$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.mft File: 521D4F32B82171B22F771F6945B5BED6147685DC.mft (raw, json) Hash identifier: PZV/jbaH2RHIMC+gIHd9vOGSNZIDQqE4C2SJFH7qUzg= Subject key identifier: 8D:1E:F3:DC:77:B0:01:57:6E:29:37:E3:E4:78:AC:CD:AD:2D:C0:34 Authority key identifier: 52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC Certificate issuer: /CN=521D4F32B82171B22F771F6945B5BED6147685DC Certificate serial: 686DE6937134AA0AE5BDC79770338EEF39DB4B75 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer Subject info access: rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.mft Manifest number: 0142 Signing time: Wed 02 Jul 2025 21:52:42 +0000 Manifest this update: Wed 02 Jul 2025 21:47:42 +0000 Manifest next update: Fri 04 Jul 2025 00:00:42 +0000 Files and hashes: 1: 521D4F32B82171B22F771F6945B5BED6147685DC.crl (hash: mWaelnuTYbGflrBCaskXrVUF3jqDEPNXLGIsfzQse8w=) 2: 323830343a313036383a3a2f33322d3438203d3e20323633363334.roa (hash: I7/I1VKECcp7MXmNfNJIoe3Ro8PTHpBWvdTIRMRDiDU=) 3: 3137302e38312e34382e302f32322d3234203d3e20323633363334.roa (hash: /PrUy1p0+kIkqc2FjP6yAV2CPhaKLiqrdnUcj1tFyrk=) 4: 3137392e3132352e3131322e302f32312d3234203d3e20323633363334.roa (hash: MlvytM5cV/QYgklPgR+5Lk4H6+kZHUAIC9658G2WYMw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Jul 2025 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:6d:e6:93:71:34:aa:0a:e5:bd:c7:97:70:33:8e:ef:39:db:4b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521D4F32B82171B22F771F6945B5BED6147685DC Validity Not Before: Jul 2 21:47:42 2025 GMT Not After : Jul 4 00:00:42 2025 GMT Subject: CN=8D1EF3DC77B001576E2937E3E478ACCDAD2DC034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:41:16:10:1c:02:f2:d0:19:83:04:cb:50: 3f:a9:9f:23:d4:0a:96:66:dc:91:35:6c:f8:25:10: c7:37:dc:4c:98:f4:14:f0:59:2f:6e:53:03:ed:3c: b5:c0:1a:ae:f3:62:64:63:4c:b7:5d:a0:e9:87:20: 70:8e:78:55:d0:25:c1:90:23:d1:a0:58:cb:79:26: bb:aa:2d:e4:82:9c:8a:f2:a7:22:73:50:fd:93:ed: 0e:36:01:2b:b9:eb:b5:7b:e5:b1:ae:bf:aa:35:73: 8b:16:86:54:b5:65:46:4a:7c:d0:2f:ae:ce:7c:d6: 2d:03:f9:33:4f:7d:5f:33:9f:4d:34:0c:68:62:65: cd:72:8f:5e:db:6c:70:85:2a:4d:40:50:3d:37:f4: a4:fb:40:32:21:cc:0d:a5:f9:51:a0:37:a2:44:1c: df:35:b7:25:e3:af:14:42:50:19:43:d9:9f:48:19: 76:fc:cc:8a:00:f0:e4:7a:dd:20:a8:fe:6d:69:5a: a8:15:fe:68:b6:d3:e9:5f:62:ef:69:88:80:05:66: db:e8:5b:e7:87:6d:7f:a1:71:c7:d9:b1:18:c3:a4: 5f:a9:aa:bf:f8:d9:37:d7:a5:99:4d:57:d2:a1:46: 8b:e8:eb:16:d2:4c:7c:50:37:61:b2:a9:ad:c6:23: d7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1E:F3:DC:77:B0:01:57:6E:29:37:E3:E4:78:AC:CD:AD:2D:C0:34 X509v3 Authority