$ rpki-client -vvf rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft File: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft (raw, json) Hash identifier: eEfb+GuKZ4UD89AnmU9ihmeSFqoNEi077reTNNdMeHY= Subject key identifier: F5:5C:3D:DE:F9:D4:4C:3A:5D:72:FA:3B:34:8F:6D:3A:87:05:7D:9D Authority key identifier: 3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 Certificate issuer: /CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Certificate serial: 6E744B79C04282232D074A9000C10B02443720BA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject info access: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft Manifest number: C3 Signing time: Tue 29 Jul 2025 04:59:12 +0000 Manifest this update: Tue 29 Jul 2025 04:54:12 +0000 Manifest next update: Wed 30 Jul 2025 06:40:12 +0000 Files and hashes: 1: 3230302e362e3132382e302f32322d3332203d3e203532363934.roa (hash: cmMBAa8apGKZWHWfvXo7rXbYWd2EI5yW46+IKqeCJjo=) 2: 3137372e37332e33362e302f32322d3332203d3e203532363934.roa (hash: OGK41uRpAQwllRubLCRfh+WKpYG39IFoFH08wloP1PA=) 3: 3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl (hash: 1Rklk53/1d8dbzitZ8O2KnVO/zuUjMCBnLuQdIcOOmk=) 4: 323830343a6335383a3a2f33322d313238203d3e203532363934.roa (hash: 9O2EZ1ZOA5SxIxzwzkyeRpvslbdGVqnJeJ0v8OoeGGs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Jul 2025 06:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:74:4b:79:c0:42:82:23:2d:07:4a:90:00:c1:0b:02:44:37:20:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DAF1CA48633D42F38955C47C8BA0FADA73D7007 Validity Not Before: Jul 29 04:54:12 2025 GMT Not After : Jul 30 06:40:12 2025 GMT Subject: CN=F55C3DDEF9D44C3A5D72FA3B348F6D3A87057D9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9f:2a:b8:59:57:a7:f3:9d:f6:75:26:be:46: 1e:65:3f:0c:48:d9:0a:41:86:4b:48:04:ec:c7:31: 55:90:92:bc:fc:92:d2:64:ce:a8:d8:2f:33:bf:32: 41:b2:c8:8f:60:c1:62:3c:38:b1:a7:37:d8:a0:25: 7f:dc:a0:63:da:a1:3a:d8:e4:d5:6f:f9:f8:c5:e0: 47:c9:9c:e9:85:fd:f8:19:2d:e5:ea:f6:3e:a5:63: a2:e8:ac:67:86:b0:31:16:68:b2:11:10:d1:dc:d7: e5:42:36:ba:56:10:25:c8:2c:bc:9e:77:47:f9:d1: 5a:a3:cd:3c:b8:e3:22:57:10:f9:9d:ec:a5:6f:5c: c6:f2:ee:9f:bc:51:fa:95:80:be:43:e7:08:ec:6a: 31:ea:a2:7e:28:48:1a:41:f8:2e:e0:d3:d1:e2:a9: 5e:49:f8:2a:b3:6d:65:c2:d9:50:cd:3b:11:15:03: 1c:72:c6:5c:69:46:38:2d:07:89:6b:9f:04:f2:e3: b0:52:5b:3c:d5:fe:bb:56:ee:da:78:20:4d:03:ae: 5d:97:36:02:56:d1:bb:06:89:3e:08:0b:23:b9:f4: 8a:42:36:c9:ef:1d:d3:ca:c4:ab:d6:99:8f:7f:b9: a6:c1:72:f0:20:c4:e2:11:b4:89:e9:ae:0c:00:6d: 65:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5C:3D:DE:F9:D4:4C:3A:5D:72:FA:3B:34:8F:6D:3A:87:05:7D:9D X509v3 Authority Key Identifier: keyid:3D:AF:1C:A4:86:33:D4:2F:38:95:5C:47:C8:BA:0F:AD:A7:3D:70:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9695XEnkhVzeudXfkU6FVPbGFX6WUK7esNBzhHRL7pd/0/3DAF1CA48633D42F38955C47C8BA0FADA73D7007.