$ rpki-client -vvf rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft File: A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft (raw, json) Hash identifier: 3si6Ke6ceQ6a+rdneLIXvEenVtDHO0Q6XD0iPXBWvQ4= Subject key identifier: A6:B5:7F:F4:8C:E6:80:EB:AD:26:57:F0:96:BF:1F:26:E6:8D:2F:37 Authority key identifier: A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD Certificate issuer: /CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD Certificate serial: 28B512D75AF35DDF17C16FD69E49E93DB594D67A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer Subject info access: rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft Manifest number: 024A Signing time: Tue 17 Jun 2025 16:48:19 +0000 Manifest this update: Tue 17 Jun 2025 16:43:19 +0000 Manifest next update: Wed 18 Jun 2025 19:45:19 +0000 Files and hashes: 1: A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl (hash: 4PRl9e8OyFSmlp2MFzWhIfBHnEt//R69YkUgLWnwzl4=) 2: 3230312e3134302e3234302e302f32322d3332203d3e203631383330.roa (hash: 2GMI5l4Ze96BdW91sSpr2ML6DS2lIwQHnvz+4+faiFA=) 3: 323830343a313966633a3a2f33322d313238203d3e203631383330.roa (hash: 1fBqlheobXcBImZUSmBR8xZUu4CjVeNok+HYscqNMOw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 19:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b5:12:d7:5a:f3:5d:df:17:c1:6f:d6:9e:49:e9:3d:b5:94:d6:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD Validity Not Before: Jun 17 16:43:19 2025 GMT Not After : Jun 18 19:45:19 2025 GMT Subject: CN=A6B57FF48CE680EBAD2657F096BF1F26E68D2F37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fb:97:8f:96:b0:07:68:30:91:eb:dd:d9:fe: 81:28:2f:8b:3d:c9:e7:1e:8d:7b:2e:7d:1f:5e:b4: f6:63:8c:8d:16:d4:8c:32:70:e2:7c:8e:d3:b0:c8: c3:f4:a3:21:85:c3:3e:3a:9c:4e:59:81:33:36:a3: e5:6b:c5:4f:32:fd:ae:15:1d:c2:f4:34:97:b7:96: 04:b8:09:9b:40:c3:e0:cb:58:d1:85:06:0e:7e:1b: a3:47:90:80:f8:47:51:8d:8d:5e:e1:7a:65:b3:96: c1:e7:bc:e0:76:66:f1:fc:1f:d1:e6:3f:4a:08:e4: d9:99:88:0a:e8:cb:8f:34:d2:b3:af:f4:ac:c3:78: 81:d4:10:08:a5:0f:a9:0f:79:a7:c8:0b:09:90:f6: f2:45:45:27:16:a3:53:e8:8c:20:e0:a1:a1:a3:55: bd:94:1d:1d:9e:e2:64:09:8c:bc:ba:ee:85:f1:77: 4a:0a:e9:fb:1a:ba:fd:f7:44:1c:df:3c:c8:93:32: 95:aa:c8:0c:b5:67:c5:01:99:84:19:98:9e:ce:e5: 49:7f:1d:9a:cb:bd:56:71:2a:46:b8:c8:ec:18:9b: 57:f7:52:ae:67:8f:19:88:14:c4:b9:dd:c8:d0:86: 90:78:b3:20:10:24:22:0f:24:63:fd:d9:7a:79:f1: ad:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B5:7F:F4:8C:E6:80:EB:AD:26:57:F0:96:BF:1F:26:E6:8D:2F:37 X509v3 Authority