$ rpki-client -vvf rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft File: 43897DFF118E56C31A35958D9EA818504B130E11.mft (raw, json) Hash identifier: 8XOT/3kzGrzskGKEpfE2fSEGhZastmlSpbNP96QaLng= Subject key identifier: 35:B8:8E:67:A0:32:FE:9D:65:CA:69:C6:F5:75:34:60:22:D7:E8:0F Authority key identifier: 43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11 Certificate issuer: /CN=43897DFF118E56C31A35958D9EA818504B130E11 Certificate serial: 36EA1AAAE74F1AFD7B95C7C1187971EFF93766A5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer Subject info access: rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft Manifest number: 022A Signing time: Mon 16 Jun 2025 07:39:34 +0000 Manifest this update: Mon 16 Jun 2025 07:34:34 +0000 Manifest next update: Tue 17 Jun 2025 10:05:34 +0000 Files and hashes: 1: 3230302e3130382e3136342e302f32322d3234203d3e20323730323635.roa (hash: /O80p7I/BsID3L+7Tx/zgFUSWMrzsJTiDGJmySOhPvQ=) 2: 43897DFF118E56C31A35958D9EA818504B130E11.crl (hash: qcDIzFO0MLTAIYn/RWpfejra3JJUSKvWxkZ6/eGfQrc=) 3: 323830343a363935633a3a2f33322d3430203d3e20323730323635.roa (hash: 7dYPTrKAi61IYALwp4StVtHMzIcECDDN9J/7R5yuyAg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 10:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ea:1a:aa:e7:4f:1a:fd:7b:95:c7:c1:18:79:71:ef:f9:37:66:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43897DFF118E56C31A35958D9EA818504B130E11 Validity Not Before: Jun 16 07:34:34 2025 GMT Not After : Jun 17 10:05:34 2025 GMT Subject: CN=35B88E67A032FE9D65CA69C6F575346022D7E80F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ed:59:7b:e8:3e:62:4e:2e:c9:d3:5c:72:02: f4:58:5e:e0:b5:3b:37:5a:c4:cd:19:c4:49:7b:8c: fb:77:30:98:f9:6d:f1:87:2d:b2:cf:4f:bd:cd:d4: cf:1f:fa:f9:ae:56:8e:9b:2d:15:75:e6:18:12:b8: 5c:e3:35:22:fe:70:9b:c6:44:ec:f1:2b:b1:46:83: a4:fa:5d:f9:40:f5:8a:33:8d:95:8d:bf:2b:f9:b2: 91:fb:e8:92:9b:6d:db:5c:88:2b:b9:fd:47:64:e8: 43:ce:bf:43:d1:bd:73:47:74:0e:ea:44:3c:23:58: ad:9d:32:9d:a9:5f:00:61:62:47:08:db:43:41:11: 25:26:20:b0:a0:8c:bc:ba:7b:c7:18:53:89:b1:03: 32:3a:14:ed:ab:87:f7:d9:09:48:49:1c:da:74:5c: 25:87:89:e5:3b:90:9a:2e:37:98:62:3d:48:d6:a7: d1:aa:e6:db:11:da:53:84:c0:d1:7f:fb:a0:19:be: 40:bf:7c:44:e6:1d:7e:aa:f1:88:68:36:db:c9:8d: d6:56:1a:76:bf:de:30:40:54:7c:df:14:9a:1f:a5: cc:0b:9a:07:e7:4d:ca:fb:b4:06:01:53:7f:aa:1b: 3a:f0:f7:04:91:a1:7b:b7:d6:a2:6b:23:28:4d:44: 43:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B8:8E:67:A0:32:FE:9D:65:CA:69:C6:F5:75:34:60:22:D7:E8:0F X509v3 Authority Key Identifier: