$ rpki-client -vvf rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft File: 71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft (raw, json) Hash identifier: I9XIE0p28Zd33Lyx7EEPmvfiWsDjhsJFN0eBpKQXtz4= Subject key identifier: 9F:ED:43:0F:BB:00:91:F0:5B:1C:D9:11:FE:7C:05:ED:49:7F:79:55 Authority key identifier: 71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52 Certificate issuer: /CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52 Certificate serial: 1C058453C6DE2E9D1DEBC2113A2CB935ACF67D9A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer Subject info access: rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft Manifest number: 026D Signing time: Sun 13 Jul 2025 10:22:33 +0000 Manifest this update: Sun 13 Jul 2025 10:17:33 +0000 Manifest next update: Mon 14 Jul 2025 13:50:33 +0000 Files and hashes: 1: 3138362e3233372e31362e302f32312d3332203d3e20323633303034.roa (hash: 3DVq0DqkNADLTWL9AGG+zxpnVBOYf65tDKJdH03YwxI=) 2: 323830343a326265343a3a2f33322d313238203d3e20323633303034.roa (hash: YCMokJP8YtzLgx2BEvdyCNMZiRlmmm6TEAPNElQUjXQ=) 3: 71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl (hash: hXwlCRctwwwf28mtm5ycqqWXgbIuWQ5IVGxGV6zaEtU=) 4: 3134332e3230382e3232382e302f32322d3332203d3e20323633303034.roa (hash: IV3rgpu5jqUf8IKt60skmyD4qSR/oAcEE4NuthHk2GU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 14 Jul 2025 12:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:05:84:53:c6:de:2e:9d:1d:eb:c2:11:3a:2c:b9:35:ac:f6:7d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52 Validity Not Before: Jul 13 10:17:33 2025 GMT Not After : Jul 14 13:50:33 2025 GMT Subject: CN=9FED430FBB0091F05B1CD911FE7C05ED497F7955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:e7:79:b1:cf:4c:f7:02:71:a6:f1:e5:b9: 52:65:ca:78:fd:5b:0a:13:4c:d4:aa:05:fb:c8:3e: bb:eb:e6:c9:72:61:15:f1:bb:70:09:b6:ef:bb:8c: bf:68:65:e2:05:fc:aa:b2:e6:0f:45:05:65:34:e6: f2:7c:ed:58:3e:1c:33:41:36:7a:b2:e1:57:2b:33: 87:15:3c:fe:7e:c4:72:8a:bf:90:07:0a:1a:1d:14: 75:41:20:5a:cb:c4:2a:ea:fe:8d:25:b0:7d:c8:05: 4a:ad:d5:30:64:5b:52:d9:9b:95:1c:3c:e2:47:a3: 2a:99:aa:f7:de:f5:95:5a:c3:92:d0:ed:d3:cf:8e: 1b:f6:bc:41:64:27:d8:6a:fe:db:d7:14:d9:af:6b: 93:00:c0:80:32:35:d9:49:74:8a:e7:0e:f9:c6:01: 50:10:12:3e:8c:a5:be:52:81:df:fc:ed:f9:71:bb: 0d:48:d1:8d:c1:b1:97:43:27:38:73:1f:cc:84:12: 05:82:64:b7:a4:cf:fa:50:5a:f3:a5:6a:a4:69:0e: 93:97:51:95:ba:6b:aa:26:d0:8c:cf:d0:77:57:e5: 16:27:fb:e0:9a:10:7b:14:58:1e:5c:4f:f9:c7:95: 23:4d:7e:db:ae:9c:7f:b4:9d:bf:e3:e0:96:03:b8: e3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:ED:43:0F:BB:00:91:F0:5B:1C:D9:11:FE:7C:05:ED:49:7F:79:55 