$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft File: 38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft (raw, json) Hash identifier: flyZEASJJis2vK42bOFBv8bBzJrcMM90bNcir2lexPU= Subject key identifier: 4B:F0:AD:9A:4B:12:4E:68:5F:E6:3F:B3:71:32:AF:51:E4:82:EC:9C Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3 Certificate issuer: /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3 Certificate serial: 70E079713E78C4610390506F5B77DFAC8A3A3591 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft Manifest number: 02A3 Signing time: Wed 20 Aug 2025 05:48:53 +0000 Manifest this update: Wed 20 Aug 2025 05:43:53 +0000 Manifest next update: Thu 21 Aug 2025 09:07:53 +0000 Files and hashes: 1: 323830343a343031633a633030303a3a2f33342d3334203d3e20323635393335.roa (hash: 3triGDE1ZxhPAnqJadqRcQb4fDCJ1Pqb6fzxF7HMxXo=) 2: 3136342e3136332e32302e302f32332d3234203d3e20323635393335.roa (hash: wg2cqsCgcZbAdOFn10mzbSUzdoDtdWxiDjUxBp/NKqA=) 3: 323830343a343031633a3a2f33342d3334203d3e20323635393335.roa (hash: Sahl2RiuVTohechxqH9kEgIw0rbG9MfR6lFxaweqFQI=) 4: 3136342e3136332e32322e302f32342d3234203d3e20323635393335.roa (hash: 35z3e246Z+fyO5X/GtPsgCr1RalEayMlVcqQWqIJGxc=) 5: 38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl (hash: gym4kagTBBO5ihBBoVHTSnh5QXZyaeiqK4S46XN7dJ4=) 6: 3136342e3136332e32332e302f32342d3234203d3e20323635393335.roa (hash: xPngmDYkRZ0N4BgFGzfITwtVOSvC5t5MiTn/0VX+8Fs=) 7: 323830343a343031633a383030303a3a2f33342d3334203d3e20323635393335.roa (hash: K6hKgjGHS2JMsgie2uti/OK2EXoaH1YdGKcx614Q77c=) 8: 323830343a343031633a343030303a3a2f33342d3334203d3e20323635393335.roa (hash: u9fwuwlcVlrLUEDLWvJsUdw6PZpcbu5LujjwqTVS6zs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 09:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e0:79:71:3e:78:c4:61:03:90:50:6f:5b:77:df:ac:8a:3a:35:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3 Validity Not Before: Aug 20 05:43:53 2025 GMT Not After : Aug 21 09:07:53 2025 GMT Subject: CN=4BF0AD9A4B124E685FE63FB37132AF51E482EC9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:43:00:6a:c6:c0:46:c6:72:d0:10:38:95:74: f6:ad:83:79:52:2d:aa:3a:3b:0d:b7:f4:f9:29:8f: 46:a2:a3:4e:59:7d:7d:7f:0e:7d:70:36:b9:36:c4: 85:56:19:45:ef:84:6c:b7:88:eb:cb:ea:49:5d:d1: 07:db:03:b2:98:3e:3d:62:97:d8:bb:d6:52:8a:fc: 74:95:3e:cd:82:83:1e:06:56:70:61:a2:b1:c2:ad: 10:8d:cc:9f:b9:ae:81:c4:38:f2:dd:07:53:56:88: 1c:b6:56:23:07:83:0f:a6:aa:64:c1:1f:1f:95:05: 56:dc:19:c9:dc:77:ca:e8:62:51:b0:95:f7:08:f8: 1d:5e:a7:ed:2b:f9:0d:3f:2b:e0:7f:12:3d:e1:1d: 74:94:32:8d:03:03:c8:d8:91:95:eb:7f:c8:03:9d: d1:1a:0a:ad:eb:dc:23:e3:19:54:6c:04:70:6a:23: 66:3b:da:0c:e3:6d:fe:d3:15:52:34:f0:00:71:f2: e4:4e:49:7b:35:22:54:7e:e5:2c:91:bf:4a:20:e9: 59:74:01:2a:fe:8a:9d:d4:f4:fd:3a:a4:9e:dc:ca: 29:dd:10:f8:6c:d6:52:8c:2a:90:56:c1:9a:2b:cd: 