$ rpki-client -vvf rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft File: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft (raw, json) Hash identifier: JKnQz3tx2OR51SIO7/euCxRfHmr6Pio27p7/jQLkfsI= Subject key identifier: AB:BF:0F:82:FC:EC:A4:8E:8C:A3:15:FE:F7:34:22:37:01:D6:B5:23 Authority key identifier: 36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 Certificate issuer: /CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Certificate serial: 44253D09A15237CF86D3F2A35BF0469C0F7F49EA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer Subject info access: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft Manifest number: 0291 Signing time: Fri 08 Aug 2025 13:37:28 +0000 Manifest this update: Fri 08 Aug 2025 13:32:28 +0000 Manifest next update: Sat 09 Aug 2025 14:41:28 +0000 Files and hashes: 1: 3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl (hash: GpL55SO6Gd+a+qz369TE9CJNrMy0F2tIBHTAWHrewvI=) 2: 323830343a386563383a3a2f33322d3438203d3e203631363136.roa (hash: lyXwR8szxK6wAklIFmsSWrdvlecUEfLPCwBeu/gOa+0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 14:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:25:3d:09:a1:52:37:cf:86:d3:f2:a3:5b:f0:46:9c:0f:7f:49:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3625A5E1658EE4B3793ABAC01924A33E57C3FC21 Validity Not Before: Aug 8 13:32:28 2025 GMT Not After : Aug 9 14:41:28 2025 GMT Subject: CN=ABBF0F82FCECA48E8CA315FEF734223701D6B523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:eb:62:a5:ed:62:3f:e2:ac:a6:74:f0:b8:16: 87:7f:3a:25:e6:64:54:7e:cd:c7:1b:82:6e:ea:6a: 70:a1:e6:70:88:c3:00:87:30:42:1b:47:69:1e:21: 61:ce:b1:5a:6c:a8:d9:c6:4c:65:59:0a:cb:65:70: cc:a1:67:1d:7f:96:60:b8:fc:f6:aa:6a:61:cf:f9: 20:a6:5f:35:5d:40:f3:5b:60:b9:c2:f3:36:e6:5c: 7d:35:1b:23:52:e4:47:40:3a:1b:26:d7:b6:ae:6b: cf:9c:64:a0:68:bd:ea:3a:36:98:74:30:f6:8b:ce: 7f:68:fd:dd:df:49:ce:fe:de:90:d6:61:5f:6f:9c: 8c:0d:58:24:0f:15:eb:4a:b7:46:6b:8d:aa:3f:18: 3e:8a:4b:cf:0d:fe:b4:b5:95:78:07:14:94:71:73: ef:5f:81:c9:26:d0:2a:75:79:2e:6c:ca:5a:84:93: b5:55:64:a1:5b:45:da:8a:fd:cd:8c:4f:06:71:6c: c1:d7:61:6a:09:f3:28:9e:fa:5e:3f:5d:28:80:73: c0:89:01:ed:31:f2:41:31:fb:6c:58:13:85:be:ce: 83:98:71:ef:fb:8e:01:08:f3:c5:1c:57:44:7b:df: da:09:ae:f1:1d:42:8f:93:b1:b0:4c:ce:41:ee:ca: 7a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BF:0F:82:FC:EC:A4:8E:8C:A3:15:FE:F7:34:22:37:01:D6:B5:23 X509v3 Authority Key Identifier: