$ rpki-client -vvf rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft File: 406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft (raw, json) Hash identifier: m7OoayvtzDnfYQcw7LqKkqAaUaobI8Mjloz1MfscPEQ= Subject key identifier: E6:D6:FD:EB:F6:2B:BF:39:73:E9:4E:31:47:5D:EC:92:40:16:F1:7C Authority key identifier: 40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3 Certificate issuer: /CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3 Certificate serial: 7F1BE99D715280F235D6758839C7840873E3AD64 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft Manifest number: 0291 Signing time: Sun 10 Aug 2025 10:11:29 +0000 Manifest this update: Sun 10 Aug 2025 10:06:29 +0000 Manifest next update: Mon 11 Aug 2025 11:31:29 +0000 Files and hashes: 1: 323830343a386566303a3a2f33322d3430203d3e20323733343537.roa (hash: cijZiORTQj8pw+Vial1gPDZ9Wbm7UefB7xwRnVBMG3A=) 2: 406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl (hash: d6HXe7/go7d+oCoO9LNHqSG56HW81Lzwwb3JNLsTOmg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 11:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1b:e9:9d:71:52:80:f2:35:d6:75:88:39:c7:84:08:73:e3:ad:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3 Validity Not Before: Aug 10 10:06:29 2025 GMT Not After : Aug 11 11:31:29 2025 GMT Subject: CN=E6D6FDEBF62BBF3973E94E31475DEC924016F17C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:03:98:04:7b:d9:be:f7:f9:8c:b0:64:59:3d: 90:f8:fd:49:a6:78:41:b6:6a:6e:1f:0f:65:f2:dd: 95:89:84:a4:84:73:ee:8c:3f:e8:92:62:b4:a6:aa: a3:c5:8d:d2:8b:21:6d:32:a7:5a:a3:b4:9a:35:13: 50:dd:9c:ed:73:53:25:55:08:ae:24:b8:b4:a3:71: 7a:97:19:55:14:75:fe:e6:cc:62:cf:61:74:7a:5d: d7:aa:4a:bc:1e:15:e9:3e:57:6f:30:28:df:03:a6: be:8c:75:bb:9c:54:be:40:c7:b9:e1:67:20:d7:23: af:cc:ba:2f:4e:f0:a1:c2:f2:a9:e5:eb:b7:f4:40: 16:c8:da:bb:78:06:f2:76:59:08:28:e0:fc:6c:7d: 6f:c8:25:0f:7e:53:12:8b:b4:1d:d1:45:cb:1f:bd: 6b:3f:cd:7d:f1:04:69:a0:69:0d:6f:56:6a:91:ed: dd:c6:ea:72:3f:7a:09:2d:b6:51:28:7e:e2:4b:91: f3:29:bf:cd:2b:36:1a:5b:0b:e7:c9:bf:5e:3d:15: 79:1e:6a:52:c9:fe:3e:c0:9a:4a:fe:b8:97:ed:05: da:e1:fa:39:bb:06:ca:4f:b4:45:fa:8c:36:a0:bb: 5d:6c:dd:37:41:50:27:6f:fe:ee:2b:b4:25:b9:9f: 91:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D6:FD:EB:F6:2B:BF:39:73:E9:4E:31:47:5D:EC:92:40:16:F1:7C X509v3 Authority Key Identifier: keyid:40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:64:96:b6:2e:dd:9f:74:84:3c:95:69:fe:af:df:d7:b7:42: 