$ rpki-client -vvf rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft File: 3CB1370100AB2291FE24983311386BE8544EB443.mft (raw, json) Hash identifier: RH4Fhd0UMRuPYkX1OX4DySvmKlQHIkfrp1hTCPbFipc= Subject key identifier: D0:48:29:0E:D2:D2:BA:F1:CF:90:21:87:AC:55:9F:08:E7:01:C1:27 Authority key identifier: 3C:B1:37:01:00:AB:22:91:FE:24:98:33:11:38:6B:E8:54:4E:B4:43 Certificate issuer: /CN=3CB1370100AB2291FE24983311386BE8544EB443 Certificate serial: 0A48021C458B262F63935A39A509C5805577F0F9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer Subject info access: rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft Manifest number: 14 Signing time: Mon 09 Jun 2025 18:22:39 +0000 Manifest this update: Mon 09 Jun 2025 18:17:39 +0000 Manifest next update: Tue 10 Jun 2025 19:13:39 +0000 Files and hashes: 1: 3CB1370100AB2291FE24983311386BE8544EB443.crl (hash: VTFt0bOJGo/1j/GvVeAPZbVYUiSVgMgcFuA5NHtDSV8=) 2: 3230302e3139362e3133322e302f32322d3332203d3e203631353833.roa (hash: uzmm5ylcizot7exAeSTtRzar+lRNmKPD7UUlSCP1Mvo=) 3: 3138362e3233372e3234302e302f32312d3332203d3e203631353833.roa (hash: HZaQGYZhuYbPmiSYTQlFoQ9P/XaoPw+zfSwUczQKaGk=) 4: 323830343a313864383a3a2f33322d313238203d3e203631353833.roa (hash: ALrk4GkwzW/CUCGGH5nZ+mNUu7DGUl6592H+MPhd8GQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.crl rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 19:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:48:02:1c:45:8b:26:2f:63:93:5a:39:a5:09:c5:80:55:77:f0:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CB1370100AB2291FE24983311386BE8544EB443 Validity Not Before: Jun 9 18:17:39 2025 GMT Not After : Jun 10 19:13:39 2025 GMT Subject: CN=D048290ED2D2BAF1CF902187AC559F08E701C127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:00:bf:f0:da:ae:7f:4f:9e:84:89:a5:1a: fc:fb:40:56:a5:4a:4e:d7:fb:d6:35:3e:6c:36:fc: 8c:f4:e2:c8:ac:95:91:81:da:66:08:5e:ac:6c:d6: 5a:c5:8a:77:f2:07:14:39:ee:9a:9f:40:1d:60:be: c7:7c:8f:39:14:35:be:ef:48:e5:61:ff:36:86:08: 58:3c:a2:7d:d8:da:c8:4d:aa:04:3e:95:3e:6f:de: e2:7c:9e:c0:49:d8:53:40:73:0c:e9:7a:7e:d9:2a: b6:4e:21:6e:c9:dd:b8:e1:fa:a6:51:46:30:3a:44: 9d:19:a8:a8:e0:6e:78:b0:46:68:bf:c1:fe:0e:6b: 1b:90:9d:e7:ca:af:80:e7:8b:04:aa:4c:c3:09:f0: 1c:29:f0:af:4b:48:61:84:aa:bd:81:ff:10:b1:b2: 0f:7b:9e:37:a0:3f:11:8b:4c:32:f7:a2:9b:d4:f2: b7:87:74:15:b0:e5:9d:d2:ea:3b:46:8b:72:67:89: 93:86:92:9c:ac:43:16:6e:4e:6e:33:67:9d:d6:c2: e3:ca:6c:07:fe:df:84:98:94:43:e1:31:74:4f:d1: 86:a3:68:5a:90:4c:a2:a0:46:bf:f6:35:b0:01:78: 22:33:92:94:96:35:b6:28:89:bf:2e:09:11:ec:55: 4f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:48:29:0E:D2:D2:BA:F1:CF:90:21:87:AC:55:9F:08:E7:01:C1:27 X509v3 