$ rpki-client -vvf rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.mft File: 46E0D678CE6FAC85144279EA7DE8AF4633267C1E.mft (raw, json) Hash identifier: 5EovC8b47IIKvG/66fGOHbJt3kBr8f1BoYHK06VShLM= Subject key identifier: 68:7E:D0:64:1D:ED:73:84:D1:87:2A:40:2F:4E:AF:A4:8B:37:8E:C4 Authority key identifier: 46:E0:D6:78:CE:6F:AC:85:14:42:79:EA:7D:E8:AF:46:33:26:7C:1E Certificate issuer: /CN=46E0D678CE6FAC85144279EA7DE8AF4633267C1E Certificate serial: 3DCA809B5A821DF07CBBFCD2EB7AB38280703861 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.cer Subject info access: rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.mft Manifest number: C0 Signing time: Fri 20 Jun 2025 07:20:38 +0000 Manifest this update: Fri 20 Jun 2025 07:15:38 +0000 Manifest next update: Sat 21 Jun 2025 08:01:38 +0000 Files and hashes: 1: 323830343a356631343a3a2f33322d3438203d3e20323639303735.roa (hash: mjD9OvabSUPp033lQEg3I2t8IOVx/Mse4Iyg+NQ8Ihg=) 2: 34352e3137392e3130382e302f32322d3234203d3e20323639303735.roa (hash: JE34V3NMCAcuyUufyGDj3kMU8Gb5myg11c1Wn8n87z0=) 3: 46E0D678CE6FAC85144279EA7DE8AF4633267C1E.crl (hash: ZxwqkJO31o32viORSkJzS/4lceEVX26acAwugqymB50=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.crl rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 08:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ca:80:9b:5a:82:1d:f0:7c:bb:fc:d2:eb:7a:b3:82:80:70:38:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46E0D678CE6FAC85144279EA7DE8AF4633267C1E Validity Not Before: Jun 20 07:15:38 2025 GMT Not After : Jun 21 08:01:38 2025 GMT Subject: CN=687ED0641DED7384D1872A402F4EAFA48B378EC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2d:66:26:78:47:46:26:a0:00:82:0c:ab:bc: e7:d2:6d:e8:fc:f1:39:a0:61:66:03:65:c6:c6:fc: e8:b3:16:8e:d5:4b:e5:b0:52:93:9f:d3:55:fd:fa: d7:e3:5c:8b:78:ab:dc:92:88:90:37:1d:16:79:6d: 04:db:58:a0:8b:af:b6:ee:8b:74:e4:b5:56:88:88: 0c:08:65:90:c8:b4:7b:a0:a2:60:bc:f7:a8:e1:6b: 65:53:3a:cf:48:e8:2c:bc:2a:9d:7f:58:38:30:50: 36:3c:a9:4d:be:41:bb:4e:b5:2f:09:3a:35:64:55: f5:28:65:f8:5c:4b:c0:7a:9d:f2:e4:14:07:24:92: cd:3f:f9:c1:4e:b4:6e:59:ae:4f:2c:52:7e:18:f9: fe:17:b7:c1:50:87:a1:6a:37:40:ba:ce:fc:31:af: 8f:84:5c:cb:da:1d:43:41:c0:c9:2d:8c:6f:17:61: b3:08:23:2d:2d:92:e3:80:16:e5:f9:db:45:ce:9f: 0e:be:6e:54:8c:ee:73:c2:41:cb:ff:70:3c:0a:0f: 4e:d5:82:08:94:e7:da:45:31:50:fb:82:cd:aa:f2: f4:79:d8:21:02:2c:70:3f:50:dd:8f:d4:7d:ed:6b: 7a:da:22:26:23:ef:27:50:93:59:87:b0:64:d1:31: 30:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7E:D0:64:1D:ED:73:84:D1:87:2A:40:2F:4E:AF:A4:8B:37:8E:C4 X509v3 Authority Key Identifier: keyid:46:E0:D6:78:CE:6F:AC:85:14:42:79:EA:7D:E8:AF:46:33:26:7C:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:70:c5:de:f8:de:18:76:fe:bf:9a:59:17:11:81:4f:17:b6: 27:ff:df:1e:79:94:aa:e0:eb:81:73:03:8b:43:70:a3:15:6b: fb:3b:29:25:5b:db:7e:3d:84:76:0d:02:3f:a7:e5:52:c0:38: 9d:7f:59:97:70:96:ad:12:8d:70:d7:ed:99:30:ee:4f:9a:9e: 49:04:23:0d:f5:1e:12:1e:61:64:84:f7:e2:b3:5b:27:94:03: fa:27:62:4a:ba:71:e7:d7:1d:1e:f0:89:0d:2d:51:ae:64:70: fd:0b:90:f2:65:74:00:2b:f5:6b:c5:55:25:48:c5:48:50:c3: bf:3d:b1:5c:94:5d:45:97:21:e4:f4:1a:ba:e0:d7:7f:e0:61: 0d:7f:7b:03:db:2f:1c:13:e8:95:70:1f:87:d9:78:d3:19:81: 23:28:f3:2b:fd:9b:ac:09:fb:a2:13:64:33:4f:cc:ba:44:df: 7b:95:f2:3e:32:c8:7e:78:bd:73:40:36:64:d0:f6:c1:ff:74: 95:90:6c:07:36:a4:40:59:0a:a5:6b:e6:32:37:03:61:e3:8a: ab:13:a5:a9:d1:63:48:1f:29:68:2e:8f:fb:bb:54:40:e1:32: 50:ea:d9:4d:be:4e:7b:aa:43:18:ff:d1:c8:7c:5c:f1:ae:53: f1:a7:cf:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPcqAm1qCHfB8u/zS63qzgoBwOGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZFMEQ2NzhDRTZGQUM4NTE0NDI3OUVBN0RFOEFGNDYz MzI2N0MxRTAeFw0yNTA2MjAwNzE1MzhaFw0yNTA2MjEwODAxMzhaMDMxMTAvBgNV BAMTKDY4N0VEMDY0MURFRDczODREMTg3MkE0MDJGNEVBRkE0OEIzNzhFQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLLWYmeEdGJqAAggyrvOfSbej8 8TmgYWYDZcbG/OizFo7VS+WwUpOf01X9+tfjXIt4q9ySiJA3HRZ5bQTbWKCLr7bu i3TktVaIiAwIZZDItHugomC896jha2VTOs9I6Cy8Kp1/WDgwUDY8qU2+QbtOtS8J OjVkVfUoZfhcS8B6nfLkFAckks0/+cFOtG5Zrk8sUn4Y+f4Xt8FQh6FqN0C6zvwx r4+EXMvaHUNBwMktjG8XYbMIIy0tkuOAFuX520XOnw6+blSM7nPCQcv/cDwKD07V ggiU59pFMVD7gs2q8vR52CECLHA/UN2P1H3ta3raIiYj7ydQk1mHsGTRMTDpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaH7QZB3tc4TRhypAL06vpIs3jsQwHwYDVR0j BBgwFoAURuDWeM5vrIUUQnnqfeivRjMmfB4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVc3dVNTeE1OOUhIU0RLRkxSWmNmOVFQN3VQOG82NGFKa1F5ejdLa0di QXAvMC80NkUwRDY3OENFNkZBQzg1MTQ0Mjc5RUE3REU4QUY0NjMzMjY3QzFFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2RTBENjc4Q0U2RkFDODUx NDQyNzlFQTdERThBRjQ2MzMyNjdDMUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVc3dVNTeE1OOUhIU0RLRkxSWmNmOVFQN3VQOG82NGFKa1F5ejdLa0diQXAvMC80 NkUwRDY3OENFNkZBQzg1MTQ0Mjc5RUE3REU4QUY0NjMzMjY3QzFFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlnDF3vjeGHb+v5pZFxGBTxe2J//fHnmUquDrgXMDi0NwoxVr+zspJVvbfj2E dg0CP6flUsA4nX9Zl3CWrRKNcNftmTDuT5qeSQQjDfUeEh5hZIT34rNbJ5QD+idi Srpx59cdHvCJDS1RrmRw/QuQ8mV0ACv1a8VVJUjFSFDDvz2xXJRdRZch5PQauuDX f+BhDX97A9svHBPolXAfh9l40xmBIyjzK/2brAn7ohNkM0/MukTfe5XyPjLIfni9 c0A2ZND2wf90lZBsBzakQFkKpWvmMjcDYeOKqxOlqdFjSB8paC6P+7tUQOEyUOrZ Tb5Oe6pDGP/RyHxc8a5T8afP1Q== -----END CERTIFICATE-----Generated at Fri Jun 20 16:58:40 2025 by rpki-client