$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft File: B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft (raw, json) Hash identifier: al1iiXQvH7dgJrdJnK6bOCbuzTqpRu692QU75Oy74yM= Subject key identifier: 53:A5:DE:DE:D0:4D:07:F6:3F:B3:C6:DC:ED:54:9D:89:AE:AA:F8:6A Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4 Certificate issuer: /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4 Certificate serial: 6F0501C5931FB8F0FE175C83B9F5746275B76A8C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer Subject info access: rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft Manifest number: 0231 Signing time: Wed 30 Apr 2025 03:29:11 +0000 Manifest this update: Wed 30 Apr 2025 03:24:11 +0000 Manifest next update: Thu 01 May 2025 07:27:11 +0000 Files and hashes: 1: 323830343a343164303a3a2f33322d3438203d3e20323637343538.roa (hash: a6j/KcP9LGqdiXHZWCuDZw4xcgprwaOaXc/U/4yxwYU=) 2: 3139322e3134312e33322e302f32322d3234203d3e20323637343538.roa (hash: B5kMvttt+bGHnk6YxAymnhJJ1ryJ1QBy6mgYp8SEB0w=) 3: B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl (hash: K+bpHkRu/bJB661Fe1N2X4HkR6OBqoaE0S5BzSzuUxM=) 4: 34352e3138352e32342e302f32322d3234203d3e20323637343538.roa (hash: NL52hXAc83T3ah0zDi0xSKidp17hg3QoaFn+3+7e760=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 May 2025 07:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:05:01:c5:93:1f:b8:f0:fe:17:5c:83:b9:f5:74:62:75:b7:6a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4 Validity Not Before: Apr 30 03:24:11 2025 GMT Not After : May 1 07:27:11 2025 GMT Subject: CN=53A5DEDED04D07F63FB3C6DCED549D89AEAAF86A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:d6:c6:67:45:d6:0f:d9:e5:17:66:8a:df:6b: e1:97:4f:ab:35:0f:5e:55:e6:93:48:ea:55:e5:cd: cd:7f:ef:da:c3:e2:b9:e8:38:a5:99:41:0f:f2:f0: 53:ac:7c:0e:e2:d5:99:86:30:c8:82:a7:00:7a:4f: fe:d8:45:50:fa:0b:f3:bf:30:45:e1:e8:22:10:4c: c7:32:2d:a1:6a:e6:5b:de:bb:56:4b:6e:dd:cf:ad: 17:9f:0c:49:8a:bd:ba:94:8b:f1:2e:43:8a:be:7b: 80:86:f7:16:b7:49:0f:1a:3c:01:d0:98:bd:44:f2: a0:2b:0a:eb:ea:a8:d8:2e:9f:30:9f:d4:28:0d:c0: b5:9c:a6:99:e8:de:e4:96:41:a6:41:5f:a1:9c:76: 49:c8:bd:f7:43:7f:15:a6:a6:a7:e3:ad:dc:48:ae: 24:60:2f:2d:7f:83:25:1e:73:fb:93:79:29:8d:12: 50:fd:c4:16:f5:bc:17:d1:ad:55:41:5d:62:0d:2e: 01:64:dd:e2:bc:49:59:b2:9c:9d:30:bc:f3:8b:bd: 10:e1:9a:37:1f:d1:e2:20:be:a0:b8:8b:8b:5c:ad: 6a:8a:f3:b7:5f:0d:37:e1:7e:a5:af:07:b2:50:f4: e0:4f:25:ba:23:77:6a:28:e9:2e:a6:50:28:a8:c1: 32:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A5:DE:DE:D0:4D:07:F6:3F:B3:C6:DC:ED:54:9D:89:AE:AA:F8:6A