$ rpki-client -vvf rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft File: 3BA0E4707E0361E96A25CFBC6104551202B34011.mft (raw, json) Hash identifier: 9mqI6OyBotrdqcYYJCvRwy/0lwKMEtcMtPrBJQg/5wk= Subject key identifier: 1B:06:DE:29:62:AF:5F:09:59:4E:C1:A6:F1:B3:8E:C3:DD:03:6D:D5 Authority key identifier: 3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 Certificate issuer: /CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Certificate serial: 04ECD5471D02631FAD011017AE26C665B12F59EC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft Manifest number: 0236 Signing time: Mon 09 Jun 2025 09:21:05 +0000 Manifest this update: Mon 09 Jun 2025 09:16:05 +0000 Manifest next update: Tue 10 Jun 2025 13:08:05 +0000 Files and hashes: 1: 3136382e302e33322e302f32322d3234203d3e20323635323232.roa (hash: FfWivJ4gNEyGVTWyPXQlAoFJfcDTKU2BxPer5WjncSs=) 2: 323830343a326337633a3a2f33322d3438203d3e20323635323232.roa (hash: gZh/j6TTWYlb6HfDh0Q2BiPD8Rby4m6dl3mVzy3MH6M=) 3: 3BA0E4707E0361E96A25CFBC6104551202B34011.crl (hash: Zy8X78Wea51czd3kAIQACsiXShXjAPIKzQbgb1pPz9U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 13:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ec:d5:47:1d:02:63:1f:ad:01:10:17:ae:26:c6:65:b1:2f:59:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Validity Not Before: Jun 9 09:16:05 2025 GMT Not After : Jun 10 13:08:05 2025 GMT Subject: CN=1B06DE2962AF5F09594EC1A6F1B38EC3DD036DD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b9:1c:38:c6:e1:bc:16:59:9a:cf:28:b8:7c: 1a:9d:69:76:df:01:af:4b:f0:3d:a2:e3:1e:93:fa: fb:f0:6f:d6:74:29:94:73:a6:b3:7b:96:45:c9:e6: 43:73:2c:a8:79:09:ea:38:b2:7c:92:d4:51:98:8e: 26:75:30:3e:cd:7e:42:bd:c4:27:11:8f:48:cd:7b: 11:cc:4f:aa:0c:97:e4:09:7c:14:58:ce:85:5b:70: 43:2a:f4:03:b0:0b:3d:1c:5f:d6:37:75:54:ac:a3: 28:eb:58:29:3d:eb:e0:4f:1e:7d:d8:e2:46:37:f4: 24:99:6d:d8:f8:ef:1e:24:1b:95:12:54:ca:c1:b7: 7b:21:3e:4e:b9:37:e8:1e:4c:3d:30:19:49:5f:59: e4:6c:10:3c:93:86:8b:fd:b1:70:dc:f1:61:02:2d: c8:cb:0f:5b:eb:5c:dd:f2:82:35:4d:55:0a:99:27: 44:98:3f:56:bf:4b:66:7c:95:7b:9c:29:7b:db:c1: 1e:6c:8a:b7:21:da:f8:c8:11:42:fe:11:43:f7:dd: f7:3f:dd:80:d1:30:41:50:a4:03:d9:73:b0:70:42: a4:4f:b8:a6:51:42:75:9d:5a:02:eb:f1:79:29:bf: 3b:5d:56:3a:46:04:4e:e2:7a:02:50:f9:c3:cf:f3: b3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:06:DE:29:62:AF:5F:09:59:4E:C1:A6:F1:B3:8E:C3:DD:03:6D:D5 X509v3 Authority Key