Key Identifier: keyid:A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:80:d6:79:94:a9:6e:51:4c:70:2e:af:af:d8:09:3a:87:ce: 9b:ac:7a:2e:b0:f1:dd:14:9e:1b:e6:63:ab:74:36:b2:7c:4e: a6:21:05:95:25:e7:b0:5d:8d:96:56:70:ad:91:30:f6:6e:94: 27:c0:c9:cc:84:e9:5c:8c:3f:1f:78:bd:72:ec:40:6e:f6:1e: 96:f8:41:95:6c:3f:81:f2:5a:a3:29:f8:6a:d4:05:12:de:de: dd:d8:17:3a:ed:8d:d5:12:a8:85:07:eb:0e:08:b6:5e:6f:6d: 45:8c:98:3c:42:3b:23:b5:3b:be:53:a9:39:e5:31:f4:63:d0: 89:49:ea:59:d8:00:78:26:96:3a:41:12:3f:7b:b4:aa:47:74: 09:ec:8e:0c:fd:40:f5:34:0a:78:00:43:f2:46:8a:54:44:73: db:1d:0f:10:8f:56:f8:46:01:31:4d:bf:a3:73:c1:3d:f3:29: 11:f0:69:c9:1b:fc:3d:b4:ab:87:2a:86:b9:44:41:f3:d0:4d: 27:fa:8d:8b:6e:ea:a2:9b:d3:1e:4f:ad:83:f3:90:07:73:0f: 69:fe:d4:b3:cf:56:e1:b2:8b:c6:ec:53:17:3e:ff:32:27:7a: 5e:21:3e:88:7a:3b:5a:29:34:2e:2e:81:ee:91:eb:5f:dd:c1: 3a:7f:9d:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKLUS11rzXd8XwW/WnknpPbWU1nowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIxQzAzREQwOUNEQzJDMDA5OTc1OTRDMjA5ODM0NzNF RjVBREFGRDAeFw0yNTA2MTcxNjQzMTlaFw0yNTA2MTgxOTQ1MTlaMDMxMTAvBgNV BAMTKEE2QjU3RkY0OENFNjgwRUJBRDI2NTdGMDk2QkYxRjI2RTY4RDJGMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5+5ePlrAHaDCR693Z/oEoL4s9 yecejXsufR9etPZjjI0W1IwycOJ8jtOwyMP0oyGFwz46nE5ZgTM2o+VrxU8y/a4V HcL0NJe3lgS4CZtAw+DLWNGFBg5+G6NHkID4R1GNjV7hemWzlsHnvOB2ZvH8H9Hm P0oI5NmZiAroy4800rOv9KzDeIHUEAilD6kPeafICwmQ9vJFRScWo1PojCDgoaGj Vb2UHR2e4mQJjLy67oXxd0oK6fsauv33RBzfPMiTMpWqyAy1Z8UBmYQZmJ7O5Ul/ HZrLvVZxKka4yOwYm1f3Uq5njxmIFMS53cjQhpB4syAQJCIPJGP92Xp58a0jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUprV/9IzmgOutJlfwlr8fJuaNLzcwHwYDVR0j BBgwFoAUohwD3QnNwsAJl1lMIJg0c+9a2v0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2 bksvMi9BMjFDMDNERDA5Q0RDMkMwMDk5NzU5NEMyMDk4MzQ3M0VGNUFEQUZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyMUMwM0REMDlDREMyQzAw OTk3NTk0QzIwOTgzNDczRUY1QURBRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2bksvMi9B MjFDMDNERDA5Q0RDMkMwMDk5NzU5NEMyMDk4MzQ3M0VGNUFEQUZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWYDWeZSpblFMcC6vr9gJOofOm6x6LrDx3RSeG+Zjq3Q2snxOpiEFlSXnsF2N llZwrZEw9m6UJ8DJzITpXIw/H3i9cuxAbvYelvhBlWw/gfJaoyn4atQFEt7e3dgX Ou2N1RKohQfrDgi2Xm9tRYyYPEI7I7U7vlOpOeUx9GPQiUnqWdgAeCaWOkESP3u0 qkd0CeyODP1A9TQKeABD8kaKVERz2x0PEI9W+EYBMU2/o3PBPfMpEfBpyRv8PbSr hyqGuURB89BNJ/qNi27qopvTHk+tg/OQB3MPaf7Us89W4bKLxuxTFz7/Mid6XiE+ iHo7Wik0Li6B7pHrX93BOn+dDg== -----END CERTIFICATE-----Generated at Wed Jun 18 12:58:25 2025 by rpki-client