$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft File: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft (raw, json) Hash identifier: ag1JHeOFkuVXgu0EZna803dm5uRem6axjTBAOdHGQEU= Subject key identifier: F6:49:89:4E:56:8D:FD:F2:3A:D2:17:F3:9D:D8:DB:59:28:F0:1D:27 Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 Certificate issuer: /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Certificate serial: 4D2338D92EFB1B6395BE6CFB26C8F41904FECF52 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject info access: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft Manifest number: 011D Signing time: Fri 25 Jul 2025 06:44:38 +0000 Manifest this update: Fri 25 Jul 2025 06:39:38 +0000 Manifest next update: Sat 26 Jul 2025 09:07:38 +0000 Files and hashes: 1: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: uIh+Oz5wiODIMg7enOUna4NRPwYVYruwibBcWxdlN6k=) 2: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl (hash: 7/5IW29GJT3C1zv7PsWrbD6CqKyEi/+31CkvjSKJ1fU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Jul 2025 09:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:23:38:d9:2e:fb:1b:63:95:be:6c:fb:26:c8:f4:19:04:fe:cf:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Validity Not Before: Jul 25 06:39:38 2025 GMT Not After : Jul 26 09:07:38 2025 GMT Subject: CN=F649894E568DFDF23AD217F39DD8DB5928F01D27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:52:1a:fb:04:09:4e:33:15:6a:48:6d:15:0f: 71:a4:55:ef:a6:47:88:82:6d:97:04:87:45:51:cf: 60:bf:d5:b8:fb:c3:17:34:b3:be:ea:21:ac:be:6e: 4f:10:d9:03:01:90:92:46:36:7f:f8:8c:85:0d:9d: 50:12:a2:01:3d:81:3b:6c:93:ec:b1:1a:90:89:29: 5d:9f:5b:4c:ba:e5:85:27:47:bd:be:ba:3d:80:d7: f3:57:dd:a7:09:0b:a3:44:7f:98:3d:3b:05:99:16: ce:98:81:85:71:0a:ef:db:d7:19:97:34:9e:5f:19: dc:93:22:a9:31:40:73:9f:cb:42:8a:ca:69:5f:0e: ac:91:0f:b5:b2:d1:ec:d8:21:88:1f:77:12:53:8c: bd:96:04:01:ec:96:3b:94:83:ef:33:c0:1c:3c:f5: 44:ec:a0:17:84:71:d7:47:07:99:f7:8b:60:1b:13: 84:15:72:22:31:6d:d9:50:3d:bf:89:fd:2f:f0:2f: 66:0d:80:f2:7a:7a:2d:14:24:83:14:47:03:67:59: 04:93:1d:81:aa:8a:83:5c:13:52:ee:5c:0b:6e:16: 21:60:55:4c:2c:6c:56:2d:69:00:eb:ff:1a:33:52: 90:ba:13:53:52:39:44:c4:78:a9:f3:2d:e2:ce:b1: 2f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:49:89:4E:56:8D:FD:F2:3A:D2:17:F3:9D:D8:DB:59:28:F0:1D:27 X509v3 Authority Key Identifier: keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e4:9a:47:e3:69:9b:2b:9f:85:f4:1e:30:a7:8a:6b:22:94: ea:51:a0:69:5f:e1:46:de:2c:c4:db:44:ed:8e:90:93:cd:0d: 5a:81:41:c9:b2:6a:35:ed:74:73:63:aa:ec:c2:42:0d:65:76: 00:9d:d1:a5:d1:71:ee:40:62:60:15:93:4e:4a:b8:92:47:de: 0d:0f:4f:60:6f:bb:6d:bb:69:df:13:79:88:d4:28:af:ce:85: 5c:ff:eb:79:dc:5c:1f:22:42:82:cd:1b:b7:cd:aa:2c:f6:15: 91:88:56:1b:69:b2:54:70:37:47:c5:91:20:ec:87:b0:17:31: 6b:b7:ad:f6:5c:39:95:14:5e:1a:c0:7e:d1:51:b7:c3:ba:c7: 1e:fa:9f:37:8e:27:d1:3a:30:99:24:6a:0e:cf:75:09:c3:97: 71:02:aa:f0:42:36:24:54:98:60:7f:31:41:39:02:3c:45:e6: bf:ff:24:ab:2e:89:ae:de:53:9d:b6:7b:e6:df:44:15:84:a0: dd:49:3c:49:5c:3d:e9:5f:d7:2c:e3:bd:13:dd:6f:44:7b:1b: 15:f4:17:d1:c5:7f:e3:cc:38:9b:54:20:24:70:68:7b:91:3f: 03:4d:09:74:c0:9a:2d:33:e3:74:51:3a:0a:e5:62:b1:5e:99: 8b:bd:30:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTSM42S77G2OVvmz7Jsj0GQT+z1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM2RkNCMzFGMkMzM0Y4RTU3MEQzQ0EwMjc1NUJDQzUx QjIzRUEwMTAeFw0yNTA3MjUwNjM5MzhaFw0yNTA3MjYwOTA3MzhaMDMxMTAvBgNV BAMTKEY2NDk4OTRFNTY4REZERjIzQUQyMTdGMzlERDhEQjU5MjhGMDFEMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Uhr7BAlOMxVqSG0VD3GkVe+m R4iCbZcEh0VRz2C/1bj7wxc0s77qIay+bk8Q2QMBkJJGNn/4jIUNnVASogE9gTts k+yxGpCJKV2fW0y65YUnR72+uj2A1/NX3acJC6NEf5g9OwWZFs6YgYVxCu/b1xmX NJ5fGdyTIqkxQHOfy0KKymlfDqyRD7Wy0ezYIYgfdxJTjL2WBAHsljuUg+8zwBw8 9UTsoBeEcddHB5n3i2AbE4QVciIxbdlQPb+J/S/wL2YNgPJ6ei0UJIMURwNnWQST HYGqioNcE1LuXAtuFiFgVUwsbFYtaQDr/xozUpC6E1NSOUTEeKnzLeLOsS9zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9kmJTlaN/fI60hfzndjbWSjwHScwHwYDVR0j BBgwFoAUQ2/LMfLDP45XDTygJ1W8xRsj6gEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJI NGUvMC80MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNkZDQjMxRjJDMzNGOEU1 NzBEM0NBMDI3NTVCQ0M1MUIyM0VBMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJINGUvMC80 MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD+SaR+NpmyufhfQeMKeKayKU6lGgaV/hRt4sxNtE7Y6Qk80NWoFBybJqNe10 c2Oq7MJCDWV2AJ3RpdFx7kBiYBWTTkq4kkfeDQ9PYG+7bbtp3xN5iNQor86FXP/r edxcHyJCgs0bt82qLPYVkYhWG2myVHA3R8WRIOyHsBcxa7et9lw5lRReGsB+0VG3 w7rHHvqfN44n0TowmSRqDs91CcOXcQKq8EI2JFSYYH8xQTkCPEXmv/8kqy6Jrt5T nbZ75t9EFYSg3Uk8SVw96V/XLOO9E91vRHsbFfQX0cV/48w4m1QgJHBoe5E/A00J dMCaLTPjdFE6CuVisV6Zi70wdQ== -----END CERTIFICATE-----Generated at Fri Jul 25 13:13:54 2025 by rpki-client