$ rpki-client -vvf rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft File: 3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft (raw, json) Hash identifier: fjmgZrBnyAzTr1P7AWQCxTd55njbcK6YeUOsDHY4GhU= Subject key identifier: A4:68:E1:6E:9E:2C:30:78:45:0E:45:D2:06:6B:2A:86:97:70:AE:DF Authority key identifier: 3E:F7:09:C8:F0:D0:D3:C6:A4:EE:47:57:C8:48:2F:4E:6D:52:5E:91 Certificate issuer: /CN=3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91 Certificate serial: 5EA4E0ADD3B10A5671B4390B6AB4EAEEA2583DCF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer Subject info access: rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft Manifest number: 023B Signing time: Thu 17 Apr 2025 11:00:00 +0000 Manifest this update: Thu 17 Apr 2025 10:55:00 +0000 Manifest next update: Fri 18 Apr 2025 11:00:00 +0000 Files and hashes: 1: 3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl (hash: 6jnFd/dXx09MiLul9+Ej1KButXxEzo5Nh6IjyE0CuoU=) 2: 34352e3138372e3132342e302f32322d3234203d3e20323639343738.roa (hash: mpZHAAPJTUQXooOaT1oXKL/6OVYZoElxqPmWeW2/+og=) 3: 323830343a363534303a3a2f33322d3336203d3e20323639343738.roa (hash: smBh1jOxiL6mXMibovlt7reUW8x0Aoc05Rh0DO5+hfQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 18 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a4:e0:ad:d3:b1:0a:56:71:b4:39:0b:6a:b4:ea:ee:a2:58:3d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91 Validity Not Before: Apr 17 10:55:00 2025 GMT Not After : Apr 18 11:00:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:40:b5:42:68:c0:bd:d0:70:bb:18:42:0b:c8: fd:04:9b:e0:2e:8a:d2:40:b8:7f:b0:49:7e:5b:79: 73:fb:4d:ff:a2:cd:2a:ad:11:52:00:2c:85:28:0e: 32:53:74:02:50:8f:4b:2f:aa:2e:10:02:dc:bd:b1: c7:cc:2f:6b:fb:81:ba:ee:4a:16:fc:22:3b:34:c9: 84:43:16:82:db:97:b1:c1:43:ba:b7:6e:ab:96:ac: 98:94:d1:76:6f:3b:8d:97:44:f5:f8:08:01:f1:37: 8c:bf:e4:3e:d0:10:0a:a7:2d:10:d6:8a:d7:73:b7: 78:68:4e:31:f9:2f:15:a3:78:c6:d2:d6:45:5a:da: 82:f8:cb:b2:25:52:1e:f6:30:f9:3d:d4:73:81:1f: ff:c8:0d:eb:14:e9:e8:ed:3e:b9:da:a4:8f:e4:58: 2d:32:37:4c:6d:32:c7:fc:63:a2:ea:9f:c6:df:ab: 21:06:5a:75:57:61:e3:6c:16:a9:98:d1:c8:9b:34: 23:4a:b4:ac:f7:a4:53:54:48:66:99:a4:60:22:b1: a7:db:00:ba:22:14:9e:9b:2b:67:51:9a:51:95:b7: 4f:db:20:93:37:40:a7:27:08:8c:91:f9:aa:ba:64: 15:59:dd:46:f5:95:a0:fa:0a:73:33:ca:86:d6:3c: b0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:68:E1:6E:9E:2C:30:78:45:0E:45:D2:06:6B:2A:86:97:70:AE:DF X509v3 Authority Key Identifier: keyid:3E:F7:09:C8:F0:D0:D3:C6:A4:EE:47:57:C8:48:2F:4E:6D:52:5E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAAfjEPeyKxhb4NzjHmh2UAyLS1MCdjPyFgZHcoFCD7o/1/3EF709C8F0D0D3C6A4EE4757C8482F4E6D525E91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:dc:78:4e:e9:18:43:9a:e6:a4:66:84:1c:51:bf:8a:d0:55: 2b:84:af:7f:7f:f9:d0:c2:6d:95:b3:47:82:3b:81:cb:11:f0: 9a:2e:2a:4a:f5:c0:36:4d:08:4d:63:d9:c8:ec:e3:3b:e0:7f: fb:31:59:83:1b:37:cb:23:7a:9d:44:13:60:2e:a6:4b:08:c1: 04:94:2e:2e:40:33:d9:36:e4:d8:7f:41:51:e2:07:dc:03:e3: