$ rpki-client -vvf rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft File: D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft (raw, json) Hash identifier: 9Bc5aBRSWBNfSvoK3khoGIRXPNf0q7odvYGXSlJxDvM= Subject key identifier: 62:3B:EE:A5:84:11:86:3E:77:31:B5:00:14:26:9E:69:78:B3:FB:3F Authority key identifier: D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11 Certificate issuer: /CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211 Certificate serial: 5DF1992907038D818F49F59F24AC405CAFCC9DBB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer Subject info access: rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft Manifest number: 23 Signing time: Sun 29 Jun 2025 17:48:53 +0000 Manifest this update: Sun 29 Jun 2025 17:43:53 +0000 Manifest next update: Mon 30 Jun 2025 21:18:53 +0000 Files and hashes: 1: D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl (hash: gWEknCyfgpQv1c04fbTyhIvROzOhF8xbcX94D6psYqA=) 2: 323830343a386262633a3a2f33322d313238203d3e20323733373535.roa (hash: 3uQTnhhz7H1wtPzniSKTigXw3gRffdvQaJmnZ+hmrrA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 21:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f1:99:29:07:03:8d:81:8f:49:f5:9f:24:ac:40:5c:af:cc:9d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211 Validity Not Before: Jun 29 17:43:53 2025 GMT Not After : Jun 30 21:18:53 2025 GMT Subject: CN=623BEEA58411863E7731B50014269E6978B3FB3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8b:9e:6b:d7:34:d8:18:8d:14:ec:af:73:dd: ad:9f:f8:ae:76:44:c0:05:a5:cc:3c:e8:a1:ec:c8: 81:23:7c:4d:5a:fb:85:86:c7:b4:0a:03:30:13:83: 45:6f:f2:5c:35:08:e7:36:1c:f5:5a:91:19:9f:84: af:b7:3b:32:d9:b8:9f:97:64:ee:5e:84:1b:f6:dd: 4a:d7:4b:2c:51:cc:1e:26:75:67:b9:a4:04:34:b2: 46:24:60:03:6a:f7:b0:50:67:c7:c4:19:fe:4d:91: 3d:b4:02:6c:29:95:b7:39:99:44:b9:dc:21:fd:b5: 24:14:7f:12:1b:9b:e9:c0:ab:d9:92:b1:5e:fd:0d: 1d:5c:06:29:51:bc:4b:ac:e6:39:f9:64:3a:90:09: 45:da:d2:1a:08:f1:8f:51:e7:96:8e:81:6c:77:b8: f4:f7:bb:22:4b:74:ac:36:e9:0c:77:e7:c5:2e:4e: b0:ea:29:3b:1d:14:41:6a:c6:e4:20:ec:3c:9c:f2: 0b:ea:a0:98:7d:76:fa:7c:36:43:d0:71:f0:29:e9: ff:43:09:00:7e:09:a8:7a:27:0f:d3:64:74:70:0d: 87:88:df:64:70:1f:12:ef:db:f9:4e:86:95:d1:87: 64:c9:ee:c5:24:07:f0:3c:15:ce:88:7e:f5:02:a9: c8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3B:EE:A5:84:11:86:3E:77:31:B5:00:14:26:9E:69:78:B3:FB:3F X509v3 Authority Key Identifier: keyid:D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:32:01:bb:ee:2a:85:92:11:b2:67:78:62:54:7c:69:3a:6b: 