$ rpki-client -vvf rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft File: 6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft (raw, json) Hash identifier: bDczXe4FAOApwMVSEfP6Kt8QN+JdpdpOHjphlTC9Xx8= Subject key identifier: 03:61:E6:D5:3F:68:9C:2A:E1:DC:4B:AE:D6:1C:DA:75:15:F4:E1:3D Authority key identifier: 6A:0F:81:CD:4B:DD:AA:53:C1:B0:93:1E:51:E8:B1:59:E0:2A:5C:D1 Certificate issuer: /CN=6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1 Certificate serial: 7D38105850AC1A5947101D400C0E9A6B297B8634 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer Subject info access: rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft Manifest number: 025A Signing time: Thu 03 Jul 2025 05:08:48 +0000 Manifest this update: Thu 03 Jul 2025 05:03:48 +0000 Manifest next update: Fri 04 Jul 2025 05:52:48 +0000 Files and hashes: 1: 6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl (hash: cGODgoBlosOk2qahuYeogGKwSds7oqKK2TjwMs4un6o=) 2: 3230302e392e3132332e302f32342d3234203d3e20323633353136.roa (hash: DKN2JGdX7cSetzoeLCTIR74I/hbswzmppmSPlP4c0pE=) 3: 323830343a313331633a3a2f33322d3438203d3e20323633353136.roa (hash: Txzy0D6VyLSsV0Yx//pRf6nImoKlaLweLeqk9lvWkoo=) 4: 3137372e38342e36302e302f32322d3234203d3e20323633353136.roa (hash: 3aQlpVz1BWbgEZVwNQP+yOlhzxrLmq7PFqy4POInAyo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Jul 2025 05:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:38:10:58:50:ac:1a:59:47:10:1d:40:0c:0e:9a:6b:29:7b:86:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1 Validity Not Before: Jul 3 05:03:48 2025 GMT Not After : Jul 4 05:52:48 2025 GMT Subject: CN=0361E6D53F689C2AE1DC4BAED61CDA7515F4E13D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:73:07:05:0e:74:1e:ef:7e:5e:40:c9:06:54: d7:62:3d:69:9a:71:dd:f5:0b:53:f6:c3:35:39:f8: 3b:5e:fc:87:99:fd:72:d8:19:75:b5:cf:e5:d1:30: fc:eb:68:e4:a3:af:a2:c2:9a:73:d2:77:6d:3f:9c: a7:8a:2c:6c:b3:51:4f:91:bb:a7:9f:b7:ff:64:97: b0:36:ba:bc:d3:e5:ab:8b:95:85:5c:e0:43:20:ae: 62:da:48:b5:29:b7:e5:72:c9:e4:9c:fa:9d:6c:9e: f8:7d:17:b2:27:0b:5d:8c:43:91:96:5d:1a:9b:64: 37:da:d8:74:12:97:17:f6:77:c2:04:89:18:18:07: 4c:63:43:74:a0:74:22:2f:85:1f:30:33:81:34:b6: 96:6f:ac:c3:c2:5d:f5:f0:61:45:53:43:6a:58:97: 09:a5:3e:73:b5:8d:4b:2d:7d:0b:2d:08:1f:dd:74: 59:bf:4a:49:ae:f1:8e:6a:ef:5b:59:5b:02:a9:8b: 34:bf:8d:f8:37:c2:65:c7:39:04:c6:0f:04:89:ad: 47:d3:0a:78:38:61:42:33:5a:ac:31:54:e5:eb:ec: 68:1a:1d:2f:c7:01:ed:19:30:17:ad:b0:7d:8f:a3: bb:ed:1c:31:7d:9e:ad:5e:35:d2:de:80:11:a8:69: 38:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:61:E6:D5:3F:68:9C:2A:E1:DC:4B:AE:D6:1C:DA:75:15:F4:E1:3D X509v3 Authority Key Identifier: