$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft File: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft (raw, json) Hash identifier: LZ45vQK9NW+JjDUzwUrOmUuuETuHYCFciUQw6r7jYKA= Subject key identifier: AD:CE:22:9E:98:AB:1E:5D:32:D5:65:7C:97:DF:B6:A8:2E:CD:94:3C Authority key identifier: 43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 Certificate issuer: /CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Certificate serial: 623C6B76F4824BDDC72117BDE417B185E4133562 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject info access: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft Manifest number: D9 Signing time: Wed 04 Jun 2025 09:02:19 +0000 Manifest this update: Wed 04 Jun 2025 08:57:19 +0000 Manifest next update: Thu 05 Jun 2025 09:04:19 +0000 Files and hashes: 1: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (hash: uIh+Oz5wiODIMg7enOUna4NRPwYVYruwibBcWxdlN6k=) 2: 436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl (hash: odbB3Ro2IgpD2q48SWwJ7lSWxDhOy4V8domp4Q7TGPM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Jun 2025 09:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:3c:6b:76:f4:82:4b:dd:c7:21:17:bd:e4:17:b1:85:e4:13:35:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=436FCB31F2C33F8E570D3CA02755BCC51B23EA01 Validity Not Before: Jun 4 08:57:19 2025 GMT Not After : Jun 5 09:04:19 2025 GMT Subject: CN=ADCE229E98AB1E5D32D5657C97DFB6A82ECD943C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:78:93:ea:1a:55:a6:fc:10:67:ac:07:f6:bc: be:b2:c2:ee:03:23:b3:08:74:ef:75:02:1d:df:12: b8:f0:3a:5f:f5:ce:29:83:c3:36:39:c1:69:b8:46: 87:8c:06:d2:14:4b:e1:ae:07:ee:9f:d8:2f:c2:cb: 9c:43:6a:5f:d2:dd:78:d9:6f:0f:91:c3:c0:3d:c3: 5f:be:a2:dd:fe:ef:e0:b1:61:99:d2:88:14:7c:31: eb:b4:3e:0a:80:9c:ab:c5:50:95:af:aa:ea:92:76: b4:80:7a:fe:49:c1:db:d2:b6:aa:6e:33:8e:ff:1a: 05:40:b2:ae:b9:ed:8e:db:6c:20:9e:11:ff:4b:a6: 06:09:a7:98:35:17:a1:88:e0:85:8e:29:cc:4e:4f: 73:1c:3c:61:c4:b0:89:e3:6e:dc:6a:fc:89:5d:9c: 5d:52:ba:fb:92:7b:d0:5f:ca:49:ca:f8:e9:08:72: b6:86:5e:20:96:f3:ad:f4:7d:67:c3:87:fb:5d:23: 09:08:c0:9d:44:a1:78:20:bc:ff:38:3c:10:5f:65: e5:30:24:ec:c4:92:f8:d8:69:b0:fa:aa:ff:bc:72: af:08:9a:67:34:c9:37:9e:24:2c:77:88:1d:c3:36: 8d:1a:80:68:5b:1f:c3:dd:c8:2a:c3:31:ac:ca:f4: 7e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CE:22:9E:98:AB:1E:5D:32:D5:65:7C:97:DF:B6:A8:2E:CD:94:3C X509v3 Authority Key Identifier: keyid:43:6F:CB:31:F2:C3:3F:8E:57:0D:3C:A0:27:55:BC:C5:1B:23:EA:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/0/436FCB31F2C33F8E570D3CA02755BCC51B23EA01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:61:97:b6:55:b3:ac:21:4d:24:10:8c:00:90:51:7a:5d:67: a4:6d:00:64:cd:66:e9:da:d5:6a:30:f4:62:81:eb:53:1a:c6: 65:0d:3f:a9:b3:bf:95:a2:7a:1f:b1:06:ea:be:dd:c1:85:a9: 6d:f6:d4:52:2f:f2:ad:0d:91:3e:25:76:b3:54:a0:f9:0a:5e: 70:c5:1c:41:c2:00:6f:f5:8d:2a:b5:1a:83:c6:fb:af:ee:a2: 4c:d3:e7:78:a8:04:bc:8d:f5:e2:d3:05:77:13:29:ce:1f:7e: 28:e1:29:47:2e:3a:19:66:de:5e:73:d8:68:eb:5e:01:e1:8a: 17:96:49:52:fc:b3:8f:c7:51:f9:6f:ef:e8:2a:fa:ea:37:90: 3a:95:93:3f:6f:b5:99:e1:c6:d1:34:54:8b:d9:bd:49:ff:f6: 85:b7:bd:1e:2f:5c:e6:12:85:f0:33:5a:1d:c8:ef:dc:03:1e: 67:b3:04:de:e3:bc:b7:8a:e4:e6:4e:5e:3d:8d:16:d4:ea:ee: c3:64:b8:49:3c:61:07:ee:87:a1:ef:41:e8:07:05:d3:4a:6f: 9b:9a:8e:0e:4b:a0:65:2b:cf:29:bd:79:94:f4:29:c3:9f:6a: 33:cf:ee:bc:2a:40:18:96:ad:99:8c:8b:c4:ed:32:ea:dc:09: 1f:aa:20:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYjxrdvSCS93HIRe95BexheQTNWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM2RkNCMzFGMkMzM0Y4RTU3MEQzQ0EwMjc1NUJDQzUx QjIzRUEwMTAeFw0yNTA2MDQwODU3MTlaFw0yNTA2MDUwOTA0MTlaMDMxMTAvBgNV BAMTKEFEQ0UyMjlFOThBQjFFNUQzMkQ1NjU3Qzk3REZCNkE4MkVDRDk0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDneJPqGlWm/BBnrAf2vL6ywu4D I7MIdO91Ah3fErjwOl/1zimDwzY5wWm4RoeMBtIUS+GuB+6f2C/Cy5xDal/S3XjZ bw+Rw8A9w1++ot3+7+CxYZnSiBR8Meu0PgqAnKvFUJWvquqSdrSAev5JwdvStqpu M47/GgVAsq657Y7bbCCeEf9LpgYJp5g1F6GI4IWOKcxOT3McPGHEsInjbtxq/Ild nF1SuvuSe9BfyknK+OkIcraGXiCW8630fWfDh/tdIwkIwJ1EoXggvP84PBBfZeUw JOzEkvjYabD6qv+8cq8Immc0yTeeJCx3iB3DNo0agGhbH8PdyCrDMazK9H5FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrc4inpirHl0y1WV8l9+2qC7NlDwwHwYDVR0j BBgwFoAUQ2/LMfLDP45XDTygJ1W8xRsj6gEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJI NGUvMC80MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzNkZDQjMxRjJDMzNGOEU1 NzBEM0NBMDI3NTVCQ0M1MUIyM0VBMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0pmZGt0Z0M5UUdtU0x1ZmsxRnVwMXpuQ2V2cGkzQXJzcVp3TERxTlJINGUvMC80 MzZGQ0IzMUYyQzMzRjhFNTcwRDNDQTAyNzU1QkNDNTFCMjNFQTAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAGGXtlWzrCFNJBCMAJBRel1npG0AZM1m6drVajD0YoHrUxrGZQ0/qbO/laJ6 H7EG6r7dwYWpbfbUUi/yrQ2RPiV2s1Sg+QpecMUcQcIAb/WNKrUag8b7r+6iTNPn eKgEvI314tMFdxMpzh9+KOEpRy46GWbeXnPYaOteAeGKF5ZJUvyzj8dR+W/v6Cr6 6jeQOpWTP2+1meHG0TRUi9m9Sf/2hbe9Hi9c5hKF8DNaHcjv3AMeZ7ME3uO8t4rk 5k5ePY0W1Oruw2S4STxhB+6Hoe9B6AcF00pvm5qODkugZSvPKb15lPQpw59qM8/u vCpAGJatmYyLxO0y6twJH6ogLw== -----END CERTIFICATE-----Generated at Wed Jun 4 12:32:41 2025 by rpki-client