keyid:43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:97:bc:d2:2f:d0:81:c3:8e:81:13:fd:36:69:2d:dc:5f:ae: b5:88:d1:ed:36:4a:95:57:6e:7d:63:a6:ec:2d:4b:33:1e:62: ed:bb:0c:f3:cd:d5:ac:78:e1:5c:ac:b7:f2:ce:35:29:6b:6f: 1d:81:28:ff:90:54:5a:92:68:ca:bd:a3:bc:f7:a0:f8:6f:ef: 26:f9:bc:5a:b4:f1:cb:21:50:d1:91:14:8f:12:a3:f2:83:be: 80:cb:d3:c5:84:16:00:63:bb:4c:16:45:1d:2e:22:2a:03:9b: 60:ee:37:a3:e6:8d:74:93:ab:65:f7:34:ed:7a:f8:3d:26:8a: 50:ce:d8:d0:fc:38:20:ea:3f:a1:e6:ac:75:16:83:34:d8:b1: 03:68:9a:10:82:1b:d1:fa:7d:01:20:8b:b4:84:81:3d:ec:da: 9d:07:ad:92:00:eb:39:3e:ab:b7:80:76:f5:76:e4:68:69:03: db:1f:bf:6e:1e:23:27:cf:e1:23:cc:82:16:96:7c:37:2e:22: 93:9e:a5:bb:27:2a:8e:c9:6f:b3:b8:2d:0b:c9:19:6f:3c:aa: 4d:c2:ae:c7:8c:85:09:23:93:13:2d:dd:49:14:d5:09:3c:f3: 93:96:42:b9:05:3b:08:69:29:8d:77:ad:4e:89:7e:ef:8d:3e: ca:22:96:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNuoaqudPGv17lcfBGHlx7/k3ZqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM4OTdERkYxMThFNTZDMzFBMzU5NThEOUVBODE4NTA0 QjEzMEUxMTAeFw0yNTA2MTYwNzM0MzRaFw0yNTA2MTcxMDA1MzRaMDMxMTAvBgNV BAMTKDM1Qjg4RTY3QTAzMkZFOUQ2NUNBNjlDNkY1NzUzNDYwMjJEN0U4MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7Vl76D5iTi7J01xyAvRYXuC1 OzdaxM0ZxEl7jPt3MJj5bfGHLbLPT73N1M8f+vmuVo6bLRV15hgSuFzjNSL+cJvG ROzxK7FGg6T6XflA9YozjZWNvyv5spH76JKbbdtciCu5/Udk6EPOv0PRvXNHdA7q RDwjWK2dMp2pXwBhYkcI20NBESUmILCgjLy6e8cYU4mxAzI6FO2rh/fZCUhJHNp0 XCWHieU7kJouN5hiPUjWp9Gq5tsR2lOEwNF/+6AZvkC/fETmHX6q8YhoNtvJjdZW Gna/3jBAVHzfFJofpcwLmgfnTcr7tAYBU3+qGzrw9wSRoXu31qJrIyhNREOnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNbiOZ6Ay/p1lymnG9XU0YCLX6A8wHwYDVR0j BBgwFoAUQ4l9/xGOVsMaNZWNnqgYUEsTDhEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzlSM0NWdEVxZUdRRkRLM1I3QjVIZVZMajRhSFRxUXRVTTVyOFNWb2tp ZTIvMC80Mzg5N0RGRjExOEU1NkMzMUEzNTk1OEQ5RUE4MTg1MDRCMTMwRTExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzODk3REZGMTE4RTU2QzMx QTM1OTU4RDlFQTgxODUwNEIxMzBFMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzlSM0NWdEVxZUdRRkRLM1I3QjVIZVZMajRhSFRxUXRVTTVyOFNWb2tpZTIvMC80 Mzg5N0RGRjExOEU1NkMzMUEzNTk1OEQ5RUE4MTg1MDRCMTMwRTExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcJe80i/QgcOOgRP9Nmkt3F+utYjR7TZKlVdufWOm7C1LMx5i7bsM883VrHjh XKy38s41KWtvHYEo/5BUWpJoyr2jvPeg+G/vJvm8WrTxyyFQ0ZEUjxKj8oO+gMvT xYQWAGO7TBZFHS4iKgObYO43o+aNdJOrZfc07Xr4PSaKUM7Y0Pw4IOo/oeasdRaD NNixA2iaEIIb0fp9ASCLtISBPezanQetkgDrOT6rt4B29XbkaGkD2x+/bh4jJ8/h I8yCFpZ8Ny4ik56luycqjslvs7gtC8kZbzyqTcKux4yFCSOTEy3dSRTVCTzzk5ZC uQU7CGkpjXetTol+740+yiKWKg== -----END CERTIFICATE-----Generated at Tue Jun 17 02:33:54 2025 by rpki-client