$ rpki-client -vvf rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/FF6BD3054B1935A72736E264B133C39E90D3FB51.mft File: FF6BD3054B1935A72736E264B133C39E90D3FB51.mft (raw, json) Hash identifier: We/TRTBGM/aWt8hV6udZnvk7VRLqyevm+/yJfH3/31w= Subject key identifier: 88:B3:F7:F7:EC:1B:0C:4E:F3:59:80:88:30:32:72:91:FD:63:00:BE Authority key identifier: FF:6B:D3:05:4B:19:35:A7:27:36:E2:64:B1:33:C3:9E:90:D3:FB:51 Certificate issuer: /CN=FF6BD3054B1935A72736E264B133C39E90D3FB51 Certificate serial: 11ED793A424151857987AEB3AA37E2930C023AAD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF6BD3054B1935A72736E264B133C39E90D3FB51.cer Subject info access: rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/FF6BD3054B1935A72736E264B133C39E90D3FB51.mft Manifest number: 01D3 Signing time: Wed 02 Jul 2025 14:49:19 +0000 Manifest this update: Wed 02 Jul 2025 14:44:19 +0000 Manifest next update: Thu 03 Jul 2025 15:46:19 +0000 Files and hashes: 1: 3138362e3232372e38302e302f32302d3234203d3e203533313835.roa (hash: LvVfB6kDAooAG6tc/T7nHM6TbgEjn1b0dIHQHzU8K7U=) 2: FF6BD3054B1935A72736E264B133C39E90D3FB51.crl (hash: YXjhYjcRsN+CMCoLPInh4SqK88oZ0WbU9FqMUHS1bW4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/FF6BD3054B1935A72736E264B133C39E90D3FB51.crl rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/FF6BD3054B1935A72736E264B133C39E90D3FB51.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF6BD3054B1935A72736E264B133C39E90D3FB51.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 15:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ed:79:3a:42:41:51:85:79:87:ae:b3:aa:37:e2:93:0c:02:3a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF6BD3054B1935A72736E264B133C39E90D3FB51 Validity Not Before: Jul 2 14:44:19 2025 GMT Not After : Jul 3 15:46:19 2025 GMT Subject: CN=88B3F7F7EC1B0C4EF359808830327291FD6300BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c4:5c:9c:e9:20:03:90:84:35:03:39:bd:b4: ee:03:ce:91:ef:ff:a1:74:d4:41:aa:8f:a1:bb:d0: f0:8f:25:86:7c:de:73:15:7b:30:31:5c:c2:2b:ba: 88:98:2d:9a:3e:d9:79:5d:e5:a4:f6:23:50:52:99: e7:b6:f2:0b:22:ae:20:99:df:9a:07:40:bd:50:da: c2:8c:00:d8:53:07:07:5a:cb:48:68:74:b5:99:85: 9c:19:ea:30:26:85:8f:0b:70:c3:c2:aa:ed:fb:c9: 46:c2:88:17:3b:29:a0:ed:d6:61:d4:a5:65:1e:fb: b9:f3:d2:86:02:b7:74:64:04:66:a3:25:7d:1d:bf: 92:a8:41:21:92:94:fd:68:c3:54:d4:75:cc:96:b9: f2:18:62:11:3d:77:59:bd:02:3b:04:7b:c5:6b:e7: e2:ec:cd:d0:9b:2f:d6:8f:b7:4f:10:5a:80:14:d8: 46:d1:6a:8f:bc:b7:72:f3:39:90:39:7d:5c:2f:bb: 8f:66:a4:51:6f:a8:59:99:31:ad:7f:ff:d1:c8:c2: 99:7f:ce:9a:82:53:43:92:ce:d2:67:19:09:96:51: 14:62:ce:b6:76:06:23:c1:75:eb:8a:a3:66:21:00: af:d3:6f:a3:05:bb:c6:c5:d6:cc:bf:46:07:7c:61: 32:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B3:F7:F7:EC:1B:0C:4E:F3:59:80:88:30:32:72:91:FD:63:00:BE X509v3 Authority Key Identifier: keyid:FF:6B:D3:05:4B:19:35:A7:27:36:E2:64:B1:33:C3:9E:90:D3:FB:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/FF6BD3054B1935A72736E264B133C39E90D3FB51.