$ rpki-client -vvf rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.mft File: 3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.mft (raw, json) Hash identifier: jOqHiZUu9Do5WDU6IBpKiX1vCvIvMbhZreNcWmx26Nc= Subject key identifier: 8B:D9:1E:41:E3:21:E9:43:2D:36:1F:F0:A1:DF:A6:FD:FC:58:2A:E2 Authority key identifier: 3B:6F:AA:2A:DB:30:43:3D:1C:1B:2F:5A:84:C4:E5:9D:D4:2C:E4:72 Certificate issuer: /CN=3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472 Certificate serial: 2C61234446FFAD94E9FF165697CA5F6A5E0A1123 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.cer Subject info access: rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.mft Manifest number: 04A5 Signing time: Thu 21 Aug 2025 03:05:09 +0000 Manifest this update: Thu 21 Aug 2025 03:00:09 +0000 Manifest next update: Fri 22 Aug 2025 17:45:09 +0000 Files and hashes: 1: 323830343a3565633a3a2f33322d313238203d3e203238313433.roa (hash: KuMjv5YqoTOnK8glkulkMn80mICeQ7OSDDzlcBOg/x4=) 2: 3138372e34392e39362e302f32302d3332203d3e203238313433.roa (hash: mDpSMpEOaSbQarlsFYLzdCbwLKBaQzi1Fm0h7Y+WrOg=) 3: 3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.crl (hash: QVSa/SGleVVnMqrF+faZN5EwwBrf2TdoWgSoojTPC/I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.crl rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 22 Aug 2025 03:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:61:23:44:46:ff:ad:94:e9:ff:16:56:97:ca:5f:6a:5e:0a:11:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472 Validity Not Before: Aug 21 03:00:09 2025 GMT Not After : Aug 22 17:45:09 2025 GMT Subject: CN=8BD91E41E321E9432D361FF0A1DFA6FDFC582AE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:31:e2:5c:8e:8e:a8:93:a5:0d:0b:76:ba:41: a0:0c:57:cf:01:b7:9c:9a:2c:a4:f2:73:a2:9a:0a: d0:9a:14:c1:8d:5f:a9:5a:26:02:da:05:f6:aa:5b: b8:21:3d:55:ea:de:49:f1:cf:2e:f9:dd:bc:34:25: 4a:99:f1:ea:03:d6:24:2b:c4:62:3a:fe:9d:82:75: 94:ce:4e:1a:71:24:ec:c0:c7:88:fa:4c:3c:75:b4: 99:be:a8:91:9f:52:6e:5e:a9:7c:b4:d7:b3:85:40: b7:6e:65:72:86:c7:bb:1e:33:5b:02:c5:d6:09:e9: 53:40:9c:23:cc:c4:bb:18:c9:19:0d:fd:91:6b:06: 26:54:ed:ee:10:d8:d3:75:c1:81:ed:b8:c1:19:c3: 56:bc:6f:0a:54:74:c3:60:ef:19:c7:5f:cc:98:20: 9a:a1:17:54:5a:36:78:5c:6a:1b:41:4f:b2:e7:6b: cb:dd:a9:e1:e8:ce:d9:72:f7:4f:6b:10:db:cb:55: ef:7d:e5:a8:f9:ea:3c:90:59:e7:86:62:18:f9:2d: 58:ae:28:86:fc:84:f3:88:3d:8c:1b:fc:2e:20:cd: 4a:53:f9:98:ff:c5:e3:29:4d:9a:1e:19:00:d1:4d: bc:14:73:c9:b9:11:15:e2:35:ee:4f:07:45:e3:b5: 6f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D9:1E:41:E3:21:E9:43:2D:36:1F:F0:A1:DF:A6:FD:FC:58:2A:E2 X509v3 Authority Key Identifier: keyid:3B:6F:AA:2A:DB:30:43:3D:1C:1B:2F:5A:84:C4:E5:9D:D4:2C:E4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:f3:96:ff:36:5b:cb:2c:ac:d3:2c:7c:82:6a:6a:21:58:34: fb:e1:e3:fd:6b:c7:97:ca:62:22:fc:1e:0a:de:9a:84:73:96: a2:40:3a:4c:45:fc:67:f2:07:11:78:44:fd:9c:20:bb:8d:e4: 10:a5:a9:58:87:d5:10:09:51:21:6b:64:ec:f1:ca:ee:3c:e1: 30:e4:72:d4:60:72:4e:98:89:f8:4d:ba:d8:28:5b:20:40:8e: 97:c7:7f:28:06:c2:ca:0c:be:8b:4f:c5:90:67:b7:38:b9:0a: 88:02:61:2c:2d:6c:36:a6:21:28:2c:66:40:35:7a:1c:4e:54: 2f:65:29:f8:1b:8b:65:d8:c6:ba:0d:7a:3c:a8:d6:86:2f:db: d5:be:e0:22:50:a8:cd:26:21:85:17:c5:91:e7:38:f8:cd:84: 6d:40:6d:55:25:df:a4:6d:e9:19:cb:8c:01:ff:0f:9e:16:71: 61:00:61:a9:25:4d:b4:46:08:25:db:eb:b2:ed:f7:76:07:43: 54:dc:8c:5d:78:f2:c8:50:45:cf:ec:7c:2f:70:0d:f7:81:61: 0d:ed:94:1b:8d:cf:de:40:0c:69:2c:a6:4e:c9:ae:37:bb:a0: d1:6c:62:8d:58:b1:04:24:b5:f7:59:b2:e4:06:44:2b:ba:49: 0e:4f:b9:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULGEjREb/rZTp/xZWl8pfal4KESMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2RkFBMkFEQjMwNDMzRDFDMUIyRjVBODRDNEU1OURE NDJDRTQ3MjAeFw0yNTA4MjEwMzAwMDlaFw0yNTA4MjIxNzQ1MDlaMDMxMTAvBgNV BAMTKDhCRDkxRTQxRTMyMUU5NDMyRDM2MUZGMEExREZBNkZERkM1ODJBRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKMeJcjo6ok6UNC3a6QaAMV88B t5yaLKTyc6KaCtCaFMGNX6laJgLaBfaqW7ghPVXq3knxzy753bw0JUqZ8eoD1iQr xGI6/p2CdZTOThpxJOzAx4j6TDx1tJm+qJGfUm5eqXy017OFQLduZXKGx7seM1sC xdYJ6VNAnCPMxLsYyRkN/ZFrBiZU7e4Q2NN1wYHtuMEZw1a8bwpUdMNg7xnHX8yY IJqhF1RaNnhcahtBT7Lna8vdqeHoztly909rENvLVe995aj56jyQWeeGYhj5LViu KIb8hPOIPYwb/C4gzUpT+Zj/xeMpTZoeGQDRTbwUc8m5ERXiNe5PB0XjtW8DAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUi9keQeMh6UMtNh/wod+m/fxYKuIwHwYDVR0j BBgwFoAUO2+qKtswQz0cGy9ahMTlndQs5HIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQllpUkVCRGFmS0VtUDVZd1g2MVppSGE3dzhhM1JFbkh3RjJMMWhvbXJS a2UvMC8zQjZGQUEyQURCMzA0MzNEMUMxQjJGNUE4NEM0RTU5REQ0MkNFNDcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCNkZBQTJBREIzMDQzM0Qx QzFCMkY1QTg0QzRFNTlERDQyQ0U0NzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QllpUkVCRGFmS0VtUDVZd1g2MVppSGE3dzhhM1JFbkh3RjJMMWhvbXJSa2UvMC8z QjZGQUEyQURCMzA0MzNEMUMxQjJGNUE4NEM0RTU5REQ0MkNFNDcyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcvOW/zZbyyys0yx8gmpqIVg0++Hj/WvHl8piIvweCt6ahHOWokA6TEX8Z/IH EXhE/Zwgu43kEKWpWIfVEAlRIWtk7PHK7jzhMORy1GByTpiJ+E262ChbIECOl8d/ KAbCygy+i0/FkGe3OLkKiAJhLC1sNqYhKCxmQDV6HE5UL2Up+BuLZdjGug16PKjW hi/b1b7gIlCozSYhhRfFkec4+M2EbUBtVSXfpG3pGcuMAf8PnhZxYQBhqSVNtEYI Jdvrsu33dgdDVNyMXXjyyFBFz+x8L3AN94FhDe2UG43P3kAMaSymTsmuN7ug0Wxi jVixBCS191my5AZEK7pJDk+5Jg== -----END CERTIFICATE-----Generated at Thu Aug 21 04:29:01 2025 by rpki-client