$ rpki-client -vvf rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft File: A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft (raw, json) Hash identifier: OuVHIw8Ngu6QWpa2VSDX1pli6DLJcJV93nYZMbTrphk= Subject key identifier: F7:FD:BC:6F:F7:4B:02:39:D0:C3:70:8C:15:8D:2A:29:4B:BE:41:F3 Authority key identifier: A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD Certificate issuer: /CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD Certificate serial: 192818D400D489801D87FD8DB65E06A876724C36 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer Subject info access: rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft Manifest number: 025C Signing time: Tue 01 Jul 2025 06:33:24 +0000 Manifest this update: Tue 01 Jul 2025 06:28:24 +0000 Manifest next update: Wed 02 Jul 2025 09:07:24 +0000 Files and hashes: 1: 3230312e3134302e3234302e302f32322d3332203d3e203631383330.roa (hash: 2GMI5l4Ze96BdW91sSpr2ML6DS2lIwQHnvz+4+faiFA=) 2: A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl (hash: M+NI+bK/YqxAMswkCMch0iEfV24uCHzZ3lsJmOwI8nA=) 3: 323830343a313966633a3a2f33322d313238203d3e203631383330.roa (hash: 1fBqlheobXcBImZUSmBR8xZUu4CjVeNok+HYscqNMOw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 09:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:28:18:d4:00:d4:89:80:1d:87:fd:8d:b6:5e:06:a8:76:72:4c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD Validity Not Before: Jul 1 06:28:24 2025 GMT Not After : Jul 2 09:07:24 2025 GMT Subject: CN=F7FDBC6FF74B0239D0C3708C158D2A294BBE41F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:32:c4:1a:e9:28:7e:8b:8e:99:76:c7:25:1e: d9:a1:ad:dc:b5:e8:af:0a:bc:39:61:d2:9f:bd:a9: 4b:7b:c6:7d:42:74:f4:66:62:b1:67:25:4e:4b:43: 13:35:bb:87:6e:b6:be:12:a5:36:48:3d:b0:6b:da: e1:6a:c1:c9:e4:ff:de:2e:83:6e:57:6d:52:ab:f8: fc:dd:33:db:a4:b9:b4:a3:7e:74:9c:76:32:74:ff: 6a:66:2c:15:a9:d0:a5:40:f1:13:e7:1e:67:e7:4c: d0:ca:e8:f2:ce:58:b2:44:15:90:fb:b1:ae:18:90: ea:d0:9c:a8:51:3c:a2:88:c5:31:45:5b:a3:14:e3: 81:bd:3a:03:9e:52:b1:20:b3:89:9c:11:18:b2:c5: 89:66:61:01:32:25:9b:73:5c:aa:ed:a7:43:5b:c2: 19:b1:a7:f0:42:26:f2:cd:e8:5b:86:7c:93:5d:0b: 7d:78:a8:73:a9:dd:e2:7c:61:6d:e1:f2:f1:f2:7f: 82:b3:1d:18:8d:a9:7e:96:96:4e:77:64:21:4d:42: 81:ea:74:df:3c:b8:8e:7b:72:f1:84:5f:55:dd:40: 72:dd:16:a5:b1:00:2d:e8:33:0a:35:bf:fa:fb:b8: 59:0f:3e:2f:bf:5a:c8:ec:a0:d5:08:72:4a:ca:20: 41:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FD:BC:6F:F7:4B:02:39:D0:C3:70:8C:15:8D:2A:29:4B:BE:41:F3 X509v3 