$ rpki-client -vvf rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft File: 3CB1370100AB2291FE24983311386BE8544EB443.mft (raw, json) Hash identifier: UxTj6afh5EsUFOLfWks38CWm/rf0E4L2pDymjHBg0V4= Subject key identifier: 14:01:B2:BB:B5:DF:2E:B3:91:2D:8A:2E:94:EF:10:55:AE:3E:0D:87 Authority key identifier: 3C:B1:37:01:00:AB:22:91:FE:24:98:33:11:38:6B:E8:54:4E:B4:43 Certificate issuer: /CN=3CB1370100AB2291FE24983311386BE8544EB443 Certificate serial: 4FF79946ECFE2E5E4AA45626D1029481652A1393 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer Subject info access: rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft Manifest number: 15 Signing time: Tue 10 Jun 2025 11:18:06 +0000 Manifest this update: Tue 10 Jun 2025 11:13:06 +0000 Manifest next update: Wed 11 Jun 2025 12:07:06 +0000 Files and hashes: 1: 3CB1370100AB2291FE24983311386BE8544EB443.crl (hash: dRkV+NXCMQuYIWHM4wZhr23aQYNEl8bR0Pd+LsYRQnE=) 2: 3138362e3233372e3234302e302f32312d3332203d3e203631353833.roa (hash: HZaQGYZhuYbPmiSYTQlFoQ9P/XaoPw+zfSwUczQKaGk=) 3: 3230302e3139362e3133322e302f32322d3332203d3e203631353833.roa (hash: uzmm5ylcizot7exAeSTtRzar+lRNmKPD7UUlSCP1Mvo=) 4: 323830343a313864383a3a2f33322d313238203d3e203631353833.roa (hash: ALrk4GkwzW/CUCGGH5nZ+mNUu7DGUl6592H+MPhd8GQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.crl rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 12:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f7:99:46:ec:fe:2e:5e:4a:a4:56:26:d1:02:94:81:65:2a:13:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CB1370100AB2291FE24983311386BE8544EB443 Validity Not Before: Jun 10 11:13:06 2025 GMT Not After : Jun 11 12:07:06 2025 GMT Subject: CN=1401B2BBB5DF2EB3912D8A2E94EF1055AE3E0D87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b4:dc:21:dd:bd:b1:ed:31:50:2a:d3:4c:98: 7b:3a:7c:55:1a:a7:c2:de:b5:fe:ea:2d:6e:31:98: 2b:e5:90:bb:83:19:4c:7b:84:e8:9e:74:50:57:74: 0b:1f:e4:88:d3:da:5b:ae:58:cb:10:98:29:ca:f0: ed:a8:08:71:1e:1b:3a:a8:ba:7b:07:6b:e5:70:45: 6f:4e:ce:c5:40:44:f1:02:2f:d3:d1:d1:29:a3:aa: f8:27:ce:bd:a2:0e:b6:82:2f:98:8a:82:1d:a9:aa: 01:dd:54:66:d2:8c:da:fb:c1:14:9e:a7:39:35:9e: 7c:7b:2d:3b:ad:6c:88:63:e7:a7:56:17:78:12:fe: 39:77:46:37:37:21:b3:27:48:9c:43:a2:41:61:1c: 35:93:12:88:27:b5:df:f1:75:a7:93:69:8d:b2:5a: 5a:92:a7:6c:1e:10:e3:7c:6f:60:48:6e:63:d3:b2: d0:cf:fc:a8:52:c5:3e:f0:db:43:b2:1f:50:cc:be: 21:b7:55:ac:cc:4d:67:81:39:70:30:dc:c4:58:7d: 0a:56:8f:db:6d:c8:02:b8:cf:6d:83:fb:ae:1d:69: 94:b9:aa:55:f1:2b:b3:f8:7c:4a:c5:b0:c3:1f:32: c3:7b:e6:ff:bf:c0:f8:86:18:4c:74:2a:ad:54:2b: e3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:01:B2:BB:B5:DF:2E:B3:91:2D:8A:2E:94:EF:10:55:AE:3E:0D:87 X509v3 