$ rpki-client -vvf rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft File: 406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft (raw, json) Hash identifier: CXunUSQkHxLVoPkPqneaAj+1sHIcYt/nBXN5lT2g/h8= Subject key identifier: 68:F3:03:07:E9:BC:D9:71:E4:6E:DF:40:73:5E:46:F7:33:DC:ED:C7 Authority key identifier: 40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3 Certificate issuer: /CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3 Certificate serial: 4D6EC363406E0C8FB69428FDDE858CA9150B8824 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft Manifest number: 024C Signing time: Thu 19 Jun 2025 15:08:33 +0000 Manifest this update: Thu 19 Jun 2025 15:03:33 +0000 Manifest next update: Fri 20 Jun 2025 18:25:33 +0000 Files and hashes: 1: 323830343a386566303a3a2f33322d3430203d3e20323733343537.roa (hash: cijZiORTQj8pw+Vial1gPDZ9Wbm7UefB7xwRnVBMG3A=) 2: 406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl (hash: NS7lBYNxTylPXS7RW+4OkcYJpdxFqM8QslnXuMrXMp8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 18:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:6e:c3:63:40:6e:0c:8f:b6:94:28:fd:de:85:8c:a9:15:0b:88:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3 Validity Not Before: Jun 19 15:03:33 2025 GMT Not After : Jun 20 18:25:33 2025 GMT Subject: CN=68F30307E9BCD971E46EDF40735E46F733DCEDC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:29:dc:4f:63:e4:1d:32:70:24:25:0f:3c:7e: 80:55:68:bb:5c:08:99:aa:ae:74:d1:09:49:24:9e: e8:9c:82:6d:a6:ae:f8:37:4b:ef:40:3a:a9:17:c3: 58:76:e5:90:b4:44:c6:18:2d:e7:82:c1:26:85:ea: 0e:5f:1d:a5:dd:49:c4:05:20:f2:84:ee:49:b8:22: 24:2f:99:4e:b2:59:cb:b7:39:b3:20:ff:41:93:b4: 55:fb:39:ef:e9:a6:e2:da:46:01:3b:19:a3:6c:f5: 6c:f3:14:ab:09:35:50:77:f1:78:eb:56:da:7e:3f: 8e:78:3b:51:70:87:33:7d:9a:b3:40:7e:27:79:2b: b1:3b:6a:29:f9:17:93:87:c5:bf:a4:2c:70:c8:95: ea:28:e3:bf:ad:d8:43:7f:b0:11:32:a3:19:80:7f: 6d:ad:8e:7b:59:f8:bc:9d:a7:2e:6b:02:c1:72:86: 5f:99:e2:f6:d8:e5:c0:05:41:00:e7:11:54:1b:71: 92:1b:f1:94:bc:6f:9b:0a:67:30:b7:a8:b6:79:a7: 47:c8:77:34:b3:0a:2e:f4:ac:b1:34:90:02:fd:92: 26:d5:e9:6f:43:50:21:1e:01:27:fe:6e:12:d7:93: 21:55:4d:3c:a5:d7:2a:7e:ae:67:79:ee:0d:fc:ec: 56:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F3:03:07:E9:BC:D9:71:E4:6E:DF:40:73:5E:46:F7:33:DC:ED:C7 X509v3 Authority Key Identifier: keyid:40:6B:00:D5:B6:60:F6:EE:C5:C8:41:4F:A0:F0:B7:FF:3E:C5:76:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/1/406B00D5B660F6EEC5C8414FA0F0B7FF3EC576A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:2c:bb:7f:29:de:73:dc:85:c7:e4:66:22:58:9c:97:0b:f0: 