$ rpki-client -vvf rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft File: 10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft (raw, json) Hash identifier: qfXbJ8oEJ6oi20HKPpL5I5u8F3mplPkEWa8Gov6EX+o= Subject key identifier: 21:41:3D:94:F8:A0:44:6D:38:BA:19:27:0A:95:24:DF:46:53:1E:BE Authority key identifier: 10:CC:3E:D3:0E:D2:B9:E1:9A:7E:D0:8E:B0:6D:68:83:FE:4A:22:1F Certificate issuer: /CN=10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F Certificate serial: 4F8A6A54BE0E728CD1E4D011115EB866E768F552 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.cer Subject info access: rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft Manifest number: 027C Signing time: Thu 24 Jul 2025 16:39:42 +0000 Manifest this update: Thu 24 Jul 2025 16:34:42 +0000 Manifest next update: Fri 25 Jul 2025 16:57:42 +0000 Files and hashes: 1: 3137302e3234342e3231322e302f32322d3234203d3e20323636353038.roa (hash: Cf2cMmebdvqPZ/KmztmmSY2nBbCIFr1Er8I0Jm6TuIE=) 2: 323830343a333865343a3a2f33322d3438203d3e20323636353038.roa (hash: 7t8yhV0k/bA1AjqvPjiCZxRA/tJx1nCk2/dyeg5pwiU=) 3: 10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.crl (hash: jAUDgFn6/TYHnQXfwlo7Q92uHrwvSH8eiijUFgp8dI8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.crl rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 16:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:8a:6a:54:be:0e:72:8c:d1:e4:d0:11:11:5e:b8:66:e7:68:f5:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F Validity Not Before: Jul 24 16:34:42 2025 GMT Not After : Jul 25 16:57:42 2025 GMT Subject: CN=21413D94F8A0446D38BA19270A9524DF46531EBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:88:5f:1f:b1:f0:fb:a6:6b:89:d3:d4:44:87: 12:e5:17:20:d5:67:6c:ff:5e:2e:9a:1e:81:62:28: 00:c6:df:32:d9:00:c5:32:3f:ac:45:7e:31:a1:e1: 69:89:f7:b5:d7:1e:e3:10:07:10:57:54:0f:c5:2f: 8e:d5:da:27:0d:6d:eb:b5:9a:72:a9:b8:93:2b:72: 23:56:41:65:bb:d6:05:e2:26:ff:d7:b7:65:65:e1: 47:a1:1e:36:57:18:42:4b:dc:67:61:cf:bf:4c:58: cd:26:42:cc:dc:4f:49:4d:f5:83:8d:80:94:e2:d2: ab:29:04:b3:8c:4e:cb:91:e3:b9:a1:d5:bf:fe:82: f9:84:bb:0e:c9:b1:fc:67:b2:25:11:b2:5b:9e:fb: 1f:36:e0:47:10:25:b9:50:8f:19:8d:0c:58:4b:92: 06:b7:56:b9:01:71:ad:1f:b9:ad:b3:97:36:0f:8f: 6a:cf:0c:b4:ac:82:43:63:90:ab:93:46:3d:1a:ce: e1:b4:c8:9f:d3:8f:38:a3:77:21:b6:06:65:7b:13: 01:47:c6:01:68:7b:1d:d4:09:06:5e:cc:fe:dd:34: b4:e3:3c:47:61:68:c4:3b:40:19:bd:4c:77:62:40: bf:95:2b:6b:87:2a:79:bb:b2:be:d4:e0:b2:e5:83: 6b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:41:3D:94:F8:A0:44:6D:38:BA:19:27:0A:95:24:DF:46:53:1E:BE X509v3 Authority Key Identifier: keyid:10:CC:3E:D3:0E:D2:B9:E1:9A:7E:D0:8E:B0:6D:68:83:FE:4A:22:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:11:70:9a:ea:51:07:82:65:a3:4a:19:13:cd:6f:7c:5e:58: 91:d7:f3:63:bb:6f:fd:ce:cb:38:29:38:4a:13:e7:cc:8f:ff: a7:5f:48:60:61:2d:23:36:da:eb:47:e9:f5:a3:21:8c:76:5f: 5b:ef:de:33:02:e6:60:02:61:18:fb:2d:14:78:9c:0a:9c:54: 2d:26:20:a0:45:76:23:de:a9:27:97:99:eb:9d:76:c3:5d:c0: 91:65:47:57:64:2a:71:49:04:40:de:4a:5c:ac:28:42:25:2e: 3f:8e:8e:0f:44:29:a0:eb:45:a8:f2:ce:7d:a1:59:58:2e:ec: da:60:9b:65:7a:53:26:80:c6:74:eb:55:8a:ac:a4:f8:94:3c: 65:41:28:f1:e8:12:19:da:3d:ed:b4:62:cd:cf:08:86:13:ae: 2d:65:c3:16:db:80:4d:77:44:a0:72:46:9c:af:5b:af:0b:bb: 02:b6:9f:3d:b9:bd:a9:4e:7a:84:cd:3e:b2:1d:73:7b:f4:a7: d2:0c:e3:33:4d:39:e5:75:5f:ba:1e:41:4b:b4:e5:d6:4e:f6: 71:a9:eb:68:58:a9:25:be:bc:61:fa:58:bd:de:4f:ce:f4:36: 2f:dd:4d:bf:14:fb:d7:9a:d6:cb:98:78:33:2f:e0:bb:6c:1b: 8a:c0:c9:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUT4pqVL4OcozR5NAREV64Zudo9VIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBDQzNFRDMwRUQyQjlFMTlBN0VEMDhFQjA2RDY4ODNG RTRBMjIxRjAeFw0yNTA3MjQxNjM0NDJaFw0yNTA3MjUxNjU3NDJaMDMxMTAvBgNV BAMTKDIxNDEzRDk0RjhBMDQ0NkQzOEJBMTkyNzBBOTUyNERGNDY1MzFFQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfiF8fsfD7pmuJ09REhxLlFyDV Z2z/Xi6aHoFiKADG3zLZAMUyP6xFfjGh4WmJ97XXHuMQBxBXVA/FL47V2icNbeu1 mnKpuJMrciNWQWW71gXiJv/Xt2Vl4UehHjZXGEJL3Gdhz79MWM0mQszcT0lN9YON gJTi0qspBLOMTsuR47mh1b/+gvmEuw7JsfxnsiURslue+x824EcQJblQjxmNDFhL kga3VrkBca0fua2zlzYPj2rPDLSsgkNjkKuTRj0azuG0yJ/TjzijdyG2BmV7EwFH xgFoex3UCQZezP7dNLTjPEdhaMQ7QBm9THdiQL+VK2uHKnm7sr7U4LLlg2txAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIUE9lPigRG04uhknCpUk30ZTHr4wHwYDVR0j BBgwFoAUEMw+0w7SueGaftCOsG1og/5KIh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN05VVjRYQTZINnZpUWN2NGVMWDhydEd5bnVkSHcycnZkM1dmS0UyZmZF TGIvMS8xMENDM0VEMzBFRDJCOUUxOUE3RUQwOEVCMDZENjg4M0ZFNEEyMjFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwQ0MzRUQzMEVEMkI5RTE5 QTdFRDA4RUIwNkQ2ODgzRkU0QTIyMUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N05VVjRYQTZINnZpUWN2NGVMWDhydEd5bnVkSHcycnZkM1dmS0UyZmZFTGIvMS8x MENDM0VEMzBFRDJCOUUxOUE3RUQwOEVCMDZENjg4M0ZFNEEyMjFGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVxFwmupRB4Jlo0oZE81vfF5YkdfzY7tv/c7LOCk4ShPnzI//p19IYGEtIzba 60fp9aMhjHZfW+/eMwLmYAJhGPstFHicCpxULSYgoEV2I96pJ5eZ6512w13AkWVH V2QqcUkEQN5KXKwoQiUuP46OD0QpoOtFqPLOfaFZWC7s2mCbZXpTJoDGdOtViqyk +JQ8ZUEo8egSGdo97bRizc8IhhOuLWXDFtuATXdEoHJGnK9brwu7ArafPbm9qU56 hM0+sh1ze/Sn0gzjM0055XVfuh5BS7Tl1k72canraFipJb68YfpYvd5PzvQ2L91N vxT715rWy5h4My/gu2wbisDJCg== -----END CERTIFICATE-----Generated at Fri Jul 25 00:22:38 2025 by rpki-client