$ rpki-client -vvf rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft File: 06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft (raw, json) Hash identifier: 4qMSYf+GYuKwAbxKPcNLdqm3MqPZbt1eRj5V9GIzqEQ= Subject key identifier: 46:DB:9C:1C:C3:7C:6F:8E:72:13:1C:F2:E6:73:E6:40:B8:35:3F:C5 Authority key identifier: 06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8 Certificate issuer: /CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8 Certificate serial: 68EAB9BA0ED93384B19F6BF385B5B73FB26F5A2E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer Subject info access: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft Manifest number: 0156 Signing time: Tue 01 Jul 2025 01:31:12 +0000 Manifest this update: Tue 01 Jul 2025 01:26:12 +0000 Manifest next update: Wed 02 Jul 2025 01:44:12 +0000 Files and hashes: 1: 323830343a323064633a3a2f33322d3438203d3e20323634353137.roa (hash: M5hBf8sBNi6/oq7AprV5Am9TiLrx3NpGRnhuqPlNE6E=) 2: 3133322e3235352e3137322e302f32322d3234203d3e20323634353137.roa (hash: 796yusbbPZ/62GBpJks3J3pz4e0+5gB+NVAL+An9w5I=) 3: 3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa (hash: +dy0OguRHHodpvI7m+maVRaKu+AFPlpY/u0O/GjQHAk=) 4: 06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl (hash: BioIeJYU2BOKqPyrU7gUjWX7kYKbTGBK1fKbHMgIuXY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 01:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ea:b9:ba:0e:d9:33:84:b1:9f:6b:f3:85:b5:b7:3f:b2:6f:5a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8 Validity Not Before: Jul 1 01:26:12 2025 GMT Not After : Jul 2 01:44:12 2025 GMT Subject: CN=46DB9C1CC37C6F8E72131CF2E673E640B8353FC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:78:f6:c7:e7:7b:c3:1c:c5:b0:94:7d:eb:4a: 53:69:c8:27:f6:26:16:aa:5b:92:0f:67:1a:f4:54: ef:31:3a:08:5b:9b:a5:f9:2a:68:4c:ce:3a:f2:1d: 94:73:91:51:eb:a4:8d:a2:e9:f6:2f:69:9a:b8:26: 71:d4:eb:aa:fe:dd:bc:09:ef:34:12:1b:c6:a8:13: c3:6d:56:23:fc:1c:c0:fc:f7:99:e6:7f:8f:3c:d7: db:fc:8d:e8:6e:d3:e0:79:8e:09:58:bc:70:f6:2d: c0:28:68:d0:63:8d:55:98:78:de:3a:75:c1:f6:27: 66:51:ff:5d:ab:67:f8:9f:ed:83:ae:df:05:06:69: 7f:ea:d5:d7:e7:38:1d:25:e7:7e:79:98:fa:37:a1: a5:cc:ec:bf:1d:b0:6b:58:cc:bb:52:bd:b0:11:f3: 16:b1:18:86:de:95:15:e7:0f:4e:90:19:f1:49:4b: 6c:06:b4:36:e8:99:02:3a:96:ac:ba:3e:63:0e:7e: c1:45:a5:da:73:b8:d0:e7:7f:7b:63:a0:4b:ed:0d: ac:c0:ed:52:84:26:fc:5b:02:3c:7b:12:1b:a8:ee: ca:7b:16:00:31:ab:0d:e5:64:9a:f0:68:4d:03:f8: 18:ad:b0:0b:f9:66:59:41:09:b2:66:a5:18:8f:17: 84:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DB:9C:1C:C3:7C:6F:8E:72:13:1C:F2:E6:73:E6:40:B8:35:3F:C5 X509v3 