$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft File: B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft (raw, json) Hash identifier: +S8OhWyU+ZLAFcvJjTAz1gjpKeiN0Z83xamRcGiDKgE= Subject key identifier: 0F:28:61:B8:D5:2B:2E:A0:2E:C5:0C:DB:70:C1:CD:89:55:A2:EB:90 Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4 Certificate issuer: /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4 Certificate serial: 544504EC0938ADF0E20361310A994B3650BBEE5D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer Subject info access: rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft Manifest number: 02A6 Signing time: Sun 27 Jul 2025 07:29:25 +0000 Manifest this update: Sun 27 Jul 2025 07:24:25 +0000 Manifest next update: Mon 28 Jul 2025 09:54:25 +0000 Files and hashes: 1: 3139322e3134312e33322e302f32322d3234203d3e20323637343538.roa (hash: B5kMvttt+bGHnk6YxAymnhJJ1ryJ1QBy6mgYp8SEB0w=) 2: 323830343a343164303a3a2f33322d3438203d3e20323637343538.roa (hash: YKu5P0M06aV/VOrKrp2OW2JRawu4FuPiAzRiqq0BeEQ=) 3: B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl (hash: 0h36FQutC5EJJiF5b4tB7VNf7rOpRUCWH8x2hAXCr0w=) 4: 34352e3138352e32342e302f32322d3234203d3e20323637343538.roa (hash: 2hzKg8Bs2apsopJWXwY52jUHBv3u7ofM6dqcCNNQGhg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Jul 2025 04:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:45:04:ec:09:38:ad:f0:e2:03:61:31:0a:99:4b:36:50:bb:ee:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4 Validity Not Before: Jul 27 07:24:25 2025 GMT Not After : Jul 28 09:54:25 2025 GMT Subject: CN=0F2861B8D52B2EA02EC50CDB70C1CD8955A2EB90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:fc:df:09:eb:97:e0:6e:fb:7b:1d:a6:ce:64: f2:28:4d:2c:46:20:50:46:bb:93:c5:7c:ce:bc:f7: d3:00:89:18:62:22:74:7c:d6:be:d8:af:a5:53:af: 5a:1c:5b:cb:70:28:6d:7c:0e:4e:c2:58:77:c9:40: f1:51:53:24:76:d5:8a:b2:6b:d9:e2:6a:b6:d5:dc: 71:2f:a5:4c:3f:d2:06:92:72:30:63:29:d5:a6:8e: cd:fd:c1:34:f3:0b:a0:69:59:d1:1f:a6:0d:63:ff: a2:6f:7a:32:9e:14:1f:06:ba:98:72:ae:1b:ef:1f: de:ff:ca:8f:66:7e:f4:7f:c1:55:30:c3:1b:bd:a7: bd:52:74:cb:32:52:a7:c0:7d:9a:07:8d:c4:30:09: 1a:00:c1:a7:c3:28:c0:2d:9b:d9:6f:2f:49:a5:49: 1e:da:78:39:fb:1f:c3:66:21:4e:35:23:7c:84:46: 14:02:1f:d8:b5:f8:29:8c:10:c9:69:b6:2f:cc:18: fb:51:99:fc:11:d8:9e:9f:a4:49:47:0f:f5:1e:48: 14:34:9a:40:b5:9d:97:e4:03:10:2e:4f:3a:f0:0c: ec:75:eb:b0:39:d6:01:a4:2b:f4:8a:d2:57:e5:2f: 31:84:50:c3:d4:07:8e:2d:49:67:fa:13:c6:20:c9: 9c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:28:61:B8:D5:2B:2E:A0:2E:C5:0C:DB:70:C1:CD:89:55:A2:EB:90 