$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft File: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft (raw, json) Hash identifier: aNJeJqD4uYj/rU0pBFi25yBzWvidr47sTPbTpKyqzOw= Subject key identifier: 3A:DB:9B:B7:6B:3A:CF:42:81:56:CA:AF:80:52:83:C3:D1:D4:A7:D7 Authority key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 Certificate issuer: /CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Certificate serial: 27AF5F3135C1E37C3E76AFFBB62199B9504D7E60 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject info access: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft Manifest number: 81 Signing time: Mon 09 Jun 2025 04:56:22 +0000 Manifest this update: Mon 09 Jun 2025 04:51:22 +0000 Manifest next update: Tue 10 Jun 2025 08:25:22 +0000 Files and hashes: 1: 323830343a6335383a3a2f33322d313238203d3e203532363934.roa (hash: 9O2EZ1ZOA5SxIxzwzkyeRpvslbdGVqnJeJ0v8OoeGGs=) 2: 3230302e362e3132382e302f32322d3332203d3e203532363934.roa (hash: cmMBAa8apGKZWHWfvXo7rXbYWd2EI5yW46+IKqeCJjo=) 3: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl (hash: 4SWaqNZkTyz98rfzWsMJRUNwN1+E7B1EnZcSJcQT3kc=) 4: 3137372e37332e33362e302f32322d3332203d3e203532363934.roa (hash: OGK41uRpAQwllRubLCRfh+WKpYG39IFoFH08wloP1PA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 07:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:af:5f:31:35:c1:e3:7c:3e:76:af:fb:b6:21:99:b9:50:4d:7e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Validity Not Before: Jun 9 04:51:22 2025 GMT Not After : Jun 10 08:25:22 2025 GMT Subject: CN=3ADB9BB76B3ACF428156CAAF805283C3D1D4A7D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fb:96:e4:9c:73:8a:eb:0f:3b:7e:61:9f:67: 0f:79:99:45:ba:b8:3b:e7:3e:31:9a:27:41:7b:8a: 78:7e:9f:e1:d7:07:db:11:fc:46:de:9c:b6:5e:b1: 89:f2:d3:78:48:d1:d4:23:31:86:3f:c8:56:9a:3e: 84:c6:5f:7e:1f:fb:4a:b4:24:c1:5f:73:37:dc:e1: 08:d8:cd:be:3b:0e:b5:cc:a3:d1:9d:c8:4c:2e:7b: db:29:cd:8b:95:ec:c8:ae:b7:98:7a:39:f2:7c:32: 30:f5:c7:56:62:df:3a:9e:51:f7:af:5d:12:b3:03: ef:e6:22:ea:c1:73:0a:ce:19:ea:92:56:e5:18:5c: d5:43:8d:07:eb:b7:a9:87:c9:d5:c0:12:00:de:c8: 8b:b5:a5:ee:af:25:c3:52:c8:15:d9:4c:2b:ea:8a: ec:24:1c:1f:57:5b:7b:df:0e:a6:7c:99:51:ce:f1: 6e:48:c1:d6:ef:e7:fe:3c:19:2c:80:70:9e:89:cb: 32:fd:16:7c:7a:51:1f:3e:38:a9:f8:53:bf:ff:b8: ec:9d:98:9b:d0:88:d7:2c:6a:29:d5:11:fc:bb:5e: 4e:a1:3d:ca:c0:75:43:97:e4:62:62:7d:bf:bf:4b: 8c:14:93:08:ea:75:5a:85:f6:3f:a4:dd:54:a7:71: f7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DB:9B:B7:6B:3A:CF:42:81:56:CA:AF:80:52:83:C3:D1:D4:A7:D7 X509v3 Authority Key Identifier: keyid:3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:3a:89:98:4e:0f:99:90:88:98:25:83:dd:3e:85:f5:1e:87: 0a:eb:0c:37:f2:e7:59:e5:3b:49:66:68:23:a6:5f:bf:c0:54: a1:a0:e9:ff:d7:69:02:6e:5b:49:01:43:0b:c4:1b:fc:f4:59: 36:55:29:cd:d9:6e:6f:31:e0:af:a6:3b:96:69:68:34:6b:c3: a1:1c:2f:b1:77:17:90:e8:6e:fe:71:fd:33:3a:77:3f:02:c6: 57:6f:09:60:a3:a3:49:2d:71:ee:96:5f:ba:7a:f5:af:a2:13: cb:2b:d7:23:62:27:76:ad:74:4e:19:40:01:34:ce:7e:cc:ce: 62:88:de:f7:de:0f:e7:e3:41:c9:d9:51:37:6e:ef:19:b9:dd: 8e:ad:b8:4d:d7:d8:f2:fd:3d:d2:e5:ad:5e:ce:3f:47:8f:d0: 01:4f:84:a6:66:ef:41:5b:9e:54:cc:50:15:7d:f9:ab:97:d9: 5b:90:9c:c6:2c:c5:31:91:ca:14:ef:ae:e0:ec:86:e7:05:0b: f7:5d:bb:d4:da:79:5a:be:fc:d2:55:0e:b4:81:ca:d2:f1:07: 25:33:2c:5f:21:e3:a6:21:35:04:99:17:48:bc:42:fc:58:c6: 3f:6d:e1:9c:54:11:fa:04:55:bf:c3:47:16:e2:ee:12:3f:a7: aa:5d:10:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ69fMTXB43w+dq/7tiGZuVBNfmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RBRjFDQTQ4NjMzRDQyRjM4OTU1QzQ3QzhCQTBGQURB NzNENzAwNzAeFw0yNTA2MDkwNDUxMjJaFw0yNTA2MTAwODI1MjJaMDMxMTAvBgNV BAMTKDNBREI5QkI3NkIzQUNGNDI4MTU2Q0FBRjgwNTI4M0MzRDFENEE3RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg+5bknHOK6w87fmGfZw95mUW6 uDvnPjGaJ0F7inh+n+HXB9sR/EbenLZesYny03hI0dQjMYY/yFaaPoTGX34f+0q0 JMFfczfc4QjYzb47DrXMo9GdyEwue9spzYuV7Miut5h6OfJ8MjD1x1Zi3zqeUfev XRKzA+/mIurBcwrOGeqSVuUYXNVDjQfrt6mHydXAEgDeyIu1pe6vJcNSyBXZTCvq iuwkHB9XW3vfDqZ8mVHO8W5Iwdbv5/48GSyAcJ6JyzL9Fnx6UR8+OKn4U7//uOyd mJvQiNcsainVEfy7Xk6hPcrAdUOX5GJifb+/S4wUkwjqdVqF9j+k3VSncfctAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOtubt2s6z0KBVsqvgFKDw9HUp9cwHwYDVR0j BBgwFoAUPa8cpIYz1C84lVxHyLoPrac9cAcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3 cGQvMC8zREFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEQUYxQ0E0ODYzM0Q0MkYz ODk1NUM0N0M4QkEwRkFEQTczRDcwMDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3cGQvMC8z REFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqzqJmE4PmZCImCWD3T6F9R6HCusMN/LnWeU7SWZoI6Zfv8BUoaDp/9dpAm5b SQFDC8Qb/PRZNlUpzdlubzHgr6Y7lmloNGvDoRwvsXcXkOhu/nH9Mzp3PwLGV28J YKOjSS1x7pZfunr1r6ITyyvXI2Indq10ThlAATTOfszOYoje994P5+NBydlRN27v Gbndjq24TdfY8v090uWtXs4/R4/QAU+EpmbvQVueVMxQFX35q5fZW5CcxizFMZHK FO+u4OyG5wUL91271Np5Wr780lUOtIHK0vEHJTMsXyHjpiE1BJkXSLxC/FjGP23h nFQR+gRVv8NHFuLuEj+nql0Qqg== -----END CERTIFICATE-----Generated at Mon Jun 9 07:20:32 2025 by rpki-client