Authority Key Identifier: keyid:06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:dd:e7:0c:2b:f1:c3:1b:ce:7f:04:44:eb:9e:5a:84:07:95: 0a:00:09:d5:6f:e3:0b:2e:fb:9a:c3:1d:d1:d3:2b:73:a4:f5: 4b:c0:2e:9b:a3:00:35:58:d7:d7:9b:6e:ca:3b:cd:85:ce:6a: 02:84:f4:f1:fd:09:81:1a:8f:3b:8c:60:55:42:a3:52:ff:b9: 07:ac:88:52:91:27:fe:2c:51:d6:37:d9:ec:f6:bc:8a:c0:d9: 96:7e:09:37:fa:48:86:8e:ee:c8:e7:f9:12:2e:d3:79:d9:5c: b2:08:cd:93:bd:e5:e1:c1:a4:86:fb:78:9b:c3:41:66:cc:5b: 8d:f5:21:92:8c:b2:6a:37:80:3f:1a:3b:00:f9:86:52:b5:a2: d2:55:ca:ca:3c:99:41:0f:8f:1b:aa:47:ce:40:28:a6:bd:94: d7:b5:1e:83:3a:7f:01:e2:33:6b:0c:da:e9:77:2d:5a:a1:76: 42:d5:c4:38:7e:0e:cc:16:6f:0f:8d:13:4a:1b:e4:4d:29:e9: c2:83:21:0f:db:70:89:46:5b:0e:ac:f5:61:19:56:f5:46:dd: 68:f6:88:8f:84:07:ab:7f:a9:e2:38:79:ed:50:fd:3d:1e:68: 4f:3e:81:23:61:fa:91:f2:6e:37:2b:3c:6f:8a:64:2b:99:6e: f0:1a:0d:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaOq5ug7ZM4Sxn2vzhbW3P7JvWi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQkQzMkU4NjVEOUQwOEZBNUM5ODJBQjdDQkRBNEZD QjIyNjJFODAeFw0yNTA3MDEwMTI2MTJaFw0yNTA3MDIwMTQ0MTJaMDMxMTAvBgNV BAMTKDQ2REI5QzFDQzM3QzZGOEU3MjEzMUNGMkU2NzNFNjQwQjgzNTNGQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ePbH53vDHMWwlH3rSlNpyCf2 JhaqW5IPZxr0VO8xOghbm6X5KmhMzjryHZRzkVHrpI2i6fYvaZq4JnHU66r+3bwJ 7zQSG8aoE8NtViP8HMD895nmf48819v8jehu0+B5jglYvHD2LcAoaNBjjVWYeN46 dcH2J2ZR/12rZ/if7YOu3wUGaX/q1dfnOB0l5355mPo3oaXM7L8dsGtYzLtSvbAR 8xaxGIbelRXnD06QGfFJS2wGtDbomQI6lqy6PmMOfsFFpdpzuNDnf3tjoEvtDazA 7VKEJvxbAjx7Ehuo7sp7FgAxqw3lZJrwaE0D+BitsAv5ZllBCbJmpRiPF4TTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURtucHMN8b45yExzy5nPmQLg1P8UwHwYDVR0j BBgwFoAUBtvTLoZdnQj6XJgqt8vaT8siYugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEdud1gybUFndFlZM1lvcmFkc0Ztb1NWWDRuamZ6bzVkVHFobzhtZzhl UkwvMC8wNkRCRDMyRTg2NUQ5RDA4RkE1Qzk4MkFCN0NCREE0RkNCMjI2MkU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2REJEMzJFODY1RDlEMDhG QTVDOTgyQUI3Q0JEQTRGQ0IyMjYyRTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEdud1gybUFndFlZM1lvcmFkc0Ztb1NWWDRuamZ6bzVkVHFobzhtZzhlUkwvMC8w NkRCRDMyRTg2NUQ5RDA4RkE1Qzk4MkFCN0NCREE0RkNCMjI2MkU4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfN3nDCvxwxvOfwRE655ahAeVCgAJ1W/jCy77msMd0dMrc6T1S8Aum6MANVjX 15tuyjvNhc5qAoT08f0JgRqPO4xgVUKjUv+5B6yIUpEn/ixR1jfZ7Pa8isDZln4J N/pIho7uyOf5Ei7TedlcsgjNk73l4cGkhvt4m8NBZsxbjfUhkoyyajeAPxo7APmG UrWi0lXKyjyZQQ+PG6pHzkAopr2U17Uegzp/AeIzawza6XctWqF2QtXEOH4OzBZv D40TShvkTSnpwoMhD9twiUZbDqz1YRlW9UbdaPaIj4QHq3+p4jh57VD9PR5oTz6B I2H6kfJuNys8b4pkK5lu8BoNyA== -----END CERTIFICATE-----Generated at Tue Jul 1 17:57:30 2025 by rpki-client