$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft File: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft (raw, json) Hash identifier: S0NUHH+m1D2TUP5AvFjxSi0UQB8TonVm/vibryNvLaY= Subject key identifier: 58:8F:30:9E:C4:12:D9:00:CF:D1:40:38:6D:C5:87:D6:3B:22:8E:2D Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 Certificate issuer: /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Certificate serial: 5CA32C0107398B385CEBE9EEC2EC0BF896999BC6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject info access: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft Manifest number: 023D Signing time: Fri 06 Jun 2025 16:03:52 +0000 Manifest this update: Fri 06 Jun 2025 15:58:52 +0000 Manifest next update: Sat 07 Jun 2025 19:31:52 +0000 Files and hashes: 1: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl (hash: 8H2hMYF13L/UsnzrBv3IOqnVml9xx9NUZCkWH12pmMY=) 2: 34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa (hash: AeBka8A3KQatx5ylf8efYG/0aqDgMHQ/4DLsZ9vgq54=) 3: 34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa (hash: mLL7psbKfiKaGnpbVWEJoTKcK/IxrSqWRS37Ju8bJQQ=) 4: 34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa (hash: dvZmaJKiFIhzuB+mWc62fkHLhWOlTP21drygDtaN74Y=) 5: 34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa (hash: I4lnOLHJxZjbb3Rjorlm2O4yGEV8irB1EDwevjkQU7A=) 6: 323830343a356338343a3a2f33322d313238203d3e20323638393133.roa (hash: Ec9hIaDkp+aDDW4FFpB4Fl3AQwvF5+e3QIn8T/v0bXM=) 7: 34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (hash: cHOQoX8+QBdwYQGhnsohZ0k1iqnuoavS/B7p944uAlM=) 8: 34352e3137352e3232382e302f32342d3234203d3e20323638393133.roa (hash: cXY6PhWUBNWJmbKk4RKtBWwU4LfTGX87FWGJlKUeqPM=) 9: 34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa (hash: YBBTkiHSOgUVAXZZp1wx9Ur96wrUs7rREvi/PLPwCpY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 19:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a3:2c:01:07:39:8b:38:5c:eb:e9:ee:c2:ec:0b:f8:96:99:9b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Validity Not Before: Jun 6 15:58:52 2025 GMT Not After : Jun 7 19:31:52 2025 GMT Subject: CN=588F309EC412D900CFD140386DC587D63B228E2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:4a:89:cf:ea:2c:45:2f:f4:02:81:f9:61: b4:e6:ca:e0:4e:0d:75:ac:1d:30:44:e4:0b:47:09: 44:5a:23:ec:85:43:54:b0:a7:d5:a5:38:f9:ac:87: 0f:f5:c1:e8:26:52:34:e4:8f:77:96:9f:63:ca:a2: 6b:53:d9:60:b5:b4:11:f0:de:ce:23:83:3b:64:3b: 4d:52:77:66:6f:66:6f:d8:6c:63:f8:53:26:fc:00: f5:6c:22:f6:cd:58:25:bc:0b:19:77:62:1b:47:8f: 7d:64:44:95:f1:03:a5:46:fa:88:62:28:25:f0:0b: 1f:df:c3:5b:ff:f3:81:cf:8c:a7:bb:37:ea:5a:3d: 49:2d:b3:74:55:7b:ad:52:9a:96:6a:30:48:9c:c9: 15:20:8e:97:d0:59:da:57:dd:c0:0d:49:86:2b:1a: 12:e6:c1:16:c8:88:92:f5:a2:d2:12:40:b5:f6:c8: 