$ rpki-client -vvf rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft File: 3DFAB11D75C819D05773554EBACF15CD75341EF8.mft (raw, json) Hash identifier: cl2e8pLEtbr4XyK48hSjnBx3w/kh/Uv21otxsc/rAtY= Subject key identifier: CD:6F:D5:13:D2:90:10:E5:66:F3:FC:47:76:98:EA:99:B1:43:CF:56 Authority key identifier: 3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8 Certificate issuer: /CN=3DFAB11D75C819D05773554EBACF15CD75341EF8 Certificate serial: 37E09563CAFEF93799CEE483C3314FFDD54550C6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer Subject info access: rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft Manifest number: 0289 Signing time: Sun 08 Jun 2025 11:00:00 +0000 Manifest this update: Sun 08 Jun 2025 10:55:00 +0000 Manifest next update: Mon 09 Jun 2025 11:00:00 +0000 Files and hashes: 1: 3230302e392e3131362e302f32322d3234203d3e20323731333238.roa (hash: oltG1noOnbrRoM0sS15kDu8e6YFzCzXI+kuYiuRIpNo=) 2: 3DFAB11D75C819D05773554EBACF15CD75341EF8.crl (hash: ZDaNt+kXhcXD/8D4jjfrUf23UyJ1hJVJ8r2NHZesH4c=) 3: 323830343a373963633a3a2f33322d3334203d3e20323731333238.roa (hash: ioQjGfieQHF3yV2fgI8Chw4pCzVaqcleon3vtaTviRw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.crl rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e0:95:63:ca:fe:f9:37:99:ce:e4:83:c3:31:4f:fd:d5:45:50:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3DFAB11D75C819D05773554EBACF15CD75341EF8 Validity Not Before: Jun 8 10:55:00 2025 GMT Not After : Jun 9 11:00:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a8:1f:8d:89:a8:4d:22:d0:4e:60:6b:00:d1: b7:78:2d:aa:5c:09:23:35:f1:ea:44:01:f0:10:35: 7f:68:59:5c:a6:78:3f:0d:08:cd:70:09:e4:4b:08: c3:a4:a6:f4:86:5d:2f:8d:89:86:e5:03:cf:81:99: bf:a1:7b:ff:38:34:0c:8a:56:76:3c:4f:51:56:f1: d7:a7:3e:60:df:bf:b4:c0:2c:9b:99:b9:fc:5a:42: dd:9a:cd:fa:bb:f6:33:09:29:32:e2:fb:97:5a:54: ed:45:3f:42:1e:09:ba:ac:06:f0:b6:0d:ea:a6:84: 70:19:7b:90:f1:79:ed:50:0e:30:e9:48:ff:77:9b: a6:db:4a:6c:6b:ea:ee:34:aa:de:f3:9d:44:c9:47: 07:64:42:3b:63:ed:c7:be:c5:ff:23:44:fe:1c:40: c5:63:1e:eb:2a:ec:d7:2e:24:f5:72:c2:62:9a:51: 1f:1b:5a:58:cc:20:2c:15:d8:8a:27:5d:6b:57:78: e9:5f:9a:35:d5:a9:43:fa:4b:5d:55:0e:a2:43:50: 69:d3:86:31:9d:a4:82:fb:f4:6f:0d:3b:cb:b9:3c: ad:b6:8e:68:c2:51:12:a9:3f:e6:ad:a2:24:c5:a0: 4d:54:f9:00:d4:87:e3:d4:9d:0e:c9:04:e2:28:73: 28:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:6F:D5:13:D2:90:10:E5:66:F3:FC:47:76:98:EA:99:B1:43:CF:56 X509v3 Authority Key Identifier: keyid:3D:FA:B1:1D:75:C8:19:D0:57:73:55:4E:BA:CF:15:CD:75:34:1E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/1/3DFAB11D75C819D05773554EBACF15CD75341EF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:92:74:2f:a3:4e:63:3f:cf:02:c8:e8:41:b5:f7:ec:43:36: 02:26:60:6e:81:7e:b7:2f:71:03:04:7c:4b:c3:cf:67:47:02: ba:8e:53:55:b5:8f:c9:60:1b:e1:e7:2a:95:45:88:03:a5:ee: 73:78:ee:df:15:c2:95:00:c3:ad:4b:ec:27:df:a9:29:31:9c: a4:f6:4f:18:8d:43:ef:4f:d8:19:eb:55:81:0b:90:b0:81:6d: 4c:16:47:ff:c1:e1:d6:ad:f1:1f:e4:67:e5:78:84:0c:e7:9d: 