$ rpki-client -vvf rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft File: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft (raw, json) Hash identifier: oQXy6BGlSQUP/ZEhfS0htb/wFuMvs17nQLdCGBCrsPs= Subject key identifier: 6B:D4:0B:D9:9E:D3:CC:12:B8:AA:C0:D6:E0:AA:4C:A8:56:20:90:E1 Authority key identifier: 3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56 Certificate issuer: /CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156 Certificate serial: 46B54E2EAC91A409E1D4336534AF2CC0FDE2D37E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer Subject info access: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft Manifest number: 02A2 Signing time: Wed 20 Aug 2025 05:09:04 +0000 Manifest this update: Wed 20 Aug 2025 05:04:04 +0000 Manifest next update: Thu 21 Aug 2025 07:11:04 +0000 Files and hashes: 1: 34352e3233302e39322e302f32322d3234203d3e20323637313734.roa (hash: pqluJp9dP8BehPp8wAJ7d4shVc60G8J0RZCSVM3YKrY=) 2: 323830343a343934343a3a2f33322d3438203d3e20323637313734.roa (hash: /98gqYovjRwsWAOUZz7FJqYoYsB4E7lW4Ll5DwBrRaQ=) 3: 3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl (hash: uPv1hJnSRiLgT71ia/5C9J7H85QE2QerbTTPh3aVr8U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 07:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b5:4e:2e:ac:91:a4:09:e1:d4:33:65:34:af:2c:c0:fd:e2:d3:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156 Validity Not Before: Aug 20 05:04:04 2025 GMT Not After : Aug 21 07:11:04 2025 GMT Subject: CN=6BD40BD99ED3CC12B8AAC0D6E0AA4CA8562090E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b9:79:b3:be:81:29:ed:52:5c:8c:f2:16:4f: d1:fd:25:1d:cc:8d:38:e5:9b:81:7d:92:10:8f:78: e4:6f:cd:e4:0e:00:55:44:25:75:4e:93:7b:44:bb: 8b:31:a9:4c:a3:78:e6:c4:18:2b:b8:3e:e5:69:e5: ba:2b:ca:f8:ac:6a:94:cc:31:33:38:ae:0a:d6:46: 0b:fc:2f:07:90:d4:23:c2:37:7e:8c:dc:1e:87:2e: d3:60:0f:20:16:7d:df:aa:f6:f4:49:40:c4:fe:75: c4:ca:a4:2b:9e:48:a3:20:34:b8:27:9a:1d:1d:88: 7c:5d:f2:9a:2c:81:99:b6:7e:ff:60:81:8f:af:86: b9:08:40:aa:63:e2:4f:30:a3:51:37:4b:85:17:2b: f5:e4:4c:4b:14:5d:e5:ea:61:97:3f:3c:97:68:9a: 21:a2:15:bf:ce:8c:5b:11:fe:c5:c1:1b:16:8f:e6: d4:c7:f1:9e:94:47:b6:d5:24:a0:fd:b8:1c:da:bd: f0:77:fc:8a:50:96:87:83:22:ed:5e:9f:ac:4c:48: ac:33:16:c7:4f:02:11:1a:57:c5:44:a5:c3:85:f1: ad:33:51:05:c8:cf:d6:db:49:f0:d5:0b:8f:e7:55: a3:68:5b:18:c4:17:ea:27:e3:44:33:4c:33:70:01: 77:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D4:0B:D9:9E:D3:CC:12:B8:AA:C0:D6:E0:AA:4C:A8:56:20:90:E1 X509v3 Authority Key Identifier: