$ rpki-client -vvf rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.mft File: 1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.mft (raw, json) Hash identifier: jQanpR2UGm5SnNXbhsoJ5ZHhpQysOMw+pWVk2nTff/Y= Subject key identifier: BA:FA:95:D2:C7:CA:30:3E:4D:17:A8:C4:84:E9:3D:D8:8F:3D:D2:B2 Authority key identifier: 1B:82:7C:9E:BC:31:D4:8D:C1:0A:B5:2A:CE:52:BF:27:C8:9E:90:AC Certificate issuer: /CN=1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC Certificate serial: 6DEC72383DC6D3C73538AABDC1DBAE3DC51F7777 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer Subject info access: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.mft Manifest number: A2 Signing time: Tue 03 Jun 2025 21:15:30 +0000 Manifest this update: Tue 03 Jun 2025 21:10:30 +0000 Manifest next update: Wed 04 Jun 2025 22:17:30 +0000 Files and hashes: 1: 3133382e3230342e3137342e302f32342d3234203d3e20323633393131.roa (hash: UkIAzTtv7zNHC6mEiZX9b0Rmj5mT/9ghpLrDu2jgBAo=) 2: 3133382e3230342e3137332e302f32342d3234203d3e20323633393131.roa (hash: TyAo+zvMN960iqHQNkyo/Q9EZScApo7LPT/B3Y1KOvc=) 3: 1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.crl (hash: koTi6h8OWNWkLRoVq5wYVsdoWNjXjQxwqNS0S5UKo9c=) 4: 3133382e3230342e3137322e302f32332d3233203d3e20323633393131.roa (hash: u8mFZpedjB2s6UvM73xXjHzoFGbLZOF1jm5AvhQpWI8=) 5: 3133382e3230342e3137322e302f32342d3234203d3e20323633393131.roa (hash: jRRmpkYINt6f7Kh0pdTxWCvw9ovtGEVlyUA0cJo4gA4=) 6: 323830343a323739343a3a2f33322d3332203d3e20323633393131.roa (hash: lYKhM1T8j33p24NP9/yeVAvmbB8g8I24YnOMAaE6hqs=) 7: 3133382e3230342e3137352e302f32342d3234203d3e20323633393131.roa (hash: jw++sipOVn3pFZNqWvRQYE8TkrvwJHbo3/CkBKdTNiw=) 8: 3133382e3230342e3137342e302f32332d3233203d3e20323633393131.roa (hash: fUVzjxbCYkQsYHGoBVdanJJYpdVT0cBcZPQxWyQ0p94=) 9: 3133382e3230342e3137322e302f32322d3232203d3e20323633393131.roa (hash: WCaZcjrnKocLt6j31MgkjeiXOEWEJ3zUU0iemvoeAv0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.crl rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Jun 2025 22:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ec:72:38:3d:c6:d3:c7:35:38:aa:bd:c1:db:ae:3d:c5:1f:77:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC Validity Not Before: Jun 3 21:10:30 2025 GMT Not After : Jun 4 22:17:30 2025 GMT Subject: CN=BAFA95D2C7CA303E4D17A8C484E93DD88F3DD2B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:85:0a:ff:6b:3b:46:16:9b:10:6e:ee:9f:67: 0e:46:fc:1d:e2:ec:bc:c3:5a:10:32:0a:87:8e:6b: ef:d9:f8:09:18:e1:e4:fc:20:45:33:eb:f4:10:04: 76:34:66:9f:65:5b:07:ce:fc:5b:c2:f9:8c:d5:04: f4:df:d8:c5:fc:80:1b:2c:9b:34:c1:08:a7:56:32: 16:1d:7c:1c:da:aa:59:41:cd:3e:34:23:c4:43:18: 18:d9:83:66:91:e0:af:43:7a:65:61:63:4a:69:34: d9:45:10:b1:8e:83:ac:c7:1a:e9:da:d1:21:0e:fd: ec:90:7f:d5:9b:d6:28:e9:98:85:d1:87:cb:75:05: 07:f8:4a:e8:78:54:bf:1b:d5:05:90:fd:c6:4f:ee: 84:1d:77:50:c6:23:ab:dd:d6:cf:7c:72:9b:4d:1c: 1a:78:0a:24:2b:33:4b:3f:96:31:70:d1:30:e6:ee: ac:89:80:d8:5e:4f:f2:e8:f8:1c:76:df:98:40:db: d2:05:c2:57:e3:8b:84:83:bc:de:08:ea:fd:fa:36: 