$ rpki-client -vvf rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft File: 71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft (raw, json) Hash identifier: oa1iNi6e/INSoDQF3KzL7SrbQFAvk3cLkRz/6bm+XUA= Subject key identifier: 31:F1:BE:2E:63:06:26:4E:7A:D7:BD:0C:DC:07:F3:F4:2D:57:50:76 Authority key identifier: 71:AC:81:7F:1B:0F:FF:A1:74:AC:AE:38:AC:41:80:AB:ED:E4:55:70 Certificate issuer: /CN=71AC817F1B0FFFA174ACAE38AC4180ABEDE45570 Certificate serial: 7CC3689099052633647891AD30C799ABD3A3D095 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft Manifest number: 66 Signing time: Mon 30 Jun 2025 02:50:36 +0000 Manifest this update: Mon 30 Jun 2025 02:45:36 +0000 Manifest next update: Tue 01 Jul 2025 03:39:36 +0000 Files and hashes: 1: 323830343a393063303a3a2f33322d3438203d3e203532383535.roa (hash: bFr144qNXiJnjjBqpVx2Hs1FVhxY1dhQgugWIFI/8tA=) 2: 3137372e3130352e38302e302f32302d3234203d3e203532383535.roa (hash: 9BoeCVg5vcg0/gLeGBtgYnvonPaqfp1IXhF41+TABUc=) 3: 71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.crl (hash: FDcA1HCar8hTod8N0Y0a/yse97/PMa8qYzFhrNNJ7F0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.crl rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 03:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c3:68:90:99:05:26:33:64:78:91:ad:30:c7:99:ab:d3:a3:d0:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71AC817F1B0FFFA174ACAE38AC4180ABEDE45570 Validity Not Before: Jun 30 02:45:36 2025 GMT Not After : Jul 1 03:39:36 2025 GMT Subject: CN=31F1BE2E6306264E7AD7BD0CDC07F3F42D575076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:40:5a:97:21:c2:66:e6:92:ba:21:ef:ba:06: d6:09:4e:3b:0a:c0:95:af:ae:69:6e:86:72:81:c3: 8b:dc:8f:18:bd:5d:3b:ff:5f:ef:8c:cf:3c:89:23: 5f:eb:57:7a:95:e6:81:19:ba:fe:da:2c:27:a3:1f: 4c:d1:17:1f:e5:66:73:4b:5a:7c:a9:85:e8:f3:70: b4:3f:ae:5b:aa:53:26:b1:ef:c9:ad:32:f2:78:3d: 97:6e:c7:c5:ac:38:c7:d2:8d:1c:ab:a0:3d:75:53: 66:36:96:45:2b:7a:fe:4c:5d:b3:0a:41:cd:70:34: 9b:b1:a3:66:47:38:1c:79:25:5c:23:e3:40:67:8d: 26:b9:e4:b2:43:62:76:0c:c3:0e:e2:c5:98:cb:9a: 97:be:2c:7b:3f:d9:01:3b:64:70:a6:ea:2a:c5:c5: c9:36:2e:cd:93:fc:b5:79:fd:c8:60:a0:8a:94:d2: 0a:98:ea:18:a7:14:17:14:be:bd:1b:f6:39:43:b1: 48:f6:d5:e2:59:66:ed:f5:40:b3:56:85:5b:e1:c5: fa:51:40:47:84:16:e3:a2:f0:7c:9b:f0:61:5d:c9: a4:83:09:35:5a:e7:9e:7d:92:a3:5b:f3:a0:ec:18: 06:77:5e:5a:4a:ba:58:ed:1e:bd:74:06:8d:f9:b6: 0d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F1:BE:2E:63:06:26:4E:7A:D7:BD:0C:DC:07:F3:F4:2D:57:50:76 X509v3 Authority Key Identifier: keyid:71:AC:81:7F:1B:0F:FF:A1:74:AC:AE:38:AC:41:80:AB:ED:E4:55:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:91:79:60:3b:ec:7e:14:8a:66:5d:a1:53:0a:08:c1:4e:61: 1e:c5:42:38:33:c9:ad:68:da:65:9a:9e:19:a6:df:cc:b8:8e: 5d:84:f2:4e:67:c7:91:49:95:25:78:78:98:45:c8:3a:93:4a: 81:d1:fe:38:90:aa:06:10:9f:59:a7:c6:67:ad:c4:88:96:b3: d4:ee:8a:d6:90:a1:18:04:8f:d2:95:2d:4f:c6:0b:e7:56:00: 2c:51:5a:d4:74:a5:79:f8:ec:18:70:9d:f8:a0:d8:d4:90:f2: 20:ea:17:8d:87:e3:78:e6:9a:e4:03:a0:d4:b0:84:b1:66:22: b7:ef:0d:c6:34:9f:7b:35:5f:dc:21:d9:db:3c:3f:9f:09:7c: 0e:01:25:5a:54:fb:cf:33:7e:5d:42:fa:3a:96:d6:7a:e7:bc: d7:42:6a:b8:8f:18:ad:b8:b5:67:06:83:00:e6:59:ac:c7:32: ea:83:00:e0:af:b9:f1:9e:6f:11:3f:df:d8:46:69:58:8f:87: d3:29:d1:05:af:fb:ff:04:60:d7:f6:4f:49:01:c0:ae:ec:98: b0:0b:60:be:fc:80:da:e9:46:5f:8a:2c:6d:ee:4c:35:1c:87: ff:71:14:70:79:21:cf:97:91:c0:83:b9:f3:8b:3c:83:09:82: 69:fe:1e:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfMNokJkFJjNkeJGtMMeZq9Oj0JUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFBQzgxN0YxQjBGRkZBMTc0QUNBRTM4QUM0MTgwQUJF REU0NTU3MDAeFw0yNTA2MzAwMjQ1MzZaFw0yNTA3MDEwMzM5MzZaMDMxMTAvBgNV BAMTKDMxRjFCRTJFNjMwNjI2NEU3QUQ3QkQwQ0RDMDdGM0Y0MkQ1NzUwNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQFqXIcJm5pK6Ie+6BtYJTjsK wJWvrmluhnKBw4vcjxi9XTv/X++MzzyJI1/rV3qV5oEZuv7aLCejH0zRFx/lZnNL WnyphejzcLQ/rluqUyax78mtMvJ4PZdux8WsOMfSjRyroD11U2Y2lkUrev5MXbMK Qc1wNJuxo2ZHOBx5JVwj40BnjSa55LJDYnYMww7ixZjLmpe+LHs/2QE7ZHCm6irF xck2Ls2T/LV5/chgoIqU0gqY6hinFBcUvr0b9jlDsUj21eJZZu31QLNWhVvhxfpR QEeEFuOi8Hyb8GFdyaSDCTVa5559kqNb86DsGAZ3XlpKuljtHr10Bo35tg2DAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMfG+LmMGJk56170M3Afz9C1XUHYwHwYDVR0j BBgwFoAUcayBfxsP/6F0rK44rEGAq+3kVXAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZ5aVpoSmpMQkt6d1NwNENUU2k2V2FhaTRLUkREaXFFNEFlblZMY2VC VFAvMC83MUFDODE3RjFCMEZGRkExNzRBQ0FFMzhBQzQxODBBQkVERTQ1NTcwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxQUM4MTdGMUIwRkZGQTE3 NEFDQUUzOEFDNDE4MEFCRURFNDU1NzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZ5aVpoSmpMQkt6d1NwNENUU2k2V2FhaTRLUkREaXFFNEFlblZMY2VCVFAvMC83 MUFDODE3RjFCMEZGRkExNzRBQ0FFMzhBQzQxODBBQkVERTQ1NTcwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg5F5YDvsfhSKZl2hUwoIwU5hHsVCODPJrWjaZZqeGabfzLiOXYTyTmfHkUmV JXh4mEXIOpNKgdH+OJCqBhCfWafGZ63EiJaz1O6K1pChGASP0pUtT8YL51YALFFa 1HSlefjsGHCd+KDY1JDyIOoXjYfjeOaa5AOg1LCEsWYit+8NxjSfezVf3CHZ2zw/ nwl8DgElWlT7zzN+XUL6OpbWeue810JquI8Yrbi1ZwaDAOZZrMcy6oMA4K+58Z5v ET/f2EZpWI+H0ynRBa/7/wRg1/ZPSQHAruyYsAtgvvyA2ulGX4osbe5MNRyH/3EU cHkhz5eRwIO584s8gwmCaf4e9w== -----END CERTIFICATE-----Generated at Mon Jun 30 17:36:52 2025 by rpki-client