$ rpki-client -vvf rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft File: 643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft (raw, json) Hash identifier: G6g3nOuecK8ebmiF+UZWXNBO94wp/0FZxeshhLtNrKA= Subject key identifier: 02:DF:A9:D4:D4:D5:8A:34:FE:80:EA:8A:F4:DA:51:79:7F:75:22:F5 Authority key identifier: 64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC Certificate issuer: /CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC Certificate serial: 3E43E659E579BAACF486F92F4301E845E16B749B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer Subject info access: rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft Manifest number: 0136 Signing time: Wed 02 Jul 2025 10:08:02 +0000 Manifest this update: Wed 02 Jul 2025 10:03:02 +0000 Manifest next update: Thu 03 Jul 2025 12:53:02 +0000 Files and hashes: 1: 3136342e3136332e33322e302f32322d3234203d3e20323635393538.roa (hash: XGRYWuw1SdOXHxgOfGeMXOtcysBOHIz1eqkxn4r4DUE=) 2: 323830343a343036633a3a2f33322d3334203d3e20323635393538.roa (hash: Jvn2kKyHv/w58j8FJqh0s8j1Zu08DizTjW/eiVddDq4=) 3: 643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl (hash: WiDpITwX5cvYHSxpnccABvc5kelH3A4LJKxf0WZ13Os=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 12:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:43:e6:59:e5:79:ba:ac:f4:86:f9:2f:43:01:e8:45:e1:6b:74:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC Validity Not Before: Jul 2 10:03:02 2025 GMT Not After : Jul 3 12:53:02 2025 GMT Subject: CN=02DFA9D4D4D58A34FE80EA8AF4DA51797F7522F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:32:0d:48:ae:4c:d8:28:9a:4b:40:1b:57:be: 9a:bf:52:10:b2:4d:ec:c5:70:13:8d:62:9e:d9:28: 97:3c:8f:2b:6a:d8:93:7a:d0:7c:2f:8e:a5:17:75: f4:c8:07:ae:78:63:74:08:88:5b:ce:d8:f8:22:47: ca:60:28:3f:70:3c:ec:f1:c9:46:a2:95:fd:59:e5: 99:00:74:90:fe:a6:a5:f7:bb:3d:93:95:c5:39:35: 32:6a:f1:71:5c:9b:0f:ec:df:e2:0e:06:0a:93:d6: de:23:8a:9f:ea:74:66:67:af:c4:14:8a:4a:c1:54: 80:c5:a2:20:eb:60:66:02:1e:4d:78:07:5b:8a:d8: f6:e1:ce:a2:f1:a1:a3:db:83:93:d0:a0:45:90:38: 5b:79:dc:a2:20:10:21:63:56:d6:6e:95:d8:4b:9b: 5c:31:18:19:c6:38:e2:12:4a:26:e9:28:7a:f0:5e: f5:3e:0e:39:68:7c:7d:ba:7b:f3:89:b7:0c:f8:8d: 29:62:e1:9c:fe:74:17:6e:53:2f:3b:97:57:9c:5c: ec:a1:b9:4a:85:17:5d:d5:d1:18:0e:65:6f:50:da: eb:ba:5e:f5:ea:a3:43:78:b0:d1:4c:de:00:b3:8a: 10:f0:4a:22:19:42:f6:f8:77:52:9e:2b:fd:15:19: 31:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DF:A9:D4:D4:D5:8A:34:FE:80:EA:8A:F4:DA:51:79:7F:75:22:F5 X509v3 Authority Key Identifier: keyid:64:3F:B4:E8:EF:B2:9F:73:B0:17:7A:0D:1A:D5:C6:36:4F:44:B2:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmoTnUQUzHrAMxx3KmCQAhFZqoVJKe8YFKTERy1SCct7/0/643FB4E8EFB29F73B0177A0D1AD5C6364F44B2AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:35:30:1c:6e:85:d0:6d:e7:41:11:ab:8f:72:32:1e:8f:15: 5a:88:55:f0:fb:05:0c:ec:91:13:85:3f:b9:3a:5e:98:bf:71: 1e:27:bf:9a:8c:91:26:24:67:5d:08:3e:03:5e:6a:f5:46:7b: 8d:69:85:9d:38:86:ed:83:85:3f:8c:19:73:61:57:98:d9:8c: 00:6c:42:ce:8c:1c:2e:8d:60:23:dc:38:99:f1:f3:f9:c7:3a: 6e:be:0c:9d:34:10:17:5b:8f:1e:e2:ee:08:63:ea:1c:96:9c: 00:a5:d7:48:38:eb:0e:fc:32:0f:12:7b:44:00:43:d4:ae:bb: 33:ab:5b:a8:dd:2e:43:4f:d2:6e:bc:d8:c1:3e:6f:9b:cd:6c: a6:9d:3b:8b:10:49:f8:db:67:0c:ec:58:a2:a2:5c:72:79:73: 4e:85:f9:68:4c:af:9f:ea:df:10:55:ef:6e:3a:a9:1f:cb:eb: b6:f6:a2:e0:51:ec:05:94:9d:a9:0f:ac:ea:61:d6:be:2a:0b: 40:5f:2c:98:cc:4e:83:98:bb:5c:63:1e:e9:4b:a9:67:23:30: ab:2c:b5:9e:5c:2d:43:b5:09:b0:9b:32:4f:a8:9e:f8:99:33: e4:22:4a:38:8b:67:eb:54:a1:72:7b:26:49:c1:ce:f6:6e:0a: e1:61:30:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPkPmWeV5uqz0hvkvQwHoReFrdJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQzRkI0RThFRkIyOUY3M0IwMTc3QTBEMUFENUM2MzY0 RjQ0QjJBQzAeFw0yNTA3MDIxMDAzMDJaFw0yNTA3MDMxMjUzMDJaMDMxMTAvBgNV BAMTKDAyREZBOUQ0RDRENThBMzRGRTgwRUE4QUY0REE1MTc5N0Y3NTIyRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsMg1IrkzYKJpLQBtXvpq/UhCy TezFcBONYp7ZKJc8jytq2JN60HwvjqUXdfTIB654Y3QIiFvO2PgiR8pgKD9wPOzx yUailf1Z5ZkAdJD+pqX3uz2TlcU5NTJq8XFcmw/s3+IOBgqT1t4jip/qdGZnr8QU ikrBVIDFoiDrYGYCHk14B1uK2PbhzqLxoaPbg5PQoEWQOFt53KIgECFjVtZuldhL m1wxGBnGOOISSibpKHrwXvU+DjlofH26e/OJtwz4jSli4Zz+dBduUy87l1ecXOyh uUqFF13V0RgOZW9Q2uu6XvXqo0N4sNFM3gCzihDwSiIZQvb4d1KeK/0VGTGLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAt+p1NTVijT+gOqK9NpReX91IvUwHwYDVR0j BBgwFoAUZD+06O+yn3OwF3oNGtXGNk9EsqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR21vVG5VUVV6SHJBTXh4M0ttQ1FBaEZacW9WSktlOFlGS1RFUnkxU0Nj dDcvMC82NDNGQjRFOEVGQjI5RjczQjAxNzdBMEQxQUQ1QzYzNjRGNDRCMkFDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0M0ZCNEU4RUZCMjlGNzNC MDE3N0EwRDFBRDVDNjM2NEY0NEIyQUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R21vVG5VUVV6SHJBTXh4M0ttQ1FBaEZacW9WSktlOFlGS1RFUnkxU0NjdDcvMC82 NDNGQjRFOEVGQjI5RjczQjAxNzdBMEQxQUQ1QzYzNjRGNDRCMkFDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJzUwHG6F0G3nQRGrj3IyHo8VWohV8PsFDOyRE4U/uTpemL9xHie/moyRJiRn XQg+A15q9UZ7jWmFnTiG7YOFP4wZc2FXmNmMAGxCzowcLo1gI9w4mfHz+cc6br4M nTQQF1uPHuLuCGPqHJacAKXXSDjrDvwyDxJ7RABD1K67M6tbqN0uQ0/SbrzYwT5v m81spp07ixBJ+NtnDOxYoqJccnlzToX5aEyvn+rfEFXvbjqpH8vrtvai4FHsBZSd qQ+s6mHWvioLQF8smMxOg5i7XGMe6UupZyMwqyy1nlwtQ7UJsJsyT6ie+Jkz5CJK OItn61ShcnsmScHO9m4K4WEw1g== -----END CERTIFICATE-----Generated at Wed Jul 2 15:09:48 2025 by rpki-client