a:d6:3b:16:d3:7a:09:f6:68:7a:12:d9:ba:18: 4d:11:55:91:bc:b4:9f:f1:f1:c4:d3:f8:3a:dc:be: 27:d8:73:e6:44:ab:1e:d4:14:3d:2f:76:d3:e2:b1: 62:f0:e1:26:07:b0:b9:5d:6b:5a:19:2a:7a:b1:d1: 85:89:f2:e0:15:53:9a:1d:47:f8:9b:ed:3f:e9:ed: b9:05:4a:6c:b2:13:83:e0:c2:0b:b6:e9:da:f9:f1: a6:a2:94:5a:2f:ec:71:c0:a2:ef:83:37:50:1c:ed: 26:0a:9d:9c:49:77:41:18:50:f3:33:0a:7b:d3:ce: eb:14:9a:b4:5a:d4:6f:c2:27:16:28:5b:7f:a9:18: ca:a5:53:20:5c:03:a6:cf:ba:8c:fa:18:f8:b7:80: b6:63:87:e0:4f:15:76:16:90:c3:54:61:05:1e:c3: d6:20:f3:6e:73:ac:87:2b:0e:b8:78:99:98:27:0c: 6d:d1:be:f2:05:bf:ac:8c:76:43:26:8e:88:c7:37: 26:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EC:43:A4:76:E8:95:BB:F9:76:53:7D:11:56:5C:54:1C:1F:59:7D X509v3 Authority Key Identifier: keyid:36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:f2:3c:72:73:c3:01:a2:98:76:0e:37:b4:43:ef:be:df:87: 5e:31:00:ba:52:61:ed:77:cf:d4:ef:56:96:54:55:da:00:a8: 81:0c:2c:97:90:a3:0f:25:4f:07:dc:45:90:b3:0b:a5:47:8b: 5b:1a:a3:ff:3a:ac:fd:da:26:c3:32:b7:2f:26:e4:2e:50:83: 61:a2:33:0f:d8:f2:ae:99:8f:9c:d9:01:a0:0b:4a:03:97:3c: d9:86:71:35:5b:bf:95:97:e9:de:53:8c:8c:7d:c3:df:b9:31: db:66:d7:2d:79:af:64:3e:f0:31:b5:64:67:ea:d4:d0:bd:63: d5:34:f5:f9:bc:d7:c0:8b:19:77:b8:92:1d:27:26:69:2d:d1: 67:f3:bd:1d:7b:6d:72:a6:74:d1:d8:7e:20:b9:58:50:51:c0: c2:bc:42:cd:6f:95:39:57:c0:1f:be:83:85:36:ac:ad:d0:3f: 4d:f5:5a:a4:3f:f8:99:9f:c5:97:cb:c4:61:eb:ea:e5:7c:cd: 52:16:c1:e7:64:2c:c3:7f:1e:5d:3d:2e:37:91:c9:f9:0c:b6: a5:98:aa:9a:15:a5:f1:44:c5:a4:92:fb:e8:b1:53:3c:02:7f: 61:80:d8:8f:c7:d6:7d:84:82:48:4e:26:5c:31:35:1d:18:64: a2:c8:32:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUP1Sj2ykjYQQTfQcmjQrBkD4p2FEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYyNUE1RTE2NThFRTRCMzc5M0FCQUMwMTkyNEEzM0U1 N0MzRkMyMTAeFw0yNTA0MzAyMjAxMjhaFw0yNTA1MDIwMTIwMjhaMDMxMTAvBgNV BAMTKEQwRUM0M0E0NzZFODk1QkJGOTc2NTM3RDExNTY1QzU0MUMxRjU5N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMscXCAZJViR2GRCHfa1+ViebQ o3M5Zy+suXuD0GY6ujn6e/FcPLHnNcjybw6jKN8/J1CtSbWlWP40ikUK1jsW03oJ 9mh6Etm6GE0RVZG8tJ/x8cTT+DrcvifYc+ZEqx7UFD0vdtPisWLw4SYHsLlda1oZ Knqx0YWJ8uAVU5odR/ib7T/p7bkFSmyyE4Pgwgu26dr58aailFov7HHAou+DN1Ac 7SYKnZxJd0EYUPMzCnvTzusUmrRa1G/CJxYoW3+pGMqlUyBcA6bPuoz6GPi3gLZj h+BPFXYWkMNUYQUew9Yg825zrIcrDrh4mZgnDG3RvvIFv6yMdkMmjojHNyZRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0OxDpHbolbv5dlN9EVZcVBwfWX0wHwYDVR0j BBgwFoAUNiWl4WWO5LN5OrrAGSSjPlfD/CEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFO UFcvMS8zNjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2MjVBNUUxNjU4RUU0QjM3 OTNBQkFDMDE5MjRBMzNFNTdDM0ZDMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFOUFcvMS8z NjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1PI8cnPDAaKYdg43tEPvvt+HXjEAulJh7XfP1O9WllRV2gCogQwsl5CjDyVP B9xFkLMLpUeLWxqj/zqs/domwzK3LybkLlCDYaIzD9jyrpmPnNkBoAtKA5c82YZx NVu/lZfp3lOMjH3D37kx22bXLXmvZD7wMbVkZ+rU0L1j1TT1+bzXwIsZd7iSHScm aS3RZ/O9HXttcqZ00dh+ILlYUFHAwrxCzW+VOVfAH76DhTasrdA/TfVapD/4mZ/F l8vEYevq5XzNUhbB52Qsw38eXT0uN5HJ+Qy2pZiqmhWl8UTFpJL76LFTPAJ/YYDY j8fWfYSCSE4mXDE1HRhkosgylw== -----END CERTIFICATE-----Generated at Thu May 1 11:18:27 2025 by rpki-client