$ rpki-client -vvf rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.mft File: 6517ED7C130BCBAC13709ADF76E878D88CD96DD4.mft (raw, json) Hash identifier: znvVl8Ls0RC1CZYDmX1s0i7VY8KXPjVsQGO7wQF6DI8= Subject key identifier: 43:00:71:6A:6E:B7:4E:5E:F7:AA:1F:9D:CE:24:5A:0F:85:37:F0:95 Authority key identifier: 65:17:ED:7C:13:0B:CB:AC:13:70:9A:DF:76:E8:78:D8:8C:D9:6D:D4 Certificate issuer: /CN=6517ED7C130BCBAC13709ADF76E878D88CD96DD4 Certificate serial: 5480E12971C7CA5197AC886C9BC00FB77FF1AD74 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.cer Subject info access: rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.mft Manifest number: 01D0 Signing time: Tue 17 Jun 2025 09:29:01 +0000 Manifest this update: Tue 17 Jun 2025 09:24:01 +0000 Manifest next update: Wed 18 Jun 2025 12:54:01 +0000 Files and hashes: 1: 323830343a383435303a3a2f33322d3332203d3e20323732323533.roa (hash: lDDAJXlFggEms8anwmSRiGrpB1qh7gNpRefy/CSvcrk=) 2: 6517ED7C130BCBAC13709ADF76E878D88CD96DD4.crl (hash: XxEhuVUVyQBfWvSD+oMKRpR9Qg28l8dwDzLeNW2MRdc=) 3: 323830343a383435303a383030303a3a2f33332d3333203d3e20323732323533.roa (hash: Zh0f7PXpynQdF+LNUpLMkXKVuF2YwleFw3gZncRMMOw=) 4: 323830343a383435303a3a2f33332d3333203d3e20323732323533.roa (hash: TUBtfUjQGZ0MpFjE+janMDkl8U/B1QT7bTczIhOC6qA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.crl rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 12:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:80:e1:29:71:c7:ca:51:97:ac:88:6c:9b:c0:0f:b7:7f:f1:ad:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6517ED7C130BCBAC13709ADF76E878D88CD96DD4 Validity Not Before: Jun 17 09:24:01 2025 GMT Not After : Jun 18 12:54:01 2025 GMT Subject: CN=4300716A6EB74E5EF7AA1F9DCE245A0F8537F095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9c:23:fa:37:ad:25:f0:6d:22:d4:67:09:e8: a9:a2:2d:8b:85:95:76:7f:4f:47:ff:49:35:49:a6: 42:11:08:ef:ea:78:32:99:a0:23:33:2c:b3:ae:be: 07:50:43:1a:19:f1:72:a9:9d:72:21:b7:c5:e1:ee: 3f:af:58:88:54:76:45:d1:c5:2d:af:61:3d:cd:74: e5:f5:c4:a8:4c:ed:2b:fa:00:7b:d8:bb:f5:57:66: b9:91:fb:a6:19:38:46:5e:61:60:96:0e:0b:ea:9b: 6b:34:37:52:9f:75:16:4c:1e:34:c6:6c:c1:69:8b: e7:57:e1:67:a4:2d:d3:a7:e3:7a:3f:19:0e:7b:66: 1b:9e:ca:82:c0:dd:59:76:92:92:de:11:da:ce:c0: 68:d7:1d:65:34:48:ef:c3:56:f1:95:77:c5:37:b1: 10:19:75:9a:25:ae:8f:50:87:64:73:a0:fe:04:c9: 81:39:d7:59:73:85:5b:5b:b6:c7:87:63:ec:b9:8f: a8:f4:7c:80:94:35:56:d9:3d:d3:37:d9:8c:6d:1c: 7d:96:41:3c:f1:53:95:cd:17:0f:ed:cd:c6:da:48: 16:04:07:de:c1:d8:6d:4c:bc:00:ae:75:00:b4:34: 46:f1:8f:d9:07:c6:81:ce:1f:79:ba:d8:a8:ab:d3: 43:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:00:71:6A:6E:B7:4E:5E:F7:AA:1F:9D:CE:24:5A:0F:85:37:F0:95 