keyid:6A:0F:81:CD:4B:DD:AA:53:C1:B0:93:1E:51:E8:B1:59:E0:2A:5C:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:93:23:8b:b6:66:9b:02:d7:5f:0a:35:8c:b5:9b:dd:10:7e: 8f:08:11:12:e2:c5:02:20:27:6b:6c:20:9d:04:7e:70:1e:5e: 01:b2:9a:6e:dd:83:86:fa:4f:d5:90:5c:3c:17:f8:2b:3a:3a: e3:e3:a9:33:2b:db:b9:96:85:98:cc:ce:0c:3d:14:21:f9:d4: d9:8d:20:30:32:df:42:c4:4b:0e:be:d6:b9:5f:85:3e:c2:42: f9:fd:f4:4a:aa:27:35:23:c1:5d:4e:dd:9d:a7:c5:32:4d:61: 12:7b:ef:01:34:05:31:cb:6a:16:9b:60:de:ab:ad:f1:d7:f7: 40:f8:4d:61:ca:e1:65:ce:0f:20:ef:70:c7:9b:44:97:e6:4b: fe:0f:04:a1:32:89:aa:d2:ac:d5:00:a1:89:0d:f2:f1:70:24: 82:2c:b8:b3:73:5c:e3:26:77:4b:84:57:b9:79:fa:43:de:b5: 50:90:5a:e5:1d:d2:d3:85:af:43:fa:24:63:3b:f2:b0:ff:1d: 41:e7:2e:aa:e3:fb:5a:8e:ef:48:c5:ac:74:3d:32:54:8e:b6: 4b:87:da:59:14:c2:55:07:48:d8:06:3f:38:4f:39:0d:6b:10: 05:8d:98:a1:e6:6d:fb:e8:d9:d9:7c:a4:f5:c1:9c:39:56:19: 08:3d:83:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfTgQWFCsGllHEB1ADA6aayl7hjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwRjgxQ0Q0QkREQUE1M0MxQjA5MzFFNTFFOEIxNTlF MDJBNUNEMTAeFw0yNTA3MDMwNTAzNDhaFw0yNTA3MDQwNTUyNDhaMDMxMTAvBgNV BAMTKDAzNjFFNkQ1M0Y2ODlDMkFFMURDNEJBRUQ2MUNEQTc1MTVGNEUxM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCicwcFDnQe735eQMkGVNdiPWma cd31C1P2wzU5+Dte/IeZ/XLYGXW1z+XRMPzraOSjr6LCmnPSd20/nKeKLGyzUU+R u6eft/9kl7A2urzT5auLlYVc4EMgrmLaSLUpt+VyyeSc+p1snvh9F7InC12MQ5GW XRqbZDfa2HQSlxf2d8IEiRgYB0xjQ3SgdCIvhR8wM4E0tpZvrMPCXfXwYUVTQ2pY lwmlPnO1jUstfQstCB/ddFm/Skmu8Y5q71tZWwKpizS/jfg3wmXHOQTGDwSJrUfT Cng4YUIzWqwxVOXr7GgaHS/HAe0ZMBetsH2Po7vtHDF9nq1eNdLegBGoaTgFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUA2Hm1T9onCrh3Euu1hzadRX04T0wHwYDVR0j BBgwFoAUag+BzUvdqlPBsJMeUeixWeAqXNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM202OW5qS1BtRFZ6b3FXTkpzZTFYTW11YXFjRk04RjV4cU1HUjhCWnI0 Zm8vMS82QTBGODFDRDRCRERBQTUzQzFCMDkzMUU1MUU4QjE1OUUwMkE1Q0QxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBMEY4MUNENEJEREFBNTND MUIwOTMxRTUxRThCMTU5RTAyQTVDRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M202OW5qS1BtRFZ6b3FXTkpzZTFYTW11YXFjRk04RjV4cU1HUjhCWnI0Zm8vMS82 QTBGODFDRDRCRERBQTUzQzFCMDkzMUU1MUU4QjE1OUUwMkE1Q0QxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuJMji7ZmmwLXXwo1jLWb3RB+jwgREuLFAiAna2wgnQR+cB5eAbKabt2DhvpP 1ZBcPBf4Kzo64+OpMyvbuZaFmMzODD0UIfnU2Y0gMDLfQsRLDr7WuV+FPsJC+f30 SqonNSPBXU7dnafFMk1hEnvvATQFMctqFptg3qut8df3QPhNYcrhZc4PIO9wx5tE l+ZL/g8EoTKJqtKs1QChiQ3y8XAkgiy4s3Nc4yZ3S4RXuXn6Q961UJBa5R3S04Wv Q/okYzvysP8dQecuquP7Wo7vSMWsdD0yVI62S4faWRTCVQdI2AY/OE85DWsQBY2Y oeZt++jZ2Xyk9cGcOVYZCD2D1w== -----END CERTIFICATE-----Generated at Thu Jul 3 12:16:16 2025 by rpki-client