$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft File: 296C1957CA1EAD9BA9385FA528C36D900C425F48.mft (raw, json) Hash identifier: XJLRkKb6Vh8cBiIJr20DUH/bzoUUXoF8sYe7WTXwxSs= Subject key identifier: D3:6C:5F:7B:65:C6:92:B3:E9:4C:34:05:64:61:C5:6B:47:79:98:B9 Authority key identifier: 29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48 Certificate issuer: /CN=296C1957CA1EAD9BA9385FA528C36D900C425F48 Certificate serial: 2FFE5159B594BA1F65FCAB065F72A95D821802AE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer Subject info access: rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft Manifest number: 8B Signing time: Thu 24 Jul 2025 00:37:15 +0000 Manifest this update: Thu 24 Jul 2025 00:32:15 +0000 Manifest next update: Fri 25 Jul 2025 04:25:15 +0000 Files and hashes: 1: 3138312e3232342e32352e302f32342d3234203d3e20323730353634.roa (hash: VrPL3TxiedADmI5FEdoZcrKGF4HcT0E4E0g6y1Z2Iok=) 2: 3138312e3232342e32342e302f32342d3234203d3e20323730353634.roa (hash: gi2TJpuh+msqZ1T3Ji3xFnrT9Cu+4du04Mo60K4LNqM=) 3: 32342e3135322e33362e302f32342d3234203d3e20323730353634.roa (hash: yBiClJzV9mXZsvr8LUQMXVSkBMy5QRoAd2I6awIU8iU=) 4: 3137392e302e3137392e302f32342d3234203d3e20323730353634.roa (hash: z4tvoIY0Hh/hHU4Z4MuC98VYirdLEAUQGN2zlQtkOg8=) 5: 296C1957CA1EAD9BA9385FA528C36D900C425F48.crl (hash: bdPB2zls6x2wOX5GXgda5nrYuBS+8ZWCWcvkU+Ps31Y=) 6: 323830343a366465633a3a2f34342d3434203d3e20323730353634.roa (hash: JrjXmpuAR4nLSLkW7VGjjln8ADGB1CbFOR1f12E6R6k=) 7: 32342e3135322e33392e302f32342d3234203d3e20323730353634.roa (hash: s0+LY9NPez3OzzMtpOH0ZD9Jf83IGdXVOwgSYdJ/8Sw=) 8: 3137392e302e3137372e302f32342d3234203d3e20323730353634.roa (hash: HookaH1xG+0uVNOahIxghiyPvCC1vruoOgkrrWcOjcQ=) 9: 3138312e3232342e32362e302f32342d3234203d3e20323730353634.roa (hash: xVEk1L81qX01xxW4IyS4YM+0De8Mti9s0l9YDGy2nP8=) 10: 3137392e302e3137362e302f32342d3234203d3e20323730353634.roa (hash: NMbXwuMwhtT0ATTZ8U3lu3ihN4eGbajLgaaN0aFWB30=) 11: 32342e3135322e33372e302f32342d3234203d3e20323730353634.roa (hash: j1m1dEZ5q1dJyi4OWRJR5pm8KOyuDxV2ubfApptV/NU=) 12: 3137392e302e3137382e302f32342d3234203d3e20323730353634.roa (hash: W2be6dT5MbMfVP2psCvKFpY6oT+Pg4EtwumJbKoJYEM=) 13: 3138312e3232342e32372e302f32342d3234203d3e20323730353634.roa (hash: K6v+BNgmcrA2NGGI4YpvsgF2J/sl4soIFWLeroEeeBQ=) 14: 323830343a366465633a31303a3a2f34342d3434203d3e203430363736.roa (hash: 5NigUzx/I6sMjEJnsNecKw16Xyfbit5USCbCcSdmdzs=) 15: 32342e3135322e33382e302f32342d3234203d3e20323730353634.roa (hash: /vDLq0zmn0A8Fu43Fs1L85absc3v5lAacCAsUIfqGgU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 04:25:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:fe:51:59:b5:94:ba:1f:65:fc:ab:06:5f:72:a9:5d:82:18:02:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296C1957CA1EAD9BA9385FA528C36D900C425F48 Validity Not Before: Jul 24 00:32:15 2025 GMT Not After : Jul 25 04:25:15 2025 GMT Subject: CN=D36C5F7B65C692B3E94C34056461C56B477998B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2e:fe:c0:e6:36:b6:22:f5:3f:34:fb:0a:b5: 2b:c8:b9:f7:66:03:f1:69:e3:2b:b8:48:b8:35:ce: 8c:41:4a:61:68:32:b0:50:ea:79:59:7e:0a:3b:3c: d2:20:cc:58:d3:84:26:60:61:ea:b1:80:eb:0e:76: 37:3b:3d:2c:ea:cc:1b:a8:7e:3f:58:2b:ac:80:6a: d8:a1:d3:c0:b0:40:03:01:f6:74:a1:c0:4f:6d:36: f6:ab:2c:6c:06:ac:1e:65:14:39:49:57:24:b8:2d: 55:68:24:3b:ea:e9:da:39:dc:1f:a1:19:e6:06:5d: 