$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft File: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft (raw, json) Hash identifier: hU+kJkElDQdMaTw/k+hmTT1x1IOuHKnGW+dmtOIp/AU= Subject key identifier: 10:11:DA:5E:4A:65:A2:76:BF:DE:A0:2C:75:23:8F:BF:6F:21:39:20 Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17 Certificate issuer: /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717 Certificate serial: 488E15B6ECC2CAD35B0B9BEA41913919CE361531 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer Subject info access: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft Manifest number: 0152 Signing time: Wed 20 Aug 2025 08:04:42 +0000 Manifest this update: Wed 20 Aug 2025 07:59:42 +0000 Manifest next update: Thu 21 Aug 2025 08:14:42 +0000 Files and hashes: 1: 3138362e3230392e33322e302f32302d3234203d3e203533313538.roa (hash: hbNHm3JSWGn8mnXVU3f6OzBEDG47bAy239375lTILdQ=) 2: 323830343a363336343a3a2f33322d3438203d3e20323639333538.roa (hash: VI296uwuood9h+Wd5yWEBNZhOIon7U/ZPdTISOXmtE4=) 3: 34352e3138352e34382e302f32322d3234203d3e20323639333538.roa (hash: 0wG8Kdhrd/0bX9AxWy1LVhaUESlb5+tf37wS3PL0/Pk=) 4: 3137392e3130382e38302e302f32312d3234203d3e203533313538.roa (hash: rYYDvAwyGv1TrwvlF6zZdkFRQwmC93kFOfjgITu2fs0=) 5: 3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl (hash: UBlGHjYSw0ZcAwrg89VVzGpZSlzbb1/div+BhbzK9aQ=) 6: 3138362e3230392e34382e302f32302d3234203d3e203533313538.roa (hash: C3NsvjEBF/OuANGfe1hmeqGK89abCjbSxEGpoInJIQ4=) 7: 3230302e3232392e38382e302f32322d3234203d3e203533313538.roa (hash: YqV0/Lhj2MxuOJ6HOw87Su9/s1ow22MaSfI8k8cZeuU=) 8: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (hash: ITX9zf4dR+WNiA0LigOZZoVUW70WV9yvBVhLZO4GzXk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 08:14:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8e:15:b6:ec:c2:ca:d3:5b:0b:9b:ea:41:91:39:19:ce:36:15:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717 Validity Not Before: Aug 20 07:59:42 2025 GMT Not After : Aug 21 08:14:42 2025 GMT Subject: CN=1011DA5E4A65A276BFDEA02C75238FBF6F213920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:12:6d:2c:dc:6f:f8:82:c5:ca:a6:d0:69:c0: f5:6e:fa:b6:8a:1f:de:85:e3:a3:6b:09:a9:a7:e3: 2e:24:6f:e9:60:39:ec:16:45:16:6b:16:26:27:de: f0:8c:4f:da:3c:9f:5f:47:13:e2:fb:fd:71:6c:da: 2c:41:9a:fd:ae:6b:a5:66:d4:8e:b3:cf:bb:54:b8: d1:f8:56:72:96:77:0b:a6:8c:c6:50:fe:af:b0:fd: 0e:2d:98:8f:37:20:70:60:77:11:ef:e4:ad:2b:f9: e7:e4:9e:08:a9:61:8a:b8:a7:30:44:32:71:a5:db: 89:d2:55:17:6a:0d:8b:a7:b9:ee:a4:4e:ef:fc:73: 44:a5:3a:14:40:83:fc:e4:44:d5:e3:c0:d0:f2:a7: 10:ba:0b:a8:47:4f:04:fb:6a:2c:2e:40:34:8b:46: 82:f9:09:dc:32:99:fd:17:45:8c:4f:43:6c:28:7a: b5:0b:68:db:72:81:b1:56:17:a4:2b:c8:bd:bd:68: 00:e0:62:d7:bb:b6:1c:89:ad:a7:25:7c:cd:82:77: 03:d2:52:1e:78:bc:ed:f5:24:7a:24:14:c9:ef:5c: 