$ rpki-client -vvf rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft File: 3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft (raw, json) Hash identifier: 2HNBWmEitbtNWAfY9kOffbvKX+JocJihGixrSppzcss= Subject key identifier: D4:80:35:AA:F7:51:03:90:EF:C2:E7:CB:A1:90:DE:E7:B4:FA:60:06 Authority key identifier: 3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41 Certificate issuer: /CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41 Certificate serial: 135F82FB3D97B356E602DBE2B8051919128180F4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer Subject info access: rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft Manifest number: 9C Signing time: Sun 27 Jul 2025 08:11:38 +0000 Manifest this update: Sun 27 Jul 2025 08:06:38 +0000 Manifest next update: Mon 28 Jul 2025 11:30:38 +0000 Files and hashes: 1: 3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl (hash: vbC5Xmx2zmoN2Ma/UjqbOEA++p040CmHyPLNPDA3o5I=) 2: 323830343a383136633a3a2f33322d3333203d3e20323732343533.roa (hash: km/ah8tdGnSbAEE8eMAVgMkElj1zG/cbsgnk+5b2q5E=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Jul 2025 11:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5f:82:fb:3d:97:b3:56:e6:02:db:e2:b8:05:19:19:12:81:80:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41 Validity Not Before: Jul 27 08:06:38 2025 GMT Not After : Jul 28 11:30:38 2025 GMT Subject: CN=D48035AAF7510390EFC2E7CBA190DEE7B4FA6006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:fe:32:db:a9:32:f4:73:5e:dd:ee:ab:d4: 97:e2:f8:4b:d3:73:56:61:68:0a:43:0f:55:59:58: 13:46:ea:51:c7:d6:1c:7e:52:39:63:81:51:fc:0a: 06:4c:52:bc:ed:89:a3:f6:2a:e9:23:39:be:fb:92: 8b:c7:8d:b7:cd:d3:f7:f2:94:7a:9f:69:a6:f0:b6: cb:1e:3b:6d:ff:10:ad:8b:cd:22:8a:ba:05:12:08: fd:b0:a8:92:06:25:ee:70:f2:90:f9:49:94:ae:4f: 49:94:e0:8d:aa:2f:52:15:7e:c4:25:73:f3:ef:71: b6:24:fa:de:ee:af:88:80:b2:5e:2e:ab:73:10:0d: 52:14:4e:f1:2b:74:79:ae:30:b3:34:dd:f9:53:8e: a1:ed:02:52:58:85:4e:6f:b1:93:3e:b5:27:a4:86: d0:92:bf:a0:3e:95:b3:a6:21:1f:45:22:61:a8:32: 5d:4a:3f:4d:94:ff:8c:e2:67:33:81:30:1a:ff:84: b8:c6:32:89:18:36:f0:6b:94:56:1b:26:07:fe:98: a6:42:c1:a6:9c:37:66:f4:7e:08:0e:99:b6:dc:eb: 85:de:a5:01:44:36:da:93:5e:b4:ce:d9:e4:ca:93: 6e:a3:bb:63:e6:66:6f:99:e3:80:b6:65:3b:13:f0: 46:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:80:35:AA:F7:51:03:90:EF:C2:E7:CB:A1:90:DE:E7:B4:FA:60:06 X509v3 Authority Key Identifier: keyid:3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:52:d2:62:07:21:57:d1:f6:5d:5a:8f:0f:51:50:ab:4f:30: 