2f:9d:0e:ef:8b:4b:84:f3:50:f6:85:1d:cb:2e:1a:a5:98:37: 67:89:39:89:fb:0a:83:02:8a:1b:29:b3:51:80:f6:e5:d0:23: 4a:e1:d5:55:79:e5:5f:64:9d:f0:a0:15:ba:46:e1:38:96:18: f2:7d:b2:2a:f9:7b:25:cf:b8:78:e6:00:01:9c:bd:14:4c:48: 96:b7:8a:11:1b:1f:f8:cf:6b:2b:19:99:6c:6d:97:51:2d:4f: bd:f0:cc:95:c7:f9:f4:c2:8e:04:07:e8:91:35:c9:47:9f:c5: 00:70:8f:f7:69:02:34:84:cd:55:48:cd:97:dc:46:91:c0:50: 7a:20:53:d6:f7:46:cb:91:7a:a4:ea:62:06:93:76:b2:19:03: ea:f4:19:16 -----BEGIN CERTIFICATE----- MIIHSDCCBjCgAwIBAgIUN+CVY8r++TeZzuSDwzFP/dVFUMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0RGQUIxMUQ3NUM4MTlEMDU3NzM1NTRFQkFDRjE1Q0Q3 NTM0MUVGODAeFw0yNTA2MDgxMDU1MDBaFw0yNTA2MDkxMTAwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTdBODFGOEQ4OUE4NEQyMkQw NEU2MDZCMDBEMUI3NzgyREFBNUMwOTIzMzVGMUVBNDQwMUYwMTAzNTdGNjg1OTVD QTY3ODNGMEQwOENENzAwOUU0NEIwOEMzQTRBNkY0ODY1RDJGOEQ4OTg2RTUwM0NG ODE5OUJGQTE3QkZGMzgzNDBDOEE1Njc2M0M0RjUxNTZGMUQ3QTczRTYwREZCRkI0 QzAyQzlCOTlCOUZDNUE0MkREOUFDREZBQkJGNjMzMDkyOTMyRTJGQjk3NUE1NEVE NDUzRjQyMUUwOUJBQUMwNkYwQjYwREVBQTY4NDcwMTk3QjkwRjE3OUVENTAwRTMw RTk0OEZGNzc5QkE2REI0QTZDNkJFQUVFMzRBQURFRjM5RDQ0Qzk0NzA3NjQ0MjNC NjNFREM3QkVDNUZGMjM0NEZFMUM0MEM1NjMxRUVCMkFFQ0Q3MkUyNEY1NzJDMjYy OUE1MTFGMUI1QTU4Q0MyMDJDMTVEODhBMjc1RDZCNTc3OEU5NUY5QTM1RDVBOTQz RkE0QjVENTUwRUEyNDM1MDY5RDM4NjMxOURBNDgyRkJGNDZGMEQzQkNCQjkzQ0FE QjY4RTY4QzI1MTEyQTkzRkU2QURBMjI0QzVBMDRENTRGOTAwRDQ4N0UzRDQ5RDBF QzkwNEUyMjg3MzI4QzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAp6gfjYmoTSLQTmBrANG3eC2qXAkjNfHqRAHwEDV/aFlcpng/DQjN cAnkSwjDpKb0hl0vjYmG5QPPgZm/oXv/ODQMilZ2PE9RVvHXpz5g37+0wCybmbn8 WkLdms36u/YzCSky4vuXWlTtRT9CHgm6rAbwtg3qpoRwGXuQ8XntUA4w6Uj/d5um 20psa+ruNKre851EyUcHZEI7Y+3HvsX/I0T+HEDFYx7rKuzXLiT1csJimlEfG1pY zCAsFdiKJ11rV3jpX5o11alD+ktdVQ6iQ1Bp04YxnaSC+/RvDTvLuTytto5owlES qT/mraIkxaBNVPkA1Ifj1J0OyQTiKHMoyQIDAQABo4ICVjCCAlIwHQYDVR0OBBYE FM1v1RPSkBDlZvP8R3aY6pmxQ89WMB8GA1UdIwQYMBaAFD36sR11yBnQV3NVTrrP Fc11NB74MA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSkVZM0hvN0dFY0ViTUVn a3NlUkY2b3JaUTliQXA5V1hWUlY5ejJhMkRiZC8xLzNERkFCMTFENzVDODE5RDA1 NzczNTU0RUJBQ0YxNUNENzUzNDFFRjguY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi cl9yZXBvLzEvM0RGQUIxMUQ3NUM4MTlEMDU3NzM1NTRFQkFDRjE1Q0Q3NTM0MUVG OC5jZXIwgZwGCCsGAQUFBwELBIGPMIGMMIGJBggrBgEFBQcwC4Z9cnN5bmM6Ly9y cGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KRVkzSG83R0VjRWJNRWdrc2VSRjZv clpROWJBcDlXWFZSVjl6MmEyRGJkLzEvM0RGQUIxMUQ3NUM4MTlEMDU3NzM1NTRF QkFDRjE1Q0Q3NTM0MUVGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/ BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF6SdC+jTmM/zwLI6EG19+xDNgIm YG6BfrcvcQMEfEvDz2dHArqOU1W1j8lgG+HnKpVFiAOl7nN47t8VwpUAw61L7Cff qSkxnKT2TxiNQ+9P2BnrVYELkLCBbUwWR//B4dat8R/kZ+V4hAznnS+dDu+LS4Tz UPaFHcsuGqWYN2eJOYn7CoMCihsps1GA9uXQI0rh1VV55V9knfCgFbpG4TiWGPJ9 sir5eyXPuHjmAAGcvRRMSJa3ihEbH/jPaysZmWxtl1EtT73wzJXH+fTCjgQH6JE1 yUefxQBwj/dpAjSEzVVIzZfcRpHAUHogU9b3RsuReqTqYgaTdrIZA+r0GRY= -----END CERTIFICATE-----Generated at Sun Jun 8 15:49:02 2025 by rpki-client