21:9a:78:10:aa:b9:34:16:7e:13:35:8e:d9:77:b3: fd:51:70:b4:ea:ba:e2:d8:4a:17:2e:14:52:22:09: 20:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:11:DA:5E:4A:65:A2:76:BF:DE:A0:2C:75:23:8F:BF:6F:21:39:20 X509v3 Authority Key Identifier: keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:2b:d5:2f:e0:15:84:da:c7:c7:b1:bf:ad:f6:c7:f7:3c:37: 44:e6:e0:ec:17:78:cc:56:12:43:49:b8:4b:6c:94:5b:74:21: e8:c0:b9:e5:1d:b9:d6:dc:0c:ce:19:9d:aa:b6:2b:58:57:87: c0:a3:86:8b:7f:cc:06:d9:82:c6:13:a9:95:96:cb:32:67:ef: 9a:74:9b:c8:49:5e:b7:20:af:eb:69:78:d6:16:ef:b5:da:a4: 05:b3:70:64:ed:ae:92:31:f3:43:78:64:9e:b4:f3:a0:fd:d7: ee:2c:a0:2c:f9:98:b5:4f:f6:1c:65:99:a9:ad:7c:e0:af:08: 98:2d:d2:f1:a2:82:a2:49:65:eb:42:95:95:ee:d9:44:59:df: d2:93:5a:bb:d8:f4:97:46:c9:4f:28:57:c8:4c:67:63:19:e1: 4f:c7:65:a9:aa:2b:0e:ca:ef:05:3f:1e:f4:ac:8a:7f:c3:7c: 84:79:57:a9:60:a2:84:89:8a:9a:a5:de:00:88:0c:54:ae:70: 94:d2:66:d6:3a:e1:74:cb:1d:12:67:b1:9d:79:e6:b4:da:09: c5:47:0f:f5:53:42:bb:e4:fb:b0:2e:19:ad:93:67:91:1c:5b: c4:16:ee:79:f0:68:d4:3b:d8:e2:eb:98:86:4f:69:50:bb:be: cc:64:4f:76 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUSI4VtuzCytNbC5vqQZE5Gc42FTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5 NzZCMDcxNzAeFw0yNTA4MjAwNzU5NDJaFw0yNTA4MjEwODE0NDJaMDMxMTAvBgNV BAMTKDEwMTFEQTVFNEE2NUEyNzZCRkRFQTAyQzc1MjM4RkJGNkYyMTM5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjEm0s3G/4gsXKptBpwPVu+raK H96F46NrCamn4y4kb+lgOewWRRZrFiYn3vCMT9o8n19HE+L7/XFs2ixBmv2ua6Vm 1I6zz7tUuNH4VnKWdwumjMZQ/q+w/Q4tmI83IHBgdxHv5K0r+efkngipYYq4pzBE MnGl24nSVRdqDYunue6kTu/8c0SlOhRAg/zkRNXjwNDypxC6C6hHTwT7aiwuQDSL RoL5Cdwymf0XRYxPQ2woerULaNtygbFWF6QryL29aADgYte7thyJraclfM2CdwPS Uh54vO31JHokFMnvXCGaeBCquTQWfhM1jtl3s/1RcLTquuLYShcuFFIiCSC9AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUEBHaXkplona/3qAsdSOPv28hOSAwHwYDVR0j BBgwFoAUO2DAPAg0mEVw5Y25veXT3ZdrBxcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9nRVdUOGE0R2VjczJmWTU2cVFkOWkxVXJLVG5lZHlxTFpzUmVZanVYdzRl LzAvM0I2MEMwM0MwODM0OTg0NTcwRTU4REI5QkRFNUQzREQ5NzZCMDcxNy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zQjYwQzAzQzA4MzQ5ODQ1NzBF NThEQjlCREU1RDNERDk3NkIwNzE3LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2dF V1Q4YTRHZWNzMmZZNTZxUWQ5aTFVcktUbmVkeXFMWnNSZVlqdVh3NGUvMC8zQjYw QzAzQzA4MzQ5ODQ1NzBFNThEQjlCREU1RDNERDk3NkIwNzE3Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA lyvVL+AVhNrHx7G/rfbH9zw3RObg7Bd4zFYSQ0m4S2yUW3Qh6MC55R251twMzhmd qrYrWFeHwKOGi3/MBtmCxhOplZbLMmfvmnSbyEletyCv62l41hbvtdqkBbNwZO2u kjHzQ3hknrTzoP3X7iygLPmYtU/2HGWZqa184K8ImC3S8aKCokll60KVle7ZRFnf 0pNau9j0l0bJTyhXyExnYxnhT8dlqaorDsrvBT8e9KyKf8N8hHlXqWCihImKmqXe AIgMVK5wlNJm1jrhdMsdEmexnXnmtNoJxUcP9VNCu+T7sC4ZrZNnkRxbxBbuefBo 1DvY4uuYhk9pULu+zGRPdg== -----END CERTIFICATE-----Generated at Wed Aug 20 18:36:38 2025 by rpki-client