keyid:3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:3a:df:e1:e8:fc:ca:1f:1b:b4:66:36:ec:9c:5b:51:1a:29: ad:35:aa:d8:3b:96:ff:e6:54:3f:0d:05:9e:a9:17:41:11:fb: 8d:ba:70:61:ed:9e:16:71:d8:0d:1d:3a:6f:be:15:83:d1:42: 0c:d6:09:fc:90:d0:2f:4e:bb:63:20:0e:c1:f3:69:01:c9:16: 5b:c8:eb:cd:6c:c3:04:04:8d:5f:a3:cf:3b:f4:72:eb:3b:0b: f5:97:e5:9c:ea:3d:7f:f4:dd:bc:51:33:cf:54:96:5b:d5:f4: 9d:04:d4:27:10:1e:8a:00:db:50:da:9e:4a:e9:9b:ea:cd:a7: 80:c1:92:06:50:07:3e:6b:b8:7b:70:4e:ca:74:ea:06:91:34: 0c:32:e8:86:9a:00:19:10:5f:7e:ae:9e:a7:7a:62:1b:74:4c: 71:2c:d0:24:91:b0:3d:09:b6:02:13:3b:25:ae:54:73:7f:8d: f8:72:4d:16:d7:f2:fc:e7:05:6c:4e:50:45:fe:79:53:17:d4: e1:64:c5:7b:ff:c9:96:de:df:01:ac:01:53:37:7f:47:2a:3e: 6a:ad:4e:a0:60:80:76:27:b8:5c:f1:6a:af:be:36:0a:27:cc: 9a:1d:e7:bf:fa:15:65:04:3d:e1:b8:25:e5:d0:05:ff:0d:63: 10:d9:15:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURrVOLqyRpAnh1DNlNK8swP3i034wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFMjdFOTM4MjREMUE4Q0JCQThDOUE0RUYxMTVFRjlE Q0EwMDE1NjAeFw0yNTA4MjAwNTA0MDRaFw0yNTA4MjEwNzExMDRaMDMxMTAvBgNV BAMTKDZCRDQwQkQ5OUVEM0NDMTJCOEFBQzBENkUwQUE0Q0E4NTYyMDkwRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZuXmzvoEp7VJcjPIWT9H9JR3M jTjlm4F9khCPeORvzeQOAFVEJXVOk3tEu4sxqUyjeObEGCu4PuVp5boryvisapTM MTM4rgrWRgv8LweQ1CPCN36M3B6HLtNgDyAWfd+q9vRJQMT+dcTKpCueSKMgNLgn mh0diHxd8posgZm2fv9ggY+vhrkIQKpj4k8wo1E3S4UXK/XkTEsUXeXqYZc/PJdo miGiFb/OjFsR/sXBGxaP5tTH8Z6UR7bVJKD9uBzavfB3/IpQloeDIu1en6xMSKwz FsdPAhEaV8VEpcOF8a0zUQXIz9bbSfDVC4/nVaNoWxjEF+on40QzTDNwAXdvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUa9QL2Z7TzBK4qsDW4KpMqFYgkOEwHwYDVR0j BBgwFoAUPOJ+k4JNGoy7qMmk7xFe+dygAVYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVhKTEJhbXZ5c2h6WVBnQkVzeXdwUnJHNUZvRWVaTm12Z0FEYzZleDg4 bmUvMS8zQ0UyN0U5MzgyNEQxQThDQkJBOEM5QTRFRjExNUVGOURDQTAwMTU2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRTI3RTkzODI0RDFBOENC QkE4QzlBNEVGMTE1RUY5RENBMDAxNTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVhKTEJhbXZ5c2h6WVBnQkVzeXdwUnJHNUZvRWVaTm12Z0FEYzZleDg4bmUvMS8z Q0UyN0U5MzgyNEQxQThDQkJBOEM5QTRFRjExNUVGOURDQTAwMTU2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAADrf4ej8yh8btGY27JxbURoprTWq2DuW/+ZUPw0FnqkXQRH7jbpwYe2eFnHY DR06b74Vg9FCDNYJ/JDQL067YyAOwfNpAckWW8jrzWzDBASNX6PPO/Ry6zsL9Zfl nOo9f/TdvFEzz1SWW9X0nQTUJxAeigDbUNqeSumb6s2ngMGSBlAHPmu4e3BOynTq BpE0DDLohpoAGRBffq6ep3piG3RMcSzQJJGwPQm2AhM7Ja5Uc3+N+HJNFtfy/OcF bE5QRf55UxfU4WTFe//Jlt7fAawBUzd/Ryo+aq1OoGCAdie4XPFqr742CifMmh3n v/oVZQQ94bgl5dAF/w1jENkV8g== -----END CERTIFICATE-----Generated at Wed Aug 20 16:17:05 2025 by rpki-client