Identifier: keyid:3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:10:2b:9f:ab:69:b8:f9:77:3e:d6:da:42:ae:f1:ea:c2:d1: b0:0e:4d:47:ad:d2:5e:d3:36:69:3d:04:b9:0e:f5:32:44:33: 67:fd:cd:1a:ce:7d:19:6c:c9:18:3a:dc:a9:5a:af:e2:64:c1: 43:48:47:1f:a6:38:19:be:ba:8f:74:6b:7c:6b:4b:5c:09:b5: 38:f3:fe:33:fb:c7:c6:5a:41:64:6f:89:13:7f:ae:9a:0f:df: b7:d8:18:bd:e6:0f:b5:29:c1:d5:68:52:5d:23:82:88:3c:cf: c7:b2:6e:74:78:ee:83:ae:ed:e9:14:93:a1:19:39:00:b8:e0: 12:f3:79:98:0f:5b:fb:bf:7d:2e:ce:ea:c1:1b:3d:3f:a6:d0: 36:bc:14:d2:3b:f9:a7:74:37:1c:14:6b:71:cf:ea:e3:c1:8a: 1e:b0:cc:08:ff:14:4c:29:17:d2:3b:63:24:d6:4b:0c:af:18: 60:a3:ae:af:c7:e6:2c:69:78:48:ef:fe:e2:16:4e:e4:79:a7: 3c:60:01:59:69:5f:6a:48:03:7c:22:bd:2a:ad:a1:4b:62:14: 46:d3:45:a5:00:2b:e6:dd:aa:a3:a2:cf:38:a0:cc:cd:78:2f: 05:55:d4:a1:0e:48:bc:9e:89:7c:e4:b6:d6:21:95:6f:7f:91: 6a:82:f7:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBOzVRx0CYx+tARAXribGZbEvWewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMEU0NzA3RTAzNjFFOTZBMjVDRkJDNjEwNDU1MTIw MkIzNDAxMTAeFw0yNTA2MDkwOTE2MDVaFw0yNTA2MTAxMzA4MDVaMDMxMTAvBgNV BAMTKDFCMDZERTI5NjJBRjVGMDk1OTRFQzFBNkYxQjM4RUMzREQwMzZERDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7uRw4xuG8Flmazyi4fBqdaXbf Aa9L8D2i4x6T+vvwb9Z0KZRzprN7lkXJ5kNzLKh5Ceo4snyS1FGYjiZ1MD7NfkK9 xCcRj0jNexHMT6oMl+QJfBRYzoVbcEMq9AOwCz0cX9Y3dVSsoyjrWCk96+BPHn3Y 4kY39CSZbdj47x4kG5USVMrBt3shPk65N+geTD0wGUlfWeRsEDyThov9sXDc8WEC LcjLD1vrXN3ygjVNVQqZJ0SYP1a/S2Z8lXucKXvbwR5sirch2vjIEUL+EUP33fc/ 3YDRMEFQpAPZc7BwQqRPuKZRQnWdWgLr8XkpvztdVjpGBE7iegJQ+cPP87PVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGwbeKWKvXwlZTsGm8bOOw90DbdUwHwYDVR0j BBgwFoAUO6DkcH4DYelqJc+8YQRVEgKzQBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5q c2UvMS8zQkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCQTBFNDcwN0UwMzYxRTk2 QTI1Q0ZCQzYxMDQ1NTEyMDJCMzQwMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5qc2UvMS8z QkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcxArn6tpuPl3PtbaQq7x6sLRsA5NR63SXtM2aT0EuQ71MkQzZ/3NGs59GWzJ GDrcqVqv4mTBQ0hHH6Y4Gb66j3RrfGtLXAm1OPP+M/vHxlpBZG+JE3+umg/ft9gY veYPtSnB1WhSXSOCiDzPx7JudHjug67t6RSToRk5ALjgEvN5mA9b+799Ls7qwRs9 P6bQNrwU0jv5p3Q3HBRrcc/q48GKHrDMCP8UTCkX0jtjJNZLDK8YYKOur8fmLGl4 SO/+4hZO5HmnPGABWWlfakgDfCK9Kq2hS2IURtNFpQAr5t2qo6LPOKDMzXgvBVXU oQ5IvJ6JfOS21iGVb3+RaoL3Xw== -----END CERTIFICATE-----Generated at Mon Jun 9 19:42:49 2025 by rpki-client