keyid:36:25:A5:E1:65:8E:E4:B3:79:3A:BA:C0:19:24:A3:3E:57:C3:FC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BABffbARumjT1SE3C8skjSJRfJPUwQxBAmYpR4Fd1NPW/1/3625A5E1658EE4B3793ABAC01924A33E57C3FC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption eb:3e:ff:96:f6:25:22:36:64:e0:a7:9a:43:53:3f:3e:29:d3: 3f:3e:99:3d:1a:ef:89:ed:cd:28:ea:27:e7:c3:f4:14:8d:03: 77:a2:02:03:9c:8c:06:a6:b2:69:d7:05:1d:d7:92:4b:e6:90: f6:32:87:5d:ed:c2:28:46:3e:1e:d6:10:ee:db:18:ea:83:c9: b6:e3:7c:53:11:de:9b:d5:5b:a1:71:2b:da:14:a2:48:55:b9: 48:9e:39:d6:e2:17:11:c7:f0:5f:d1:25:ae:08:22:3c:68:54: db:3e:6f:78:8d:a7:f5:12:2b:ce:54:49:57:9b:64:1b:e9:40: d6:e1:40:92:76:70:ad:38:02:42:4c:06:6f:62:f0:d6:84:04: 54:fe:12:46:a8:46:19:1c:dd:30:57:ae:60:0b:8d:5d:1e:7b: 92:a2:c1:25:2d:62:a6:f8:cd:c7:86:f6:a9:aa:a7:89:18:50: 6f:ab:1a:d0:31:52:ba:f4:be:6d:10:dd:ba:a7:85:89:24:cc: 93:bc:d8:62:d6:e1:96:13:42:8c:74:1e:67:63:dd:81:70:5a: 27:80:94:69:3a:94:90:2d:79:96:22:60:4b:09:86:e8:ce:6a: 5a:2d:d8:cd:52:76:f5:c1:88:a6:1e:52:fe:80:f1:59:cd:5b: 56:10:5c:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURCU9CaFSN8+G0/KjW/BGnA9/SeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYyNUE1RTE2NThFRTRCMzc5M0FCQUMwMTkyNEEzM0U1 N0MzRkMyMTAeFw0yNTA4MDgxMzMyMjhaFw0yNTA4MDkxNDQxMjhaMDMxMTAvBgNV BAMTKEFCQkYwRjgyRkNFQ0E0OEU4Q0EzMTVGRUY3MzQyMjM3MDFENkI1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW62Kl7WI/4qymdPC4Fod/OiXm ZFR+zccbgm7qanCh5nCIwwCHMEIbR2keIWHOsVpsqNnGTGVZCstlcMyhZx1/lmC4 /PaqamHP+SCmXzVdQPNbYLnC8zbmXH01GyNS5EdAOhsm17aua8+cZKBoveo6Nph0 MPaLzn9o/d3fSc7+3pDWYV9vnIwNWCQPFetKt0Zrjao/GD6KS88N/rS1lXgHFJRx c+9fgckm0Cp1eS5sylqEk7VVZKFbRdqK/c2MTwZxbMHXYWoJ8yie+l4/XSiAc8CJ Ae0x8kEx+2xYE4W+zoOYce/7jgEI88UcV0R739oJrvEdQo+TsbBMzkHuynpFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUq78PgvzspI6MoxX+9zQiNwHWtSMwHwYDVR0j BBgwFoAUNiWl4WWO5LN5OrrAGSSjPlfD/CEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFO UFcvMS8zNjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2MjVBNUUxNjU4RUU0QjM3 OTNBQkFDMDE5MjRBMzNFNTdDM0ZDMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkFCZmZiQVJ1bWpUMVNFM0M4c2tqU0pSZkpQVXdReEJBbVlwUjRGZDFOUFcvMS8z NjI1QTVFMTY1OEVFNEIzNzkzQUJBQzAxOTI0QTMzRTU3QzNGQzIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA6z7/lvYlIjZk4KeaQ1M/PinTPz6ZPRrvie3NKOon58P0FI0Dd6ICA5yMBqay adcFHdeSS+aQ9jKHXe3CKEY+HtYQ7tsY6oPJtuN8UxHem9VboXEr2hSiSFW5SJ45 1uIXEcfwX9ElrggiPGhU2z5veI2n9RIrzlRJV5tkG+lA1uFAknZwrTgCQkwGb2Lw 1oQEVP4SRqhGGRzdMFeuYAuNXR57kqLBJS1ipvjNx4b2qaqniRhQb6sa0DFSuvS+ bRDduqeFiSTMk7zYYtbhlhNCjHQeZ2PdgXBaJ4CUaTqUkC15liJgSwmG6M5qWi3Y zVJ29cGIph5S/oDxWc1bVhBcgg== -----END CERTIFICATE-----Generated at Fri Aug 8 19:27:33 2025 by rpki-client