$ rpki-client -vvf rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft File: 71238E97CC73F492E8BD23DB6B3EA12536850E88.mft (raw, json) Hash identifier: DJFtBE8CkkKmL1NDs9figvy6DWB25yqvjyP7Cd9s1Io= Subject key identifier: 9E:1F:AD:4E:E4:72:C3:ED:45:7C:3A:72:D2:1C:76:0F:5E:3B:9D:5E Authority key identifier: 71:23:8E:97:CC:73:F4:92:E8:BD:23:DB:6B:3E:A1:25:36:85:0E:88 Certificate issuer: /CN=71238E97CC73F492E8BD23DB6B3EA12536850E88 Certificate serial: 7F937FEE0B9A6B26C4B490BFF6721173C3B5302A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer Subject info access: rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft Manifest number: 012F Signing time: Fri 20 Jun 2025 16:17:23 +0000 Manifest this update: Fri 20 Jun 2025 16:12:23 +0000 Manifest next update: Sat 21 Jun 2025 19:28:23 +0000 Files and hashes: 1: 34352e3232392e3134342e302f32322d3234203d3e20323637313535.roa (hash: ElJjy7A1PbQG8wIwA8bz2I3GJB8p0S7yiLqquvqNB9o=) 2: 71238E97CC73F492E8BD23DB6B3EA12536850E88.crl (hash: o6XOvPdLsOwYrVtdoc7IPa852LzmPDlQo7b3Xo5mzcc=) 3: 323830343a343866343a3a2f33322d3634203d3e20323637313535.roa (hash: MfyQn5C08bskQwyuSvTvpJvBptsKdAwps5NA9FISJ7k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.crl rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 19:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:93:7f:ee:0b:9a:6b:26:c4:b4:90:bf:f6:72:11:73:c3:b5:30:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71238E97CC73F492E8BD23DB6B3EA12536850E88 Validity Not Before: Jun 20 16:12:23 2025 GMT Not After : Jun 21 19:28:23 2025 GMT Subject: CN=9E1FAD4EE472C3ED457C3A72D21C760F5E3B9D5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3d:26:77:0a:72:f9:22:f3:26:7a:70:b3:6a: ca:99:77:00:4a:0f:87:85:e5:02:a5:be:cd:1e:7d: 6c:70:b6:f0:97:90:67:2b:b3:15:3b:af:12:e3:d6: 51:4b:8c:20:bb:8b:ec:b1:61:2e:8d:de:80:7a:fe: 2e:4e:66:b8:2b:0b:a1:1b:a2:70:b0:ad:84:d1:55: d1:46:97:e2:b7:1c:1c:b3:8b:7f:46:cd:05:51:6e: 43:1d:31:19:d4:11:e3:ba:a5:cb:8f:16:76:1c:5c: 4c:04:cd:13:58:63:3e:8e:e7:85:84:49:19:ea:e1: 1b:85:6a:e6:88:e1:e9:8a:d7:04:97:e3:91:9c:d9: aa:5a:8d:50:ab:66:03:82:f8:cc:9f:d0:bc:fb:f6: 50:92:0e:0a:70:d4:66:d4:e1:0e:15:5b:0c:2a:17: 7e:09:35:d2:2d:6d:80:5c:b0:fe:11:e8:cf:e6:77: 7b:8a:90:8b:d2:d8:ac:c7:89:91:37:43:dc:5d:09: a0:11:b8:45:2b:2f:9b:e0:81:db:e6:49:91:bb:2e: b6:72:cc:68:d7:53:54:b2:e9:7b:29:cd:b9:91:25: ca:4f:36:9a:ab:68:06:a0:0c:4e:2a:ac:a9:cd:21: eb:26:4f:01:a8:55:e9:10:62:7a:33:f1:2e:63:88: 19:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1F:AD:4E:E4:72:C3:ED:45:7C:3A:72:D2:1C:76:0F:5E:3B:9D:5E X509v3 Authority Key Identifier: keyid:71:23:8E:97:CC:73:F4:92:E8:BD:23:DB:6B:3E:A1:25:36:85:0E:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:32:e7:54:82:b4:e7:cd:4b:cf:2d:0e:28:a9:e9:f9:70:81: 13:6c:2e:16:7e:fd:61:e0:11:b0:2a:50:be:ed:e2:b8:e9:b5: da:79:ba:90:42:a2:f3:b1:b0:c6:69:a2:fa:4f:35:ab:74:26: 08:95:ea:2e:92:42:bd:dc:32:03:1c:9e:f4:98:9f:73:e9:f8: a5:72:72:e1:0a:2f:92:bb:b5:8b:ff:ee:75:38:24:d1:4d:4a: 0c:21:55:0a:d1:79:61:1d:83:fa:63:08:c4:79:3a:08:df:37: e7:b0:ad:22:ab:40:e5:da:7c:7f:c5:7f:f9:fd:9b:13:5d:13: d3:6b:96:a1:88:7c:c2:3a:17:81:86:40:90:d3:89:a5:31:5f: 00:c0:e0:4c:57:cb:ec:fc:28:53:b2:d6:3c:c1:70:60:58:1f: dd:d6:78:b8:20:3b:9c:96:9c:10:cf:e9:85:59:79:7d:4d:96: fc:c1:33:e9:d7:09:1c:f2:0b:57:37:7d:0c:1d:9f:ce:31:48: f1:d4:ae:c3:e5:40:34:6b:9f:0a:8d:5d:a7:80:6e:18:ff:d3: cb:7c:07:3f:b9:87:23:01:da:cb:d3:40:cb:8e:76:13:ef:b5: fb:4f:76:23:3b:e4:92:ca:2d:95:30:6b:26:41:35:c8:49:45: 4e:94:01:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUf5N/7guaaybEtJC/9nIRc8O1MCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEyMzhFOTdDQzczRjQ5MkU4QkQyM0RCNkIzRUExMjUz Njg1MEU4ODAeFw0yNTA2MjAxNjEyMjNaFw0yNTA2MjExOTI4MjNaMDMxMTAvBgNV BAMTKDlFMUZBRDRFRTQ3MkMzRUQ0NTdDM0E3MkQyMUM3NjBGNUUzQjlENUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFPSZ3CnL5IvMmenCzasqZdwBK D4eF5QKlvs0efWxwtvCXkGcrsxU7rxLj1lFLjCC7i+yxYS6N3oB6/i5OZrgrC6Eb onCwrYTRVdFGl+K3HByzi39GzQVRbkMdMRnUEeO6pcuPFnYcXEwEzRNYYz6O54WE SRnq4RuFauaI4emK1wSX45Gc2apajVCrZgOC+Myf0Lz79lCSDgpw1GbU4Q4VWwwq F34JNdItbYBcsP4R6M/md3uKkIvS2KzHiZE3Q9xdCaARuEUrL5vggdvmSZG7LrZy zGjXU1Sy6XspzbmRJcpPNpqraAagDE4qrKnNIesmTwGoVekQYnoz8S5jiBmPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnh+tTuRyw+1FfDpy0hx2D147nV4wHwYDVR0j BBgwFoAUcSOOl8xz9JLovSPbaz6hJTaFDogwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0FOOVZNZjNqMmlMaHNqZEZibk5zNWh3NU4xQXI5V0NNSzFxQTluY3VZ WHIvMC83MTIzOEU5N0NDNzNGNDkyRThCRDIzREI2QjNFQTEyNTM2ODUwRTg4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxMjM4RTk3Q0M3M0Y0OTJF OEJEMjNEQjZCM0VBMTI1MzY4NTBFODguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N0FOOVZNZjNqMmlMaHNqZEZibk5zNWh3NU4xQXI5V0NNSzFxQTluY3VZWHIvMC83 MTIzOEU5N0NDNzNGNDkyRThCRDIzREI2QjNFQTEyNTM2ODUwRTg4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATzLnVIK0581Lzy0OKKnp+XCBE2wuFn79YeARsCpQvu3iuOm12nm6kEKi87Gw xmmi+k81q3QmCJXqLpJCvdwyAxye9Jifc+n4pXJy4Qovkru1i//udTgk0U1KDCFV CtF5YR2D+mMIxHk6CN8357CtIqtA5dp8f8V/+f2bE10T02uWoYh8wjoXgYZAkNOJ pTFfAMDgTFfL7PwoU7LWPMFwYFgf3dZ4uCA7nJacEM/phVl5fU2W/MEz6dcJHPIL Vzd9DB2fzjFI8dSuw+VANGufCo1dp4BuGP/Ty3wHP7mHIwHay9NAy452E++1+092 IzvkksotlTBrJkE1yElFTpQBug== -----END CERTIFICATE-----Generated at Sat Jun 21 10:56:42 2025 by rpki-client