$ rpki-client -vvf rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft File: 114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft (raw, json) Hash identifier: raRq8q0Vl4mdv41JREVUwaI33xy55VZIKaf75mPTkes= Subject key identifier: 49:62:13:29:DF:90:55:45:96:73:06:30:51:0D:C8:53:D8:36:71:F2 Authority key identifier: 11:4C:34:E7:02:D6:B3:C7:8D:B6:AD:0C:8B:6A:12:A4:F6:C9:62:F2 Certificate issuer: /CN=114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2 Certificate serial: 70AF8039A61C6B9D29BD812A4D9B7257F04E6243 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft Manifest number: D6 Signing time: Sat 26 Jul 2025 09:20:44 +0000 Manifest this update: Sat 26 Jul 2025 09:15:44 +0000 Manifest next update: Sun 27 Jul 2025 12:38:44 +0000 Files and hashes: 1: 323830343a383534633a3a2f33322d313238203d3e20323732353730.roa (hash: /jjNTYdHgGu54/KsbvfYxBSxmVomJOu/7haHE2jkFo8=) 2: 114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.crl (hash: 1gDHm6RtZ5X3ztWg2La5OB8GLM8gpvOfylrKS8E5ysY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.crl rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 12:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:af:80:39:a6:1c:6b:9d:29:bd:81:2a:4d:9b:72:57:f0:4e:62:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2 Validity Not Before: Jul 26 09:15:44 2025 GMT Not After : Jul 27 12:38:44 2025 GMT Subject: CN=49621329DF90554596730630510DC853D83671F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a2:eb:30:30:67:8f:ac:93:1b:0f:b2:51:17: a0:a1:9b:d4:08:40:f8:38:7d:b3:1d:2b:fd:60:ed: 12:d0:14:2a:25:b0:f7:7e:e6:6f:73:67:8b:b7:21: a8:a9:ce:21:53:e5:5a:98:1e:8f:94:3f:ee:e1:98: 9d:65:6d:b3:15:37:a1:34:f1:f2:7b:10:11:33:16: 84:2a:d6:00:b1:1e:34:d9:c4:8e:7d:e9:61:02:6c: 2d:3e:05:ab:d6:30:5b:bc:07:42:62:54:24:75:78: 58:4d:1e:72:b2:1a:fa:1a:84:1c:da:11:90:fe:eb: 6b:95:68:a1:6e:36:31:c4:f0:4a:38:cb:9e:88:c1: d1:2a:39:54:e1:c2:75:7e:eb:7c:4b:29:ee:a9:2f: 2f:88:9b:2d:50:f4:e1:5e:ea:85:ee:ab:4a:5d:75: fe:12:a8:c5:66:36:1f:5a:58:72:72:27:2f:4f:2a: 24:36:e8:5a:0c:db:eb:45:d4:0e:eb:63:79:b1:5b: 00:71:6a:e2:39:01:34:64:15:38:8d:cd:5d:a8:9a: a9:09:07:96:a6:82:fc:b8:d6:56:56:1e:4e:64:0b: 5e:dd:b7:b3:b9:37:b6:9e:a4:4c:57:73:33:51:59: 6a:29:ef:a6:90:1d:08:81:cd:b1:1b:c4:49:af:66: 7d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:62:13:29:DF:90:55:45:96:73:06:30:51:0D:C8:53:D8:36:71:F2 X509v3 Authority Key Identifier: keyid:11:4C:34:E7:02:D6:B3:C7:8D:B6:AD:0C:8B:6A:12:A4:F6:C9:62:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3QVXf4hxGFcmYty4H668eWrqugg8VrkD3sDAH9qpPoxX/1/114C34E702D6B3C78DB6AD0C8B6A12A4F6C962F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:8f:cc:eb:ea:ee:ff:c3:1c:cb:f5:39:1a:00:1e:e5:dc:dd: 