Authority Key Identifier: keyid:A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d6:70:c4:a7:0a:e2:89:93:ae:0c:9e:04:fd:87:a2:ae:13: b7:87:ba:5c:6d:a6:df:f8:9f:99:ae:f0:06:b7:8f:ef:44:7a: 36:65:45:fd:c6:ef:a6:6c:3f:36:0f:0c:08:75:f8:79:e9:d7: 04:e4:e8:bf:0b:06:1f:6f:50:2a:e9:f3:32:31:12:81:68:ec: d0:e7:fc:2e:b1:44:14:75:8d:70:6e:00:e1:15:a3:60:5c:11: 33:09:69:e1:0e:6a:7f:9d:05:2b:d2:07:5e:85:36:a7:9b:c7: e4:09:46:22:50:67:b1:28:b8:b7:af:84:e5:9a:e5:08:06:fc: 17:0d:7f:aa:d0:bd:82:58:97:1b:18:15:7a:54:34:07:02:59: ef:40:2f:2a:81:24:3b:e9:58:db:5e:6c:55:3f:d2:0a:7c:96: e4:11:26:d4:bb:ef:98:1c:39:a5:14:27:42:71:22:69:d3:e4: 16:ed:21:31:a0:61:8a:e7:40:6b:c8:50:76:2c:d6:f6:9b:8c: 05:1f:9a:0b:0c:be:68:13:18:a3:b8:a2:68:7f:9e:0e:cd:0d: 10:f6:06:ba:b3:cc:9a:fc:6d:1f:fa:0b:97:e1:06:82:f5:b5: dd:7d:6e:7e:9f:3f:86:ac:2f:15:00:7f:79:a0:59:20:04:e8: 0a:cb:92:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGSgY1ADUiYAdh/2Ntl4GqHZyTDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIxQzAzREQwOUNEQzJDMDA5OTc1OTRDMjA5ODM0NzNF RjVBREFGRDAeFw0yNTA3MDEwNjI4MjRaFw0yNTA3MDIwOTA3MjRaMDMxMTAvBgNV BAMTKEY3RkRCQzZGRjc0QjAyMzlEMEMzNzA4QzE1OEQyQTI5NEJCRTQxRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8MsQa6Sh+i46ZdsclHtmhrdy1 6K8KvDlh0p+9qUt7xn1CdPRmYrFnJU5LQxM1u4dutr4SpTZIPbBr2uFqwcnk/94u g25XbVKr+PzdM9ukubSjfnScdjJ0/2pmLBWp0KVA8RPnHmfnTNDK6PLOWLJEFZD7 sa4YkOrQnKhRPKKIxTFFW6MU44G9OgOeUrEgs4mcERiyxYlmYQEyJZtzXKrtp0Nb whmxp/BCJvLN6FuGfJNdC314qHOp3eJ8YW3h8vHyf4KzHRiNqX6Wlk53ZCFNQoHq dN88uI57cvGEX1XdQHLdFqWxAC3oMwo1v/r7uFkPPi+/WsjsoNUIckrKIEFdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9/28b/dLAjnQw3CMFY0qKUu+QfMwHwYDVR0j BBgwFoAUohwD3QnNwsAJl1lMIJg0c+9a2v0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2 bksvMi9BMjFDMDNERDA5Q0RDMkMwMDk5NzU5NEMyMDk4MzQ3M0VGNUFEQUZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyMUMwM0REMDlDREMyQzAw OTk3NTk0QzIwOTgzNDczRUY1QURBRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2bksvMi9B MjFDMDNERDA5Q0RDMkMwMDk5NzU5NEMyMDk4MzQ3M0VGNUFEQUZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAtZwxKcK4omTrgyeBP2Hoq4Tt4e6XG2m3/ifma7wBreP70R6NmVF/cbvpmw/ Ng8MCHX4eenXBOTovwsGH29QKunzMjESgWjs0Of8LrFEFHWNcG4A4RWjYFwRMwlp 4Q5qf50FK9IHXoU2p5vH5AlGIlBnsSi4t6+E5ZrlCAb8Fw1/qtC9gliXGxgVelQ0 BwJZ70AvKoEkO+lY215sVT/SCnyW5BEm1LvvmBw5pRQnQnEiadPkFu0hMaBhiudA a8hQdizW9puMBR+aCwy+aBMYo7iiaH+eDs0NEPYGurPMmvxtH/oLl+EGgvW13X1u fp8/hqwvFQB/eaBZIAToCsuS2A== -----END CERTIFICATE-----Generated at Tue Jul 1 21:17:45 2025 by rpki-client