$ rpki-client -vvf rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft File: 3BA0E4707E0361E96A25CFBC6104551202B34011.mft (raw, json) Hash identifier: I7pQ+EzuZFqHuMN8ObRA8K/0++MOv+omUDhHNwuc5eg= Subject key identifier: F9:0A:02:89:00:DF:BE:DC:96:78:63:ED:AF:19:E1:D7:22:D9:F9:2B Authority key identifier: 3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 Certificate issuer: /CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Certificate serial: 159720BA540BD90BA9CDDC9A160B61D3F28F6C0E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft Manifest number: 0237 Signing time: Tue 10 Jun 2025 05:11:09 +0000 Manifest this update: Tue 10 Jun 2025 05:06:09 +0000 Manifest next update: Wed 11 Jun 2025 06:07:09 +0000 Files and hashes: 1: 323830343a326337633a3a2f33322d3438203d3e20323635323232.roa (hash: gZh/j6TTWYlb6HfDh0Q2BiPD8Rby4m6dl3mVzy3MH6M=) 2: 3136382e302e33322e302f32322d3234203d3e20323635323232.roa (hash: FfWivJ4gNEyGVTWyPXQlAoFJfcDTKU2BxPer5WjncSs=) 3: 3BA0E4707E0361E96A25CFBC6104551202B34011.crl (hash: 3MIbL5xcutk8ldJoiRz1iERhb/mgZtN+xwjxGbZdou4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 06:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:97:20:ba:54:0b:d9:0b:a9:cd:dc:9a:16:0b:61:d3:f2:8f:6c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA0E4707E0361E96A25CFBC6104551202B34011 Validity Not Before: Jun 10 05:06:09 2025 GMT Not After : Jun 11 06:07:09 2025 GMT Subject: CN=F90A028900DFBEDC967863EDAF19E1D722D9F92B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:12:4c:21:d4:fb:82:08:5b:eb:4a:35:e8:33: e8:d6:6b:10:70:fb:02:bc:9c:65:08:74:11:47:8e: 8d:e4:ba:ee:f8:00:f8:7a:ea:cc:a7:df:d0:e4:7f: ac:3e:12:5d:7c:6a:70:da:e6:65:ef:16:4d:d3:2e: 25:f0:95:36:1f:1b:1c:0a:43:b7:97:a5:28:25:17: 85:f6:cc:b8:15:15:25:6e:d1:57:a7:75:06:82:44: 31:eb:98:e1:69:cc:11:d5:5b:d6:24:35:08:d4:65: b5:3f:da:e9:43:de:fc:d9:68:45:35:d4:b0:e4:04: 83:73:6e:1b:18:ce:2f:79:f4:82:fb:fa:f8:aa:dd: 08:0b:96:8e:4e:3d:8a:eb:c3:48:c5:fc:d4:73:8b: c8:cc:1b:72:14:88:b3:9f:03:65:4e:16:56:07:bc: 30:06:17:18:8e:80:e3:50:e1:60:ae:92:9b:65:91: 62:38:c7:ee:f6:f8:1d:cd:1f:69:82:35:e5:0f:2f: 90:1f:55:bd:65:3a:ab:68:b2:59:22:41:bf:7a:db: 87:ce:a4:02:a6:fc:f4:3c:3d:6f:f5:28:66:79:df: 3c:f7:b0:d9:ef:7c:e3:dd:e5:79:e3:0b:76:ad:43: d9:8d:ac:98:fb:35:63:75:1c:d5:dc:d1:ec:d7:56: 9a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0A:02:89:00:DF:BE:DC:96:78:63:ED:AF:19:E1:D7:22:D9:F9:2B X509v3 Authority Key Identifier: keyid:3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:48:b8:95:50:cd:a3:3d:01:b5:53:87:3f:52:da:c7:e3:dd: ba:2a:2f:ef:ac:dc:83:d0:a8:2d:26:f8:4a:47:40:1d:16:a4: 3c:45:09:4a:15:68:aa:57:5b:89:61:7b:2f:42:52:3a:ac:49: 6f:c3:16:bf:d1:ec:e9:17:64:5c:77:09:01:a1:af:b5:47:fb: ff:f7:11:2e:ac:a2:e7:0b:51:95:b1:d6:34:dd:3e:ca:4f:ec: 4e:3d:af:cc:9d:59:6c:a9:86:c5:4a:75:49:dc:c6:50:29:bf: 03:24:dc:10:43:78:ef:70:12:ba:c5:b8:b4:50:13:d3:a9:37: 07:49:b3:52:0d:49:0c:23:83:4f:0e:ce:8b:93:e4:34:e6:36: 70:84:af:8b:bc:67:62:e4:1c:bd:fd:8d:d5:57:f0:56:1f:0a: 97:8a:cc:47:11:d6:63:21:b1:0a:4f:51:3a:c3:39:0c:ae:0e: 37:93:00:41:ca:7c:8d:d1:ea:11:b7:e2:cb:62:53:78:07:94: a6:3a:93:df:72:08:bd:80:be:ff:de:8f:df:ac:a1:03:3b:b0: bb:37:43:f0:a8:63:93:89:49:20:53:4b:88:da:1a:13:26:73: ea:b9:47:07:85:6d:e0:71:34:b2:a5:41:5a:bf:c3:5e:c4:f0: ef:67:1d:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFZcgulQL2QupzdyaFgth0/KPbA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMEU0NzA3RTAzNjFFOTZBMjVDRkJDNjEwNDU1MTIw MkIzNDAxMTAeFw0yNTA2MTAwNTA2MDlaFw0yNTA2MTEwNjA3MDlaMDMxMTAvBgNV BAMTKEY5MEEwMjg5MDBERkJFREM5Njc4NjNFREFGMTlFMUQ3MjJEOUY5MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnEkwh1PuCCFvrSjXoM+jWaxBw +wK8nGUIdBFHjo3kuu74APh66syn39Dkf6w+El18anDa5mXvFk3TLiXwlTYfGxwK Q7eXpSglF4X2zLgVFSVu0VendQaCRDHrmOFpzBHVW9YkNQjUZbU/2ulD3vzZaEU1 1LDkBINzbhsYzi959IL7+viq3QgLlo5OPYrrw0jF/NRzi8jMG3IUiLOfA2VOFlYH vDAGFxiOgONQ4WCukptlkWI4x+72+B3NH2mCNeUPL5AfVb1lOqtoslkiQb9624fO pAKm/PQ8PW/1KGZ53zz3sNnvfOPd5XnjC3atQ9mNrJj7NWN1HNXc0ezXVppBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU+QoCiQDfvtyWeGPtrxnh1yLZ+SswHwYDVR0j BBgwFoAUO6DkcH4DYelqJc+8YQRVEgKzQBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5q c2UvMS8zQkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCQTBFNDcwN0UwMzYxRTk2 QTI1Q0ZCQzYxMDQ1NTEyMDJCMzQwMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QWhwMVJncG5qV1ZjSHlwN0VBOUdpY2p0eUxTWEdWeTNDMXh4R2VIaU5qc2UvMS8z QkEwRTQ3MDdFMDM2MUU5NkEyNUNGQkM2MTA0NTUxMjAyQjM0MDExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGUi4lVDNoz0BtVOHP1Lax+Pduiov76zcg9CoLSb4SkdAHRakPEUJShVoqldb iWF7L0JSOqxJb8MWv9Hs6RdkXHcJAaGvtUf7//cRLqyi5wtRlbHWNN0+yk/sTj2v zJ1ZbKmGxUp1SdzGUCm/AyTcEEN473ASusW4tFAT06k3B0mzUg1JDCODTw7Oi5Pk NOY2cISvi7xnYuQcvf2N1VfwVh8Kl4rMRxHWYyGxCk9ROsM5DK4ON5MAQcp8jdHq Ebfiy2JTeAeUpjqT33IIvYC+/96P36yhAzuwuzdD8Khjk4lJIFNLiNoaEyZz6rlH B4Vt4HE0sqVBWr/DXsTw72cdaQ== -----END CERTIFICATE-----Generated at Tue Jun 10 20:18:07 2025 by rpki-client