30:8b:65:e0:c1:69:25:7b:eb:05:8a:e1:1f:ac:be:7a:80:66: 04:fc:c4:6b:81:c2:ff:b5:f6:e2:41:24:00:b8:f9:e1:61:a0: 06:1b:a4:ba:bc:59:16:b3:3d:16:72:a5:96:aa:94:72:c3:fa: f1:93:4b:f4:9c:77:05:72:f1:4b:43:83:88:44:39:5e:da:2d: ae:40:39:17:10:0e:5f:9a:cc:3a:8f:8b:52:ee:05:35:13:9f: 2a:67:e9:0b:3b:c7:ac:50:bc:2e:8f:4a:65:2f:cd:6b:9a:a1: 7f:6d:28:76:01:cb:15:9a:c8:0f:59:45:6f:21:30:f1:d8:36: 3f:ca:f8:97:cb:a6:84:af:48:72:8d:39:fb:f9:b7:3d:9a:cb: 18:29:7b:61:95:a0:8a:42:60:d6:50:bf:c8:f6:b0:31:27:b6: 86:57:44:b9:d0:d9:fb:79:4d:0b:83:82:6b:6c:63:32:3a:e4: a0:63:8f:11:ad:47:fc:e3:32:b8:f3:ab:fc:26:a1:43:e2:63: 8f:9f:e7:b4:91:34:36:7c:0b:d9:b1:6e:53:95:21:f0:34:0a: b8:71:c9:b9:71:ad:c0:4f:46:19:7b:10:57:cd:73:ea:31:29: da:a0:11:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXfGZKQcDjYGPSfWfJKxAXK/MnbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA3RDNFQUM3RDYwQ0FCN0JFODQxQUY1MkZFNUJEM0JF NzhEQjIxMTAeFw0yNTA2MjkxNzQzNTNaFw0yNTA2MzAyMTE4NTNaMDMxMTAvBgNV BAMTKDYyM0JFRUE1ODQxMTg2M0U3NzMxQjUwMDE0MjY5RTY5NzhCM0ZCM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVi55r1zTYGI0U7K9z3a2f+K52 RMAFpcw86KHsyIEjfE1a+4WGx7QKAzATg0Vv8lw1COc2HPVakRmfhK+3OzLZuJ+X ZO5ehBv23UrXSyxRzB4mdWe5pAQ0skYkYANq97BQZ8fEGf5NkT20Amwplbc5mUS5 3CH9tSQUfxIbm+nAq9mSsV79DR1cBilRvEus5jn5ZDqQCUXa0hoI8Y9R55aOgWx3 uPT3uyJLdKw26Qx358UuTrDqKTsdFEFqxuQg7Dyc8gvqoJh9dvp8NkPQcfAp6f9D CQB+Cah6Jw/TZHRwDYeI32RwHxLv2/lOhpXRh2TJ7sUkB/A8Fc6IfvUCqchxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYjvupYQRhj53MbUAFCaeaXiz+z8wHwYDVR0j BBgwFoAU0H0+rH1gyre+hBr1L+W9O+eNshEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODZoa2llbWhEd2VQMUwxcGtQNzhMdUIyVVRUWWZFNnIzRVpQTGJ3M2ZR eDMvMC9EMDdEM0VBQzdENjBDQUI3QkU4NDFBRjUyRkU1QkQzQkU3OERCMjExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwN0QzRUFDN0Q2MENBQjdC RTg0MUFGNTJGRTVCRDNCRTc4REIyMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODZoa2llbWhEd2VQMUwxcGtQNzhMdUIyVVRUWWZFNnIzRVpQTGJ3M2ZReDMvMC9E MDdEM0VBQzdENjBDQUI3QkU4NDFBRjUyRkU1QkQzQkU3OERCMjExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUTIBu+4qhZIRsmd4YlR8aTprMItl4MFpJXvrBYrhH6y+eoBmBPzEa4HC/7X2 4kEkALj54WGgBhukurxZFrM9FnKllqqUcsP68ZNL9Jx3BXLxS0ODiEQ5XtotrkA5 FxAOX5rMOo+LUu4FNROfKmfpCzvHrFC8Lo9KZS/Na5qhf20odgHLFZrID1lFbyEw 8dg2P8r4l8umhK9Ico05+/m3PZrLGCl7YZWgikJg1lC/yPawMSe2hldEudDZ+3lN C4OCa2xjMjrkoGOPEa1H/OMyuPOr/CahQ+Jjj5/ntJE0NnwL2bFuU5Uh8DQKuHHJ uXGtwE9GGXsQV81z6jEp2qARKg== -----END CERTIFICATE-----Generated at Mon Jun 30 03:49:24 2025 by rpki-client