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF6BD3054B1935A72736E264B133C39E90D3FB51.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/FF6BD3054B1935A72736E264B133C39E90D3FB51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:b6:ab:8a:92:d8:29:0e:b6:e8:cd:b7:81:0c:fe:4a:9f:ac: 64:cf:4a:af:ec:ae:f8:7a:c8:61:32:0d:f0:49:8a:fe:24:39: 95:28:92:70:3d:b0:2a:35:5a:15:cd:75:cb:16:07:ce:c4:e5: 58:4d:98:54:55:d7:00:d0:49:7d:38:ad:4c:2e:00:1f:bf:9a: b1:e2:77:05:36:fe:d6:80:ca:49:e2:c0:2a:ee:da:6d:a9:44: fc:86:64:e1:eb:92:84:53:69:4c:bc:b7:d5:49:9d:7c:36:33: c1:db:e1:d0:08:c7:ae:3a:bb:97:e1:50:c5:63:db:84:9c:12: 00:80:6d:41:34:b2:a4:22:74:c5:b5:3c:35:d1:94:32:92:9c: 3e:c7:01:14:e0:24:f2:50:aa:d1:c4:40:45:ed:d0:9b:c9:7e: b3:ae:1d:89:8f:0d:e8:f2:3a:51:0d:9a:37:9a:ce:bd:c0:90: b3:f1:35:8c:86:65:7e:22:0a:47:88:b3:3a:6a:7e:e9:9d:3c: 7e:b3:8d:78:63:3d:b1:c0:9b:67:76:c8:ce:79:97:37:5a:6b: ee:df:ae:ff:e0:b5:7d:59:62:4f:59:0f:98:6a:fc:70:00:e7: 41:e9:65:56:82:90:8b:20:cf:44:50:56:ca:af:06:66:43:5d: d8:eb:d3:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEe15OkJBUYV5h66zqjfikwwCOq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY2QkQzMDU0QjE5MzVBNzI3MzZFMjY0QjEzM0MzOUU5 MEQzRkI1MTAeFw0yNTA3MDIxNDQ0MTlaFw0yNTA3MDMxNTQ2MTlaMDMxMTAvBgNV BAMTKDg4QjNGN0Y3RUMxQjBDNEVGMzU5ODA4ODMwMzI3MjkxRkQ2MzAwQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6xFyc6SADkIQ1Azm9tO4DzpHv /6F01EGqj6G70PCPJYZ83nMVezAxXMIruoiYLZo+2Xld5aT2I1BSmee28gsiriCZ 35oHQL1Q2sKMANhTBwday0hodLWZhZwZ6jAmhY8LcMPCqu37yUbCiBc7KaDt1mHU pWUe+7nz0oYCt3RkBGajJX0dv5KoQSGSlP1ow1TUdcyWufIYYhE9d1m9AjsEe8Vr 5+LszdCbL9aPt08QWoAU2EbRao+8t3LzOZA5fVwvu49mpFFvqFmZMa1//9HIwpl/ zpqCU0OSztJnGQmWURRizrZ2BiPBdeuKo2YhAK/Tb6MFu8bF1sy/Rgd8YTJnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiLP39+wbDE7zWYCIMDJykf1jAL4wHwYDVR0j BBgwFoAU/2vTBUsZNacnNuJksTPDnpDT+1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRE4xTk0yeTZjQVBISjlhOGZkU05WRlFzWW1OYmpaWFNoZEpRRjJCd01L cXcvMC9GRjZCRDMwNTRCMTkzNUE3MjczNkUyNjRCMTMzQzM5RTkwRDNGQjUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGNkJEMzA1NEIxOTM1QTcy NzM2RTI2NEIxMzNDMzlFOTBEM0ZCNTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RE4xTk0yeTZjQVBISjlhOGZkU05WRlFzWW1OYmpaWFNoZEpRRjJCd01LcXcvMC9G RjZCRDMwNTRCMTkzNUE3MjczNkUyNjRCMTMzQzM5RTkwRDNGQjUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiLaripLYKQ626M23gQz+Sp+sZM9Kr+yu+HrIYTIN8EmK/iQ5lSiScD2wKjVa Fc11yxYHzsTlWE2YVFXXANBJfTitTC4AH7+aseJ3BTb+1oDKSeLAKu7abalE/IZk 4euShFNpTLy31UmdfDYzwdvh0AjHrjq7l+FQxWPbhJwSAIBtQTSypCJ0xbU8NdGU MpKcPscBFOAk8lCq0cRARe3Qm8l+s64diY8N6PI6UQ2aN5rOvcCQs/E1jIZlfiIK R4izOmp+6Z08frONeGM9scCbZ3bIznmXN1pr7t+u/+C1fVliT1kPmGr8cADnQell VoKQiyDPRFBWyq8GZkNd2OvTAA== -----END CERTIFICATE-----Generated at Wed Jul 2 19:57:47 2025 by rpki-client