Authority Key Identifier: keyid:3C:B1:37:01:00:AB:22:91:FE:24:98:33:11:38:6B:E8:54:4E:B4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:83:b9:e0:16:30:33:65:57:61:61:e8:22:b8:3b:66:d2:d6: fa:f2:ca:8c:8d:0d:4d:b8:7c:2f:b5:1c:45:2b:74:58:29:69: 12:33:a9:7d:09:69:7c:fe:36:8d:5f:f8:cb:e1:02:95:e1:37: 96:f4:46:35:fe:36:ab:61:fb:f6:3e:88:f6:61:b9:7e:f0:33: 7d:34:85:0a:b4:26:ea:24:58:0c:67:d3:22:bb:c4:90:46:a5: 62:52:c0:86:48:c7:38:90:64:83:84:7b:33:bb:44:5e:cb:98: fd:ad:97:f2:a5:e5:18:19:1c:91:8d:e5:ab:df:c1:55:dd:2b: 5a:f6:96:85:f8:31:c0:e8:08:b5:3b:ae:d7:23:b8:65:f0:d0: 64:d1:df:8c:87:45:72:36:8e:d9:e9:7a:34:78:25:89:15:fe: 0b:b6:9a:6f:b2:b7:c8:1a:ba:ae:9c:a9:5a:b3:db:be:0b:87: 6a:6a:0b:f6:a4:4e:ef:f5:a2:20:a6:d4:c2:33:40:ac:1c:7e: 80:13:89:e6:13:c1:d0:a5:15:9c:e3:d8:b0:d7:e5:bd:a2:3a: 3d:9e:3f:eb:57:96:14:77:4d:5a:dd:1f:b8:56:99:99:ec:9c: c4:44:de:3e:c8:0b:bb:3f:ff:ef:78:1d:cf:4c:ca:ec:16:50: 94:79:b2:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUT/eZRuz+Ll5KpFYm0QKUgWUqE5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCMTM3MDEwMEFCMjI5MUZFMjQ5ODMzMTEzODZCRTg1 NDRFQjQ0MzAeFw0yNTA2MTAxMTEzMDZaFw0yNTA2MTExMjA3MDZaMDMxMTAvBgNV BAMTKDE0MDFCMkJCQjVERjJFQjM5MTJEOEEyRTk0RUYxMDU1QUUzRTBEODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtNwh3b2x7TFQKtNMmHs6fFUa p8Letf7qLW4xmCvlkLuDGUx7hOiedFBXdAsf5IjT2luuWMsQmCnK8O2oCHEeGzqo unsHa+VwRW9OzsVARPECL9PR0Smjqvgnzr2iDraCL5iKgh2pqgHdVGbSjNr7wRSe pzk1nnx7LTutbIhj56dWF3gS/jl3Rjc3IbMnSJxDokFhHDWTEogntd/xdaeTaY2y WlqSp2weEON8b2BIbmPTstDP/KhSxT7w20OyH1DMviG3VazMTWeBOXAw3MRYfQpW j9ttyAK4z22D+64daZS5qlXxK7P4fErFsMMfMsN75v+/wPiGGEx0Kq1UK+PvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUFAGyu7XfLrORLYoulO8QVa4+DYcwHwYDVR0j BBgwFoAUPLE3AQCrIpH+JJgzEThr6FROtEMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFVvU2t2U1NOd29ZTkFkNlBNekFVdVVjaFc2WUJhdWd6cEhRTERTTVZF c0ovMC8zQ0IxMzcwMTAwQUIyMjkxRkUyNDk4MzMxMTM4NkJFODU0NEVCNDQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDQjEzNzAxMDBBQjIyOTFG RTI0OTgzMzExMzg2QkU4NTQ0RUI0NDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFVvU2t2U1NOd29ZTkFkNlBNekFVdVVjaFc2WUJhdWd6cEhRTERTTVZFc0ovMC8z Q0IxMzcwMTAwQUIyMjkxRkUyNDk4MzMxMTM4NkJFODU0NEVCNDQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmIO54BYwM2VXYWHoIrg7ZtLW+vLKjI0NTbh8L7UcRSt0WClpEjOpfQlpfP42 jV/4y+ECleE3lvRGNf42q2H79j6I9mG5fvAzfTSFCrQm6iRYDGfTIrvEkEalYlLA hkjHOJBkg4R7M7tEXsuY/a2X8qXlGBkckY3lq9/BVd0rWvaWhfgxwOgItTuu1yO4 ZfDQZNHfjIdFcjaO2el6NHgliRX+C7aab7K3yBq6rpypWrPbvguHamoL9qRO7/Wi IKbUwjNArBx+gBOJ5hPB0KUVnOPYsNflvaI6PZ4/61eWFHdNWt0fuFaZmeycxETe PsgLuz//73gdz0zK7BZQlHmyhA== -----END CERTIFICATE-----Generated at Tue Jun 10 19:59:39 2025 by rpki-client