$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.mft File: 00398394BC116D8D01BE15C08D06060EF5755D29.mft (raw, json) Hash identifier: Gwdnw3K6ROWblMVOBw2B91Hg11f9spmtgk908k8QNTk= Subject key identifier: 64:26:9B:A5:D0:E6:81:7A:ED:F7:47:44:97:07:89:78:00:79:F0:E0 Authority key identifier: 00:39:83:94:BC:11:6D:8D:01:BE:15:C0:8D:06:06:0E:F5:75:5D:29 Certificate issuer: /CN=00398394BC116D8D01BE15C08D06060EF5755D29 Certificate serial: 2CD44D79D43D10C07BB31E88B7F5A465FC3138B7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00398394BC116D8D01BE15C08D06060EF5755D29.cer Subject info access: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.mft Manifest number: AC Signing time: Fri 20 Jun 2025 16:42:35 +0000 Manifest this update: Fri 20 Jun 2025 16:37:35 +0000 Manifest next update: Sat 21 Jun 2025 18:25:35 +0000 Files and hashes: 1: 323830343a33343a3a2f33322d3438203d3e203238333036.roa (hash: 2bZm4vj15VHvPexCZ7bOxBFmJe9FFJyBZCYgQB+zAH0=) 2: 3137372e3230302e39362e302f32302d3234203d3e203238333036.roa (hash: I5QHxn84/SYLgq1w9iUv8TGCgXnHKh0qrKn3T6Mis3Q=) 3: 3138392e33382e302e302f32302d3234203d3e203238333036.roa (hash: IVpomPYsstVgUrNlGGRSnV7BAHeBMDlsHxZbd71KgSo=) 4: 00398394BC116D8D01BE15C08D06060EF5755D29.crl (hash: jj0HaOYW2nhvRxjWcS5uGDUdkkqxHFyTzDwLuT7UBrY=) 5: 3138372e39342e38302e302f32302d3234203d3e203238333036.roa (hash: MaY/QGq1nFC3eJ4HpJqvVDH+fxkumlWAWv60xlPNEX0=) 6: 3137372e39312e3137362e302f32302d3234203d3e203238333036.roa (hash: k0Qp9OBBCyIDuweYwGmVIOMPBaMos5/4z4jDIiRZNq4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.crl rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00398394BC116D8D01BE15C08D06060EF5755D29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 18:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d4:4d:79:d4:3d:10:c0:7b:b3:1e:88:b7:f5:a4:65:fc:31:38:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00398394BC116D8D01BE15C08D06060EF5755D29 Validity Not Before: Jun 20 16:37:35 2025 GMT Not After : Jun 21 18:25:35 2025 GMT Subject: CN=64269BA5D0E6817AEDF74744970789780079F0E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:24:3d:06:d3:c5:51:23:d2:f9:c2:dc:41:de: 4e:03:18:48:64:87:2a:0a:12:f2:17:76:e1:62:07: 50:f5:61:90:51:d6:b0:70:be:c9:6d:ac:8d:c1:d1: 25:55:7f:33:eb:34:b8:f7:ff:d3:c5:0a:7b:ea:90: 22:de:ba:d4:64:58:66:6b:79:a3:4c:aa:d9:0c:63: d8:b1:28:5c:64:ea:52:fd:d4:58:2b:97:45:a9:69: 96:b0:d2:51:48:f7:b2:2d:37:bb:85:86:e3:3c:8a: 1c:e0:ef:07:b1:f7:84:91:30:1e:2d:79:a6:5c:2e: 96:48:51:6e:26:75:fa:50:0f:7c:b2:b1:98:23:17: be:ca:1f:29:30:f7:a1:7b:6f:a9:4f:d3:8b:19:84: f6:4c:10:bb:55:40:ef:48:a0:5f:9a:6c:b2:13:63: 51:71:c3:78:42:89:88:8a:34:b1:d1:d9:c5:ab:c5: a1:f2:47:24:cd:e1:e3:29:73:41:4c:0d:8b:d5:9b: 7d:f0:e2:b8:56:1b:cc:e8:11:a7:ac:43:a4:02:aa: ed:c1:f4:af:48:8c:21:b5:9c:0a:f3:a1:d8:0e:5f: 99:ce:01:4a:b1:fd:06:40:80:9e:5b:63:67:3a:06: 