$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.mft File: 6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.mft (raw, json) Hash identifier: uXHror3Z2GeWyaxv2TACD5Bg7FJOMlv/444vnzjHKu4= Subject key identifier: AA:1E:21:D6:C4:14:95:CB:83:89:FC:A4:E0:E6:30:DC:33:2B:4B:97 Authority key identifier: 6E:0A:8E:49:B9:63:4E:FE:81:81:6E:DD:1A:25:DC:1B:54:E6:17:DB Certificate issuer: /CN=6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB Certificate serial: 64D87D754F7E26871B68244635D1DC122FC5D931 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.cer Subject info access: rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.mft Manifest number: 07 Signing time: Thu 19 Jun 2025 01:24:43 +0000 Manifest this update: Thu 19 Jun 2025 01:19:43 +0000 Manifest next update: Fri 20 Jun 2025 03:24:43 +0000 Files and hashes: 1: 3133312e37322e3235322e302f32322d3332203d3e203631373531.roa (hash: TmSNd5HhRGdjUqqsAfDHauy5FOZdmtRhe0nq6fXhd7M=) 2: 6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.crl (hash: GaurPBJW4CNAgB1jdrjVUkxtl2ZwIHhQ1C14sODZty8=) 3: 3136382e3232382e34302e302f32322d3332203d3e203631373531.roa (hash: k2dNZ/uMKrR2A935HV2JI2jH/943jXieb4KZNLuXbSo=) 4: 323830343a316263633a3a2f33322d313238203d3e203631373531.roa (hash: tEodplwCK3w+jEuTdEcEf0gpGvhizy+7hot/gLU9IuU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.crl rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 03:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:d8:7d:75:4f:7e:26:87:1b:68:24:46:35:d1:dc:12:2f:c5:d9:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB Validity Not Before: Jun 19 01:19:43 2025 GMT Not After : Jun 20 03:24:43 2025 GMT Subject: CN=AA1E21D6C41495CB8389FCA4E0E630DC332B4B97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5e:f9:b8:1e:b3:fc:39:07:05:97:bf:02:f0: e1:47:d8:dd:d9:99:c0:39:1c:96:66:68:86:63:84: 05:2d:af:17:65:80:8d:3a:07:82:8e:4b:dc:6e:9f: 52:ea:c7:28:60:aa:5f:09:f0:02:bf:ea:64:33:85: 4d:9a:30:18:32:de:3b:73:ec:b4:0f:0b:c1:6d:e5: 35:8a:95:d3:80:cf:4c:f0:5c:8e:c4:39:8c:59:b5: a3:b8:11:fd:d4:e6:47:17:0d:28:80:04:fd:c8:8e: 4b:03:55:1f:66:c3:8f:b9:ba:ed:85:6f:88:9f:b8: 86:7f:bf:bc:30:39:28:bf:13:29:bc:01:de:77:e4: 1a:d4:92:78:b8:eb:62:f9:9d:c9:78:5b:7e:44:24: 8e:30:60:aa:55:9a:4e:7a:d4:48:f3:8a:42:6b:8d: 41:65:f8:2a:cd:e3:91:a0:3d:dc:11:03:79:d3:04: ad:6a:04:26:f4:43:89:32:23:1b:d1:57:a2:d7:dd: 31:57:79:54:1a:06:2c:e4:4d:49:a7:b1:4c:1a:3f: f4:a6:90:0e:5b:37:b7:57:3e:7a:6d:a3:45:6f:ad: 93:39:8e:db:8c:d7:02:b1:82:60:80:e2:ed:d5:01: ba:2a:b0:39:95:3a:a3:e0:9b:1b:d7:60:ca:32:9b: ab:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1E:21:D6:C4:14:95:CB:83:89:FC:A4:E0:E6:30:DC:33:2B:4B:97 X509v3 