$ rpki-client -vvf rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.mft File: 3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.mft (raw, json) Hash identifier: yeIxSCSIS4DfoTq5xknCGyqQbWJPSYqXVbHlyrDW9JY= Subject key identifier: E4:99:79:51:5A:32:C3:3C:72:04:12:40:DD:BA:A6:09:EA:66:37:66 Authority key identifier: 3E:F1:B4:A1:73:03:BC:CB:EA:C0:94:AF:B5:54:1F:D4:DC:8D:26:17 Certificate issuer: /CN=3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617 Certificate serial: 7941C54DAA16057A7C94D831A4B0D2E346DCB9E9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.mft Manifest number: 87 Signing time: Wed 20 Aug 2025 13:56:39 +0000 Manifest this update: Wed 20 Aug 2025 13:51:39 +0000 Manifest next update: Thu 21 Aug 2025 14:33:39 +0000 Files and hashes: 1: 3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.crl (hash: sQsG4xcOJ+OYrO+jTTluvttZ7vG1DXV9/fL7KSfwrPc=) 2: 34352e3139312e32382e302f32322d3234203d3e20323639363638.roa (hash: IzrzkicHFaIGqJbPc1jlyB/n7wteumcfqv74D8w6z3c=) 3: 323830343a363831343a3a2f33322d3438203d3e20323639363638.roa (hash: XvS6eoH1lZvjRpKOj0vv4+N67wnCEsZQ3Fuf8EOws7I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.crl rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 14:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:41:c5:4d:aa:16:05:7a:7c:94:d8:31:a4:b0:d2:e3:46:dc:b9:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617 Validity Not Before: Aug 20 13:51:39 2025 GMT Not After : Aug 21 14:33:39 2025 GMT Subject: CN=E49979515A32C33C72041240DDBAA609EA663766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ed:ac:00:13:c0:77:fa:db:b6:f7:75:58:9f: 73:e3:9f:34:53:0a:24:41:62:25:5f:1c:e9:f5:7b: e9:0f:66:7d:32:fc:2e:36:d2:09:0a:af:ae:8d:19: 4b:50:75:70:0d:23:73:55:90:79:23:5f:43:cc:b3: bf:d5:15:2c:7a:b5:c8:30:9c:fd:68:61:cc:0a:64: 5e:ce:84:3c:35:82:70:52:5c:2f:9f:fd:3d:3c:55: a6:91:7e:37:5d:ec:3e:fa:54:1e:b8:20:69:20:ed: 57:d4:21:10:ef:46:b1:1b:54:a3:52:46:44:b7:71: 6c:eb:ed:40:df:46:8a:ed:e5:60:24:26:e8:1c:2b: dc:cc:a6:54:80:86:46:8f:7c:fc:8f:1c:48:5c:d6: 6f:79:f6:8e:55:7e:08:94:f7:cf:3d:31:a2:81:fe: b3:2e:09:bc:c4:ef:c5:3f:0a:6f:f2:3c:09:2a:23: fa:01:5f:ec:1a:3c:46:1c:7e:fa:86:fa:8a:cd:23: 62:5d:8c:e3:50:ba:c7:38:e3:e8:eb:94:89:0c:9f: 16:9e:d8:7c:f8:c9:f2:f2:a0:bb:a4:22:29:be:fc: f9:f4:f2:cb:45:10:6f:c4:82:d8:eb:ca:b4:4b:93: b6:98:6e:53:7d:76:b4:28:62:dc:be:da:81:20:f2: 6e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:99:79:51:5A:32:C3:3C:72:04:12:40:DD:BA:A6:09:EA:66:37:66 X509v3 Authority Key Identifier: keyid:3E:F1:B4:A1:73:03:BC:CB:EA:C0:94:AF:B5:54:1F:D4:DC:8D:26:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/3EF1B4A17303BCCBEAC094AFB5541FD4DC8D2617.