$ rpki-client -vvf rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft File: 06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft (raw, json) Hash identifier: P1PVhNmlikhYMP9BSVrFL1T2fxC6Qh69Z/4KP/R1UCs= Subject key identifier: 6A:D4:96:06:5D:31:77:6C:B5:BE:97:6A:27:11:96:AF:A8:80:96:14 Authority key identifier: 06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8 Certificate issuer: /CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8 Certificate serial: 5EEB95A33B1EACC535A9F420D5E8D943137FF703 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft Manifest number: 0143 Signing time: Mon 16 Jun 2025 20:00:48 +0000 Manifest this update: Mon 16 Jun 2025 19:55:48 +0000 Manifest next update: Tue 17 Jun 2025 20:03:48 +0000 Files and hashes: 1: 06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl (hash: KzAcxbnPZveom+0/o6Sfrft0Mz4KLrajXToNUc82xvw=) 2: 323830343a323064633a3a2f33322d3438203d3e20323634353137.roa (hash: M5hBf8sBNi6/oq7AprV5Am9TiLrx3NpGRnhuqPlNE6E=) 3: 3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa (hash: +dy0OguRHHodpvI7m+maVRaKu+AFPlpY/u0O/GjQHAk=) 4: 3133322e3235352e3137322e302f32322d3234203d3e20323634353137.roa (hash: 796yusbbPZ/62GBpJks3J3pz4e0+5gB+NVAL+An9w5I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 20:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:eb:95:a3:3b:1e:ac:c5:35:a9:f4:20:d5:e8:d9:43:13:7f:f7:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8 Validity Not Before: Jun 16 19:55:48 2025 GMT Not After : Jun 17 20:03:48 2025 GMT Subject: CN=6AD496065D31776CB5BE976A271196AFA8809614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:55:67:3d:db:31:f7:30:8d:45:6f:e8:37:b2: 3b:e0:d6:ea:4d:0c:0d:d2:87:b4:30:b8:f4:85:dc: 41:68:0d:87:45:f1:55:95:ed:d8:29:0b:d9:d9:70: de:d7:59:c1:28:69:09:92:2f:1c:b6:70:39:98:2d: b0:cc:3c:17:6e:79:f1:cb:81:5a:4b:35:de:e0:69: 59:19:04:8f:54:e8:eb:00:26:15:73:f6:4e:2f:69: 9c:bb:9e:1f:16:1b:6d:00:7e:b3:28:b9:48:6c:d0: 3c:2d:6f:b4:db:0c:43:60:e7:27:76:bb:01:63:d4: 3c:00:ac:50:f8:b9:68:ce:96:84:ef:f1:1c:89:7a: 6f:93:dc:a5:b5:80:f0:06:c0:04:cb:4f:31:ef:30: 8f:cf:d4:f6:48:1d:ea:36:c8:26:1a:71:e5:cc:d4: fa:ab:f6:b7:0d:a8:41:98:cb:74:78:18:fe:a5:f4: 68:7b:79:57:be:97:a2:24:3a:28:56:2e:b0:69:08: 50:92:b5:57:1d:cd:ab:61:b9:a9:25:3a:cd:c4:1a: 4f:cb:5a:00:32:27:bc:89:c4:48:f1:45:78:2b:33: 8e:d1:08:46:a0:41:bf:f3:73:dd:f7:c5:52:b4:c2: 8e:6d:e6:ff:04:4a:a4:a8:8b:33:20:e2:b6:9b:38: 50:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D4:96:06:5D:31:77:6C:B5:BE:97:6A:27:11:96:AF:A8:80:96:14 X509v3 Authority Key Identifier: keyid:06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:66:38:20:6c:7c:d6:71:4d:f7:db:4a:09:fb:70:f6:e8:d8: b8:1c:1f:91:33:08:58:1f:20:c5:bf:ed:7d:03:f9:3d:6b:8c: 49:21:4d:73:88:dd:be:a4:46:bb:a4:6a:ea:a9:d1:f8:6a:99: 26:e3:da:47:1a:7f:4f:13:21:da:c6:67:05:9d:84:42:aa:a6: 02:cf:4e:c5:32:6b:ab:b5:f4:e2:36:31:28:f8:f8:84:70:65: 8a:24:25:b8:cd:6d:4e:60:c8:32:53:c7:64:73:af:a2:8a:40: c1:5d:1d:11:94:b2:45:d3:d3:72:29:36:d4:b0:dd:54:4d:d1: 2e:95:58:51:7e:c4:43:15:d3:00:f2:72:69:90:63:8f:b0:58: 67:ee:80:65:13:85:f4:d9:bd:64:80:e9:5d:cc:60:39:69:d9: f1:22:68:5d:b9:06:26:ba:7b:24:1b:a7:13:d9:04:75:22:72: 05:8a:2c:88:07:d1:19:8c:f8:ae:d3:93:48:48:1e:ec:3a:cd: d3:7b:cd:34:31:00:b7:d0:ec:87:da:78:57:41:3c:50:18:9c: f7:f9:a7:70:f7:34:35:6e:ed:5b:c5:10:0f:f8:c1:4c:32:f6: cf:09:9f:1c:4c:fb:ae:48:62:56:6d:4a:b7:9d:21:af:ed:64: 9d:91:b7:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXuuVozserMU1qfQg1ejZQxN/9wMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQkQzMkU4NjVEOUQwOEZBNUM5ODJBQjdDQkRBNEZD QjIyNjJFODAeFw0yNTA2MTYxOTU1NDhaFw0yNTA2MTcyMDAzNDhaMDMxMTAvBgNV BAMTKDZBRDQ5NjA2NUQzMTc3NkNCNUJFOTc2QTI3MTE5NkFGQTg4MDk2MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKVWc92zH3MI1Fb+g3sjvg1upN DA3Sh7QwuPSF3EFoDYdF8VWV7dgpC9nZcN7XWcEoaQmSLxy2cDmYLbDMPBduefHL gVpLNd7gaVkZBI9U6OsAJhVz9k4vaZy7nh8WG20AfrMouUhs0Dwtb7TbDENg5yd2 uwFj1DwArFD4uWjOloTv8RyJem+T3KW1gPAGwATLTzHvMI/P1PZIHeo2yCYaceXM 1Pqr9rcNqEGYy3R4GP6l9Gh7eVe+l6IkOihWLrBpCFCStVcdzathuaklOs3EGk/L WgAyJ7yJxEjxRXgrM47RCEagQb/zc933xVK0wo5t5v8ESqSoizMg4rabOFDRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUatSWBl0xd2y1vpdqJxGWr6iAlhQwHwYDVR0j BBgwFoAUBtvTLoZdnQj6XJgqt8vaT8siYugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEdud1gybUFndFlZM1lvcmFkc0Ztb1NWWDRuamZ6bzVkVHFobzhtZzhl UkwvMC8wNkRCRDMyRTg2NUQ5RDA4RkE1Qzk4MkFCN0NCREE0RkNCMjI2MkU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2REJEMzJFODY1RDlEMDhG QTVDOTgyQUI3Q0JEQTRGQ0IyMjYyRTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEdud1gybUFndFlZM1lvcmFkc0Ztb1NWWDRuamZ6bzVkVHFobzhtZzhlUkwvMC8w NkRCRDMyRTg2NUQ5RDA4RkE1Qzk4MkFCN0NCREE0RkNCMjI2MkU4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO2Y4IGx81nFN99tKCftw9ujYuBwfkTMIWB8gxb/tfQP5PWuMSSFNc4jdvqRG u6Rq6qnR+GqZJuPaRxp/TxMh2sZnBZ2EQqqmAs9OxTJrq7X04jYxKPj4hHBliiQl uM1tTmDIMlPHZHOvoopAwV0dEZSyRdPTcik21LDdVE3RLpVYUX7EQxXTAPJyaZBj j7BYZ+6AZROF9Nm9ZIDpXcxgOWnZ8SJoXbkGJrp7JBunE9kEdSJyBYosiAfRGYz4 rtOTSEge7DrN03vNNDEAt9Dsh9p4V0E8UBic9/mncPc0NW7tW8UQD/jBTDL2zwmf HEz7rkhiVm1Kt50hr+1knZG36g== -----END CERTIFICATE-----Generated at Tue Jun 17 04:39:37 2025 by rpki-client