X509v3 Authority Key Identifier: keyid:71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c0:ff:ce:51:8a:97:d4:05:a8:a0:20:85:cd:6e:b9:28:e4: 16:8c:c7:4d:a3:32:c4:e1:a9:bb:1b:6a:58:59:5c:df:9d:42: 04:54:b2:aa:d9:38:a6:f9:d1:83:7c:f2:40:76:93:59:c0:02: 69:be:ab:5a:c3:f5:68:3a:6c:d4:a1:25:c8:04:4a:5a:93:37: e9:f4:54:81:8a:c4:c2:2a:48:f6:16:89:a6:a8:2f:0a:ba:97: 6b:25:06:9b:0e:e5:1c:87:d5:0a:9e:86:cb:a7:2f:87:17:5f: 78:f5:83:f0:ea:bc:e4:58:1e:b5:44:2e:79:49:f2:ca:c7:56: ea:65:a3:1a:e2:b1:f3:e0:5d:2c:f0:59:78:a7:6d:5e:ce:26: 0a:56:0f:b9:bd:f5:91:16:3d:0f:f0:cb:af:c4:4b:48:9f:4e: 7e:80:d0:f3:d2:c5:db:96:40:47:35:bf:fd:96:56:ee:62:77: f3:fc:cf:b4:98:5e:c6:9c:c8:9b:a2:35:b9:9d:c1:36:b6:58: 85:da:8b:8d:fe:c7:dc:29:61:fa:c5:3e:b4:1e:b6:e4:4a:f5: aa:5b:8e:d0:97:01:23:d1:36:db:a8:6e:30:e4:0d:c4:e6:9c: 6f:19:bf:29:ee:14:34:0d:ca:27:78:66:71:1c:13:67:1b:70: 48:3c:e1:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHAWEU8beLp0d68IROiy5Naz2fZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFMzM2QUExRUFEQkU0QTYxMDg2NkVEQjQxNDFEMzZB NUI3N0M1MjAeFw0yNTA3MTMxMDE3MzNaFw0yNTA3MTQxMzUwMzNaMDMxMTAvBgNV BAMTKDlGRUQ0MzBGQkIwMDkxRjA1QjFDRDkxMUZFN0MwNUVENDk3Rjc5NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Mud5sc9M9wJxpvHluVJlynj9 WwoTTNSqBfvIPrvr5slyYRXxu3AJtu+7jL9oZeIF/Kqy5g9FBWU05vJ87Vg+HDNB Nnqy4VcrM4cVPP5+xHKKv5AHChodFHVBIFrLxCrq/o0lsH3IBUqt1TBkW1LZm5Uc POJHoyqZqvfe9ZVaw5LQ7dPPjhv2vEFkJ9hq/tvXFNmva5MAwIAyNdlJdIrnDvnG AVAQEj6Mpb5Sgd/87flxuw1I0Y3BsZdDJzhzH8yEEgWCZLekz/pQWvOlaqRpDpOX UZW6a6om0IzP0HdX5RYn++CaEHsUWB5cT/nHlSNNftuunH+0nb/j4JYDuONzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUn+1DD7sAkfBbHNkR/nwF7Ul/eVUwHwYDVR0j BBgwFoAUceM2qh6tvkphCGbttBQdNqW3fFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUc2aHduWGN4b0dWak4xWWtmVVdyYjNVeWhLQXB0R0w5cFlqM3dCOWo5 Q3QvMS83MUUzMzZBQTFFQURCRTRBNjEwODY2RURCNDE0MUQzNkE1Qjc3QzUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxRTMzNkFBMUVBREJFNEE2 MTA4NjZFREI0MTQxRDM2QTVCNzdDNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUc2aHduWGN4b0dWak4xWWtmVVdyYjNVeWhLQXB0R0w5cFlqM3dCOWo5Q3QvMS83 MUUzMzZBQTFFQURCRTRBNjEwODY2RURCNDE0MUQzNkE1Qjc3QzUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe8D/zlGKl9QFqKAghc1uuSjkFozHTaMyxOGpuxtqWFlc351CBFSyqtk4pvnR g3zyQHaTWcACab6rWsP1aDps1KElyARKWpM36fRUgYrEwipI9haJpqgvCrqXayUG mw7lHIfVCp6Gy6cvhxdfePWD8Oq85FgetUQueUnyysdW6mWjGuKx8+BdLPBZeKdt Xs4mClYPub31kRY9D/DLr8RLSJ9OfoDQ89LF25ZARzW//ZZW7mJ38/zPtJhexpzI m6I1uZ3BNrZYhdqLjf7H3Clh+sU+tB625Er1qluO0JcBI9E226huMOQNxOacbxm/ Ke4UNA3KJ3hmcRwTZxtwSDzhqQ== -----END CERTIFICATE-----Generated at Sun Jul 13 12:09:22 2025 by rpki-client