$ rpki-client -vvf rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft File: 6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft (raw, json) Hash identifier: jvb0Ylq6BbfEg3hBTrgQrRDyo4Xqc83po4p6CatTOcg= Subject key identifier: 86:BE:2C:71:66:B8:AD:5D:2D:EE:77:21:F5:03:DB:60:67:70:C3:7C Authority key identifier: 6A:0F:81:CD:4B:DD:AA:53:C1:B0:93:1E:51:E8:B1:59:E0:2A:5C:D1 Certificate issuer: /CN=6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1 Certificate serial: 617567217B9726BAFEF14A8A2862840045188A67 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer Subject info access: rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft Manifest number: 0233 Signing time: Tue 03 Jun 2025 19:41:54 +0000 Manifest this update: Tue 03 Jun 2025 19:36:54 +0000 Manifest next update: Wed 04 Jun 2025 22:38:54 +0000 Files and hashes: 1: 3137372e38342e36302e302f32322d3234203d3e20323633353136.roa (hash: 3aQlpVz1BWbgEZVwNQP+yOlhzxrLmq7PFqy4POInAyo=) 2: 3230302e392e3132332e302f32342d3234203d3e20323633353136.roa (hash: DKN2JGdX7cSetzoeLCTIR74I/hbswzmppmSPlP4c0pE=) 3: 323830343a313331633a3a2f33322d3438203d3e20323633353136.roa (hash: Txzy0D6VyLSsV0Yx//pRf6nImoKlaLweLeqk9lvWkoo=) 4: 6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl (hash: GCt/aRJyIlhK+YWGr/XwxXc6cMbEHG4pMHp4hfB6pbI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Jun 2025 22:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:75:67:21:7b:97:26:ba:fe:f1:4a:8a:28:62:84:00:45:18:8a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1 Validity Not Before: Jun 3 19:36:54 2025 GMT Not After : Jun 4 22:38:54 2025 GMT Subject: CN=86BE2C7166B8AD5D2DEE7721F503DB606770C37C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:df:23:97:71:78:62:85:c0:26:dd:2d:76: 6c:77:0f:f4:1d:c2:f8:6e:24:45:50:34:d4:01:e3: d5:80:f8:d0:53:19:33:06:07:84:db:d1:04:92:af: a3:a1:8f:a7:fa:ae:c1:08:ea:4f:40:22:70:99:04: fc:ad:8f:e3:2c:8e:dc:6d:f3:28:15:0a:29:f4:c6: 7a:27:0a:0c:d5:b1:52:0c:e2:1c:8b:ff:8d:f8:df: 12:01:11:05:6f:24:7f:78:07:52:60:d5:d7:f8:f9: 9e:30:58:7e:46:50:47:f7:b0:c6:91:44:81:c2:7e: 3c:bf:fc:ca:dd:19:2f:e7:1c:ae:61:f4:3e:f0:c8: f2:16:53:80:5e:f9:36:8e:bb:ae:99:1e:99:53:ea: ff:e2:69:09:b9:9a:8a:97:f0:b4:30:50:3c:6c:14: 85:61:cb:41:1c:fb:50:19:5c:02:8a:1a:de:48:1e: e5:3e:d0:99:f6:fb:13:4f:ae:12:83:3a:5c:0c:fc: af:41:02:39:ba:84:96:0e:e8:72:00:c0:d9:9c:ce: a9:79:72:27:95:d6:5f:75:86:d2:dd:14:69:ac:af: c5:91:6f:a2:83:29:53:71:2c:3c:96:75:9f:a5:91: 23:85:1c:ea:da:98:d9:5a:db:d8:15:b9:d9:76:1e: db:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BE:2C:71:66:B8:AD:5D:2D:EE:77:21:F5:03:DB:60:67:70:C3:7C X509v3 Authority Key Identifier: keyid:6A:0F:81:CD:4B:DD:AA:53:C1:B0:93:1E:51:E8:B1:59:E0:2A:5C:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3m69njKPmDVzoqWNJse1XMmuaqcFM8F5xqMGR8BZr4fo/1/6A0F81CD4BDDAA53C1B0931E51E8B159E02A5CD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:bd:e8:b6:f0:c2:c5:e0:6b:c9:33:ca:6c:16:e1:ec:c8:ce: 55:1d:12:77:78:04:cc:7e:71:39:6b:81:58:c7:2d:e9:5d:30: b8:93:f8:29:b6:37:c3:bd:0b:89:f7:d3:28:fb:f8:26:2c:9c: 76:9e:73:4e:24:d9:b8:d4:54:8e:1b:23:fa:78:4e:32:5c:4b: 2e:74:65:0e:e0:24:33:9d:f0:69:35:bb:1f:09:b1:59:5d:11: e8:f8:9b:61:09:ed:4b:6b:34:6d:11:32:b2:e0:b4:bf:e1:bd: 13:08:75:0e:62:e4:12:0c:11:43:60:9b:de:d2:ba:7a:93:0f: d0:2e:91:d6:bc:b2:be:95:98:fa:00:cb:90:89:d6:fc:9b:88: a9:85:cf:88:28:f1:ae:dd:3e:cb:3d:e0:d5:99:ad:8c:41:ce: df:88:d0:2b:8e:86:d8:48:fd:64:6f:27:5f:47:c0:a2:d6:56: 08:24:a3:d8:03:a5:01:53:21:ef:3e:6e:e2:03:97:c4:15:c7: ea:9f:23:ae:df:b3:2e:5f:a0:ef:df:1d:c8:9e:6a:19:cc:ee: 7e:32:dd:fd:1d:94:a7:76:ad:d3:17:68:9b:90:85:ed:66:5f: aa:9b:38:2d:11:f9:b6:bd:47:df:07:81:22:65:ee:ae:76:1e: 6b:52:26:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYXVnIXuXJrr+8UqKKGKEAEUYimcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEwRjgxQ0Q0QkREQUE1M0MxQjA5MzFFNTFFOEIxNTlF MDJBNUNEMTAeFw0yNTA2MDMxOTM2NTRaFw0yNTA2MDQyMjM4NTRaMDMxMTAvBgNV BAMTKDg2QkUyQzcxNjZCOEFENUQyREVFNzcyMUY1MDNEQjYwNjc3MEMzN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtYN8jl3F4YoXAJt0tdmx3D/Qd wvhuJEVQNNQB49WA+NBTGTMGB4Tb0QSSr6Ohj6f6rsEI6k9AInCZBPytj+Msjtxt 8ygVCin0xnonCgzVsVIM4hyL/4343xIBEQVvJH94B1Jg1df4+Z4wWH5GUEf3sMaR RIHCfjy//MrdGS/nHK5h9D7wyPIWU4Be+TaOu66ZHplT6v/iaQm5moqX8LQwUDxs FIVhy0Ec+1AZXAKKGt5IHuU+0Jn2+xNPrhKDOlwM/K9BAjm6hJYO6HIAwNmczql5 cieV1l91htLdFGmsr8WRb6KDKVNxLDyWdZ+lkSOFHOramNla29gVudl2HtuhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhr4scWa4rV0t7nch9QPbYGdww3wwHwYDVR0j BBgwFoAUag+BzUvdqlPBsJMeUeixWeAqXNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM202OW5qS1BtRFZ6b3FXTkpzZTFYTW11YXFjRk04RjV4cU1HUjhCWnI0 Zm8vMS82QTBGODFDRDRCRERBQTUzQzFCMDkzMUU1MUU4QjE1OUUwMkE1Q0QxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBMEY4MUNENEJEREFBNTND MUIwOTMxRTUxRThCMTU5RTAyQTVDRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M202OW5qS1BtRFZ6b3FXTkpzZTFYTW11YXFjRk04RjV4cU1HUjhCWnI0Zm8vMS82 QTBGODFDRDRCRERBQTUzQzFCMDkzMUU1MUU4QjE1OUUwMkE1Q0QxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHb3otvDCxeBryTPKbBbh7MjOVR0Sd3gEzH5xOWuBWMct6V0wuJP4KbY3w70L iffTKPv4Jiycdp5zTiTZuNRUjhsj+nhOMlxLLnRlDuAkM53waTW7HwmxWV0R6Pib YQntS2s0bREysuC0v+G9Ewh1DmLkEgwRQ2Cb3tK6epMP0C6R1ryyvpWY+gDLkInW /JuIqYXPiCjxrt0+yz3g1ZmtjEHO34jQK46G2Ej9ZG8nX0fAotZWCCSj2AOlAVMh 7z5u4gOXxBXH6p8jrt+zLl+g798dyJ5qGczufjLd/R2Up3at0xdom5CF7WZfqps4 LRH5tr1H3weBImXurnYea1Im9g== -----END CERTIFICATE-----Generated at Wed Jun 4 11:32:34 2025 by rpki-client