$ rpki-client -vvf rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft File: 3583862D781B71B103E9FA8D726C4D02380ACEE3.mft (raw, json) Hash identifier: TjT9eq7Efjm5GUNJggZOZojNbbECA1wKnYc1Rmu7HbY= Subject key identifier: 02:CE:31:FC:9A:1B:A0:EB:B9:AF:F0:09:99:75:0E:D0:32:1E:75:C9 Authority key identifier: 35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3 Certificate issuer: /CN=3583862D781B71B103E9FA8D726C4D02380ACEE3 Certificate serial: 57CD92A9E287FADB68C0CC98C23020ABC207C1CE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer Subject info access: rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft Manifest number: 024C Signing time: Mon 16 Jun 2025 21:48:48 +0000 Manifest this update: Mon 16 Jun 2025 21:43:48 +0000 Manifest next update: Tue 17 Jun 2025 23:51:48 +0000 Files and hashes: 1: 323830343a386361633a3a2f33322d3332203d3e20323733383134.roa (hash: roe3CRwUBZHOfPicJI5B0uNIJHF0uBEXZDkKOt8LSec=) 2: 3583862D781B71B103E9FA8D726C4D02380ACEE3.crl (hash: fUHKSes1x0uII6gSNOUPT4SNXad1RAOpcU7JLvqhAlM=) 3: 323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa (hash: F3fG9mFxvglpd2enKC9y9YG4bfXdBUOav0qW+NySFMc=) 4: 323830343a386361633a323030303a3a2f34302d3430203d3e20323733383134.roa (hash: VKDf7ggbfiz8rpCjJSQ+yu2T5sqSYuaym0M0bLcYVKI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 23:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:cd:92:a9:e2:87:fa:db:68:c0:cc:98:c2:30:20:ab:c2:07:c1:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3583862D781B71B103E9FA8D726C4D02380ACEE3 Validity Not Before: Jun 16 21:43:48 2025 GMT Not After : Jun 17 23:51:48 2025 GMT Subject: CN=02CE31FC9A1BA0EBB9AFF00999750ED0321E75C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e4:58:50:f1:fd:0f:32:c2:c9:96:90:92:09: 12:0f:bb:f4:16:22:a6:5a:3c:6b:70:83:0c:24:8d: 76:74:44:96:4a:94:01:f9:11:c5:8f:ba:23:11:45: b4:29:ad:7a:61:47:12:ac:9b:9b:1f:64:60:42:20: 07:77:be:c6:97:00:04:fe:c1:93:57:f3:0e:e7:87: 53:59:09:3b:0f:32:18:ca:fb:16:db:b9:7f:92:2b: 01:17:4e:76:6b:a9:3a:49:cb:c1:c0:d4:ab:fe:29: f1:77:d3:af:0b:f1:e6:6d:a1:81:35:9d:2e:56:56: 5f:ff:e5:b8:7b:6d:a8:2b:dd:a3:fd:30:07:45:df: 68:86:f2:b1:7d:de:ab:ab:49:c4:d0:4f:2b:66:4f: b9:4b:c8:25:07:ce:ea:a8:66:a3:f9:1e:b5:67:fc: 94:28:a5:11:a4:de:e1:29:3c:71:8d:05:b9:43:97: ee:7d:45:28:fb:95:a1:c0:57:2f:04:59:09:66:c7: 2a:ec:e4:3b:d4:ae:64:4b:4a:78:b3:9c:9f:08:44: 42:bb:02:f2:60:13:99:57:6e:7a:2d:30:49:57:38: 1c:a0:2c:02:fa:cf:6d:ef:1e:8d:c8:95:1b:42:27: a4:eb:ea:eb:37:6a:6d:fa:d9:5f:a5:e2:81:f7:ba: 6e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CE:31:FC:9A:1B:A0:EB:B9:AF:F0:09:99:75:0E:D0:32:1E:75:C9 X509v3 