c3:4d:5d:84:c5:d6:27:16:8a:9e:d0:c3:f4:88:4e:67:b7:1e: 4b:22:e2:d2:b4:5d:3e:9c:d8:ff:ef:c3:f1:2a:86:af:30:cf: 00:e6:49:4e:9e:5b:b8:9f:19:4d:74:ea:90:b8:a3:ed:8d:2f: ac:88:a8:62:3f:f4:27:e4:d2:ce:8f:ec:02:9c:6b:d0:d0:66: 6b:70:f1:29:72:62:03:f6:1e:05:5a:d8:92:28:3d:35:36:5f: c0:67:7b:ee:9f:00:34:ab:b4:d4:7f:f0:02:15:1c:2c:69:40: 08:c2:5a:32:c4:19:7a:32:b5:a9:0f:19:2e:76:c3:d8:cd:44: 06:b8:d7:b2:99:59:fe:81:af:8f:59:30:d7:33:84:1c:e0:4e: fd:2a:f1:e7:0b:83:14:0f:0e:84:d6:13:d7:e0:15:18:dd:2b: 6c:cc:c7:b0 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUXqTgrdOxClZxtDkLarTq7qJYPc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VGNzA5QzhGMEQwRDNDNkE0RUU0NzU3Qzg0ODJGNEU2 RDUyNUU5MTAeFw0yNTA0MTcxMDU1MDBaFw0yNTA0MTgxMTAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzg0MEI1NDI2OEMwQkREMDcw QkIxODQyMEJDOEZEMDQ5QkUwMkU4QUQyNDBCODdGQjA0OTdFNUI3OTczRkI0REZG QTJDRDJBQUQxMTUyMDAyQzg1MjgwRTMyNTM3NDAyNTA4RjRCMkZBQTJFMTAwMkRD QkRCMUM3Q0MyRjZCRkI4MUJBRUU0QTE2RkMyMjNCMzRDOTg0NDMxNjgyREI5N0Ix QzE0M0JBQjc2RUFCOTZBQzk4OTREMTc2NkYzQjhEOTc0NEY1RjgwODAxRjEzNzhD QkZFNDNFRDAxMDBBQTcyRDEwRDY4QUQ3NzNCNzc4Njg0RTMxRjkyRjE1QTM3OEM2 RDJENjQ1NUFEQTgyRjhDQkIyMjU1MjFFRjYzMEY5M0RENDczODExRkZGQzgwREVC MTRFOUU4RUQzRUI5REFBNDhGRTQ1ODJEMzIzNzRDNkQzMkM3RkM2M0EyRUE5RkM2 REZBQjIxMDY1QTc1NTc2MUUzNkMxNkE5OThEMUM4OUIzNDIzNEFCNEFDRjdBNDUz NTQ0ODY2OTlBNDYwMjJCMUE3REIwMEJBMjIxNDlFOUIyQjY3NTE5QTUxOTVCNzRG REIyMDkzMzc0MEE3MjcwODhDOTFGOUFBQkE2NDE1NTlERDQ2RjU5NUEwRkEwQTcz MzNDQTg2RDYzQ0IwRUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAyEC1QmjAvdBwuxhCC8j9BJvgLorSQLh/sEl+W3lz+03/os0qrRFS ACyFKA4yU3QCUI9LL6ouEALcvbHHzC9r+4G67koW/CI7NMmEQxaC25exwUO6t26r lqyYlNF2bzuNl0T1+AgB8TeMv+Q+0BAKpy0Q1orXc7d4aE4x+S8Vo3jG0tZFWtqC +MuyJVIe9jD5PdRzgR//yA3rFOno7T652qSP5FgtMjdMbTLH/GOi6p/G36shBlp1 V2HjbBapmNHImzQjSrSs96RTVEhmmaRgIrGn2wC6IhSemytnUZpRlbdP2yCTN0Cn JwiMkfmqumQVWd1G9ZWg+gpzM8qG1jyw7wIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FKRo4W6eLDB4RQ5F0gZrKoaXcK7fMB8GA1UdIwQYMBaAFD73Ccjw0NPGpO5HV8hI L05tUl6RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JBQWZqRVBleUt4aGI0 TnpqSG1oMlVBeUxTMU1DZGpQeUZnWkhjb0ZDRDdvLzEvM0VGNzA5QzhGMEQwRDND NkE0RUU0NzU3Qzg0ODJGNEU2RDUyNUU5MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS8zRUY3MDlDOEYwRDBEM0M2QTRFRTQ3NTdDODQ4MkY0RTZENTI1 RTkxLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JBQWZqRVBleUt4aGI0TnpqSG1o MlVBeUxTMU1DZGpQeUZnWkhjb0ZDRDdvLzEvM0VGNzA5QzhGMEQwRDNDNkE0RUU0 NzU3Qzg0ODJGNEU2RDUyNUU5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAArceE7pGEOa5qRmhBxRv4rQ VSuEr39/+dDCbZWzR4I7gcsR8JouKkr1wDZNCE1j2cjs4zvgf/sxWYMbN8sjep1E E2AupksIwQSULi5AM9k25Nh/QVHiB9wD48NNXYTF1icWip7Qw/SITme3Hksi4tK0 XT6c2P/vw/Eqhq8wzwDmSU6eW7ifGU106pC4o+2NL6yIqGI/9Cfk0s6P7AKca9DQ Zmtw8SlyYgP2HgVa2JIoPTU2X8Bne+6fADSrtNR/8AIVHCxpQAjCWjLEGXoytakP GS52w9jNRAa417KZWf6Br49ZMNczhBzgTv0q8ecLgxQPDoTWE9fgFRjdK2zMx7A= -----END CERTIFICATE-----Generated at Thu Apr 17 21:55:01 2025 by rpki-client