Authority Key Identifier: keyid:3C:B1:37:01:00:AB:22:91:FE:24:98:33:11:38:6B:E8:54:4E:B4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:7a:2f:62:83:15:e0:b8:4a:cd:ea:9b:73:77:47:06:e9:74: c7:55:15:79:3f:39:9f:32:5a:f7:2b:44:c7:c5:81:6e:02:2a: a3:4b:8b:3b:df:33:bd:0f:ba:c6:66:fa:6e:f2:3e:67:35:3b: 3e:ef:ec:6b:49:78:90:f6:dd:f5:a3:49:58:7a:5a:3b:35:a8: 7d:31:50:1e:0e:5b:4a:2f:7c:96:17:81:82:c6:d5:70:ca:3e: 56:60:7d:18:bd:4f:d4:6f:a1:ea:a7:84:f9:eb:41:16:30:be: ed:67:4c:6b:5e:09:97:a4:ed:7f:19:bc:a9:78:a3:0b:ff:1f: 69:73:3c:c3:59:0c:00:f1:c1:ff:bb:29:1b:4b:a4:b5:13:8a: 22:79:30:b4:93:58:f8:1d:9b:8e:df:49:13:de:52:61:e6:35: 9d:0a:f2:42:a0:76:26:a0:1b:e3:58:df:17:38:dd:01:97:e7: 71:30:51:c9:a9:12:ce:95:0e:72:d1:f0:e9:4f:81:69:94:b1: f9:64:63:6a:1b:83:3c:03:56:86:47:0d:5e:53:71:89:d7:1b: 91:13:ff:d9:1a:18:b3:ec:5f:37:27:5a:bb:0a:62:fb:c4:6e: 6d:4e:25:ab:75:d2:c3:b7:dc:d5:8e:79:4d:f1:59:f8:14:65: 56:ff:ae:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCkgCHEWLJi9jk1o5pQnFgFV38PkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NCMTM3MDEwMEFCMjI5MUZFMjQ5ODMzMTEzODZCRTg1 NDRFQjQ0MzAeFw0yNTA2MDkxODE3MzlaFw0yNTA2MTAxOTEzMzlaMDMxMTAvBgNV BAMTKEQwNDgyOTBFRDJEMkJBRjFDRjkwMjE4N0FDNTU5RjA4RTcwMUMxMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8yAC/8Nquf0+ehImlGvz7QFal Sk7X+9Y1Pmw2/Iz04sislZGB2mYIXqxs1lrFinfyBxQ57pqfQB1gvsd8jzkUNb7v SOVh/zaGCFg8on3Y2shNqgQ+lT5v3uJ8nsBJ2FNAcwzpen7ZKrZOIW7J3bjh+qZR RjA6RJ0ZqKjgbniwRmi/wf4OaxuQnefKr4DniwSqTMMJ8Bwp8K9LSGGEqr2B/xCx sg97njegPxGLTDL3opvU8reHdBWw5Z3S6jtGi3JniZOGkpysQxZuTm4zZ53WwuPK bAf+34SYlEPhMXRP0YajaFqQTKKgRr/2NbABeCIzkpSWNbYoib8uCRHsVU8FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0EgpDtLSuvHPkCGHrFWfCOcBwScwHwYDVR0j BBgwFoAUPLE3AQCrIpH+JJgzEThr6FROtEMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFVvU2t2U1NOd29ZTkFkNlBNekFVdVVjaFc2WUJhdWd6cEhRTERTTVZF c0ovMC8zQ0IxMzcwMTAwQUIyMjkxRkUyNDk4MzMxMTM4NkJFODU0NEVCNDQzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDQjEzNzAxMDBBQjIyOTFG RTI0OTgzMzExMzg2QkU4NTQ0RUI0NDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFVvU2t2U1NOd29ZTkFkNlBNekFVdVVjaFc2WUJhdWd6cEhRTERTTVZFc0ovMC8z Q0IxMzcwMTAwQUIyMjkxRkUyNDk4MzMxMTM4NkJFODU0NEVCNDQzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkHovYoMV4LhKzeqbc3dHBul0x1UVeT85nzJa9ytEx8WBbgIqo0uLO98zvQ+6 xmb6bvI+ZzU7Pu/sa0l4kPbd9aNJWHpaOzWofTFQHg5bSi98lheBgsbVcMo+VmB9 GL1P1G+h6qeE+etBFjC+7WdMa14Jl6Ttfxm8qXijC/8faXM8w1kMAPHB/7spG0uk tROKInkwtJNY+B2bjt9JE95SYeY1nQryQqB2JqAb41jfFzjdAZfncTBRyakSzpUO ctHw6U+BaZSx+WRjahuDPANWhkcNXlNxidcbkRP/2RoYs+xfNydauwpi+8RubU4l q3XSw7fc1Y55TfFZ+BRlVv+unA== -----END CERTIFICATE-----Generated at Tue Jun 10 00:17:32 2025 by rpki-client