Authority Key Identifier: keyid:35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ef:88:e7:c6:87:a1:38:a9:7f:b5:72:43:26:b2:c0:85:41: df:5b:bc:06:40:1b:bc:8a:a3:7a:a1:6e:8f:06:af:bb:89:b3: 16:9f:00:42:df:9c:b5:e8:79:f6:07:5b:e2:a3:85:02:a8:e7: 47:c7:09:86:af:fc:3d:e9:20:a0:03:f2:99:ae:9b:0b:69:0c: 54:2d:33:66:0a:73:39:7d:4f:37:84:c1:4e:49:3a:fe:70:11: 8c:df:63:12:da:b5:e9:60:56:78:40:81:88:b6:d4:11:8f:6b: f5:8d:06:83:ef:df:89:98:27:34:08:54:b5:07:2f:a4:a5:12: 72:c1:54:47:f3:17:02:48:ab:74:67:c4:2a:a3:8d:eb:28:87: 89:dd:40:a5:6d:3f:aa:48:23:cc:eb:8d:f1:d9:9b:cc:de:a2: 9c:20:16:3f:37:e7:d8:13:2d:f7:ce:f8:28:14:9c:aa:24:79: b6:e4:c1:51:95:c3:5e:30:cf:af:88:f9:b9:80:5e:aa:71:6d: f4:8a:ac:7e:f9:52:c8:1a:af:cf:a7:8e:92:21:ad:60:61:c7: 2d:b6:9a:70:19:cd:11:6e:6c:7f:e9:7e:bb:04:28:ca:91:d4: 01:33:07:c2:36:e7:39:65:8b:ba:0e:1c:cb:39:b9:31:c4:34: 0f:8a:d1:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUV82SqeKH+ttowMyYwjAgq8IHwc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU4Mzg2MkQ3ODFCNzFCMTAzRTlGQThENzI2QzREMDIz ODBBQ0VFMzAeFw0yNTA2MTYyMTQzNDhaFw0yNTA2MTcyMzUxNDhaMDMxMTAvBgNV BAMTKDAyQ0UzMUZDOUExQkEwRUJCOUFGRjAwOTk5NzUwRUQwMzIxRTc1QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5FhQ8f0PMsLJlpCSCRIPu/QW IqZaPGtwgwwkjXZ0RJZKlAH5EcWPuiMRRbQprXphRxKsm5sfZGBCIAd3vsaXAAT+ wZNX8w7nh1NZCTsPMhjK+xbbuX+SKwEXTnZrqTpJy8HA1Kv+KfF3068L8eZtoYE1 nS5WVl//5bh7bagr3aP9MAdF32iG8rF93qurScTQTytmT7lLyCUHzuqoZqP5HrVn /JQopRGk3uEpPHGNBblDl+59RSj7laHAVy8EWQlmxyrs5DvUrmRLSniznJ8IREK7 AvJgE5lXbnotMElXOBygLAL6z23vHo3IlRtCJ6Tr6us3am362V+l4oH3um6vAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAs4x/JoboOu5r/AJmXUO0DIedckwHwYDVR0j BBgwFoAUNYOGLXgbcbED6fqNcmxNAjgKzuMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmhxNm9YM2J4eGtuWHRjZkIxcnRZeVRqa21rMkR2Rm9tb1I1RzRqNjZQ TEsvMS8zNTgzODYyRDc4MUI3MUIxMDNFOUZBOEQ3MjZDNEQwMjM4MEFDRUUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1ODM4NjJENzgxQjcxQjEw M0U5RkE4RDcyNkM0RDAyMzgwQUNFRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RmhxNm9YM2J4eGtuWHRjZkIxcnRZeVRqa21rMkR2Rm9tb1I1RzRqNjZQTEsvMS8z NTgzODYyRDc4MUI3MUIxMDNFOUZBOEQ3MjZDNEQwMjM4MEFDRUUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlu+I58aHoTipf7VyQyaywIVB31u8BkAbvIqjeqFujwavu4mzFp8AQt+cteh5 9gdb4qOFAqjnR8cJhq/8PekgoAPyma6bC2kMVC0zZgpzOX1PN4TBTkk6/nARjN9j Etq16WBWeECBiLbUEY9r9Y0Gg+/fiZgnNAhUtQcvpKUScsFUR/MXAkirdGfEKqON 6yiHid1ApW0/qkgjzOuN8dmbzN6inCAWPzfn2BMt9874KBScqiR5tuTBUZXDXjDP r4j5uYBeqnFt9IqsfvlSyBqvz6eOkiGtYGHHLbaacBnNEW5sf+l+uwQoypHUATMH wjbnOWWLug4cyzm5McQ0D4rRVA== -----END CERTIFICATE-----Generated at Tue Jun 17 12:21:47 2025 by rpki-client