$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft File: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft (raw, json) Hash identifier: WWjldlz2NrXotcATyFg+dWIsiJtVpamCaBCcRyrplec= Subject key identifier: A7:8A:F8:96:77:0B:DC:A6:70:BD:C6:76:24:F9:3C:B0:5E:27:1E:7E Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 Certificate issuer: /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Certificate serial: 73EF4A6339F6384B346C583E257D8C6499878208 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject info access: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft Manifest number: 0144 Signing time: Sat 23 Aug 2025 11:34:09 +0000 Manifest this update: Sat 23 Aug 2025 11:29:09 +0000 Manifest next update: Sun 24 Aug 2025 11:58:09 +0000 Files and hashes: 1: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: uIh+Oz5wiODIMg7enOUna4NRPwYVYruwibBcWxdlN6k=) 2: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl (hash: SW7UauRbu+Y+dlGZSuwTyt4cph2BDk3+SXhKwLaPy5s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Aug 2025 11:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ef:4a:63:39:f6:38:4b:34:6c:58:3e:25:7d:8c:64:99:87:82:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Validity Not Before: Aug 23 11:29:09 2025 GMT Not After : Aug 24 11:58:09 2025 GMT Subject: CN=A78AF896770BDCA670BDC67624F93CB05E271E7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9c:ad:4a:4a:16:c4:02:5c:1b:d8:3f:cd:4a: bb:30:af:1a:1b:6d:3d:43:d2:a6:ef:c3:fc:d4:03: 89:cf:4a:78:56:b2:3a:bf:bb:be:f3:f9:f2:f4:86: 8c:0c:12:db:7b:d6:e0:b8:25:d3:ff:8f:78:e9:9a: b0:a1:6a:22:03:bb:1d:22:7c:33:8a:a2:a7:a3:d8: 59:a7:87:56:49:9e:2d:14:8c:63:72:cd:8b:08:a5: 37:1f:23:83:5f:dd:5c:fa:ec:76:d0:d5:1f:83:61: 4f:aa:6b:59:4b:81:bb:d7:b7:73:e3:f5:00:bd:2b: 65:0e:d5:5b:8b:02:ac:24:01:8b:be:0b:df:49:4c: 5d:74:17:c1:04:ab:32:6f:d2:8d:09:0c:97:72:97: e0:21:eb:b8:36:0c:24:36:ce:90:be:d8:22:95:a3: c1:7d:a7:c3:73:a5:09:70:87:f1:a0:71:4e:81:93: f5:52:6e:dc:a3:a0:72:37:60:11:2f:69:c0:e9:e8: 52:a9:b9:bb:d7:24:f3:17:3b:91:e3:d0:af:8c:21: aa:bd:73:d6:10:cb:98:76:0b:34:1a:4c:5b:17:7a: f8:b8:40:d6:05:7f:de:ba:fa:9e:1b:c3:8c:56:f5: fd:09:50:a2:cc:b5:e1:81:e8:35:f2:7b:ba:b1:31: 8e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8A:F8:96:77:0B:DC:A6:70:BD:C6:76:24:F9:3C:B0:5E:27:1E:7E X509v3 Authority Key Identifier: keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:90:51:f0:13:b4:4e:0b:1a:13:32:7e:4a:4f:bb:f6:b1:04: e7:af:a5:ef:08:28:e3:e8:c1:d1:8f:dc:c2:2d:10:4f:72:60: af:92:a7:63:e1:76:a1:72:c2:38:79:27:fd:6e:48:93:fe:8e: 1e:58:96:9a:d2:4c:ac:7f:af:23:78:35:ec:0d:c9:8f:08:09: 52:94:cd:8d:b6:07:1b:f9:69:23:db:52:35:0c:5f:b3:04:fa: 12:d5:ab:1b:a7:dd:85:1f:15:9f:72:9c:f7:62:28:9f:3e:48: 17:2b:4e:e7:17:0c:3b:e8:36:b5:f1:6f:b8:85:72:78:e6:0b: 13:a7:0b:b3:a2:cd:e9:36:fd:c0:b7:58:aa:4c:97:3e:30:a3: fb:6a:8d:10:6f:cc:26:42:c4:09:e6:8e:a8:aa:be:ec:0f:ee: b9:22:a4:78:ef:52:64:c3:d4:3d:44:b5:75:e6:b4:a0:54:6d: d3:27:e7:ae:d5:ec:ba:c9:e0:c3:95:7f:74:55:80:47:f7:04: 99:68:f4:cd:e6:ae:cd:52:1e:3e:12:74:0f:96:ec:4b:33:bf: 39:05:2c:47:da:90:d9:09:68:87:ed:e3:67:a2:59:d3:65:94: 35:50:62:7a:ec:7a:d0:ee:b5:95:d0:ea:89:f4:94:3e:a2:c4: 4c:f8:ab:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUc+9KYzn2OEs0bFg+JX2MZJmHgggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM2RkNCMzFGMkMzM0Y4RTU3MEQzQ0EwMjc1NUJDQzUx QjIzRUEwMTAeFw0yNTA4MjMxMTI5MDlaFw0yNTA4MjQxMTU4MDlaMDMxMTAvBgNV BAMTKEE3OEFGODk2NzcwQkRDQTY3MEJEQzY3NjI0RjkzQ0IwNUUyNzFFN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUnK1KShbEAlwb2D/NSrswrxob bT1D0qbvw/zUA4nPSnhWsjq/u77z+fL0howMEtt71uC4JdP/j3jpmrChaiIDux0i fDOKoqej2Fmnh1ZJni0UjGNyzYsIpTcfI4Nf3Vz67HbQ1R+DYU+qa1lLgbvXt3Pj 9QC9K2UO1VuLAqwkAYu+C99JTF10F8EEqzJv0o0JDJdyl+Ah67g2DCQ2zpC+2CKV o8F9p8NzpQlwh/GgcU6Bk/VSbtyjoHI3YBEvacDp6FKpubvXJPMXO5Hj0K+MIaq9 c9YQy5h2CzQaTFsXevi4QNYFf966+p4bw4xW9f0JUKLMteGB6DXye7qxMY7VAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUp4r4lncL3KZwvcZ2JPk8sF4nHn4wHwYDVR0j BBgwFoAUQ2/LMfLDP45XDTygJ1W8xRsj6gEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJI NGUvMC80MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNkZDQjMxRjJDMzNGOEU1 NzBEM0NBMDI3NTVCQ0M1MUIyM0VBMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJINGUvMC80 MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeJBR8BO0TgsaEzJ+Sk+79rEE56+l7wgo4+jB0Y/cwi0QT3Jgr5KnY+F2oXLC OHkn/W5Ik/6OHliWmtJMrH+vI3g17A3JjwgJUpTNjbYHG/lpI9tSNQxfswT6EtWr G6fdhR8Vn3Kc92Ionz5IFytO5xcMO+g2tfFvuIVyeOYLE6cLs6LN6Tb9wLdYqkyX PjCj+2qNEG/MJkLECeaOqKq+7A/uuSKkeO9SZMPUPUS1dea0oFRt0yfnrtXsusng w5V/dFWAR/cEmWj0zeauzVIePhJ0D5bsSzO/OQUsR9qQ2Qloh+3jZ6JZ02WUNVBi eux60O61ldDqifSUPqLETPirHA== -----END CERTIFICATE-----Generated at Sat Aug 23 20:43:49 2025 by rpki-client