X509v3 Authority Key Identifier: keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d6:4d:a6:18:ba:b8:76:67:35:14:b1:7e:e4:d9:89:68:64: de:c3:4d:f3:44:22:58:93:f2:8c:7d:ba:d5:1d:07:c2:ff:4b: e1:6c:54:60:a0:c3:a2:b8:5a:b8:cf:1a:49:ae:49:cb:cd:6a: 6e:f3:54:93:5e:32:45:3d:83:bc:88:46:36:80:36:cb:b7:a5: a9:f8:a0:e9:5b:50:ee:1a:f1:93:92:07:92:0d:d3:7c:76:14: 6c:2f:a4:17:9c:08:ab:cc:d5:23:02:84:4e:be:c0:db:c7:20: a7:85:e9:d4:fa:68:dc:27:81:1e:dd:f3:cc:c6:66:17:94:d8: d0:d2:a0:54:d9:2d:01:43:a1:71:fe:c4:1c:44:42:c0:f1:8b: bd:d3:aa:9d:4e:f1:24:d5:3d:66:e2:08:a3:ae:a9:2e:ce:df: aa:81:4f:c0:da:68:e8:80:06:f0:ca:b0:a0:e2:0a:72:fb:61: be:0b:b6:12:e2:5a:fa:60:9b:c0:e6:bc:ad:5e:07:8a:ad:d1: 1f:e1:bf:15:f3:d5:ef:6a:61:99:36:e4:cd:db:d7:64:5f:ab: bf:7f:0b:39:1e:23:7f:bc:b8:ce:a2:d9:d5:9e:15:92:73:9c: e8:c5:30:6c:83:ed:6d:65:6f:8b:d4:09:75:b9:3c:ea:66:9f: b1:27:64:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbwUBxZMfuPD+F1yDufV0YnW3aowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDMzlGMjIzQkVDMjRCODZCNzdFNDlCNDYyMzYyRjYy REIyNEJFNDAeFw0yNTA0MzAwMzI0MTFaFw0yNTA1MDEwNzI3MTFaMDMxMTAvBgNV BAMTKDUzQTVERURFRDA0RDA3RjYzRkIzQzZEQ0VENTQ5RDg5QUVBQUY4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD41sZnRdYP2eUXZorfa+GXT6s1 D15V5pNI6lXlzc1/79rD4rnoOKWZQQ/y8FOsfA7i1ZmGMMiCpwB6T/7YRVD6C/O/ MEXh6CIQTMcyLaFq5lveu1ZLbt3PrRefDEmKvbqUi/EuQ4q+e4CG9xa3SQ8aPAHQ mL1E8qArCuvqqNgunzCf1CgNwLWcppno3uSWQaZBX6GcdknIvfdDfxWmpqfjrdxI riRgLy1/gyUec/uTeSmNElD9xBb1vBfRrVVBXWINLgFk3eK8SVmynJ0wvPOLvRDh mjcf0eIgvqC4i4tcrWqK87dfDTfhfqWvB7JQ9OBPJbojd2oo6S6mUCiowTLLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUU6Xe3tBNB/Y/s8bc7VSdia6q+GowHwYDVR0j BBgwFoAUs8OfIjvsJLhrd+SbRiNi9i2yS+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFh WXYvMS9CM0MzOUYyMjNCRUMyNEI4NkI3N0U0OUI0NjIzNjJGNjJEQjI0QkU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQzM5RjIyM0JFQzI0Qjg2 Qjc3RTQ5QjQ2MjM2MkY2MkRCMjRCRTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFhWXYvMS9C M0MzOUYyMjNCRUMyNEI4NkI3N0U0OUI0NjIzNjJGNjJEQjI0QkU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN9ZNphi6uHZnNRSxfuTZiWhk3sNN80QiWJPyjH261R0Hwv9L4WxUYKDDorha uM8aSa5Jy81qbvNUk14yRT2DvIhGNoA2y7elqfig6VtQ7hrxk5IHkg3TfHYUbC+k F5wIq8zVIwKETr7A28cgp4Xp1Ppo3CeBHt3zzMZmF5TY0NKgVNktAUOhcf7EHERC wPGLvdOqnU7xJNU9ZuIIo66pLs7fqoFPwNpo6IAG8MqwoOIKcvthvgu2EuJa+mCb wOa8rV4Hiq3RH+G/FfPV72phmTbkzdvXZF+rv38LOR4jf7y4zqLZ1Z4VknOc6MUw bIPtbWVvi9QJdbk86mafsSdkcA== -----END CERTIFICATE-----Generated at Wed Apr 30 13:54:04 2025 by rpki-client