$ rpki-client -vvf rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft File: 71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft (raw, json) Hash identifier: 8opiKr+UNTUOonXGADxFo3OrEkoS4WLWqPCGAZgrBSU= Subject key identifier: 0D:93:9C:AF:8C:DC:15:ED:84:BA:DD:AA:66:B2:21:71:C9:7B:23:40 Authority key identifier: 71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52 Certificate issuer: /CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52 Certificate serial: 7E20C71FB5A8E740CBCAE55D0BC8968B73BBD732 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer Subject info access: rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft Manifest number: 024E Signing time: Thu 19 Jun 2025 19:59:57 +0000 Manifest this update: Thu 19 Jun 2025 19:54:57 +0000 Manifest next update: Fri 20 Jun 2025 22:33:57 +0000 Files and hashes: 1: 3134332e3230382e3232382e302f32322d3332203d3e20323633303034.roa (hash: IV3rgpu5jqUf8IKt60skmyD4qSR/oAcEE4NuthHk2GU=) 2: 71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl (hash: cmmwCPgcnaYhPHCelFZ8jZvgW4Ni08RFq1eGjKuMpj8=) 3: 323830343a326265343a3a2f33322d313238203d3e20323633303034.roa (hash: YCMokJP8YtzLgx2BEvdyCNMZiRlmmm6TEAPNElQUjXQ=) 4: 3138362e3233372e31362e302f32312d3332203d3e20323633303034.roa (hash: 3DVq0DqkNADLTWL9AGG+zxpnVBOYf65tDKJdH03YwxI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 22:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:20:c7:1f:b5:a8:e7:40:cb:ca:e5:5d:0b:c8:96:8b:73:bb:d7:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52 Validity Not Before: Jun 19 19:54:57 2025 GMT Not After : Jun 20 22:33:57 2025 GMT Subject: CN=0D939CAF8CDC15ED84BADDAA66B22171C97B2340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:16:c7:d6:fc:42:9b:64:51:e7:50:f0:bb:ab: 68:53:f9:c7:d2:a2:19:3f:67:da:5f:74:de:55:b7: cf:0e:e9:e4:ed:a1:8f:2a:d7:ef:d8:43:01:9c:05: 4d:db:05:88:46:e3:2a:67:9e:ba:59:16:5d:64:b7: c5:71:f6:b0:fd:12:d3:42:4c:71:e6:07:d3:a3:76: c0:8e:b2:89:ef:0d:e8:f1:e2:22:03:40:e7:5e:db: 7f:8a:35:aa:8d:52:d6:06:da:fc:22:a9:5b:aa:c0: 07:84:ac:bf:15:b7:45:76:dc:af:28:d8:a9:c2:60: 02:4a:d1:e0:7b:f7:ed:ee:30:59:cb:45:fb:94:7b: 13:23:32:d1:86:67:91:74:dd:8f:ff:51:f9:05:3e: 17:0a:07:d9:1f:83:67:db:b9:19:9f:cf:4c:86:47: 65:b6:08:6c:ec:65:65:26:6e:1d:12:b6:c6:87:4e: a6:ba:2f:38:da:32:89:b2:2d:2c:4b:c1:3a:b6:ad: 82:5c:bf:d9:2b:d6:bd:cf:5b:6b:8e:e2:22:cc:be: 69:61:cd:f7:d1:3b:b2:0d:0a:a7:59:93:b4:e6:40: 8d:6d:26:b2:fb:22:dd:55:5c:dd:37:f0:47:e1:1e: ca:d6:e5:6c:6f:c9:45:70:7a:b1:8d:6a:6e:92:67: 99:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:93:9C:AF:8C:DC:15:ED:84:BA:DD:AA:66:B2:21:71:C9:7B:23:40 