83:9c:f8:2b:bd:5a:fb:39:b3:20:82:b8:b7:b3:d1: 2f:82:d8:b8:ec:90:fd:2f:6c:a3:b2:44:e9:a3:f6: ca:e8:5c:7e:c3:ac:de:be:80:62:cd:4c:52:d7:19: df:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FA:95:D2:C7:CA:30:3E:4D:17:A8:C4:84:E9:3D:D8:8F:3D:D2:B2 X509v3 Authority Key Identifier: keyid:1B:82:7C:9E:BC:31:D4:8D:C1:0A:B5:2A:CE:52:BF:27:C8:9E:90:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1B827C9EBC31D48DC10AB52ACE52BF27C89E90AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3e:f1:b2:29:4f:f3:95:4a:55:39:e3:9e:dc:f4:aa:dd:97: 68:a6:00:a9:75:4a:25:fc:ae:dc:21:e3:c2:50:15:97:3e:80: 9f:89:bf:27:2a:f7:1c:30:ca:84:ab:cf:35:5d:8e:b4:75:35: 85:92:58:a8:01:77:55:56:a2:41:fd:95:89:69:80:c5:57:a9: e3:48:6d:ec:f4:9e:fe:60:f8:18:30:56:33:8b:0e:49:90:63: 79:43:7c:55:d1:f2:86:08:7a:5c:ea:ce:7d:42:e8:35:ba:59: fa:03:cd:2f:8a:84:c1:0b:13:35:93:a5:b2:22:fb:b9:9c:c7: 22:2f:7a:df:f3:a7:e2:94:81:55:b8:a0:94:ff:f4:0e:77:4e: b5:0a:01:77:fc:61:f9:36:e4:9d:ff:dd:bd:76:80:25:c1:f1: c7:dd:96:e9:0f:a6:18:a3:ea:65:2f:63:b4:35:c4:80:a4:bd: c5:28:11:50:9c:98:0e:6e:19:8d:1f:5d:00:bb:10:86:33:41: 91:c0:68:ad:96:80:32:f4:16:a7:5b:f8:a7:21:68:f3:27:b4: b0:cd:7c:0c:83:70:22:56:42:10:b3:94:30:31:4f:da:7d:25: ce:ce:4e:5c:90:5a:e2:d5:0d:65:d4:df:00:ca:e6:34:d4:f6: c2:bd:5c:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbexyOD3G08c1OKq9wduuPcUfd3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI4MjdDOUVCQzMxRDQ4REMxMEFCNTJBQ0U1MkJGMjdD ODlFOTBBQzAeFw0yNTA2MDMyMTEwMzBaFw0yNTA2MDQyMjE3MzBaMDMxMTAvBgNV BAMTKEJBRkE5NUQyQzdDQTMwM0U0RDE3QThDNDg0RTkzREQ4OEYzREQyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhQr/aztGFpsQbu6fZw5G/B3i 7LzDWhAyCoeOa+/Z+AkY4eT8IEUz6/QQBHY0Zp9lWwfO/FvC+YzVBPTf2MX8gBss mzTBCKdWMhYdfBzaqllBzT40I8RDGBjZg2aR4K9DemVhY0ppNNlFELGOg6zHGuna 0SEO/eyQf9Wb1ijpmIXRh8t1BQf4Suh4VL8b1QWQ/cZP7oQdd1DGI6vd1s98cptN HBp4CiQrM0s/ljFw0TDm7qyJgNheT/Lo+Bx235hA29IFwlfji4SDvN4I6v36NoOc +Cu9Wvs5syCCuLez0S+C2LjskP0vbKOyROmj9sroXH7DrN6+gGLNTFLXGd+TAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuvqV0sfKMD5NF6jEhOk92I890rIwHwYDVR0j BBgwFoAUG4J8nrwx1I3BCrUqzlK/J8iekKwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM29YUkFxd3dIRmYyaXdZam5adENCamFrWnQxNlMydlB4Yjk0d2NCcnNT clgvMC8xQjgyN0M5RUJDMzFENDhEQzEwQUI1MkFDRTUyQkYyN0M4OUU5MEFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCODI3QzlFQkMzMUQ0OERD MTBBQjUyQUNFNTJCRjI3Qzg5RTkwQUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M29YUkFxd3dIRmYyaXdZam5adENCamFrWnQxNlMydlB4Yjk0d2NCcnNTclgvMC8x QjgyN0M5RUJDMzFENDhEQzEwQUI1MkFDRTUyQkYyN0M4OUU5MEFDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALD7xsilP85VKVTnjntz0qt2XaKYAqXVKJfyu3CHjwlAVlz6An4m/Jyr3HDDK hKvPNV2OtHU1hZJYqAF3VVaiQf2ViWmAxVep40ht7PSe/mD4GDBWM4sOSZBjeUN8 VdHyhgh6XOrOfULoNbpZ+gPNL4qEwQsTNZOlsiL7uZzHIi963/On4pSBVbiglP/0 DndOtQoBd/xh+Tbknf/dvXaAJcHxx92W6Q+mGKPqZS9jtDXEgKS9xSgRUJyYDm4Z jR9dALsQhjNBkcBorZaAMvQWp1v4pyFo8ye0sM18DINwIlZCELOUMDFP2n0lzs5O XJBa4tUNZdTfAMrmNNT2wr1c5g== -----END CERTIFICATE-----Generated at Wed Jun 4 11:31:26 2025 by rpki-client