Authority Key Identifier: keyid:6E:0A:8E:49:B9:63:4E:FE:81:81:6E:DD:1A:25:DC:1B:54:E6:17:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:4c:c9:96:ce:61:6a:39:24:c7:34:3b:94:43:b3:1b:4f:f5: e7:6b:c5:a3:9b:fe:0e:33:fa:03:d7:dd:46:4c:65:35:31:02: 62:46:37:70:11:1c:17:c2:69:0e:1b:b1:54:23:9d:1e:c0:25: 0c:86:bc:da:eb:52:35:1a:e6:4b:36:d1:c0:a9:0e:02:07:8c: 20:77:27:af:95:ee:3d:27:6f:59:c7:29:6b:91:63:8b:c0:44: b7:77:f3:d2:5f:c2:e5:f0:d9:02:9f:12:22:28:b9:b5:b6:69: 1a:e6:ea:00:27:4b:99:fb:62:62:c6:16:94:99:47:96:c5:c7: 9e:a6:9c:4b:50:5b:a4:cb:75:9d:9b:6f:74:75:31:c1:6e:ff: 87:1b:26:c3:b8:b9:63:91:a7:c3:db:7e:90:bd:2f:9f:2f:6c: fc:df:f0:8e:9d:35:71:69:d3:7c:49:25:eb:3f:05:6e:92:f0: 9e:d7:b0:6d:93:80:b9:8e:db:78:d5:ee:15:be:38:c0:f4:89: 35:f5:a6:24:e6:bc:9c:67:f2:d7:fd:06:89:38:a1:b9:52:8d: 4d:cb:aa:1e:4c:18:b3:6b:52:43:10:57:6b:8e:3b:a1:29:de: 86:fe:3b:b7:5d:e2:fe:28:bd:9f:d1:51:0b:97:a6:93:76:75: fd:62:6c:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZNh9dU9+JocbaCRGNdHcEi/F2TEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUwQThFNDlCOTYzNEVGRTgxODE2RUREMUEyNURDMUI1 NEU2MTdEQjAeFw0yNTA2MTkwMTE5NDNaFw0yNTA2MjAwMzI0NDNaMDMxMTAvBgNV BAMTKEFBMUUyMUQ2QzQxNDk1Q0I4Mzg5RkNBNEUwRTYzMERDMzMyQjRCOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGXvm4HrP8OQcFl78C8OFH2N3Z mcA5HJZmaIZjhAUtrxdlgI06B4KOS9xun1Lqxyhgql8J8AK/6mQzhU2aMBgy3jtz 7LQPC8Ft5TWKldOAz0zwXI7EOYxZtaO4Ef3U5kcXDSiABP3IjksDVR9mw4+5uu2F b4ifuIZ/v7wwOSi/Eym8Ad535BrUkni462L5ncl4W35EJI4wYKpVmk561EjzikJr jUFl+CrN45GgPdwRA3nTBK1qBCb0Q4kyIxvRV6LX3TFXeVQaBizkTUmnsUwaP/Sm kA5bN7dXPnpto0VvrZM5jtuM1wKxgmCA4u3VAboqsDmVOqPgmxvXYMoym6udAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqh4h1sQUlcuDifyk4OYw3DMrS5cwHwYDVR0j BBgwFoAUbgqOSbljTv6BgW7dGiXcG1TmF9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzRBM01QQ3dYN0pMM2pRSzlyNWRHQWlIdW85VlNNaktUTjVOZ3FrNnZa UFMvMC82RTBBOEU0OUI5NjM0RUZFODE4MTZFREQxQTI1REMxQjU0RTYxN0RCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFMEE4RTQ5Qjk2MzRFRkU4 MTgxNkVERDFBMjVEQzFCNTRFNjE3REIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NzRBM01QQ3dYN0pMM2pRSzlyNWRHQWlIdW85VlNNaktUTjVOZ3FrNnZaUFMvMC82 RTBBOEU0OUI5NjM0RUZFODE4MTZFREQxQTI1REMxQjU0RTYxN0RCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeUzJls5hajkkxzQ7lEOzG0/152vFo5v+DjP6A9fdRkxlNTECYkY3cBEcF8Jp DhuxVCOdHsAlDIa82utSNRrmSzbRwKkOAgeMIHcnr5XuPSdvWccpa5Fji8BEt3fz 0l/C5fDZAp8SIii5tbZpGubqACdLmftiYsYWlJlHlsXHnqacS1BbpMt1nZtvdHUx wW7/hxsmw7i5Y5Gnw9t+kL0vny9s/N/wjp01cWnTfEkl6z8FbpLwntewbZOAuY7b eNXuFb44wPSJNfWmJOa8nGfy1/0GiTihuVKNTcuqHkwYs2tSQxBXa447oSnehv47 t13i/ii9n9FRC5emk3Z1/WJsuw== -----END CERTIFICATE-----Generated at Thu Jun 19 17:19:22 2025 by rpki-client