13:99:50:45:54:6d:d9:3d:83:70:12:20:0c:20:63: 2e:15:a8:01:64:83:b0:fa:61:b1:ab:17:98:92:15: 5d:8c:8e:02:4c:f2:82:6a:31:f6:7f:68:ed:ac:f1: 9e:57:05:d9:77:e5:80:e5:72:e4:5c:ce:d5:7c:a5: cd:d3:95:30:00:6a:47:06:33:44:dc:a8:30:b7:85: f2:7b:3b:37:8d:54:af:af:d6:58:27:5f:8a:08:bf: fc:81:bd:1b:45:85:79:b0:85:7b:8f:3f:c3:75:47: 56:a1:a1:8d:ae:52:ab:6f:19:00:0c:f9:ba:56:23: 7d:c7:12:0e:16:4c:3b:34:82:b4:3c:98:f3:96:2d: 0a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6C:5F:7B:65:C6:92:B3:E9:4C:34:05:64:61:C5:6B:47:79:98:B9 X509v3 Authority Key Identifier: keyid:29:6C:19:57:CA:1E:AD:9B:A9:38:5F:A5:28:C3:6D:90:0C:42:5F:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296C1957CA1EAD9BA9385FA528C36D900C425F48.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/296C1957CA1EAD9BA9385FA528C36D900C425F48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:d8:8a:66:4c:d4:ec:64:79:84:a8:60:c9:2a:9b:8b:b9:87: 6a:1c:ae:50:c8:93:ba:57:fc:24:4e:6b:06:8f:e0:06:3f:fd: a4:c5:78:51:da:51:b0:c5:22:fa:1f:da:40:19:b5:bc:4c:76: 4a:f1:b8:9e:0e:14:ed:22:e3:8b:6f:c4:95:ad:60:c4:4e:8b: ef:ac:39:35:47:4d:28:59:2d:f6:97:88:07:5b:a9:34:05:b2: 88:a3:52:80:ba:f4:88:63:c1:8b:dd:6f:1a:30:25:40:33:8c: ed:ed:b0:c8:63:45:f0:1f:b0:9e:f6:19:9b:02:65:23:c6:3b: bd:53:7b:09:e7:dc:75:b1:79:2f:39:9b:28:1e:dc:6c:9d:b7: 79:44:29:e8:38:94:2f:9c:1f:8f:15:28:f1:8b:34:25:e5:3b: e7:42:45:00:6d:4b:90:68:3b:d3:6f:7c:25:cb:a6:d2:ce:a4: 40:70:88:67:ae:f5:eb:26:a0:54:94:62:98:2f:fe:f7:3a:cb: 46:09:98:71:11:01:37:44:bd:bc:c4:57:40:26:a5:26:4d:56: 8d:de:71:51:09:c6:61:90:22:59:27:b6:2f:3a:f2:4f:37:94: 3a:96:da:94:69:fc:ac:e4:7c:a9:58:cb:f1:70:97:27:ca:fc: fd:1d:8a:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUL/5RWbWUuh9l/KsGX3KpXYIYAq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2QzE5NTdDQTFFQUQ5QkE5Mzg1RkE1MjhDMzZEOTAw QzQyNUY0ODAeFw0yNTA3MjQwMDMyMTVaFw0yNTA3MjUwNDI1MTVaMDMxMTAvBgNV BAMTKEQzNkM1RjdCNjVDNjkyQjNFOTRDMzQwNTY0NjFDNTZCNDc3OTk4QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLv7A5ja2IvU/NPsKtSvIufdm A/Fp4yu4SLg1zoxBSmFoMrBQ6nlZfgo7PNIgzFjThCZgYeqxgOsOdjc7PSzqzBuo fj9YK6yAatih08CwQAMB9nShwE9tNvarLGwGrB5lFDlJVyS4LVVoJDvq6do53B+h GeYGXROZUEVUbdk9g3ASIAwgYy4VqAFkg7D6YbGrF5iSFV2MjgJM8oJqMfZ/aO2s 8Z5XBdl35YDlcuRcztV8pc3TlTAAakcGM0TcqDC3hfJ7OzeNVK+v1lgnX4oIv/yB vRtFhXmwhXuPP8N1R1ahoY2uUqtvGQAM+bpWI33HEg4WTDs0grQ8mPOWLQr7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU02xfe2XGkrPpTDQFZGHFa0d5mLkwHwYDVR0j BBgwFoAUKWwZV8oerZupOF+lKMNtkAxCX0gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3FpSzc0TmhpWDNvM2FaOFc4bTdTRjNBUkttZFNkU24xeXZEMmlNNmtx VTEvMC8yOTZDMTk1N0NBMUVBRDlCQTkzODVGQTUyOEMzNkQ5MDBDNDI1RjQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NkMxOTU3Q0ExRUFEOUJB OTM4NUZBNTI4QzM2RDkwMEM0MjVGNDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3FpSzc0TmhpWDNvM2FaOFc4bTdTRjNBUkttZFNkU24xeXZEMmlNNmtxVTEvMC8y OTZDMTk1N0NBMUVBRDlCQTkzODVGQTUyOEMzNkQ5MDBDNDI1RjQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhNiKZkzU7GR5hKhgySqbi7mHahyuUMiTulf8JE5rBo/gBj/9pMV4UdpRsMUi +h/aQBm1vEx2SvG4ng4U7SLji2/Ela1gxE6L76w5NUdNKFkt9peIB1upNAWyiKNS gLr0iGPBi91vGjAlQDOM7e2wyGNF8B+wnvYZmwJlI8Y7vVN7CefcdbF5LzmbKB7c bJ23eUQp6DiUL5wfjxUo8Ys0JeU750JFAG1LkGg70298Jcum0s6kQHCIZ6716yag VJRimC/+9zrLRgmYcREBN0S9vMRXQCalJk1Wjd5xUQnGYZAiWSe2LzryTzeUOpba lGn8rOR8qVjL8XCXJ8r8/R2KKw== -----END CERTIFICATE-----Generated at Thu Jul 24 17:24:59 2025 by rpki-client