61:ea:2b:da:2e:47:23:ea:b6:6a:ae:00:0e:94:49: d1:c7:6f:35:78:12:1e:2b:e7:f7:ed:8d:ca:cf:de: 0a:86:40:32:01:8a:40:05:0f:9d:a9:c4:d4:08:f6: 8c:9f:c4:c9:54:90:a6:e8:6b:ef:af:87:0f:66:93: 12:b6:47:10:fc:fa:e5:4b:2a:ff:4b:e3:fc:79:46: ac:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8F:30:9E:C4:12:D9:00:CF:D1:40:38:6D:C5:87:D6:3B:22:8E:2D X509v3 Authority Key Identifier: keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:53:13:0d:2f:74:7d:f8:b8:84:02:9f:b6:36:11:6b:07:ee: f6:86:ec:8e:09:bd:6b:27:7b:e3:14:4a:f2:f7:89:0a:d7:59: 1a:ae:64:e3:77:9a:bb:ec:ba:a7:af:45:d6:c8:a0:1a:6b:3f: 14:8b:ec:78:02:b7:a8:85:73:5f:a8:78:ec:25:51:f5:27:7a: 73:31:5b:f5:b2:0c:3e:01:32:17:73:fa:91:06:9a:76:6f:95: e8:23:50:57:f3:f3:f0:db:93:24:e3:e9:01:3b:90:22:d1:ad: 57:e0:7f:cd:06:78:6a:03:1b:7b:6a:51:00:3f:1b:5e:fd:17: fc:f3:a9:e6:39:f3:a2:c8:97:d9:25:79:0d:e8:ed:ec:d8:96: 9a:af:66:ca:56:3e:dd:d0:62:bd:51:47:30:00:e9:0d:1f:db: 83:bb:a0:bc:62:8f:10:48:da:e6:51:ef:10:33:1a:e5:d6:b3: 63:88:53:57:b8:7a:d1:b0:61:77:a2:15:b2:0a:d8:d6:b8:e2: 95:25:88:b6:ec:24:7a:fa:c6:6a:e1:39:31:64:0f:43:69:04: a4:21:93:b0:c6:ae:ab:b5:b9:c4:c4:73:29:6f:41:82:93:8b: e0:f0:6a:66:04:48:95:33:24:b7:f0:00:4e:50:21:5c:b8:14: a8:f4:a7:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXKMsAQc5izhc6+nuwuwL+JaZm8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NGRUUyQzIxQTE3MzE0QUQwQ0ZGQzUyMEZEODE3RDE0 QjQxNDBEMTAeFw0yNTA2MDYxNTU4NTJaFw0yNTA2MDcxOTMxNTJaMDMxMTAvBgNV BAMTKDU4OEYzMDlFQzQxMkQ5MDBDRkQxNDAzODZEQzU4N0Q2M0IyMjhFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGEqJz+osRS/0AoH5YbTmyuBO DXWsHTBE5AtHCURaI+yFQ1Swp9WlOPmshw/1wegmUjTkj3eWn2PKomtT2WC1tBHw 3s4jgztkO01Sd2ZvZm/YbGP4Uyb8APVsIvbNWCW8Cxl3YhtHj31kRJXxA6VG+ohi KCXwCx/fw1v/84HPjKe7N+paPUkts3RVe61SmpZqMEicyRUgjpfQWdpX3cANSYYr GhLmwRbIiJL1otISQLX2yGHqK9ouRyPqtmquAA6USdHHbzV4Eh4r5/ftjcrP3gqG QDIBikAFD52pxNQI9oyfxMlUkKboa++vhw9mkxK2RxD8+uVLKv9L4/x5RqyrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWI8wnsQS2QDP0UA4bcWH1jsiji0wHwYDVR0j BBgwFoAUPP7iwhoXMUrQz/xSD9gX0UtBQNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5K Z2UvMS8zQ0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRkVFMkMyMUExNzMxNEFE MENGRkM1MjBGRDgxN0QxNEI0MTQwRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5KZ2UvMS8z Q0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM1MTDS90ffi4hAKftjYRawfu9obsjgm9ayd74xRK8veJCtdZGq5k43eau+y6 p69F1sigGms/FIvseAK3qIVzX6h47CVR9Sd6czFb9bIMPgEyF3P6kQaadm+V6CNQ V/Pz8NuTJOPpATuQItGtV+B/zQZ4agMbe2pRAD8bXv0X/POp5jnzosiX2SV5Dejt 7NiWmq9mylY+3dBivVFHMADpDR/bg7ugvGKPEEja5lHvEDMa5dazY4hTV7h60bBh d6IVsgrY1rjilSWItuwkevrGauE5MWQPQ2kEpCGTsMauq7W5xMRzKW9BgpOL4PBq ZgRIlTMkt/AATlAhXLgUqPSnAg== -----END CERTIFICATE-----Generated at Sat Jun 7 06:07:49 2025 by rpki-client