68:8c:95:86:64:b0:54:52:f7:57:11:e1:cc:20:e8: 58:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:26:9B:A5:D0:E6:81:7A:ED:F7:47:44:97:07:89:78:00:79:F0:E0 X509v3 Authority Key Identifier: keyid:00:39:83:94:BC:11:6D:8D:01:BE:15:C0:8D:06:06:0E:F5:75:5D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00398394BC116D8D01BE15C08D06060EF5755D29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:62:a0:5b:50:28:3e:cb:5c:f4:14:d8:19:81:b1:e8:b2:d8: ab:a9:b5:2c:fc:02:a3:ce:c1:36:56:c4:c4:83:45:54:53:1a: 85:ce:00:06:6a:c9:db:9a:f1:84:8d:01:43:99:57:ec:17:a9: 44:c8:fc:7e:06:c4:a6:8d:76:0c:b3:83:d3:b3:64:3b:06:ae: 41:6f:0c:a2:31:cc:96:e5:60:4b:6d:63:be:4a:24:d5:95:dd: 32:a2:3b:19:3f:b8:58:61:1a:ec:52:df:1e:77:ff:7d:21:d3: 8f:2c:1f:7c:94:bd:5e:2a:21:5a:42:a0:95:8f:e1:92:9b:46: da:36:94:97:bc:3c:b7:af:e5:77:13:6c:47:12:09:cc:53:f3: 8d:7a:32:31:ec:33:77:08:80:a5:0e:16:1e:19:b7:23:70:c5: 7d:05:ca:77:07:fe:53:0a:a2:0c:4e:a1:31:0d:7b:cc:a8:89: 62:b7:4f:99:f3:e3:45:d2:be:73:00:c5:f8:06:a4:08:f6:0d: 98:4f:7c:7f:d5:cd:8f:14:45:27:36:29:38:f2:22:f2:7c:0e: e1:4f:8a:7e:ce:27:1e:e9:fd:7f:99:f7:31:c9:61:c0:82:a3: 6f:09:e4:55:96:75:7d:41:c5:b6:5a:51:ab:69:17:cb:c5:5e: d6:c6:51:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULNRNedQ9EMB7sx6It/WkZfwxOLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAzOTgzOTRCQzExNkQ4RDAxQkUxNUMwOEQwNjA2MEVG NTc1NUQyOTAeFw0yNTA2MjAxNjM3MzVaFw0yNTA2MjExODI1MzVaMDMxMTAvBgNV BAMTKDY0MjY5QkE1RDBFNjgxN0FFREY3NDc0NDk3MDc4OTc4MDA3OUYwRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHJD0G08VRI9L5wtxB3k4DGEhk hyoKEvIXduFiB1D1YZBR1rBwvsltrI3B0SVVfzPrNLj3/9PFCnvqkCLeutRkWGZr eaNMqtkMY9ixKFxk6lL91Fgrl0WpaZaw0lFI97ItN7uFhuM8ihzg7wex94SRMB4t eaZcLpZIUW4mdfpQD3yysZgjF77KHykw96F7b6lP04sZhPZMELtVQO9IoF+abLIT Y1Fxw3hCiYiKNLHR2cWrxaHyRyTN4eMpc0FMDYvVm33w4rhWG8zoEaesQ6QCqu3B 9K9IjCG1nArzodgOX5nOAUqx/QZAgJ5bY2c6BmiMlYZksFRS91cR4cwg6FhFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZCabpdDmgXrt90dElweJeAB58OAwHwYDVR0j BBgwFoAUADmDlLwRbY0BvhXAjQYGDvV1XSkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5O dWcvMC8wMDM5ODM5NEJDMTE2RDhEMDFCRTE1QzA4RDA2MDYwRUY1NzU1RDI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMzk4Mzk0QkMxMTZEOEQw MUJFMTVDMDhEMDYwNjBFRjU3NTVEMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5OdWcvMC8w MDM5ODM5NEJDMTE2RDhEMDFCRTE1QzA4RDA2MDYwRUY1NzU1RDI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOWKgW1AoPstc9BTYGYGx6LLYq6m1LPwCo87BNlbExINFVFMahc4ABmrJ25rx hI0BQ5lX7BepRMj8fgbEpo12DLOD07NkOwauQW8MojHMluVgS21jvkok1ZXdMqI7 GT+4WGEa7FLfHnf/fSHTjywffJS9XiohWkKglY/hkptG2jaUl7w8t6/ldxNsRxIJ zFPzjXoyMewzdwiApQ4WHhm3I3DFfQXKdwf+UwqiDE6hMQ17zKiJYrdPmfPjRdK+ cwDF+AakCPYNmE98f9XNjxRFJzYpOPIi8nwO4U+Kfs4nHun9f5n3MclhwIKjbwnk VZZ1fUHFtlpRq2kXy8Ve1sZRnw== -----END CERTIFICATE-----Generated at Sat Jun 21 01:49:21 2025 by rpki-client