$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft File: B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft (raw, json) Hash identifier: eHJ3cyY8/TumQ77q7S0PCOtYVOgzRK3qdGb3cJ4+vg4= Subject key identifier: B3:20:4B:60:9C:6C:62:A4:4F:F4:F2:B6:79:28:9A:1C:9F:5D:51:D7 Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4 Certificate issuer: /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4 Certificate serial: 3154C0FC6E2AAA52D7613AE11CAB96AED8E06730 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer Subject info access: rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft Manifest number: 0273 Signing time: Thu 19 Jun 2025 07:48:50 +0000 Manifest this update: Thu 19 Jun 2025 07:43:50 +0000 Manifest next update: Fri 20 Jun 2025 09:15:50 +0000 Files and hashes: 1: 3139322e3134312e33322e302f32322d3234203d3e20323637343538.roa (hash: B5kMvttt+bGHnk6YxAymnhJJ1ryJ1QBy6mgYp8SEB0w=) 2: 323830343a343164303a3a2f33322d3438203d3e20323637343538.roa (hash: a6j/KcP9LGqdiXHZWCuDZw4xcgprwaOaXc/U/4yxwYU=) 3: 34352e3138352e32342e302f32322d3234203d3e20323637343538.roa (hash: NL52hXAc83T3ah0zDi0xSKidp17hg3QoaFn+3+7e760=) 4: B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl (hash: yA2b9UB3w2e/fA2xuLWWJaJsRIxSYJk07U4/YOVVJsk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 09:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:54:c0:fc:6e:2a:aa:52:d7:61:3a:e1:1c:ab:96:ae:d8:e0:67:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4 Validity Not Before: Jun 19 07:43:50 2025 GMT Not After : Jun 20 09:15:50 2025 GMT Subject: CN=B3204B609C6C62A44FF4F2B679289A1C9F5D51D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:e6:3d:b6:90:de:82:75:49:40:7a:5d:b8: 06:a2:c2:c7:de:bd:f9:b6:70:8e:3a:62:d0:c4:c6: 16:3a:66:17:53:82:9b:1c:fb:db:3a:1f:a8:03:e1: b5:a3:40:20:98:de:6e:66:c9:8f:02:8d:c5:ac:fd: 60:4e:78:86:4b:f2:47:29:c3:88:e4:d1:4d:35:78: 66:fb:2c:21:aa:15:fa:ed:fb:96:27:e0:f7:65:cb: 12:e8:71:5e:96:bc:98:32:85:a0:9e:5e:26:26:3b: b3:18:eb:e3:50:4f:e3:1d:d1:39:94:2d:58:9f:eb: df:f2:ad:5f:00:d1:b4:79:6e:a0:cf:4a:bd:14:c3: 53:95:5f:bd:85:d5:4d:b4:b3:3f:fc:b0:23:20:f5: 6c:5f:fb:65:5a:f4:e7:df:c1:67:2e:eb:06:b8:ef: d2:bc:e2:c1:a8:bc:01:0c:bd:08:7f:ec:65:ec:46: 7e:69:55:d9:0a:9b:81:14:5f:be:72:8f:27:a1:54: c1:27:3b:d7:d3:19:e5:fa:e9:a1:20:93:38:f0:4a: d5:6c:f9:1b:be:fb:31:15:72:ae:ef:5a:b1:bc:9e: 35:cd:20:55:11:07:24:e5:62:d5:28:4f:ad:10:c4: 06:86:f0:e4:e8:8e:49:93:65:e7:a7:04:f0:f4:60: 37:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:20:4B:60:9C:6C:62:A4:4F:F4:F2:B6:79:28:9A:1C:9F:5D:51:D7 