$ rpki-client -vvf rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft File: 3CB1370100AB2291FE24983311386BE8544EB443.mft (raw, json) Hash identifier: dEQlbrQopTjpuiizDtlHWTipCrJ3C2D6iLbke4qoDVY= Subject key identifier: 53:44:9F:4E:65:B3:83:02:B2:44:9D:28:04:82:D4:2E:DA:79:97:3C Authority key identifier: 3C:B1:37:01:00:AB:22:91:FE:24:98:33:11:38:6B:E8:54:4E:B4:43 Certificate issuer: /CN=3CB1370100AB2291FE24983311386BE8544EB443 Certificate serial: 31E59BB5B27DDF429B70D1A917D542EDF5EAF963 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer Subject info access: rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft Manifest number: 17 Signing time: Wed 11 Jun 2025 20:33:43 +0000 Manifest this update: Wed 11 Jun 2025 20:28:43 +0000 Manifest next update: Thu 12 Jun 2025 23:52:43 +0000 Files and hashes: 1: 3CB1370100AB2291FE24983311386BE8544EB443.crl (hash: LLwV5GK/sqN853aWib3fNhE9ARtJ/cRyueh5mLfbngs=) 2: 3230302e3139362e3133322e302f32322d3332203d3e203631353833.roa (hash: uzmm5ylcizot7exAeSTtRzar+lRNmKPD7UUlSCP1Mvo=) 3: 323830343a313864383a3a2f33322d313238203d3e203631353833.roa (hash: ALrk4GkwzW/CUCGGH5nZ+mNUu7DGUl6592H+MPhd8GQ=) 4: 3138362e3233372e3234302e302f32312d3332203d3e203631353833.roa (hash: HZaQGYZhuYbPmiSYTQlFoQ9P/XaoPw+zfSwUczQKaGk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.crl rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Jun 2025 23:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e5:9b:b5:b2:7d:df:42:9b:70:d1:a9:17:d5:42:ed:f5:ea:f9:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CB1370100AB2291FE24983311386BE8544EB443 Validity Not Before: Jun 11 20:28:43 2025 GMT Not After : Jun 12 23:52:43 2025 GMT Subject: CN=53449F4E65B38302B2449D280482D42EDA79973C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:d7:35:42:b1:78:1c:2d:5c:9e:14:16:ef: 4e:f7:a4:bf:51:2c:28:74:4c:c8:86:5e:a4:ef:55: 8c:26:1c:9a:1a:4e:90:45:be:76:5c:99:2f:10:ae: 32:01:2b:1d:01:b1:ae:dd:90:39:1c:f1:13:5f:85: cc:9c:44:df:f6:76:e2:8a:ce:41:d1:1f:53:9c:7d: 3b:49:6d:7b:ef:c1:bf:8c:76:6d:b9:16:e4:50:ef: 1c:56:27:00:cf:65:7c:3f:4b:88:89:1c:1b:ac:55: ad:23:8b:43:36:55:62:44:dc:94:1f:a8:07:05:64: d9:20:1b:9d:e7:5d:05:7c:ee:ac:81:d1:89:80:a8: 23:f2:67:0e:ec:74:cb:fd:9c:42:e4:33:99:8d:e3: 14:79:df:4f:25:92:e5:da:57:11:0c:03:75:23:36: 40:2a:7e:eb:3a:02:7d:6f:4d:9f:00:af:49:ac:ca: a1:fe:40:bb:b6:8d:54:aa:49:82:02:c2:99:a5:26: 0a:62:74:43:cf:98:93:2a:51:2c:de:49:5d:67:66: ab:e7:a0:57:28:38:60:38:13:c6:28:f1:fa:f1:43: 34:89:15:92:0b:35:28:15:e0:00:87:a4:84:da:bb: 13:be:e6:a8:e8:a4:ae:9c:71:15:00:15:f7:56:fd: eb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:44:9F:4E:65:B3:83:02:B2:44:9D:28:04:82:D4:2E:DA:79:97:3C