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:55:1d:5d:a7:be:31:36:47:45:61:e4:bc:e7:e2:16:6d:f7: 34:f6:c5:4f:ed:db:5f:48:a5:4c:a1:05:52:bb:85:ba:0e:8a: b9:35:cf:c8:61:48:7c:ab:eb:26:1b:42:ee:57:10:51:6c:0c: b1:ef:71:1d:79:e1:b3:07:c0:44:83:ea:6c:d5:bc:33:b0:1b: d1:f8:15:39:f9:62:55:78:a2:e7:5b:1d:a5:e5:d6:c0:97:0d: 00:6a:ca:02:49:be:b3:03:8f:2b:ac:1a:58:39:bf:73:20:17: e2:27:76:7a:db:ef:b1:4f:56:67:79:d3:09:17:33:0b:29:59: 5c:f3:6e:c1:9f:d6:57:82:4d:8d:71:6e:a4:cb:5b:1e:53:9b: 02:36:6d:d5:5b:3c:93:3f:00:10:38:3d:bb:36:23:58:56:f9: a5:99:ed:9c:9b:8a:90:4f:6c:97:21:39:40:99:7d:01:70:bd: 56:df:4a:99:c4:0c:b8:8d:f6:78:e4:53:c7:16:6e:15:a2:44: 00:a4:a9:03:cd:6c:7c:05:8e:1f:8e:5d:58:57:7d:e5:88:2e: 9b:82:42:5c:b1:9b:67:7b:35:a0:96:c6:78:bc:76:30:34:30: 0f:e5:d2:52:46:74:a6:dc:38:11:4c:61:47:7e:d3:de:bd:30: 9a:49:b9:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbnRLecBCgiMtB0qQAMELAkQ3ILowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RBRjFDQTQ4NjMzRDQyRjM4OTU1QzQ3QzhCQTBGQURB NzNENzAwNzAeFw0yNTA3MjkwNDU0MTJaFw0yNTA3MzAwNjQwMTJaMDMxMTAvBgNV BAMTKEY1NUMzRERFRjlENDRDM0E1RDcyRkEzQjM0OEY2RDNBODcwNTdEOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDnyq4WVen8532dSa+Rh5lPwxI 2QpBhktIBOzHMVWQkrz8ktJkzqjYLzO/MkGyyI9gwWI8OLGnN9igJX/coGPaoTrY 5NVv+fjF4EfJnOmF/fgZLeXq9j6lY6LorGeGsDEWaLIRENHc1+VCNrpWECXILLye d0f50VqjzTy44yJXEPmd7KVvXMby7p+8UfqVgL5D5wjsajHqon4oSBpB+C7g09Hi qV5J+CqzbWXC2VDNOxEVAxxyxlxpRjgtB4lrnwTy47BSWzzV/rtW7tp4IE0Drl2X NgJW0bsGiT4ICyO59IpCNsnvHdPKxKvWmY9/uabBcvAgxOIRtInprgwAbWXLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9Vw93vnUTDpdcvo7NI9tOocFfZ0wHwYDVR0j BBgwFoAUPa8cpIYz1C84lVxHyLoPrac9cAcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3 cGQvMC8zREFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEQUYxQ0E0ODYzM0Q0MkYz ODk1NUM0N0M4QkEwRkFEQTczRDcwMDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Rjk2OTVYRW5raFZ6ZXVkWGZrVTZGVlBiR0ZYNldVSzdlc05CemhIUkw3cGQvMC8z REFGMUNBNDg2MzNENDJGMzg5NTVDNDdDOEJBMEZBREE3M0Q3MDA3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACFUdXae+MTZHRWHkvOfiFm33NPbFT+3bX0ilTKEFUruFug6KuTXPyGFIfKvr JhtC7lcQUWwMse9xHXnhswfARIPqbNW8M7Ab0fgVOfliVXii51sdpeXWwJcNAGrK Akm+swOPK6waWDm/cyAX4id2etvvsU9WZ3nTCRczCylZXPNuwZ/WV4JNjXFupMtb HlObAjZt1Vs8kz8AEDg9uzYjWFb5pZntnJuKkE9slyE5QJl9AXC9Vt9KmcQMuI32 eORTxxZuFaJEAKSpA81sfAWOH45dWFd95Ygum4JCXLGbZ3s1oJbGeLx2MDQwD+XS UkZ0ptw4EUxhR37T3r0wmkm5dg== -----END CERTIFICATE-----Generated at Tue Jul 29 11:22:51 2025 by rpki-client