$ rpki-client -vvf rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft File: 3DDE2C96A736983C4145E6A74FA601EF275DE118.mft (raw, json) Hash identifier: DbSNu3wqxE4avHsTtwBd4GAtzsv81zbbfe+tBpGeERM= Subject key identifier: C1:31:D3:45:E5:9A:F0:D1:FE:22:94:55:3B:3A:AC:A2:4A:8D:EF:57 Authority key identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18 Certificate issuer: /CN=3DDE2C96A736983C4145E6A74FA601EF275DE118 Certificate serial: 153E95E62AB34E2764C60B6F7C1E9928963D1FA7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer Subject info access: rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft Manifest number: 0246 Signing time: Fri 13 Jun 2025 04:01:35 +0000 Manifest this update: Fri 13 Jun 2025 03:56:35 +0000 Manifest next update: Sat 14 Jun 2025 04:19:35 +0000 Files and hashes: 1: 3133382e3235352e3139322e302f32322d3332203d3e203532373833.roa (hash: lwXRa0qiPfQiWSMj6lm8jrC+VXsZs4evtxadksBch4Q=) 2: 3137372e3230302e36342e302f32302d3332203d3e203532373833.roa (hash: 6OBiD/8DlENQaZjx/MvA5MAEVExrvubewYLsYMeOnMM=) 3: 323830343a313066383a3a2f33322d313238203d3e203532373833.roa (hash: PhIag7pRzkC7Bapt79fBidxwqlMO2tX8xdTGP14BVts=) 4: 3137302e37382e3131362e302f32322d3332203d3e203532373833.roa (hash: jv8kapc/ph/YpbHwtC/joiWEGc3ILUjuNy+hAFyt7EM=) 5: 3DDE2C96A736983C4145E6A74FA601EF275DE118.crl (hash: 9csAHZ428l3BYU0GDwrhuZRDWuZJ3CnC/soFMyhGzz0=) 6: 3137302e3235342e37362e302f32322d3332203d3e203532373833.roa (hash: W8s8whgOmZDsi43J8G37ITFwJ20HsttSGTKGgs5x0rM=) 7: 3133312e3235352e3131362e302f32322d3332203d3e203532373833.roa (hash: J2os+yBVbJ75LHvWXYl37oENdZnBGb1/25a4CiXyyK8=) 8: 3133382e3132322e3133322e302f32322d3332203d3e203532373833.roa (hash: C1eAvO6vSJ6cTUNhHyz/RcfblW+ZPbe4237uTB/Y+mw=) 9: 3137372e37342e3138342e302f32312d3332203d3e203532373833.roa (hash: /VU2G9KNTteuNN2kL0cGkBoRNg4Z5tEq5pYfHwPMi4A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 14 Jun 2025 04:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:3e:95:e6:2a:b3:4e:27:64:c6:0b:6f:7c:1e:99:28:96:3d:1f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DDE2C96A736983C4145E6A74FA601EF275DE118 Validity Not Before: Jun 13 03:56:35 2025 GMT Not After : Jun 14 04:19:35 2025 GMT Subject: CN=C131D345E59AF0D1FE2294553B3AACA24A8DEF57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:8a:e5:f8:ea:ca:ed:96:fd:5f:19:45:82: e3:8d:03:5f:e6:d4:61:9a:93:50:1f:49:3d:fa:41: 2b:3f:bc:ac:7b:47:40:42:22:b8:e5:c0:6d:6c:75: 38:9e:36:aa:36:44:09:1b:1a:0c:79:20:ba:ec:b5: 65:f4:fb:92:5d:96:dd:21:0f:e6:cd:dc:f4:7c:9c: 69:d0:10:93:91:e4:93:24:de:22:af:0e:fd:a0:f7: c7:31:63:a0:47:80:09:dc:51:51:a9:8f:3b:d4:a4: a7:c2:68:92:75:a4:40:3b:46:6a:e0:61:3b:a3:a9: 73:00:4b:a2:52:1d:c4:ef:7e:54:cb:b1:43:54:a0: 5b:da:47:4d:43:02:a4:87:27:85:c7:7b:df:39:d9: 0a:0f:2f:13:5e:da:33:65:17:3e:f9:84:c6:b7:ab: 6b:76:88:af:69:7b:49:22:9c:e6:88:78:d9:d8:ff: 5a:c4:8a:fb:04:8f:6b:2d:78:14:0c:76:67:64:54: dc:e0:05:19:5c:1c:68:ee:cc:4e:1b:da:e4:29:f8: c0:42:3f:9b:67:56:4b:38:a3:05:ac:37:35:27:85: 7f:05:1a:ab:ef:11:13:66:90:dd:06:1c:33:15:01: 03:46:98:0c:7e:b9:c4:52:fc:93:bb:ec:2a:66:af: d6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:31:D3:45:E5:9A:F0:D1:FE:22:94:55:3B:3A:AC:A2:4A:8D:EF:57 X509v3 Authority Key Identifier: keyid:3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:2a:82:6a:63:ae:5c:8d:ae:b9:e5:f6:4e:4d:d4:11:01:3c: 33:b4:d6:0d:ff:a4:35:d5:99:5d:85:3e:fa:c2:6f:4f:75:bd: 01:4b:3b:ae:ce:06:0e:2a:71:70:36:0c:ff:4c:a7:27:10:64: 41:22:46:12:a3:25:3b:3b:11:d0:39:d5:e8:da:53:cb:19:44: 30:b2:75:e7:91:0a:83:19:9f:91:fa:58:90:19:8d:5b:79:e5: d9:fb:67:fb:db:f2:ca:b3:56:f7:0c:e5:68:7d:d6:92:07:3f: 8f:62:09:c7:db:3c:cf:fb:ba:f0:28:5a:ef:e8:9e:8b:a8:f1: e2:d0:8e:1f:2f:93:4b:15:91:a6:d7:a8:50:59:c7:13:1e:49: f6:d3:0d:26:50:90:9e:7a:f1:23:85:1c:92:96:79:4d:5b:c1: ab:2a:07:35:3f:d6:62:31:5b:43:61:ca:23:b9:52:07:99:fb: e6:2b:b1:62:a8:34:d7:1d:20:c9:9d:c3:63:bd:82:cc:81:82: d1:9f:11:61:b5:cb:a2:0f:43:8c:14:d7:f4:ad:33:8f:ee:fd: 06:59:5b:7c:bf:2d:f9:b9:d9:d9:b9:c6:43:c5:e4:b4:69:be: 44:91:af:47:e7:cf:80:8d:07:59:13:ea:f1:d1:1d:7e:d1:3a: 98:7e:30:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFT6V5iqzTidkxgtvfB6ZKJY9H6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RERTJDOTZBNzM2OTgzQzQxNDVFNkE3NEZBNjAxRUYy NzVERTExODAeFw0yNTA2MTMwMzU2MzVaFw0yNTA2MTQwNDE5MzVaMDMxMTAvBgNV BAMTKEMxMzFEMzQ1RTU5QUYwRDFGRTIyOTQ1NTNCM0FBQ0EyNEE4REVGNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0zYrl+OrK7Zb9XxlFguONA1/m 1GGak1AfST36QSs/vKx7R0BCIrjlwG1sdTieNqo2RAkbGgx5ILrstWX0+5Jdlt0h D+bN3PR8nGnQEJOR5JMk3iKvDv2g98cxY6BHgAncUVGpjzvUpKfCaJJ1pEA7Rmrg YTujqXMAS6JSHcTvflTLsUNUoFvaR01DAqSHJ4XHe9852QoPLxNe2jNlFz75hMa3 q2t2iK9pe0kinOaIeNnY/1rEivsEj2steBQMdmdkVNzgBRlcHGjuzE4b2uQp+MBC P5tnVks4owWsNzUnhX8FGqvvERNmkN0GHDMVAQNGmAx+ucRS/JO77Cpmr9btAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwTHTReWa8NH+IpRVOzqsokqN71cwHwYDVR0j BBgwFoAUPd4slqc2mDxBReanT6YB7ydd4RgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjRNd2U4ZHhwdWZLdXJTZjJCeG5TS3ZZZTNoOFJzc2l2NTU3eEI5TjlY WUEvMS8zRERFMkM5NkE3MzY5ODNDNDE0NUU2QTc0RkE2MDFFRjI3NURFMTE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEREUyQzk2QTczNjk4M0M0 MTQ1RTZBNzRGQTYwMUVGMjc1REUxMTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QjRNd2U4ZHhwdWZLdXJTZjJCeG5TS3ZZZTNoOFJzc2l2NTU3eEI5TjlYWUEvMS8z RERFMkM5NkE3MzY5ODNDNDE0NUU2QTc0RkE2MDFFRjI3NURFMTE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzCqCamOuXI2uueX2Tk3UEQE8M7TWDf+kNdWZXYU++sJvT3W9AUs7rs4GDipx cDYM/0ynJxBkQSJGEqMlOzsR0DnV6NpTyxlEMLJ155EKgxmfkfpYkBmNW3nl2ftn +9vyyrNW9wzlaH3Wkgc/j2IJx9s8z/u68Cha7+iei6jx4tCOHy+TSxWRpteoUFnH Ex5J9tMNJlCQnnrxI4UckpZ5TVvBqyoHNT/WYjFbQ2HKI7lSB5n75iuxYqg01x0g yZ3DY72CzIGC0Z8RYbXLog9DjBTX9K0zj+79BllbfL8t+bnZ2bnGQ8XktGm+RJGv R+fPgI0HWRPq8dEdftE6mH4wGQ== -----END CERTIFICATE-----Generated at Fri Jun 13 14:20:09 2025 by rpki-client