X509v3 Authority Key Identifier: keyid:71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:35:d6:88:d5:29:f0:e6:0f:88:fa:61:8e:82:65:e2:14:8b: b3:6d:44:f3:dd:fe:d2:dc:72:71:46:ce:1a:e0:1d:a9:f5:4a: 8e:bd:36:e3:81:97:da:bb:3d:33:5b:3d:3b:e6:26:5d:76:df: 70:c6:13:3f:e3:80:ad:3f:70:f3:6b:e7:97:03:89:ba:0c:97: 86:47:09:85:af:bc:26:e7:11:a9:42:38:f1:71:01:f8:55:0f: be:ac:90:b6:af:10:e8:03:f4:f8:e3:f3:72:67:4e:50:46:70: ef:03:58:ef:28:de:54:a0:2e:ff:a8:51:c0:a6:85:cf:49:b3: d8:ec:20:9d:9d:12:c4:f7:e8:11:f1:67:9b:1b:bc:d1:6c:8c: 25:3b:9c:d1:da:05:6f:d1:84:2e:9e:5c:21:de:57:36:7e:19: da:ef:ab:9f:7a:df:78:c8:82:ba:97:a0:59:70:67:29:7c:24: 7d:f2:4a:45:72:da:aa:71:14:7d:56:cf:af:4d:06:fa:dc:e2: 3b:21:e9:47:99:d0:56:98:a6:76:27:12:77:0b:0b:6f:6d:89: f8:5b:35:26:bb:ea:76:ab:5f:17:c5:be:ec:6c:b0:61:c9:fd: 68:d4:ed:62:10:49:ea:e0:55:d6:57:21:7f:07:03:7c:e9:77: d6:40:a6:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfiDHH7Wo50DLyuVdC8iWi3O71zIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFMzM2QUExRUFEQkU0QTYxMDg2NkVEQjQxNDFEMzZB NUI3N0M1MjAeFw0yNTA2MTkxOTU0NTdaFw0yNTA2MjAyMjMzNTdaMDMxMTAvBgNV BAMTKDBEOTM5Q0FGOENEQzE1RUQ4NEJBRERBQTY2QjIyMTcxQzk3QjIzNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVFsfW/EKbZFHnUPC7q2hT+cfS ohk/Z9pfdN5Vt88O6eTtoY8q1+/YQwGcBU3bBYhG4ypnnrpZFl1kt8Vx9rD9EtNC THHmB9OjdsCOsonvDejx4iIDQOde23+KNaqNUtYG2vwiqVuqwAeErL8Vt0V23K8o 2KnCYAJK0eB79+3uMFnLRfuUexMjMtGGZ5F03Y//UfkFPhcKB9kfg2fbuRmfz0yG R2W2CGzsZWUmbh0StsaHTqa6LzjaMomyLSxLwTq2rYJcv9kr1r3PW2uO4iLMvmlh zffRO7INCqdZk7TmQI1tJrL7It1VXN038EfhHsrW5WxvyUVwerGNam6SZ5lFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDZOcr4zcFe2Eut2qZrIhccl7I0AwHwYDVR0j BBgwFoAUceM2qh6tvkphCGbttBQdNqW3fFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUc2aHduWGN4b0dWak4xWWtmVVdyYjNVeWhLQXB0R0w5cFlqM3dCOWo5 Q3QvMS83MUUzMzZBQTFFQURCRTRBNjEwODY2RURCNDE0MUQzNkE1Qjc3QzUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxRTMzNkFBMUVBREJFNEE2 MTA4NjZFREI0MTQxRDM2QTVCNzdDNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUc2aHduWGN4b0dWak4xWWtmVVdyYjNVeWhLQXB0R0w5cFlqM3dCOWo5Q3QvMS83 MUUzMzZBQTFFQURCRTRBNjEwODY2RURCNDE0MUQzNkE1Qjc3QzUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjDXWiNUp8OYPiPphjoJl4hSLs21E893+0txycUbOGuAdqfVKjr0244GX2rs9 M1s9O+YmXXbfcMYTP+OArT9w82vnlwOJugyXhkcJha+8JucRqUI48XEB+FUPvqyQ tq8Q6AP0+OPzcmdOUEZw7wNY7yjeVKAu/6hRwKaFz0mz2OwgnZ0SxPfoEfFnmxu8 0WyMJTuc0doFb9GELp5cId5XNn4Z2u+rn3rfeMiCupegWXBnKXwkffJKRXLaqnEU fVbPr00G+tziOyHpR5nQVpimdicSdwsLb22J+Fs1JrvqdqtfF8W+7GywYcn9aNTt YhBJ6uBV1lchfwcDfOl31kCmpg== -----END CERTIFICATE-----Generated at Fri Jun 20 07:36:37 2025 by rpki-client