$ rpki-client -vvf rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft File: 0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft (raw, json) Hash identifier: ZWh69hzN6jHovpdK3erPBM9TRvQ+ceEGUshAZFESkZc= Subject key identifier: 9D:EC:B5:9F:34:4E:02:79:AD:EC:07:4F:EA:0B:0B:E8:8D:5D:63:C7 Authority key identifier: 0A:6C:E4:13:14:DE:D3:33:26:65:E6:9E:87:FF:0E:48:E9:50:B3:A3 Certificate issuer: /CN=0A6CE41314DED3332665E69E87FF0E48E950B3A3 Certificate serial: 398D74340D63803D29E19B542BC356C563B41D8C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft Manifest number: 024A Signing time: Sat 21 Jun 2025 11:35:03 +0000 Manifest this update: Sat 21 Jun 2025 11:30:03 +0000 Manifest next update: Sun 22 Jun 2025 14:09:03 +0000 Files and hashes: 1: 0A6CE41314DED3332665E69E87FF0E48E950B3A3.crl (hash: xqwFqNT3jBLujVcGpAlTAcvhHzGmw+ZtwGlNHFbT570=) 2: 3230302e3136302e31362e302f32302d3234203d3e203232313438.roa (hash: 7E5vUvNwbvGRD3amrlIDwIFLBLtnwrGhSNKkBs7Mcfg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.crl rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Jun 2025 14:09:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:8d:74:34:0d:63:80:3d:29:e1:9b:54:2b:c3:56:c5:63:b4:1d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A6CE41314DED3332665E69E87FF0E48E950B3A3 Validity Not Before: Jun 21 11:30:03 2025 GMT Not After : Jun 22 14:09:03 2025 GMT Subject: CN=9DECB59F344E0279ADEC074FEA0B0BE88D5D63C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4e:5c:80:40:dc:5e:cd:a1:ad:f0:26:b5:ae: 6c:db:16:b6:48:a4:49:06:8d:e7:3d:6d:fe:13:ef: a4:70:bf:35:ca:1f:78:57:c9:0c:ab:b8:9c:93:bf: ba:3a:ef:54:6d:fe:78:1f:3a:76:84:09:f8:34:34: 7a:a2:d9:05:d5:c4:0e:e6:ce:2e:7d:39:42:51:4c: f8:72:b2:5e:52:5d:ab:9e:3f:6c:ce:3a:39:ad:d6: 56:4d:87:58:a2:69:f6:64:8e:fc:a8:72:9b:df:c2: 9e:07:f5:0f:72:07:23:ed:b0:fc:38:0b:42:b8:4a: 1a:99:74:4d:ac:c1:a1:3f:62:7c:a0:04:cc:15:48: 41:9e:2d:ad:71:9c:90:57:73:84:4d:de:93:cf:22: c2:73:d1:d9:1d:9f:24:13:3b:62:18:48:0a:c4:4e: ce:0d:79:3c:9a:c8:07:9b:f9:26:52:97:b7:f5:d5: 7b:4b:20:8c:49:7e:6e:b7:78:f0:24:d9:38:90:4c: 2c:2a:51:93:a0:78:f0:22:c5:3b:c3:7a:27:a2:a6: 2b:df:4b:3f:a5:d1:8d:7b:81:d8:6f:57:15:a2:19: 7e:87:23:d2:13:86:8d:38:45:24:b7:b8:5b:fd:4a: 75:de:19:58:7d:c7:c3:5f:51:87:a1:23:08:cd:04: 05:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EC:B5:9F:34:4E:02:79:AD:EC:07:4F:EA:0B:0B:E8:8D:5D:63:C7 X509v3 Authority Key Identifier: keyid:0A:6C:E4:13:14:DE:D3:33:26:65:E6:9E:87:FF:0E:48:E9:50:B3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:e9:55:53:c4:28:22:d3:5d:a4:af:7b:8e:03:66:2e:9c:3b: 