X509v3 Authority Key Identifier: keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:1d:74:1a:8e:b4:91:09:e3:94:7f:32:0d:98:f6:e0:dd:e7: 0e:67:8f:8f:c6:6d:e5:59:fb:4e:6d:e0:56:3f:5d:b4:39:9b: 9b:03:a7:bc:a9:63:c0:23:43:50:c3:0a:7e:94:17:30:98:ca: 01:45:c3:bf:2c:6a:df:dd:fc:9f:94:c4:97:8f:ae:e2:30:e2: d8:db:41:4c:d6:97:08:a9:85:8f:39:93:9d:92:80:0f:39:a2: f7:92:ea:24:94:d2:1f:46:52:af:6d:46:ee:18:80:a5:5c:30: 6b:89:b3:5f:b3:ce:43:42:1f:19:33:13:7c:8f:02:9c:fa:70: f9:e9:e8:ef:8e:7d:ce:a6:bc:a2:7a:33:d1:a4:35:60:44:3e: aa:50:07:36:b1:d1:38:f6:24:e0:ec:49:a4:ca:91:b5:69:ad: 5e:5d:66:3f:9c:2e:f8:1a:85:e6:fc:5d:87:f8:20:01:96:89: 71:5b:83:1b:17:5d:e7:45:8b:6e:ac:be:dc:b8:65:4c:9a:e0: 5a:8c:90:58:46:91:e1:13:7d:a6:a2:93:1f:01:f1:3c:23:74: 47:9d:b1:a4:cd:03:21:3a:a1:db:a3:60:f3:52:94:b5:48:aa: 86:b6:f1:c7:35:c9:7b:4c:cd:62:74:d5:d5:20:35:76:20:4f: 6f:ee:9b:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVEUE7Ak4rfDiA2ExCplLNlC77l0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDMzlGMjIzQkVDMjRCODZCNzdFNDlCNDYyMzYyRjYy REIyNEJFNDAeFw0yNTA3MjcwNzI0MjVaFw0yNTA3MjgwOTU0MjVaMDMxMTAvBgNV BAMTKDBGMjg2MUI4RDUyQjJFQTAyRUM1MENEQjcwQzFDRDg5NTVBMkVCOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1/N8J65fgbvt7HabOZPIoTSxG IFBGu5PFfM6899MAiRhiInR81r7Yr6VTr1ocW8twKG18Dk7CWHfJQPFRUyR21Yqy a9niarbV3HEvpUw/0gaScjBjKdWmjs39wTTzC6BpWdEfpg1j/6JvejKeFB8Guphy rhvvH97/yo9mfvR/wVUwwxu9p71SdMsyUqfAfZoHjcQwCRoAwafDKMAtm9lvL0ml SR7aeDn7H8NmIU41I3yERhQCH9i1+CmMEMlpti/MGPtRmfwR2J6fpElHD/UeSBQ0 mkC1nZfkAxAuTzrwDOx167A51gGkK/SK0lflLzGEUMPUB44tSWf6E8YgyZw1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDyhhuNUrLqAuxQzbcMHNiVWi65AwHwYDVR0j BBgwFoAUs8OfIjvsJLhrd+SbRiNi9i2yS+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFh WXYvMS9CM0MzOUYyMjNCRUMyNEI4NkI3N0U0OUI0NjIzNjJGNjJEQjI0QkU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQzM5RjIyM0JFQzI0Qjg2 Qjc3RTQ5QjQ2MjM2MkY2MkRCMjRCRTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFhWXYvMS9C M0MzOUYyMjNCRUMyNEI4NkI3N0U0OUI0NjIzNjJGNjJEQjI0QkU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArB10Go60kQnjlH8yDZj24N3nDmePj8Zt5Vn7Tm3gVj9dtDmbmwOnvKljwCND UMMKfpQXMJjKAUXDvyxq3938n5TEl4+u4jDi2NtBTNaXCKmFjzmTnZKADzmi95Lq JJTSH0ZSr21G7hiApVwwa4mzX7POQ0IfGTMTfI8CnPpw+eno7459zqa8onoz0aQ1 YEQ+qlAHNrHROPYk4OxJpMqRtWmtXl1mP5wu+BqF5vxdh/ggAZaJcVuDGxdd50WL bqy+3LhlTJrgWoyQWEaR4RN9pqKTHwHxPCN0R52xpM0DITqh26Ng81KUtUiqhrbx xzXJe0zNYnTV1SA1diBPb+6bbA== -----END CERTIFICATE-----Generated at Sun Jul 27 10:16:20 2025 by rpki-client