33:98:4d:ba:61:63:d2:fc:14:63:00:f1:10:bd:0e: bb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F0:AD:9A:4B:12:4E:68:5F:E6:3F:B3:71:32:AF:51:E4:82:EC:9C X509v3 Authority Key Identifier: keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:74:bd:07:a7:8f:a5:18:04:67:3f:d7:b3:5f:e9:76:8c:25: 67:d5:2f:16:43:a6:91:a9:f4:f6:b7:50:70:be:d8:84:85:8f: 91:c6:b0:ee:79:1b:d8:8a:6b:34:4d:d7:ae:9c:a0:47:6b:e8: ba:4a:87:93:22:80:a0:f0:13:e5:49:d4:a4:2b:d8:d6:e4:ca: 1e:81:78:6c:53:e3:33:38:55:b6:fb:d0:2a:93:c7:43:57:79: 39:6e:06:48:11:99:50:4b:63:9c:cd:07:b0:fa:8a:68:b3:ff: 4f:d0:84:dc:12:26:4a:ce:95:e3:cf:5d:6a:47:0e:81:0b:35: 2a:20:ed:0a:ed:b8:69:02:10:14:60:55:6a:f2:f0:7c:6f:89: d8:fe:2b:3c:4a:c4:95:89:09:d8:b0:d9:24:01:76:db:8c:f4: 26:06:59:51:5f:c7:f9:6c:44:67:d5:3f:bf:6c:0e:23:9c:e2: a6:39:36:1a:4e:1b:4e:92:ee:41:6e:8f:4d:e9:6d:b3:c3:b6: 2c:c9:a3:f2:59:d8:72:db:2b:94:be:57:be:3d:e0:e3:0b:8c: 4d:cf:f5:b3:2b:c7:0c:59:49:54:dc:20:ab:cd:6f:06:bb:35: 64:88:62:50:ed:72:83:c7:20:67:00:13:b2:f1:1b:cd:98:36: b0:7e:52:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcOB5cT54xGEDkFBvW3ffrIo6NZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGM0JFQUM1NzVENkI2N0JGMkYyODYzMjhDNjgwQzQ0 NjdGNUJEMzAeFw0yNTA4MjAwNTQzNTNaFw0yNTA4MjEwOTA3NTNaMDMxMTAvBgNV BAMTKDRCRjBBRDlBNEIxMjRFNjg1RkU2M0ZCMzcxMzJBRjUxRTQ4MkVDOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/QwBqxsBGxnLQEDiVdPatg3lS Lao6Ow239Pkpj0aio05ZfX1/Dn1wNrk2xIVWGUXvhGy3iOvL6kld0QfbA7KYPj1i l9i71lKK/HSVPs2Cgx4GVnBhorHCrRCNzJ+5roHEOPLdB1NWiBy2ViMHgw+mqmTB Hx+VBVbcGcncd8roYlGwlfcI+B1ep+0r+Q0/K+B/Ej3hHXSUMo0DA8jYkZXrf8gD ndEaCq3r3CPjGVRsBHBqI2Y72gzjbf7TFVI08ABx8uROSXs1IlR+5SyRv0og6Vl0 ASr+ip3U9P06pJ7cyindEPhs1lKMKpBWwZorzTOYTbphY9L8FGMA8RC9DrvdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUS/CtmksSTmhf5j+zcTKvUeSC7JwwHwYDVR0j BBgwFoAUOPO+rFdda2e/LyhjKMaAxEZ/W9MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2I3YmVad0xiVGpUQjNHUFJ0Qmh6TVJ6V3hFbllNQllHVk1BdHNFendQ NmovMS8zOEYzQkVBQzU3NUQ2QjY3QkYyRjI4NjMyOEM2ODBDNDQ2N0Y1QkQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4RjNCRUFDNTc1RDZCNjdC RjJGMjg2MzI4QzY4MEM0NDY3RjVCRDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2I3YmVad0xiVGpUQjNHUFJ0Qmh6TVJ6V3hFbllNQllHVk1BdHNFendQNmovMS8z OEYzQkVBQzU3NUQ2QjY3QkYyRjI4NjMyOEM2ODBDNDQ2N0Y1QkQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB3S9B6ePpRgEZz/Xs1/pdowlZ9UvFkOmkan09rdQcL7YhIWPkcaw7nkb2Ipr NE3XrpygR2voukqHkyKAoPAT5UnUpCvY1uTKHoF4bFPjMzhVtvvQKpPHQ1d5OW4G SBGZUEtjnM0HsPqKaLP/T9CE3BImSs6V489dakcOgQs1KiDtCu24aQIQFGBVavLw fG+J2P4rPErElYkJ2LDZJAF224z0JgZZUV/H+WxEZ9U/v2wOI5zipjk2Gk4bTpLu QW6PTelts8O2LMmj8lnYctsrlL5Xvj3g4wuMTc/1syvHDFlJVNwgq81vBrs1ZIhi UO1yg8cgZwATsvEbzZg2sH5S7Q== -----END CERTIFICATE-----Generated at Wed Aug 20 16:14:26 2025 by rpki-client