$ rpki-client -vvf rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft File: B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft (raw, json) Hash identifier: VmCmjqpD0C5H4eftqoS4L4Fs1y7cU/rluT++MF7ITu4= Subject key identifier: 33:02:D9:03:1C:2E:63:E2:1E:3A:90:94:14:BB:5E:DB:34:EF:91:54 Authority key identifier: B9:02:C5:20:3B:F2:1D:82:8D:72:D8:FA:7C:EA:88:31:AD:EB:E8:DD Certificate issuer: /CN=B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD Certificate serial: 3C6D8E016BC9FA4457EEA78A38A05E378BACE695 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.cer Subject info access: rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft Manifest number: 0152 Signing time: Wed 20 Aug 2025 06:58:27 +0000 Manifest this update: Wed 20 Aug 2025 06:53:27 +0000 Manifest next update: Thu 21 Aug 2025 09:28:27 +0000 Files and hashes: 1: 323830343a3735633a3a2f33322d3438203d3e20323632363337.roa (hash: Ftk5zUW9PGUhuWcjjpH1k9AK4GPuJKDm/gU//7U8NGw=) 2: B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.crl (hash: kidsMWqdZVgdkkMZ7v6QaJPvu6beB6htPaKOzjL7l58=) 3: 3137372e3130352e36342e302f32302d3234203d3e20323632363337.roa (hash: CQB0pMvjsu0JQejxzWyA7AFkchjQbY+9fm2Gzu5OSuw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.crl rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 09:28:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:6d:8e:01:6b:c9:fa:44:57:ee:a7:8a:38:a0:5e:37:8b:ac:e6:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD Validity Not Before: Aug 20 06:53:27 2025 GMT Not After : Aug 21 09:28:27 2025 GMT Subject: CN=3302D9031C2E63E21E3A909414BB5EDB34EF9154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:4f:3e:5f:20:5f:98:e4:cd:c2:70:c2:07: ac:ca:42:b4:61:6c:7d:36:db:f5:da:e7:68:6b:ad: 23:15:9a:45:87:f1:b6:11:a4:b9:09:c6:b8:54:e8: 3e:e9:15:88:4f:bd:9c:21:2b:90:d5:c0:31:9b:be: 29:f9:59:f6:8d:da:e6:34:d1:ac:1e:e3:5f:2b:d3: 8c:84:ac:46:62:e6:c2:73:0d:f4:72:df:79:d6:d3: 1a:6f:85:aa:1e:c4:dd:ae:73:82:f4:9c:76:a4:7d: ac:4a:47:e4:61:05:e0:d7:d9:f5:71:0d:87:57:93: 39:e6:a8:47:54:f2:f7:11:5f:9c:e5:07:95:26:63: 3b:f7:e7:a8:72:70:ed:31:0f:2f:49:ec:4c:01:8d: 81:d2:1a:04:31:73:b0:45:f7:ed:98:5c:81:54:44: 57:a5:ab:b8:3d:82:9a:0e:68:74:18:e3:10:03:d4: 02:eb:f6:5b:f0:72:b3:a3:0c:96:94:6b:e5:6a:60: 80:e0:b3:5b:de:a7:d2:b0:38:ab:64:7a:87:53:d8: be:85:82:93:d6:45:69:2f:03:9a:98:af:4e:e0:b3: f0:9a:8c:07:bb:b9:6a:7e:eb:e9:ea:e5:16:62:8f: 09:c0:9f:37:0a:3f:94:bb:91:68:d9:a6:5b:b5:61: a4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:02:D9:03:1C:2E:63:E2:1E:3A:90:94:14:BB:5E:DB:34:EF:91:54 X509v3 Authority Key Identifier: keyid:B9:02:C5:20:3B:F2:1D:82:8D:72:D8:FA:7C:EA:88:31:AD:EB:E8:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jfxaRn6ggQRB9tu7KYyoEpcQ2ybYNAysrHnjEm6WmcR/1/B902C5203BF21D828D72D8FA7CEA8831ADEBE8DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a0:92:2f:50:4d:1c:ce:9f:c1:98:62:31:80:24:b5:d5:ea: b5:e7:87:2e:8f:d0:07:83:5b:11:49:01:a5:20:65:62:50:43: 47:19:61:62:ff:0f:34:4b:5b:be:0e:a4:d1:df:ad:a3:b7:20: 95:43:a8:bf:20:a2:1f:96:fe:75:bc:b3:27:38:7e:3a:db:78: 22:c1:75:5a:c0:2b:87:7e:18:c8:ab:49:ed:47:8f:71:aa:bc: 4d:91:b5:65:6a:c2:0f:b3:2b:42:7d:96:38:87:8e:61:e4:f6: d8:c0:c3:b7:63:03:a7:08:de:25:27:b4:e4:56:aa:36:74:dc: c1:7e:44:c9:8c:4f:f2:a6:f6:dc:ce:37:b3:9d:32:47:63:4c: 76:a9:85:c9:e2:45:ad:6e:ea:03:14:47:8b:65:a6:b1:97:b5: 87:8c:ae:56:ff:b4:41:a8:47:af:4c:c2:49:9e:82:a1:5c:3b: ae:e1:a3:0c:30:a4:79:77:9d:98:ef:21:87:c3:d1:07:01:fa: cd:2e:d1:76:2a:39:51:81:f1:00:9f:fb:ad:8e:b7:21:6c:62: 11:68:2d:de:8a:bf:68:5c:c1:3c:de:d7:67:cc:e1:f8:c2:ee: df:30:f6:ab:73:71:b8:47:ae:53:c2:32:90:57:04:c9:4e:15: 64:85:55:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPG2OAWvJ+kRX7qeKOKBeN4us5pUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkwMkM1MjAzQkYyMUQ4MjhENzJEOEZBN0NFQTg4MzFB REVCRThERDAeFw0yNTA4MjAwNjUzMjdaFw0yNTA4MjEwOTI4MjdaMDMxMTAvBgNV BAMTKDMzMDJEOTAzMUMyRTYzRTIxRTNBOTA5NDE0QkI1RURCMzRFRjkxNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxE8+XyBfmOTNwnDCB6zKQrRh bH022/Xa52hrrSMVmkWH8bYRpLkJxrhU6D7pFYhPvZwhK5DVwDGbvin5WfaN2uY0 0awe418r04yErEZi5sJzDfRy33nW0xpvhaoexN2uc4L0nHakfaxKR+RhBeDX2fVx DYdXkznmqEdU8vcRX5zlB5UmYzv356hycO0xDy9J7EwBjYHSGgQxc7BF9+2YXIFU RFelq7g9gpoOaHQY4xAD1ALr9lvwcrOjDJaUa+VqYIDgs1vep9KwOKtkeodT2L6F gpPWRWkvA5qYr07gs/CajAe7uWp+6+nq5RZijwnAnzcKP5S7kWjZplu1YaRbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMwLZAxwuY+IeOpCUFLte2zTvkVQwHwYDVR0j BBgwFoAUuQLFIDvyHYKNctj6fOqIMa3r6N0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2pmeGFSbjZnZ1FSQjl0dTdLWXlvRXBjUTJ5YllOQXlzckhuakVtNldt Y1IvMS9COTAyQzUyMDNCRjIxRDgyOEQ3MkQ4RkE3Q0VBODgzMUFERUJFOERELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5MDJDNTIwM0JGMjFEODI4 RDcyRDhGQTdDRUE4ODMxQURFQkU4REQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2pmeGFSbjZnZ1FSQjl0dTdLWXlvRXBjUTJ5YllOQXlzckhuakVtNldtY1IvMS9C OTAyQzUyMDNCRjIxRDgyOEQ3MkQ4RkE3Q0VBODgzMUFERUJFOERELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbKCSL1BNHM6fwZhiMYAktdXqteeHLo/QB4NbEUkBpSBlYlBDRxlhYv8PNEtb vg6k0d+to7cglUOovyCiH5b+dbyzJzh+Ott4IsF1WsArh34YyKtJ7UePcaq8TZG1 ZWrCD7MrQn2WOIeOYeT22MDDt2MDpwjeJSe05FaqNnTcwX5EyYxP8qb23M43s50y R2NMdqmFyeJFrW7qAxRHi2WmsZe1h4yuVv+0QahHr0zCSZ6CoVw7ruGjDDCkeXed mO8hh8PRBwH6zS7Rdio5UYHxAJ/7rY63IWxiEWgt3oq/aFzBPN7XZ8zh+MLu3zD2 q3NxuEeuU8IykFcEyU4VZIVV9A== -----END CERTIFICATE-----Generated at Wed Aug 20 16:33:03 2025 by rpki-client