$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft File: 3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft (raw, json) Hash identifier: QYTv9ixsRf/ItWygwJQs6MVZgqxrv/jG6+wDlD2JYcE= Subject key identifier: 25:02:04:E6:52:15:77:87:F2:18:55:24:D9:73:E8:6A:33:89:98:6C Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0 Certificate issuer: /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0 Certificate serial: 1AB7E6A2B4459EBCE9E6BF713BE9303B0C97116C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft Manifest number: 027A Signing time: Fri 25 Jul 2025 08:48:13 +0000 Manifest this update: Fri 25 Jul 2025 08:43:13 +0000 Manifest next update: Sat 26 Jul 2025 11:23:13 +0000 Files and hashes: 1: 34352e3138302e3138342e302f32322d3232203d3e20323639313435.roa (hash: kbu54ESKW1e5BIRWIv2H+d7R8holRL2gmDinoqBBatI=) 2: 323830343a363031383a3a2f33332d3333203d3e20323639313435.roa (hash: nPpf0hhGMugZmNdbWERrNoc79wWP0pZTB/sPp3v04wk=) 3: 323830343a363031383a3a2f33322d3332203d3e20323639313435.roa (hash: pukb5lj9ipcGQlV0LxsDM+V/GjI+AEgmTgzISsvatVU=) 4: 34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa (hash: /bpAsgSUi1LnoTyueVXmEbHEdvQmkmUVeA1xO4MqaNU=) 5: 34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa (hash: 2RkNWBLR029RFRbh32kFnlXtZFOD9xnYisNTVjldsO0=) 6: 323830343a363031383a383030303a3a2f33332d3333203d3e20323639313435.roa (hash: Orz/ogX6qFnRjGYGiV2xeJsYmVdzFYD63V3ZXxKfl8k=) 7: 3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl (hash: z1Z1FAqq0diq9oF7oZaOzch08SRcSrAJcXcAcZYZAPQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Jul 2025 11:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b7:e6:a2:b4:45:9e:bc:e9:e6:bf:71:3b:e9:30:3b:0c:97:11:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0 Validity Not Before: Jul 25 08:43:13 2025 GMT Not After : Jul 26 11:23:13 2025 GMT Subject: CN=250204E652157787F2185524D973E86A3389986C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cc:96:e3:2c:29:ee:1c:b7:95:2e:d8:2d:28: fa:16:57:12:0f:f8:ee:00:cf:eb:7d:f5:74:06:23: 75:6a:3d:bf:d7:cb:0b:a8:30:67:72:01:3b:c6:f5: 45:09:6d:18:8b:08:b1:b3:cd:ab:09:d5:76:0a:42: 1c:dd:a6:d4:18:03:e0:c4:f3:05:c3:c9:34:88:dd: 42:85:5a:96:49:39:33:18:0f:d2:16:b2:84:1f:ff: 64:57:b5:45:ed:6a:a9:7e:6d:a4:06:70:41:ae:c2: 12:32:92:8b:0c:2e:1b:57:99:1d:f2:3e:00:9f:3a: c9:32:b1:3a:a4:6e:1a:f3:a2:83:87:1c:e7:4c:bb: a5:2a:00:f3:56:ca:7c:11:d4:5e:7d:5d:e9:b9:69: f6:5d:a7:0d:05:05:da:8f:f6:c7:77:42:7e:37:b0: 00:f4:2d:83:48:f6:d8:5b:65:69:40:8b:f8:37:eb: 3a:53:81:b0:6c:57:69:09:90:8e:30:49:cf:dc:50: f9:00:e0:49:da:b9:38:59:dc:e3:38:67:1d:21:7c: c5:49:9d:d3:02:a9:b2:d1:b7:c5:6e:28:6b:71:9b: bc:b0:cf:4f:b4:2b:79:2b:3c:8a:91:44:50:f9:86: 17:e0:d4:0a:1a:8d:49:d7:cd:38:97:72:a3:db:8a: 