X509v3 Authority Key Identifier: keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f0:8f:29:7d:33:8c:5b:0f:55:8f:b3:f1:3f:4b:4d:b3:7a: 93:53:3c:90:ed:56:91:2c:57:bf:74:8b:51:0d:40:76:ce:ec: eb:4d:65:60:c0:21:e3:b1:e2:f6:02:6a:14:97:e4:6a:2b:52: 23:90:66:7d:96:0f:eb:c8:93:a1:9c:4c:a9:9a:7b:54:e1:78: c5:d6:a2:c3:d7:e2:41:e1:a4:f1:92:40:1e:54:a4:8e:a6:00: 70:22:47:db:b8:04:b8:ce:71:a8:ec:87:bb:82:a0:3c:2c:c5: a4:35:e1:e3:d4:a2:7c:43:60:39:96:b6:dd:d6:57:8a:06:1b: 3f:98:fd:ca:7d:0b:d1:63:fb:13:ea:21:60:a3:13:f3:63:ca: f4:3c:c0:16:9f:61:bf:c2:11:c7:12:69:c3:31:29:07:3a:2d: 32:56:ec:c9:a1:b7:3d:56:f8:ba:70:e0:08:b8:a3:3e:96:50: bb:1b:6e:81:fd:78:7d:0d:dc:52:fd:f8:8c:7b:ac:6d:ec:03: f3:ee:60:36:aa:e4:bd:eb:0b:4a:d9:d0:9e:57:ea:2c:41:59: 74:c6:97:76:26:9a:d3:44:9a:5f:17:20:10:46:53:7b:af:da: 1a:ba:83:3b:94:13:14:74:9e:c6:d3:58:f0:65:6a:a5:9c:4f: 63:42:6f:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMVTA/G4qqlLXYTrhHKuWrtjgZzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDMzlGMjIzQkVDMjRCODZCNzdFNDlCNDYyMzYyRjYy REIyNEJFNDAeFw0yNTA2MTkwNzQzNTBaFw0yNTA2MjAwOTE1NTBaMDMxMTAvBgNV BAMTKEIzMjA0QjYwOUM2QzYyQTQ0RkY0RjJCNjc5Mjg5QTFDOUY1RDUxRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7p+Y9tpDegnVJQHpduAaiwsfe vfm2cI46YtDExhY6ZhdTgpsc+9s6H6gD4bWjQCCY3m5myY8CjcWs/WBOeIZL8kcp w4jk0U01eGb7LCGqFfrt+5Yn4PdlyxLocV6WvJgyhaCeXiYmO7MY6+NQT+Md0TmU LVif69/yrV8A0bR5bqDPSr0Uw1OVX72F1U20sz/8sCMg9Wxf+2Va9OffwWcu6wa4 79K84sGovAEMvQh/7GXsRn5pVdkKm4EUX75yjyehVMEnO9fTGeX66aEgkzjwStVs +Ru++zEVcq7vWrG8njXNIFURByTlYtUoT60QxAaG8OTojkmTZeenBPD0YDcjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsyBLYJxsYqRP9PK2eSiaHJ9dUdcwHwYDVR0j BBgwFoAUs8OfIjvsJLhrd+SbRiNi9i2yS+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFh WXYvMS9CM0MzOUYyMjNCRUMyNEI4NkI3N0U0OUI0NjIzNjJGNjJEQjI0QkU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQzM5RjIyM0JFQzI0Qjg2 Qjc3RTQ5QjQ2MjM2MkY2MkRCMjRCRTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFhWXYvMS9C M0MzOUYyMjNCRUMyNEI4NkI3N0U0OUI0NjIzNjJGNjJEQjI0QkU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGvCPKX0zjFsPVY+z8T9LTbN6k1M8kO1WkSxXv3SLUQ1Ads7s601lYMAh47Hi 9gJqFJfkaitSI5BmfZYP68iToZxMqZp7VOF4xdaiw9fiQeGk8ZJAHlSkjqYAcCJH 27gEuM5xqOyHu4KgPCzFpDXh49SifENgOZa23dZXigYbP5j9yn0L0WP7E+ohYKMT 82PK9DzAFp9hv8IRxxJpwzEpBzotMlbsyaG3PVb4unDgCLijPpZQuxtugf14fQ3c Uv34jHusbewD8+5gNqrkvesLStnQnlfqLEFZdMaXdiaa00SaXxcgEEZTe6/aGrqD O5QTFHSextNY8GVqpZxPY0JvSA== -----END CERTIFICATE-----Generated at Thu Jun 19 19:22:10 2025 by rpki-client