9a:0c:57:bc:fe:44:59:a1:ce:36:7b:f6:99:1a:5a:06:31:f6: 15:0a:c4:4a:b2:86:29:f5:fe:7a:13:3b:0d:81:52:9e:99:c9: 27:13:7e:90:45:c8:ae:c8:95:cc:13:34:21:ae:e8:0c:69:61: 8e:d8:ef:10:00:69:13:4a:5e:14:1d:0b:d8:60:3e:3f:93:88: 0b:45:2c:b4:9e:a9:ab:af:ba:88:89:85:1f:e7:bc:80:72:5b: 36:e1:b4:38:78:99:da:28:df:fa:87:68:a5:bd:5b:c6:63:93: a7:aa:57:b0:a3:ea:15:f2:dc:ab:e6:a0:3b:a2:b1:f4:0d:e9: 3c:84:71:b8:84:76:6e:45:96:a2:6f:54:8c:24:69:8c:b9:c9: a5:6b:4e:d3:cb:c1:79:8f:cf:17:01:fc:8a:79:4a:b3:f6:6d: 07:66:b1:98:14:8a:8b:12:5d:e8:4f:f6:e0:6c:d1:fa:d3:fa: 60:31:80:19:ea:e4:5c:48:1d:28:7f:64:7e:29:a9:90:5c:d0: d0:28:7d:57:e6:00:8f:47:dc:ad:a5:97:d3:4b:4b:33:90:2e: 10:96:66:5e:6c:69:d8:bc:9e:e0:2d:42:9c:b3:5d:af:f5:8b: c4:c7:d3:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcK+AOaYca50pvYEqTZtyV/BOYkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0QzM0RTcwMkQ2QjNDNzhEQjZBRDBDOEI2QTEyQTRG NkM5NjJGMjAeFw0yNTA3MjYwOTE1NDRaFw0yNTA3MjcxMjM4NDRaMDMxMTAvBgNV BAMTKDQ5NjIxMzI5REY5MDU1NDU5NjczMDYzMDUxMERDODUzRDgzNjcxRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvouswMGePrJMbD7JRF6Chm9QI QPg4fbMdK/1g7RLQFColsPd+5m9zZ4u3IaipziFT5VqYHo+UP+7hmJ1lbbMVN6E0 8fJ7EBEzFoQq1gCxHjTZxI596WECbC0+BavWMFu8B0JiVCR1eFhNHnKyGvoahBza EZD+62uVaKFuNjHE8Eo4y56IwdEqOVThwnV+63xLKe6pLy+Imy1Q9OFe6oXuq0pd df4SqMVmNh9aWHJyJy9PKiQ26FoM2+tF1A7rY3mxWwBxauI5ATRkFTiNzV2omqkJ B5amgvy41lZWHk5kC17dt7O5N7aepExXczNRWWop76aQHQiBzbEbxEmvZn05AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSWITKd+QVUWWcwYwUQ3IU9g2cfIwHwYDVR0j BBgwFoAUEUw05wLWs8eNtq0Mi2oSpPbJYvIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1FWWGY0aHhHRmNtWXR5NEg2NjhlV3JxdWdnOFZya0Qzc0RBSDlxcFBv eFgvMS8xMTRDMzRFNzAyRDZCM0M3OERCNkFEMEM4QjZBMTJBNEY2Qzk2MkYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExNEMzNEU3MDJENkIzQzc4 REI2QUQwQzhCNkExMkE0RjZDOTYyRjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1FWWGY0aHhHRmNtWXR5NEg2NjhlV3JxdWdnOFZya0Qzc0RBSDlxcFBveFgvMS8x MTRDMzRFNzAyRDZCM0M3OERCNkFEMEM4QjZBMTJBNEY2Qzk2MkYyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkY/M6+ru/8Mcy/U5GgAe5dzdmgxXvP5EWaHONnv2mRpaBjH2FQrESrKGKfX+ ehM7DYFSnpnJJxN+kEXIrsiVzBM0Ia7oDGlhjtjvEABpE0peFB0L2GA+P5OIC0Us tJ6pq6+6iImFH+e8gHJbNuG0OHiZ2ijf+odopb1bxmOTp6pXsKPqFfLcq+agO6Kx 9A3pPIRxuIR2bkWWom9UjCRpjLnJpWtO08vBeY/PFwH8inlKs/ZtB2axmBSKixJd 6E/24GzR+tP6YDGAGerkXEgdKH9kfimpkFzQ0Ch9V+YAj0fcraWX00tLM5AuEJZm Xmxp2Lye4C1CnLNdr/WLxMfTzQ== -----END CERTIFICATE-----Generated at Sat Jul 26 12:10:41 2025 by rpki-client