64:bd:84:8d:10:84:90:0b:a8:9e:1a:95:6e:95:16:4c:38:04: ae:eb:11:af:e3:d6:b4:09:42:92:47:4a:a9:3e:dc:b0:0a:a1: 60:c8:ed:78:a5:ff:5f:9f:d3:dc:05:68:75:a2:20:c8:14:e0: 1d:1f:5c:f3:ee:f2:16:43:c9:93:10:14:f3:cc:91:cc:08:9e: 1d:74:31:8d:f8:05:54:55:1a:9b:2b:28:4c:e9:12:9d:3e:7e: 62:31:f0:66:4d:fc:f6:7f:d4:0a:65:57:38:63:5e:b7:1c:c4: 41:13:e4:7f:97:30:61:a8:c4:b4:77:92:8f:43:51:ef:34:60: bd:22:05:46:69:58:60:47:64:39:c0:0b:76:60:d8:41:ff:5a: 7e:93:e2:05:ef:d7:34:91:bb:9b:3d:ef:d3:60:64:d5:e1:73: be:f6:c6:8a:5f:0f:9a:d4:c9:bb:75:a7:26:24:bd:b2:3d:24: b7:ae:f8:ca:4b:d8:ba:ca:e7:df:17:93:d8:bd:91:69:c5:28: 13:71:50:d0:7b:e2:d5:86:60:92:02:15:f6:1a:9e:0a:fd:5c: 7c:10:2a:13:0f:19:35:a0:97:19:2c:6f:fd:71:1a:d0:b9:4b: bf:93:4f:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfxvpnXFSgPI11nWIOceECHPjrWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA2QjAwRDVCNjYwRjZFRUM1Qzg0MTRGQTBGMEI3RkYz RUM1NzZBMzAeFw0yNTA4MTAxMDA2MjlaFw0yNTA4MTExMTMxMjlaMDMxMTAvBgNV BAMTKEU2RDZGREVCRjYyQkJGMzk3M0U5NEUzMTQ3NURFQzkyNDAxNkYxN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjA5gEe9m+9/mMsGRZPZD4/Umm eEG2am4fD2Xy3ZWJhKSEc+6MP+iSYrSmqqPFjdKLIW0yp1qjtJo1E1DdnO1zUyVV CK4kuLSjcXqXGVUUdf7mzGLPYXR6XdeqSrweFek+V28wKN8Dpr6MdbucVL5Ax7nh ZyDXI6/Mui9O8KHC8qnl67f0QBbI2rt4BvJ2WQgo4PxsfW/IJQ9+UxKLtB3RRcsf vWs/zX3xBGmgaQ1vVmqR7d3G6nI/egkttlEofuJLkfMpv80rNhpbC+fJv149FXke alLJ/j7Amkr+uJftBdrh+jm7BspPtEX6jDagu11s3TdBUCdv/u4rtCW5n5EHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5tb96/Yrvzlz6U4xR13skkAW8XwwHwYDVR0j BBgwFoAUQGsA1bZg9u7FyEFPoPC3/z7FdqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWRQZnVSRVBUQnR0TXFRb3BUeXRwbmlLaEUzTEhkRnN6YXZEWk1CYzUy VW0vMS80MDZCMDBENUI2NjBGNkVFQzVDODQxNEZBMEYwQjdGRjNFQzU3NkEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwNkIwMEQ1QjY2MEY2RUVD NUM4NDE0RkEwRjBCN0ZGM0VDNTc2QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWRQZnVSRVBUQnR0TXFRb3BUeXRwbmlLaEUzTEhkRnN6YXZEWk1CYzUyVW0vMS80 MDZCMDBENUI2NjBGNkVFQzVDODQxNEZBMEYwQjdGRjNFQzU3NkEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH2SWti7dn3SEPJVp/q/f17dCZL2EjRCEkAuonhqVbpUWTDgErusRr+PWtAlC kkdKqT7csAqhYMjteKX/X5/T3AVodaIgyBTgHR9c8+7yFkPJkxAU88yRzAieHXQx jfgFVFUamysoTOkSnT5+YjHwZk389n/UCmVXOGNetxzEQRPkf5cwYajEtHeSj0NR 7zRgvSIFRmlYYEdkOcALdmDYQf9afpPiBe/XNJG7mz3v02Bk1eFzvvbGil8PmtTJ u3WnJiS9sj0kt674ykvYusrn3xeT2L2RacUoE3FQ0Hvi1YZgkgIV9hqeCv1cfBAq Ew8ZNaCXGSxv/XEa0LlLv5NPvw== -----END CERTIFICATE-----Generated at Sun Aug 10 18:57:48 2025 by rpki-client