84:0e:cd:d9:8e:fd:3b:4d:7f:41:23:5a:bc:9a:7d:bd:2d:9e: 56:67:41:a2:b7:77:5f:64:01:76:00:b9:68:4d:7a:8b:f1:b0: 68:63:67:3c:87:1a:67:63:a8:a5:1d:b1:51:32:28:41:e2:5f: 19:e2:6e:22:43:7c:f1:db:dc:a1:29:4b:b9:20:3a:dc:77:98: 93:55:0a:ff:d1:70:f1:30:ce:da:fb:80:f4:47:39:b8:39:75: 90:26:43:56:53:0a:43:e1:1e:f5:2c:3a:2c:d0:a8:81:e4:fa: 6a:6f:7d:99:2d:65:96:16:d8:86:63:8e:83:be:a2:9f:3a:7b: 41:b5:5d:67:c1:54:a8:00:ff:3d:ac:c5:98:f7:48:72:9e:c1: 49:fb:82:5e:91:bc:29:3b:1c:e3:b3:08:3f:b2:48:e0:ef:2f: fc:b9:ec:f8:7f:61:48:5e:86:32:6d:f1:00:2d:78:69:4e:0c: b2:58:97:0e:0b:8a:c1:6d:75:de:b7:d3:54:38:ca:f4:b1:f8: c9:fe:cf:98:82:aa:70:04:d2:e4:79:f5:7a:e2:db:dc:fc:3c: 4e:9a:46:ba:31:8c:91:65:19:46:3d:ac:f7:a8:8f:ae:36:95: 12:7e:89:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTW7DY0BuDI+2lCj93oWMqRULiCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA2QjAwRDVCNjYwRjZFRUM1Qzg0MTRGQTBGMEI3RkYz RUM1NzZBMzAeFw0yNTA2MTkxNTAzMzNaFw0yNTA2MjAxODI1MzNaMDMxMTAvBgNV BAMTKDY4RjMwMzA3RTlCQ0Q5NzFFNDZFREY0MDczNUU0NkY3MzNEQ0VEQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaKdxPY+QdMnAkJQ88foBVaLtc CJmqrnTRCUkknuicgm2mrvg3S+9AOqkXw1h25ZC0RMYYLeeCwSaF6g5fHaXdScQF IPKE7km4IiQvmU6yWcu3ObMg/0GTtFX7Oe/ppuLaRgE7GaNs9WzzFKsJNVB38Xjr Vtp+P454O1FwhzN9mrNAfid5K7E7ain5F5OHxb+kLHDIleoo47+t2EN/sBEyoxmA f22tjntZ+Lydpy5rAsFyhl+Z4vbY5cAFQQDnEVQbcZIb8ZS8b5sKZzC3qLZ5p0fI dzSzCi70rLE0kAL9kibV6W9DUCEeASf+bhLXkyFVTTyl1yp+rmd57g387FYpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaPMDB+m82XHkbt9Ac15G9zPc7ccwHwYDVR0j BBgwFoAUQGsA1bZg9u7FyEFPoPC3/z7FdqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWRQZnVSRVBUQnR0TXFRb3BUeXRwbmlLaEUzTEhkRnN6YXZEWk1CYzUy VW0vMS80MDZCMDBENUI2NjBGNkVFQzVDODQxNEZBMEYwQjdGRjNFQzU3NkEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwNkIwMEQ1QjY2MEY2RUVD NUM4NDE0RkEwRjBCN0ZGM0VDNTc2QTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWRQZnVSRVBUQnR0TXFRb3BUeXRwbmlLaEUzTEhkRnN6YXZEWk1CYzUyVW0vMS80 MDZCMDBENUI2NjBGNkVFQzVDODQxNEZBMEYwQjdGRjNFQzU3NkEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgyy7fynec9yFx+RmIliclwvwhA7N2Y79O01/QSNavJp9vS2eVmdBord3X2QB dgC5aE16i/GwaGNnPIcaZ2OopR2xUTIoQeJfGeJuIkN88dvcoSlLuSA63HeYk1UK /9Fw8TDO2vuA9Ec5uDl1kCZDVlMKQ+Ee9Sw6LNCogeT6am99mS1llhbYhmOOg76i nzp7QbVdZ8FUqAD/PazFmPdIcp7BSfuCXpG8KTsc47MIP7JI4O8v/Lns+H9hSF6G Mm3xAC14aU4MsliXDguKwW113rfTVDjK9LH4yf7PmIKqcATS5Hn1euLb3Pw8TppG ujGMkWUZRj2s96iPrjaVEn6JHg== -----END CERTIFICATE-----Generated at Fri Jun 20 08:12:26 2025 by rpki-client