$ rpki-client -vvf rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft File: 6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft (raw, json) Hash identifier: r8YkXYR+ZqaHIlDkTTc/Jp8MRpcMLtcpcV5SnoBXpxU= Subject key identifier: 33:68:E9:0C:23:D2:DF:0E:16:49:46:AC:B0:E8:2D:18:E8:C0:BD:D1 Authority key identifier: 6C:86:F7:F0:C4:75:6E:6F:3F:E5:AB:E4:14:E7:E1:91:84:39:1B:E1 Certificate issuer: /CN=6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1 Certificate serial: 4F2C61FDEE36E88AF1E1A8D6E722D4F73AFDDDD0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.cer Subject info access: rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft Manifest number: 023F Signing time: Wed 11 Jun 2025 11:12:01 +0000 Manifest this update: Wed 11 Jun 2025 11:07:01 +0000 Manifest next update: Thu 12 Jun 2025 13:52:01 +0000 Files and hashes: 1: 6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.crl (hash: i9skquNLsjKV2RmMdZtf7Ory1aAdJLWl8yk+47P56k4=) 2: 3133312e3136312e36382e302f32322d3232203d3e20323634343032.roa (hash: s2m/rSCGWtXFgQ0ZfdSHKZmWkAcKxBcAVuMFFal50mU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.crl rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Jun 2025 13:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:2c:61:fd:ee:36:e8:8a:f1:e1:a8:d6:e7:22:d4:f7:3a:fd:dd:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1 Validity Not Before: Jun 11 11:07:01 2025 GMT Not After : Jun 12 13:52:01 2025 GMT Subject: CN=3368E90C23D2DF0E164946ACB0E82D18E8C0BDD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ad:cd:fc:b0:60:ff:8c:47:09:36:b1:58:1e: f8:04:f9:fd:cd:81:a8:13:f9:f8:67:4a:0d:e5:20: e2:a0:1c:35:63:e9:66:61:14:cc:60:14:2c:76:9c: 70:88:7a:19:b1:d0:5e:50:6c:1d:f8:0c:bd:12:8c: fe:fe:cc:63:0d:66:ca:38:01:db:c4:40:cf:54:f7: 31:21:d3:a9:4e:2e:a5:57:0f:d0:66:f5:44:06:35: 3e:82:6d:9f:90:b6:6b:dd:13:cf:d7:ce:5b:f2:ae: 75:22:79:75:c3:6e:3b:2d:17:3e:6f:09:0e:18:f4: 42:ad:6a:3c:d5:b9:bd:96:cf:e6:ac:1a:79:58:25: 06:5c:42:b6:5e:aa:83:97:23:45:f9:30:39:18:91: da:96:1e:e0:3c:1e:db:bc:c3:81:7b:e8:9d:9a:5e: ca:73:38:51:7c:1e:fb:4e:c0:dd:29:3d:56:3a:22: e3:e7:60:41:80:04:ef:93:47:3c:ce:23:70:16:d9: c4:36:5b:96:76:01:d5:3e:4f:00:c1:dc:1e:da:05: 48:52:83:9b:f6:5d:07:9e:cd:d5:61:98:bd:68:14: 0c:26:b7:95:cb:92:ca:2d:61:c3:ee:1f:9d:55:60: 49:66:28:3a:28:33:03:ce:a5:9d:1a:00:bd:0f:2b: 04:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:68:E9:0C:23:D2:DF:0E:16:49:46:AC:B0:E8:2D:18:E8:C0:BD:D1 X509v3 Authority Key Identifier: keyid:6C:86:F7:F0:C4:75:6E:6F:3F:E5:AB:E4:14:E7:E1:91:84:39:1B:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/6C86F7F0C4756E6F3FE5ABE414E7E19184391BE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:16:20:bf:39:c3:bf:eb:e9:c7:08:1f:c8:09:80:03:fc:6e: 08:79:b4:21:25:d0:f4:7f:00:21:fb:47:ef:98:33:05:d3:93: 8d:19:05:c1:f8:04:67:db:ab:8b:db:5f:a7:e9:3f:a9:23:17: c2:f5:7f:60:d8:1e:e0:ec:b8:53:0c:b3:ab:16:90:e9:1d:da: ee:02:1c:f5:9b:d7:ea:7e:67:12:60:b4:8c:6d:e3:f7:03:86: 2c:36:3f:17:0b:11:c4:c0:f2:67:33:23:ef:0c:34:11:00:90: 37:db:a6:9c:68:ea:a2:32:ce:77:8f:42:4c:d5:59:6e:79:c4: 53:ec:44:ce:d0:1f:3e:95:a2:3e:86:91:aa:0e:77:97:c4:85: a9:16:91:33:1b:86:5c:95:23:e4:be:d7:ca:17:dd:a4:36:1c: 76:30:ca:22:8a:ff:c4:a9:50:a1:57:f0:e8:47:95:df:18:a6: aa:5d:fc:f7:f5:5d:56:9a:ad:84:9e:48:c1:c7:7d:04:e2:1b: 77:85:b3:4e:34:23:7e:0a:86:ac:bb:ee:57:73:9a:39:51:b7: 69:68:da:e0:61:4e:b3:f4:f9:6d:3d:0b:12:e0:03:e8:77:9d: 8a:16:53:7a:22:93:75:62:95:2e:26:02:9c:ac:c2:4b:e1:3d: 49:e5:98:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTyxh/e426Irx4ajW5yLU9zr93dAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkM4NkY3RjBDNDc1NkU2RjNGRTVBQkU0MTRFN0UxOTE4 NDM5MUJFMTAeFw0yNTA2MTExMTA3MDFaFw0yNTA2MTIxMzUyMDFaMDMxMTAvBgNV BAMTKDMzNjhFOTBDMjNEMkRGMEUxNjQ5NDZBQ0IwRTgyRDE4RThDMEJERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHrc38sGD/jEcJNrFYHvgE+f3N gagT+fhnSg3lIOKgHDVj6WZhFMxgFCx2nHCIehmx0F5QbB34DL0SjP7+zGMNZso4 AdvEQM9U9zEh06lOLqVXD9Bm9UQGNT6CbZ+QtmvdE8/XzlvyrnUieXXDbjstFz5v CQ4Y9EKtajzVub2Wz+asGnlYJQZcQrZeqoOXI0X5MDkYkdqWHuA8Htu8w4F76J2a XspzOFF8HvtOwN0pPVY6IuPnYEGABO+TRzzOI3AW2cQ2W5Z2AdU+TwDB3B7aBUhS g5v2XQeezdVhmL1oFAwmt5XLksotYcPuH51VYElmKDooMwPOpZ0aAL0PKwTZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUM2jpDCPS3w4WSUassOgtGOjAvdEwHwYDVR0j BBgwFoAUbIb38MR1bm8/5avkFOfhkYQ5G+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUhEN1FyUFBpQmFhV0tMOW5wcXlzS0oyQ1NpM0tLQ0pYRGZTc1RyZUpN SHcvMC82Qzg2RjdGMEM0NzU2RTZGM0ZFNUFCRTQxNEU3RTE5MTg0MzkxQkUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDODZGN0YwQzQ3NTZFNkYz RkU1QUJFNDE0RTdFMTkxODQzOTFCRTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUhEN1FyUFBpQmFhV0tMOW5wcXlzS0oyQ1NpM0tLQ0pYRGZTc1RyZUpNSHcvMC82 Qzg2RjdGMEM0NzU2RTZGM0ZFNUFCRTQxNEU3RTE5MTg0MzkxQkUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaBYgvznDv+vpxwgfyAmAA/xuCHm0ISXQ9H8AIftH75gzBdOTjRkFwfgEZ9ur i9tfp+k/qSMXwvV/YNge4Oy4UwyzqxaQ6R3a7gIc9ZvX6n5nEmC0jG3j9wOGLDY/ FwsRxMDyZzMj7ww0EQCQN9umnGjqojLOd49CTNVZbnnEU+xEztAfPpWiPoaRqg53 l8SFqRaRMxuGXJUj5L7XyhfdpDYcdjDKIor/xKlQoVfw6EeV3ximql389/VdVpqt hJ5Iwcd9BOIbd4WzTjQjfgqGrLvuV3OaOVG3aWja4GFOs/T5bT0LEuAD6HedihZT eiKTdWKVLiYCnKzCS+E9SeWYcQ== -----END CERTIFICATE-----Generated at Wed Jun 11 23:18:50 2025 by rpki-client