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:34:47:16:54:cb:f7:5b:13:43:31:2e:aa:28:30:af:bd:c2: 9a:1c:96:05:26:02:32:b6:f0:b0:0e:72:f5:ad:aa:c6:c0:71: d7:65:57:e0:d2:11:43:93:a3:91:c2:6f:fe:d7:8f:c0:ca:f7: 9a:88:0c:22:54:38:60:29:7f:7f:eb:2a:50:89:47:6e:f2:b6: 3a:6c:13:ab:ea:70:84:59:9a:1c:f9:bc:1d:a8:68:9e:b1:c7: 29:e8:1b:34:2d:b3:6f:cc:7d:e4:ae:e9:92:96:fa:a4:e9:a3: 92:36:5c:26:a8:45:aa:57:83:2c:dd:50:5d:35:c8:ff:f0:af: 46:af:52:49:d1:5a:c6:37:11:bc:3b:9d:59:c9:d5:86:db:6a: 0c:96:02:b4:9e:1c:bc:65:9c:5e:4e:e2:26:c2:c5:a5:da:17: de:ad:9f:81:4b:d7:86:96:be:d6:7c:00:eb:e0:05:bf:0c:e2: 91:e1:63:a7:ce:50:4c:11:ea:29:d1:d4:39:ff:22:cc:f6:6c: 24:85:94:ab:4f:97:ae:a3:b6:e8:70:47:b2:b9:0c:2e:86:b4: 10:8b:78:cd:f1:a4:1b:1f:b8:95:c3:35:f5:3c:52:37:47:45: d0:28:9f:4d:07:16:44:0e:fc:d4:f7:1d:f4:ee:68:57:df:fa: 7f:c0:bb:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeUHFTaoWBXp8lNgxpLDS40bcuekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VGMUI0QTE3MzAzQkNDQkVBQzA5NEFGQjU1NDFGRDRE QzhEMjYxNzAeFw0yNTA4MjAxMzUxMzlaFw0yNTA4MjExNDMzMzlaMDMxMTAvBgNV BAMTKEU0OTk3OTUxNUEzMkMzM0M3MjA0MTI0MEREQkFBNjA5RUE2NjM3NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf7awAE8B3+tu293VYn3PjnzRT CiRBYiVfHOn1e+kPZn0y/C420gkKr66NGUtQdXANI3NVkHkjX0PMs7/VFSx6tcgw nP1oYcwKZF7OhDw1gnBSXC+f/T08VaaRfjdd7D76VB64IGkg7VfUIRDvRrEbVKNS RkS3cWzr7UDfRort5WAkJugcK9zMplSAhkaPfPyPHEhc1m959o5VfgiU9889MaKB /rMuCbzE78U/Cm/yPAkqI/oBX+waPEYcfvqG+orNI2JdjONQusc44+jrlIkMnxae 2Hz4yfLyoLukIim+/Pn08stFEG/EgtjryrRLk7aYblN9drQoYty+2oEg8m7NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5Jl5UVoywzxyBBJA3bqmCepmN2YwHwYDVR0j BBgwFoAUPvG0oXMDvMvqwJSvtVQf1NyNJhcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRnQ4aWlhMndlNDRaVU5hWFAxNnM3VlE3YlRDUnVxVWs0VG5uUjQzaFRz ZDgvMC8zRUYxQjRBMTczMDNCQ0NCRUFDMDk0QUZCNTU0MUZENERDOEQyNjE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFRjFCNEExNzMwM0JDQ0JF QUMwOTRBRkI1NTQxRkQ0REM4RDI2MTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RnQ4aWlhMndlNDRaVU5hWFAxNnM3VlE3YlRDUnVxVWs0VG5uUjQzaFRzZDgvMC8z RUYxQjRBMTczMDNCQ0NCRUFDMDk0QUZCNTU0MUZENERDOEQyNjE3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXzRHFlTL91sTQzEuqigwr73CmhyWBSYCMrbwsA5y9a2qxsBx12VX4NIRQ5Oj kcJv/tePwMr3mogMIlQ4YCl/f+sqUIlHbvK2OmwTq+pwhFmaHPm8HahonrHHKegb NC2zb8x95K7pkpb6pOmjkjZcJqhFqleDLN1QXTXI//CvRq9SSdFaxjcRvDudWcnV httqDJYCtJ4cvGWcXk7iJsLFpdoX3q2fgUvXhpa+1nwA6+AFvwzikeFjp85QTBHq KdHUOf8izPZsJIWUq0+XrqO26HBHsrkMLoa0EIt4zfGkGx+4lcM19TxSN0dF0Cif TQcWRA781Pcd9O5oV9/6f8C7pg== -----END CERTIFICATE-----Generated at Wed Aug 20 21:25:16 2025 by rpki-client