$ rpki-client -vvf rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft File: C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft (raw, json) Hash identifier: NHddO59b1UUhI3Ckfp94QFwpgfmSYeihriuhWbcWOow= Subject key identifier: E3:AF:6A:8A:10:25:11:2B:E3:75:E2:6F:7F:46:81:E3:76:C2:0D:D5 Authority key identifier: C3:4B:76:AE:7A:49:F1:4A:5E:CE:69:B2:E0:67:E9:4E:0A:2E:BB:B1 Certificate issuer: /CN=C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1 Certificate serial: 6DFD383EE0647713B0356323DE189413BEC533EC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer Subject info access: rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft Manifest number: 0A Signing time: Wed 20 Aug 2025 10:11:00 +0000 Manifest this update: Wed 20 Aug 2025 10:06:00 +0000 Manifest next update: Thu 21 Aug 2025 10:57:00 +0000 Files and hashes: 1: 3137372e32332e35362e302f32312d3332203d3e203532393036.roa (hash: jrnwbKnlRj9X3EB+DFy9Z/5ZbRMcHXbOntOJWDZ8eCc=) 2: C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl (hash: n7LvdpmUf5V6IVkYnWYsf/Ki8NmttacWNaieCpKuBC0=) 3: 323830343a383734303a3a2f33322d313238203d3e203532393036.roa (hash: kfImCG2TW2PZqgdH+xcKUqqX56025AHMhP+JY16ulkg=) 4: 3137372e32332e35362e302f32312d3332203d3e20313938393439.roa (hash: mv3/jFMH/WFk97h2YglLXFAx04FlpcG2tngzh8QwfNw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 10:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:fd:38:3e:e0:64:77:13:b0:35:63:23:de:18:94:13:be:c5:33:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1 Validity Not Before: Aug 20 10:06:00 2025 GMT Not After : Aug 21 10:57:00 2025 GMT Subject: CN=E3AF6A8A1025112BE375E26F7F4681E376C20DD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:0d:4f:39:fb:d2:ac:1d:7c:64:33:12:42: e2:3d:67:f1:e9:63:f1:a4:da:58:66:ca:8b:63:50: b4:cf:48:18:2f:84:94:7a:3b:73:2a:ae:d3:e3:7c: 87:f7:9c:0b:a5:c1:2a:0b:9e:85:c8:61:0e:75:95: e8:8b:25:d7:44:83:ff:1a:b0:d2:32:b7:87:70:17: 5d:85:26:66:ce:ad:9b:38:16:39:7d:53:e3:a2:c9: 43:e8:c0:24:5a:3b:50:ce:7f:70:91:31:91:99:5f: 58:b7:81:6b:39:84:10:4d:27:7f:b9:30:03:2b:31: ff:f5:15:f0:ae:ee:8e:99:d3:0a:1f:ed:74:14:2d: d0:58:b5:fd:a3:9c:e6:51:e9:8d:21:46:8c:f8:a6: 1b:dd:b1:6f:33:8d:f9:fb:44:ed:3d:f1:8d:1e:4c: 97:0a:cd:9d:f6:4c:91:d2:4c:52:e4:d4:f9:99:3d: 1d:64:8e:61:cb:eb:f2:9c:90:cf:77:51:50:b8:38: 64:83:06:94:a7:30:97:45:2e:9a:3f:10:53:dd:05: 57:bc:10:b6:d8:da:f6:23:59:f5:61:ca:60:00:8b: b8:13:2d:52:e6:c6:56:7d:d5:18:2d:7c:f8:17:42: e1:29:ed:05:e9:4e:3e:bc:d9:bb:87:f4:74:aa:7d: 94:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AF:6A:8A:10:25:11:2B:E3:75:E2:6F:7F:46:81:E3:76:C2:0D:D5 X509v3 Authority Key Identifier: keyid:C3:4B:76:AE:7A:49:F1:4A:5E:CE:69:B2:E0:67:E9:4E:0A:2E:BB:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jX1k2AfufQSVgan5HBUcaLZwAQbmTiBSR8TvDuYZ68k/0/C34B76AE7A49F14A5ECE69B2E067E94E0A2EBBB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:27:ae:18:23:3a:75:0f:0a:df:bb:52:08:5a:d9:cd:2b:0d: e5:0e:68:5c:c6:51:56:1d:91:6e:91:0a:48:fd:ea:6a:45:78: 85:9f:08:22:aa:29:0b:59:cb:d2:e7:4b:b1:4f:94:42:f0:97: 2e:94:04:85:f4:ab:fd:da:84:02:66:2b:c2:0f:0d:6f:40:83: db:4d:51:7c:52:8c:c7:b0:59:19:d1:f8:bf:fc:86:d4:1d:96: 6e:66:e2:f4:81:52:a8:aa:3e:7b:2e:fa:12:04:0a:f4:12:fc: 46:c5:bb:0b:c0:03:48:14:67:52:e6:71:fa:4c:ec:a4:03:ad: 05:8f:9d:59:a5:cc:a8:63:f9:7a:bf:b3:a8:ce:e7:09:c8:14: d5:7c:1f:bd:28:7c:e7:01:e3:c5:4e:a2:0d:8e:eb:b1:fa:a4: 9f:4b:7e:01:a4:0a:41:f4:ab:29:6b:19:a7:63:aa:09:97:11: 66:6d:d6:2e:73:8f:b1:4d:8f:b9:60:d8:94:71:6a:d6:a5:c6: bb:84:bd:25:98:02:bc:f0:9f:9b:1e:c7:33:15:fa:2d:90:08: b1:b1:70:04:88:09:ee:cf:0b:bd:9e:6e:60:98:77:4a:34:5e: 73:e1:82:17:d5:fd:73:ed:8f:cd:e5:fd:d9:00:5e:43:63:e4: e9:e1:a0:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbf04PuBkdxOwNWMj3hiUE77FM+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM0Qjc2QUU3QTQ5RjE0QTVFQ0U2OUIyRTA2N0U5NEUw QTJFQkJCMTAeFw0yNTA4MjAxMDA2MDBaFw0yNTA4MjExMDU3MDBaMDMxMTAvBgNV BAMTKEUzQUY2QThBMTAyNTExMkJFMzc1RTI2RjdGNDY4MUUzNzZDMjBERDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01g1POfvSrB18ZDMSQuI9Z/Hp Y/Gk2lhmyotjULTPSBgvhJR6O3MqrtPjfIf3nAulwSoLnoXIYQ51leiLJddEg/8a sNIyt4dwF12FJmbOrZs4Fjl9U+OiyUPowCRaO1DOf3CRMZGZX1i3gWs5hBBNJ3+5 MAMrMf/1FfCu7o6Z0wof7XQULdBYtf2jnOZR6Y0hRoz4phvdsW8zjfn7RO098Y0e TJcKzZ32TJHSTFLk1PmZPR1kjmHL6/KckM93UVC4OGSDBpSnMJdFLpo/EFPdBVe8 ELbY2vYjWfVhymAAi7gTLVLmxlZ91RgtfPgXQuEp7QXpTj682buH9HSqfZT/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU469qihAlESvjdeJvf0aB43bCDdUwHwYDVR0j BBgwFoAUw0t2rnpJ8Upezmmy4GfpTgouu7EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2pYMWsyQWZ1ZlFTVmdhbjVIQlVjYUxad0FRYm1UaUJTUjhUdkR1WVo2 OGsvMC9DMzRCNzZBRTdBNDlGMTRBNUVDRTY5QjJFMDY3RTk0RTBBMkVCQkIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzNEI3NkFFN0E0OUYxNEE1 RUNFNjlCMkUwNjdFOTRFMEEyRUJCQjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2pYMWsyQWZ1ZlFTVmdhbjVIQlVjYUxad0FRYm1UaUJTUjhUdkR1WVo2OGsvMC9D MzRCNzZBRTdBNDlGMTRBNUVDRTY5QjJFMDY3RTk0RTBBMkVCQkIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkieuGCM6dQ8K37tSCFrZzSsN5Q5oXMZRVh2RbpEKSP3qakV4hZ8IIqopC1nL 0udLsU+UQvCXLpQEhfSr/dqEAmYrwg8Nb0CD201RfFKMx7BZGdH4v/yG1B2Wbmbi 9IFSqKo+ey76EgQK9BL8RsW7C8ADSBRnUuZx+kzspAOtBY+dWaXMqGP5er+zqM7n CcgU1XwfvSh85wHjxU6iDY7rsfqkn0t+AaQKQfSrKWsZp2OqCZcRZm3WLnOPsU2P uWDYlHFq1qXGu4S9JZgCvPCfmx7HMxX6LZAIsbFwBIgJ7s8LvZ5uYJh3SjRec+GC F9X9c+2PzeX92QBeQ2Pk6eGgUg== -----END CERTIFICATE-----Generated at Wed Aug 20 16:30:52 2025 by rpki-client