X509v3 Authority Key Identifier: keyid:65:17:ED:7C:13:0B:CB:AC:13:70:9A:DF:76:E8:78:D8:8C:D9:6D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:27:7a:90:e1:40:b4:34:3f:fc:08:09:b7:85:26:a6:4d:ff: 64:bf:68:f8:54:ed:f5:df:ea:92:e5:15:e2:8e:e0:e7:61:57: 09:c2:9f:03:f3:27:cf:51:b5:20:1a:94:ac:ba:f5:5f:bb:58: 3a:52:6f:36:6b:3c:04:ed:20:25:12:82:ca:2c:f0:02:b9:27: f9:68:96:7c:11:bd:df:96:c9:2a:cd:d5:d2:da:7d:af:51:56: a5:da:7c:74:05:3c:9c:a0:45:7c:a9:d8:f6:0a:88:22:65:05: 22:bc:5b:4b:06:1f:78:2c:2e:f4:95:81:79:8b:69:85:2b:a6: df:22:6c:ce:2e:c0:f7:f0:e1:9c:31:6f:28:ee:b1:ec:14:0e: 5b:1d:61:79:52:5b:f8:b6:d0:bb:c0:6b:d2:dd:2e:1c:b6:ac: 65:e7:cf:17:60:4b:af:ef:34:4d:60:72:0e:dc:38:2f:6d:15: 92:c1:1d:32:0b:50:ea:e1:e4:2a:78:2a:7b:f5:a0:cf:17:46: 5c:34:23:c2:20:92:81:8d:c7:77:07:b5:ac:13:89:e5:75:17: c4:32:31:e1:74:b8:ef:d5:32:40:77:98:02:a7:64:64:3d:84: ca:08:52:aa:1b:39:ed:45:6a:3d:fe:26:ba:11:d4:69:54:03: 78:10:d8:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVIDhKXHHylGXrIhsm8APt3/xrXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUxN0VEN0MxMzBCQ0JBQzEzNzA5QURGNzZFODc4RDg4 Q0Q5NkRENDAeFw0yNTA2MTcwOTI0MDFaFw0yNTA2MTgxMjU0MDFaMDMxMTAvBgNV BAMTKDQzMDA3MTZBNkVCNzRFNUVGN0FBMUY5RENFMjQ1QTBGODUzN0YwOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgnCP6N60l8G0i1GcJ6KmiLYuF lXZ/T0f/STVJpkIRCO/qeDKZoCMzLLOuvgdQQxoZ8XKpnXIht8Xh7j+vWIhUdkXR xS2vYT3NdOX1xKhM7Sv6AHvYu/VXZrmR+6YZOEZeYWCWDgvqm2s0N1KfdRZMHjTG bMFpi+dX4WekLdOn43o/GQ57ZhueyoLA3Vl2kpLeEdrOwGjXHWU0SO/DVvGVd8U3 sRAZdZolro9Qh2RzoP4EyYE511lzhVtbtseHY+y5j6j0fICUNVbZPdM32YxtHH2W QTzxU5XNFw/tzcbaSBYEB97B2G1MvACudQC0NEbxj9kHxoHOH3m62Kir00MjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQwBxam63Tl73qh+dziRaD4U38JUwHwYDVR0j BBgwFoAUZRftfBMLy6wTcJrfduh42IzZbdQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1V3TXNWQjhLQmtKZjRuYjdpaHo3WlJjV05wWjRuc290YlN6TmlkdExj ZjEvMC82NTE3RUQ3QzEzMEJDQkFDMTM3MDlBREY3NkU4NzhEODhDRDk2REQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MTdFRDdDMTMwQkNCQUMx MzcwOUFERjc2RTg3OEQ4OENEOTZERDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1V3TXNWQjhLQmtKZjRuYjdpaHo3WlJjV05wWjRuc290YlN6TmlkdExjZjEvMC82 NTE3RUQ3QzEzMEJDQkFDMTM3MDlBREY3NkU4NzhEODhDRDk2REQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgyd6kOFAtDQ//AgJt4Umpk3/ZL9o+FTt9d/qkuUV4o7g52FXCcKfA/Mnz1G1 IBqUrLr1X7tYOlJvNms8BO0gJRKCyizwArkn+WiWfBG935bJKs3V0tp9r1FWpdp8 dAU8nKBFfKnY9gqIImUFIrxbSwYfeCwu9JWBeYtphSum3yJszi7A9/DhnDFvKO6x 7BQOWx1heVJb+LbQu8Br0t0uHLasZefPF2BLr+80TWByDtw4L20VksEdMgtQ6uHk Kngqe/WgzxdGXDQjwiCSgY3Hdwe1rBOJ5XUXxDIx4XS479UyQHeYAqdkZD2EyghS qhs57UVqPf4muhHUaVQDeBDYmQ== -----END CERTIFICATE-----Generated at Tue Jun 17 20:53:03 2025 by rpki-client