7e:6d:b8:da:62:20:cf:cd:86:42:8b:b6:62:00:0a:c2:a6:c3: f8:05:87:88:ff:44:ac:1f:60:f2:57:47:3f:62:95:18:6f:f4: 50:ac:7a:32:f7:e8:98:1b:d7:0a:34:09:da:91:d8:e4:de:69: a0:04:35:3a:1f:c5:f7:59:07:49:78:ef:72:c2:0c:a1:32:35: 45:a4:ab:52:f3:b6:c0:85:a2:97:2e:f0:86:c9:b6:30:7b:0c: 38:58:fe:2b:93:60:b9:7c:79:ff:6d:1e:e7:fd:6c:9f:e5:0a: 74:bb:ee:23:11:97:33:7d:d2:ef:59:cc:12:b2:76:fb:30:8f: 23:7c:84:14:48:2f:bd:50:39:57:05:32:84:3e:76:3f:08:69: ae:81:69:54:30:35:74:84:7b:e3:fc:8c:48:26:2c:93:6b:ca: f6:ce:09:e7:40:03:d6:75:da:3a:85:df:72:37:f6:cf:0b:98: 11:b9:26:c8:85:5c:98:4f:5c:f3:d5:71:99:f3:e1:32:3d:30: 2f:9d:be:1c:d4:ea:34:d1:08:59:f8:9c:ac:cd:3c:9d:21:1f: 06:08:4b:da:00:c4:c4:97:b9:b8:72:13:0a:53:79:e9:55:0c: e0:cf:f1:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOY10NA1jgD0p4ZtUK8NWxWO0HYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE2Q0U0MTMxNERFRDMzMzI2NjVFNjlFODdGRjBFNDhF OTUwQjNBMzAeFw0yNTA2MjExMTMwMDNaFw0yNTA2MjIxNDA5MDNaMDMxMTAvBgNV BAMTKDlERUNCNTlGMzQ0RTAyNzlBREVDMDc0RkVBMEIwQkU4OEQ1RDYzQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkTlyAQNxezaGt8Ca1rmzbFrZI pEkGjec9bf4T76RwvzXKH3hXyQyruJyTv7o671Rt/ngfOnaECfg0NHqi2QXVxA7m zi59OUJRTPhysl5SXaueP2zOOjmt1lZNh1iiafZkjvyocpvfwp4H9Q9yByPtsPw4 C0K4ShqZdE2swaE/YnygBMwVSEGeLa1xnJBXc4RN3pPPIsJz0dkdnyQTO2IYSArE Ts4NeTyayAeb+SZSl7f11XtLIIxJfm63ePAk2TiQTCwqUZOgePAixTvDeieipivf Sz+l0Y17gdhvVxWiGX6HI9ITho04RSS3uFv9SnXeGVh9x8NfUYehIwjNBAUXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUney1nzROAnmt7AdP6gsL6I1dY8cwHwYDVR0j BBgwFoAUCmzkExTe0zMmZeaeh/8OSOlQs6MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDNBUWtROXdObjdnZG1TV0F4SGpjN0NqcGlSbWJrTDNRako5eG1pdXdE b3AvMS8wQTZDRTQxMzE0REVEMzMzMjY2NUU2OUU4N0ZGMEU0OEU5NTBCM0EzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBNkNFNDEzMTRERUQzMzMy NjY1RTY5RTg3RkYwRTQ4RTk1MEIzQTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDNBUWtROXdObjdnZG1TV0F4SGpjN0NqcGlSbWJrTDNRako5eG1pdXdEb3AvMS8w QTZDRTQxMzE0REVEMzMzMjY2NUU2OUU4N0ZGMEU0OEU5NTBCM0EzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKOlVU8QoItNdpK97jgNmLpw7fm242mIgz82GQou2YgAKwqbD+AWHiP9ErB9g 8ldHP2KVGG/0UKx6MvfomBvXCjQJ2pHY5N5poAQ1Oh/F91kHSXjvcsIMoTI1RaSr UvO2wIWily7whsm2MHsMOFj+K5NguXx5/20e5/1sn+UKdLvuIxGXM33S71nMErJ2 +zCPI3yEFEgvvVA5VwUyhD52PwhproFpVDA1dIR74/yMSCYsk2vK9s4J50AD1nXa OoXfcjf2zwuYEbkmyIVcmE9c89VxmfPhMj0wL52+HNTqNNEIWficrM08nSEfBghL 2gDExJe5uHITClN56VUM4M/xCw== -----END CERTIFICATE-----Generated at Sat Jun 21 19:42:16 2025 by rpki-client