19:e7:31:93:f3:3a:57:8d:34:62:c6:5d:4b:4a:69:6b:bf:62: 1c:58:9e:d4:6c:fd:0d:bd:aa:4a:a2:8b:dd:ea:f9:a5:10:27: b5:82:77:c8:4d:2c:c0:3e:e3:5f:76:2c:8a:be:0a:46:d7:db: 67:95:e6:09:25:d7:25:79:35:9e:ca:6d:22:34:98:f4:96:78: 4d:f8:b6:f6:da:63:87:97:ba:0d:d7:38:e9:ca:e3:71:fa:31: 56:20:ef:fa:ff:91:d1:6b:6a:a8:30:fe:34:55:d4:2e:39:1c: f5:68:47:0f:b9:ab:11:35:9f:8a:4c:fa:4f:b2:ca:5b:21:ac: 8f:b3:20:29:70:29:eb:83:57:c6:08:e4:1a:b8:67:ea:30:b6: 93:70:89:58:ac:4a:ab:c7:3f:2a:d2:92:58:53:20:e1:68:49: 86:a9:ae:b7:05:59:fa:e8:a7:8a:d2:17:2f:b7:06:4a:78:a0: f3:c6:ed:8b:24:de:dd:b9:e8:a7:31:4c:11:f6:c6:59:cc:9e: 7f:f8:7b:74:7e:73:b5:65:7c:3a:d9:c9:0c:cf:50:c0:89:e3: 12:05:1e:6a:5d:d4:c7:d1:13:a1:51:2e:35:8c:90:f0:50:3b: 84:c1:34:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUE1+C+z2Xs1bmAtviuAUZGRKBgPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQjlBRjYwM0IzRTI2NkVDNTE3OEMxNTg5MkNCQjM3 RDhDQ0Q0MTAeFw0yNTA3MjcwODA2MzhaFw0yNTA3MjgxMTMwMzhaMDMxMTAvBgNV BAMTKEQ0ODAzNUFBRjc1MTAzOTBFRkMyRTdDQkExOTBERUU3QjRGQTYwMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Kv4y26ky9HNe3e6r1Jfi+EvT c1ZhaApDD1VZWBNG6lHH1hx+UjljgVH8CgZMUrztiaP2KukjOb77kovHjbfN0/fy lHqfaabwtsseO23/EK2LzSKKugUSCP2wqJIGJe5w8pD5SZSuT0mU4I2qL1IVfsQl c/PvcbYk+t7ur4iAsl4uq3MQDVIUTvErdHmuMLM03flTjqHtAlJYhU5vsZM+tSek htCSv6A+lbOmIR9FImGoMl1KP02U/4ziZzOBMBr/hLjGMokYNvBrlFYbJgf+mKZC waacN2b0fggOmbbc64XepQFENtqTXrTO2eTKk26ju2PmZm+Z44C2ZTsT8EYjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1IA1qvdRA5DvwufLoZDe57T6YAYwHwYDVR0j BBgwFoAUOjua9gOz4mbsUXjBWJLLs32MzUEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmh2M21FZzVMem5keHcyRDh0Uk5LSkd4SHExbm9BYUtTMTJ6TG5DdnhI N1ovMC8zQTNCOUFGNjAzQjNFMjY2RUM1MTc4QzE1ODkyQ0JCMzdEOENDRDQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBM0I5QUY2MDNCM0UyNjZF QzUxNzhDMTU4OTJDQkIzN0Q4Q0NENDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mmh2M21FZzVMem5keHcyRDh0Uk5LSkd4SHExbm9BYUtTMTJ6TG5DdnhIN1ovMC8z QTNCOUFGNjAzQjNFMjY2RUM1MTc4QzE1ODkyQ0JCMzdEOENDRDQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXlLSYgchV9H2XVqPD1FQq08wGecxk/M6V400YsZdS0ppa79iHFie1Gz9Db2q SqKL3er5pRAntYJ3yE0swD7jX3Ysir4KRtfbZ5XmCSXXJXk1nsptIjSY9JZ4Tfi2 9tpjh5e6Ddc46crjcfoxViDv+v+R0WtqqDD+NFXULjkc9WhHD7mrETWfikz6T7LK WyGsj7MgKXAp64NXxgjkGrhn6jC2k3CJWKxKq8c/KtKSWFMg4WhJhqmutwVZ+uin itIXL7cGSnig88btiyTe3bnopzFMEfbGWcyef/h7dH5ztWV8OtnJDM9QwInjEgUe al3Ux9EToVEuNYyQ8FA7hME0bQ== -----END CERTIFICATE-----Generated at Mon Jul 28 02:10:07 2025 by rpki-client