$ rpki-client -vvf rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft File: 43897DFF118E56C31A35958D9EA818504B130E11.mft (raw, json) Hash identifier: 1wX6+bzZNPya9rK5cHdLnTLaaR+SLmEJdCTYum0GIv8= Subject key identifier: 78:45:61:D9:6A:C3:43:14:C0:8B:DC:88:C9:4D:6B:AC:22:D4:DB:0C Authority key identifier: 43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11 Certificate issuer: /CN=43897DFF118E56C31A35958D9EA818504B130E11 Certificate serial: 0C44F1B04C95DE675C86AB36270A07AA75C51C4E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer Subject info access: rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft Manifest number: 023D Signing time: Mon 30 Jun 2025 17:39:31 +0000 Manifest this update: Mon 30 Jun 2025 17:34:31 +0000 Manifest next update: Tue 01 Jul 2025 18:40:31 +0000 Files and hashes: 1: 3230302e3130382e3136342e302f32322d3234203d3e20323730323635.roa (hash: /O80p7I/BsID3L+7Tx/zgFUSWMrzsJTiDGJmySOhPvQ=) 2: 43897DFF118E56C31A35958D9EA818504B130E11.crl (hash: l1udwBJQJHYzPhLiab+JKiKNHZWVTGz+6Tu7419zE28=) 3: 323830343a363935633a3a2f33322d3430203d3e20323730323635.roa (hash: 7dYPTrKAi61IYALwp4StVtHMzIcECDDN9J/7R5yuyAg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 18:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:44:f1:b0:4c:95:de:67:5c:86:ab:36:27:0a:07:aa:75:c5:1c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43897DFF118E56C31A35958D9EA818504B130E11 Validity Not Before: Jun 30 17:34:31 2025 GMT Not After : Jul 1 18:40:31 2025 GMT Subject: CN=784561D96AC34314C08BDC88C94D6BAC22D4DB0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:80:77:11:f4:39:48:c8:16:33:5a:09:63:17: ae:7d:29:2b:8d:4a:01:f9:34:db:3c:e6:d9:8e:bc: 03:fa:6f:f3:43:49:3f:33:30:d4:81:25:12:6f:59: c5:2a:4b:09:69:fb:dd:d7:ce:20:a6:06:e6:f6:fa: 29:c5:a1:b3:4f:48:50:6d:e2:c0:ce:52:29:ac:72: 90:86:66:73:bd:9a:09:a5:b2:4e:ec:e2:f0:66:47: b0:4f:33:32:e4:43:4f:76:f2:c4:9f:28:25:26:f2: 6c:3d:ef:b2:74:58:77:f4:0d:ee:05:1d:e6:93:8a: 26:d3:7c:f5:f3:42:29:cb:91:6a:3a:e7:8f:93:af: 2d:b6:32:ac:77:14:b6:29:67:50:16:3f:ce:cd:b1: 5b:d6:c8:62:4b:86:5c:51:0e:da:50:50:60:20:8e: 73:a4:86:28:08:76:69:8b:59:fb:91:2a:80:e0:af: 63:71:61:2b:d5:aa:44:e5:bb:18:7a:1d:41:c9:bb: 8e:96:bb:c9:82:5a:8c:22:e1:3e:1b:1f:93:c4:16: 55:5a:ca:aa:99:a5:ca:56:f4:23:90:0b:af:b1:26: d2:c6:a4:aa:40:5b:43:0b:e3:6b:6b:2f:74:12:4d: 79:37:3a:25:87:a6:a8:f6:59:a5:ba:5a:86:5c:1d: 61:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:45:61:D9:6A:C3:43:14:C0:8B:DC:88:C9:4D:6B:AC:22:D4:DB:0C X509v3 Authority Key Identifier: keyid:43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:0c:a4:36:82:ef:a0:8b:9c:c6:58:fc:3f:c0:b4:99:89:68: 4d:c1:c5:e8:23:b3:39:b9:64:0c:36:41:12:78:d6:23:f9:69: 6c:62:de:3f:01:10:06:a8:2f:49:23:37:aa:39:38:69:bf:5d: 4f:ce:de:fe:bd:35:6e:d6:cc:4f:e7:bc:1d:d7:47:9a:9c:e8: 59:a1:47:c5:e1:e1:b9:da:95:d6:33:68:14:1f:f7:f4:bf:4a: 22:b5:c0:27:6f:30:ad:18:aa:17:b0:39:ae:f8:8f:5e:63:d9: af:92:9a:a9:1c:56:0e:7e:76:c6:d6:d6:28:fe:82:bc:2e:bc: cc:1c:b2:05:e4:44:98:0f:33:82:36:62:95:c3:2e:2e:c1:00: c5:8b:7c:20:2d:ea:7e:29:a6:46:98:8c:d3:f1:5b:a0:0f:6c: 52:37:65:9c:23:25:e0:6f:ce:44:d8:ce:62:8f:16:9f:26:ae: 31:9f:48:08:82:00:42:8c:f1:fb:94:04:c4:fb:b9:b7:53:80: 59:7c:14:19:ed:3c:98:cf:5e:2a:37:4f:a1:de:96:73:d7:c3: c5:20:5c:1d:ad:a4:63:18:16:90:37:f3:e0:06:9d:56:a0:9c: 5f:c7:60:32:c6:26:99:56:36:a1:47:0e:0c:4d:46:82:d6:9b: 5a:ec:3e:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDETxsEyV3mdchqs2JwoHqnXFHE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM4OTdERkYxMThFNTZDMzFBMzU5NThEOUVBODE4NTA0 QjEzMEUxMTAeFw0yNTA2MzAxNzM0MzFaFw0yNTA3MDExODQwMzFaMDMxMTAvBgNV BAMTKDc4NDU2MUQ5NkFDMzQzMTRDMDhCREM4OEM5NEQ2QkFDMjJENERCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMgHcR9DlIyBYzWgljF659KSuN SgH5NNs85tmOvAP6b/NDST8zMNSBJRJvWcUqSwlp+93XziCmBub2+inFobNPSFBt 4sDOUimscpCGZnO9mgmlsk7s4vBmR7BPMzLkQ0928sSfKCUm8mw977J0WHf0De4F HeaTiibTfPXzQinLkWo654+Try22Mqx3FLYpZ1AWP87NsVvWyGJLhlxRDtpQUGAg jnOkhigIdmmLWfuRKoDgr2NxYSvVqkTluxh6HUHJu46Wu8mCWowi4T4bH5PEFlVa yqqZpcpW9COQC6+xJtLGpKpAW0ML42trL3QSTXk3OiWHpqj2WaW6WoZcHWGjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUeEVh2WrDQxTAi9yIyU1rrCLU2wwwHwYDVR0j BBgwFoAUQ4l9/xGOVsMaNZWNnqgYUEsTDhEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzlSM0NWdEVxZUdRRkRLM1I3QjVIZVZMajRhSFRxUXRVTTVyOFNWb2tp ZTIvMC80Mzg5N0RGRjExOEU1NkMzMUEzNTk1OEQ5RUE4MTg1MDRCMTMwRTExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzODk3REZGMTE4RTU2QzMx QTM1OTU4RDlFQTgxODUwNEIxMzBFMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzlSM0NWdEVxZUdRRkRLM1I3QjVIZVZMajRhSFRxUXRVTTVyOFNWb2tpZTIvMC80 Mzg5N0RGRjExOEU1NkMzMUEzNTk1OEQ5RUE4MTg1MDRCMTMwRTExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVwykNoLvoIucxlj8P8C0mYloTcHF6COzOblkDDZBEnjWI/lpbGLePwEQBqgv SSM3qjk4ab9dT87e/r01btbMT+e8HddHmpzoWaFHxeHhudqV1jNoFB/39L9KIrXA J28wrRiqF7A5rviPXmPZr5KaqRxWDn52xtbWKP6CvC68zByyBeREmA8zgjZilcMu LsEAxYt8IC3qfimmRpiM0/FboA9sUjdlnCMl4G/ORNjOYo8WnyauMZ9ICIIAQozx +5QExPu5t1OAWXwUGe08mM9eKjdPod6Wc9fDxSBcHa2kYxgWkDfz4AadVqCcX8dg MsYmmVY2oUcODE1GgtabWuw+0Q== -----END CERTIFICATE-----Generated at Tue Jul 1 05:19:13 2025 by rpki-client