X509v3 Authority Key Identifier: keyid:3C:B1:37:01:00:AB:22:91:FE:24:98:33:11:38:6B:E8:54:4E:B4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:55:76:28:ce:3c:46:f3:18:24:88:30:79:eb:8c:63:b8:4a: f4:a8:28:43:a3:0f:af:0f:76:fe:cd:cb:29:f8:46:af:d8:44: 40:32:d0:13:b8:15:44:c5:5f:49:d8:2a:9d:87:61:bf:01:4e: 61:47:98:4f:1a:cc:d3:dd:ad:fd:70:69:5d:35:e4:82:12:c2: ca:c7:77:af:4e:5c:be:6b:4e:cf:50:a5:7c:82:b0:10:89:b1: e5:8d:f4:28:05:0d:d8:ba:ac:6b:c8:f7:55:bd:b4:15:f3:b3: 2a:ee:dd:81:be:18:ba:46:cb:6f:08:d5:34:b0:5a:ea:b8:c1: fc:8a:4d:a1:88:6e:20:ba:af:d9:7c:23:2a:79:79:cf:84:00: 85:26:ad:58:c8:ac:d4:3e:96:0e:8c:a1:e4:16:07:83:92:17: cd:47:d3:08:ea:c9:33:66:bb:39:56:4a:d5:b8:58:a2:3e:f2: 77:36:1e:ef:43:34:c4:7a:b4:68:d1:96:10:b4:e9:ac:1b:fe: f3:a2:1f:57:64:67:eb:36:42:23:91:a7:28:2f:33:6c:a6:45: 62:29:36:b3:2e:35:05:ed:0b:cd:28:22:a7:a6:bc:26:2a:05: 18:dc:7b:b7:c5:4f:62:84:5f:3d:42:8a:2d:9f:b4:e5:ed:6d: 04:1d:d9:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMeWbtbJ930KbcNGpF9VC7fXq+WMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCMTM3MDEwMEFCMjI5MUZFMjQ5ODMzMTEzODZCRTg1 NDRFQjQ0MzAeFw0yNTA2MTEyMDI4NDNaFw0yNTA2MTIyMzUyNDNaMDMxMTAvBgNV BAMTKDUzNDQ5RjRFNjVCMzgzMDJCMjQ0OUQyODA0ODJENDJFREE3OTk3M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+mdc1QrF4HC1cnhQW7073pL9R LCh0TMiGXqTvVYwmHJoaTpBFvnZcmS8QrjIBKx0Bsa7dkDkc8RNfhcycRN/2duKK zkHRH1OcfTtJbXvvwb+Mdm25FuRQ7xxWJwDPZXw/S4iJHBusVa0ji0M2VWJE3JQf qAcFZNkgG53nXQV87qyB0YmAqCPyZw7sdMv9nELkM5mN4xR5308lkuXaVxEMA3Uj NkAqfus6An1vTZ8Ar0msyqH+QLu2jVSqSYICwpmlJgpidEPPmJMqUSzeSV1nZqvn oFcoOGA4E8Yo8frxQzSJFZILNSgV4ACHpITauxO+5qjopK6ccRUAFfdW/esTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUU0SfTmWzgwKyRJ0oBILULtp5lzwwHwYDVR0j BBgwFoAUPLE3AQCrIpH+JJgzEThr6FROtEMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFVvU2t2U1NOd29ZTkFkNlBNekFVdVVjaFc2WUJhdWd6cEhRTERTTVZF c0ovMC8zQ0IxMzcwMTAwQUIyMjkxRkUyNDk4MzMxMTM4NkJFODU0NEVCNDQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDQjEzNzAxMDBBQjIyOTFG RTI0OTgzMzExMzg2QkU4NTQ0RUI0NDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFVvU2t2U1NOd29ZTkFkNlBNekFVdVVjaFc2WUJhdWd6cEhRTERTTVZFc0ovMC8z Q0IxMzcwMTAwQUIyMjkxRkUyNDk4MzMxMTM4NkJFODU0NEVCNDQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAFV2KM48RvMYJIgweeuMY7hK9KgoQ6MPrw92/s3LKfhGr9hEQDLQE7gVRMVf SdgqnYdhvwFOYUeYTxrM092t/XBpXTXkghLCysd3r05cvmtOz1ClfIKwEImx5Y30 KAUN2Lqsa8j3Vb20FfOzKu7dgb4YukbLbwjVNLBa6rjB/IpNoYhuILqv2XwjKnl5 z4QAhSatWMis1D6WDoyh5BYHg5IXzUfTCOrJM2a7OVZK1bhYoj7ydzYe70M0xHq0 aNGWELTprBv+86IfV2Rn6zZCI5GnKC8zbKZFYik2sy41Be0LzSgip6a8JioFGNx7 t8VPYoRfPUKKLZ+05e1tBB3ZVg== -----END CERTIFICATE-----Generated at Thu Jun 12 02:41:15 2025 by rpki-client