Key Identifier: keyid:52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f3:70:e4:07:41:a2:a6:ae:5b:63:65:be:4b:d9:74:7e:1d: 12:ea:0b:d2:a6:fe:c8:23:90:b8:7e:51:21:23:4b:70:97:04: 72:b0:1c:e8:df:c5:b5:33:e9:82:ee:5f:5a:3f:c8:f1:95:62: df:5a:7e:be:5d:55:77:7a:63:e2:fb:aa:97:de:6c:37:54:b5: ca:ed:44:48:b0:5f:19:39:0f:fe:31:bf:2c:1e:61:f0:d4:21: 29:32:0a:50:6e:85:a4:72:68:ee:6e:bc:f0:72:46:42:e2:6b: 98:75:8d:3d:2e:e1:2a:70:6f:df:47:58:a9:76:31:d2:4b:cb: 01:df:d3:70:f1:f7:42:df:53:bf:ca:63:dd:78:6b:6d:29:01: 3b:cf:6a:46:bf:95:f7:c9:e3:d1:7f:3d:a4:ff:dc:23:a1:1d: 24:61:c5:0f:c8:4a:2d:c1:d2:28:f0:a2:ac:37:0e:f1:46:43: c7:a8:d5:4a:ce:83:4e:27:7f:5d:ff:7c:64:f9:c9:95:ac:43: 49:e7:08:a2:58:11:12:93:d7:cf:db:8d:64:40:10:50:b9:a0: 84:85:a1:75:2b:2a:3c:28:c5:5b:f5:d0:ba:8c:46:b0:e9:bc: 21:09:1d:fc:46:50:c9:8e:a1:83:90:aa:0f:40:a4:76:bf:00: ce:c3:15:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaG3mk3E0qgrlvceXcDOO7znbS3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxRDRGMzJCODIxNzFCMjJGNzcxRjY5NDVCNUJFRDYx NDc2ODVEQzAeFw0yNTA3MDIyMTQ3NDJaFw0yNTA3MDQwMDAwNDJaMDMxMTAvBgNV BAMTKDhEMUVGM0RDNzdCMDAxNTc2RTI5MzdFM0U0NzhBQ0NEQUQyREMwMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnE0EWEBwC8tAZgwTLUD+pnyPU CpZm3JE1bPglEMc33EyY9BTwWS9uUwPtPLXAGq7zYmRjTLddoOmHIHCOeFXQJcGQ I9GgWMt5JruqLeSCnIrypyJzUP2T7Q42ASu567V75bGuv6o1c4sWhlS1ZUZKfNAv rs581i0D+TNPfV8zn000DGhiZc1yj17bbHCFKk1AUD039KT7QDIhzA2l+VGgN6JE HN81tyXjrxRCUBlD2Z9IGXb8zIoA8OR63SCo/m1pWqgV/mi20+lfYu9piIAFZtvo W+eHbX+hccfZsRjDpF+pqr/42TfXpZlNV9KhRovo6xbSTHxQN2Gyqa3GI9dDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjR7z3HewAVduKTfj5Hisza0twDQwHwYDVR0j BBgwFoAUUh1PMrghcbIvdx9pRbW+1hR2hdwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzNtRjd4TmM0cjI3akdoS2RMZFFzbTJ3WGhWNnJuOWRuY3g1MWpSWWFl aWovMC81MjFENEYzMkI4MjE3MUIyMkY3NzFGNjk0NUI1QkVENjE0NzY4NURDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyMUQ0RjMyQjgyMTcxQjIy Rjc3MUY2OTQ1QjVCRUQ2MTQ3Njg1REMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzNtRjd4TmM0cjI3akdoS2RMZFFzbTJ3WGhWNnJuOWRuY3g1MWpSWWFlaWovMC81 MjFENEYzMkI4MjE3MUIyMkY3NzFGNjk0NUI1QkVENjE0NzY4NURDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdvNw5AdBoqauW2NlvkvZdH4dEuoL0qb+yCOQuH5RISNLcJcEcrAc6N/FtTPp gu5fWj/I8ZVi31p+vl1Vd3pj4vuql95sN1S1yu1ESLBfGTkP/jG/LB5h8NQhKTIK UG6FpHJo7m688HJGQuJrmHWNPS7hKnBv30dYqXYx0kvLAd/TcPH3Qt9Tv8pj3Xhr bSkBO89qRr+V98nj0X89pP/cI6EdJGHFD8hKLcHSKPCirDcO8UZDx6jVSs6DTid/ Xf98ZPnJlaxDSecIolgREpPXz9uNZEAQULmghIWhdSsqPCjFW/XQuoxGsOm8IQkd /EZQyY6hg5CqD0Ckdr8AzsMVJg== -----END CERTIFICATE-----Generated at Thu Jul 3 00:34:48 2025 by rpki-client