9e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:02:04:E6:52:15:77:87:F2:18:55:24:D9:73:E8:6A:33:89:98:6C X509v3 Authority Key Identifier: keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c6:e8:17:51:df:e3:8f:b2:b8:af:b2:7b:40:44:ce:d8:e1: dd:58:50:5e:00:a1:88:35:fc:6d:98:0f:84:e3:86:ef:01:39: 1b:46:5f:a1:57:34:f5:23:04:d6:d6:e4:bc:49:19:98:f1:0c: 11:d6:00:b7:93:a5:db:f8:ac:28:78:84:3c:a1:0f:3d:76:35: f1:72:5b:0c:8f:b3:50:f0:83:9d:82:35:8a:48:77:ed:9d:76: 01:de:6e:d8:9f:32:dc:b9:87:c1:52:a1:db:e8:5f:9f:5c:4e: 8c:36:c1:7e:4b:8d:9c:bc:a2:b2:1f:f9:02:f7:f7:e5:12:c3: 83:c1:7e:4f:3b:e3:39:13:67:27:37:07:1e:b0:8d:c9:d1:19: e7:c6:6c:8d:45:a5:e1:74:79:c0:35:2a:74:63:9e:75:73:d5: 25:48:31:99:9d:a0:1f:e8:88:86:01:65:bf:22:5e:30:21:78: e1:1e:9e:36:db:d7:bd:d3:4f:46:ff:e3:5e:c9:91:9b:c0:fd: d9:f8:cb:d5:c0:a3:65:f8:cb:05:6a:ed:65:54:bb:ae:cd:9e: f2:10:3f:91:4a:a4:74:b2:35:c8:07:52:dd:1d:c1:62:58:c4: 45:ac:46:c5:e8:31:ba:7c:79:e3:8e:10:e4:f6:7f:92:c9:60: 7a:06:f9:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGrfmorRFnrzp5r9xO+kwOwyXEWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZBNjQ1M0ZGNkVFNDhEQUQ5QzIwQzU1MkY5QTRBRkEx M0JGNzRGMDAeFw0yNTA3MjUwODQzMTNaFw0yNTA3MjYxMTIzMTNaMDMxMTAvBgNV BAMTKDI1MDIwNEU2NTIxNTc3ODdGMjE4NTUyNEQ5NzNFODZBMzM4OTk4NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCizJbjLCnuHLeVLtgtKPoWVxIP +O4Az+t99XQGI3VqPb/XywuoMGdyATvG9UUJbRiLCLGzzasJ1XYKQhzdptQYA+DE 8wXDyTSI3UKFWpZJOTMYD9IWsoQf/2RXtUXtaql+baQGcEGuwhIykosMLhtXmR3y PgCfOskysTqkbhrzooOHHOdMu6UqAPNWynwR1F59Xem5afZdpw0FBdqP9sd3Qn43 sAD0LYNI9thbZWlAi/g36zpTgbBsV2kJkI4wSc/cUPkA4EnauThZ3OM4Zx0hfMVJ ndMCqbLRt8VuKGtxm7ywz0+0K3krPIqRRFD5hhfg1AoajUnXzTiXcqPbip5hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJQIE5lIVd4fyGFUk2XPoajOJmGwwHwYDVR0j BBgwFoAUP6ZFP/buSNrZwgxVL5pK+hO/dPAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmU5NkFwdUN6ZldKbnRvMXlQZjVRMlhaQzhndHEzNFZpY2t6aG9VaGRt TU4vMS8zRkE2NDUzRkY2RUU0OERBRDlDMjBDNTUyRjlBNEFGQTEzQkY3NEYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQTY0NTNGRjZFRTQ4REFE OUMyMEM1NTJGOUE0QUZBMTNCRjc0RjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmU5NkFwdUN6ZldKbnRvMXlQZjVRMlhaQzhndHEzNFZpY2t6aG9VaGRtTU4vMS8z RkE2NDUzRkY2RUU0OERBRDlDMjBDNTUyRjlBNEFGQTEzQkY3NEYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn8boF1Hf44+yuK+ye0BEztjh3VhQXgChiDX8bZgPhOOG7wE5G0ZfoVc09SME 1tbkvEkZmPEMEdYAt5Ol2/isKHiEPKEPPXY18XJbDI+zUPCDnYI1ikh37Z12Ad5u 2J8y3LmHwVKh2+hfn1xOjDbBfkuNnLyish/5Avf35RLDg8F+TzvjORNnJzcHHrCN ydEZ58ZsjUWl4XR5wDUqdGOedXPVJUgxmZ2gH+iIhgFlvyJeMCF44R6eNtvXvdNP Rv/jXsmRm8D92fjL1cCjZfjLBWrtZVS7rs2e8hA/kUqkdLI1yAdS3R3BYljERaxG xegxunx5444Q5PZ/kslgegb5sQ== -----END CERTIFICATE-----Generated at Fri Jul 25 13:02:35 2025 by rpki-client