$ rpki-client -vvf rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft File: 0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft (raw, json) Hash identifier: DKi9iRtbiE5ttVjm7aiddHhlE4Y8gAOsYNK4aOBmDRs= Subject key identifier: 92:ED:29:22:96:02:62:78:5A:25:06:39:31:BA:33:43:E8:1E:05:98 Authority key identifier: 06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A Certificate issuer: /CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A Certificate serial: 41F663CFFCED64A9CA7F45C00466FEBD7A5C4484 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer Subject info access: rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft Manifest number: 023F Signing time: Fri 06 Jun 2025 15:07:42 +0000 Manifest this update: Fri 06 Jun 2025 15:02:42 +0000 Manifest next update: Sat 07 Jun 2025 15:57:42 +0000 Files and hashes: 1: 34352e3138312e3139322e302f32322d3233203d3e20323639323033.roa (hash: RTprnNg5aQfyb92AvIkxl/fHyWTeQKd0ma+1zK6ILDA=) 2: 0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl (hash: EoP4K/ka2zlyGd2tputQ5W7JCH5L08eL+VjEm4mbMXQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 15:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f6:63:cf:fc:ed:64:a9:ca:7f:45:c0:04:66:fe:bd:7a:5c:44:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0685BB6377E43823F6EAF7CD0EE04B7B508BB43A Validity Not Before: Jun 6 15:02:42 2025 GMT Not After : Jun 7 15:57:42 2025 GMT Subject: CN=92ED2922960262785A25063931BA3343E81E0598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:af:94:07:49:0c:9c:0a:d5:93:87:04:5e: b7:af:c0:1e:05:9d:a4:ad:49:cb:de:0a:0d:29:c0: a8:68:42:52:60:54:47:b2:25:0e:bc:02:03:7d:c4: a3:13:06:a6:f9:9e:3c:93:56:2a:78:b7:f6:cd:b3: 18:52:b5:10:66:36:be:9f:9a:28:d5:d0:0a:e9:ef: 4f:e3:b1:dc:ba:6c:d7:52:fd:87:b5:33:1b:0f:47: 29:c1:26:1b:3b:62:a3:1e:1a:fe:2a:f8:57:05:a8: 93:d5:99:80:4a:e9:08:69:72:c0:ad:fb:1e:67:b8: 67:05:25:6a:ce:93:6f:d0:f8:58:cf:ab:8e:ef:d3: 43:84:84:5f:56:50:cd:c2:47:27:44:41:1a:94:38: de:3a:b2:25:45:6f:31:f7:a6:f9:91:6d:f6:ec:11: 76:bc:ae:cb:16:24:08:67:63:33:0a:e8:20:f4:d8: 87:b1:24:7a:93:1f:87:f4:ec:c7:0c:ce:d9:89:0c: 53:1e:9f:98:25:ea:bf:19:cb:e0:4f:05:21:5e:30: 18:ac:0c:84:7a:4c:d5:3d:c9:57:a8:e1:71:56:57: 01:d3:0f:e9:c9:bf:3b:bf:6e:bf:27:46:71:b0:73: 42:48:82:2a:5c:0c:9a:e3:3b:99:da:22:49:e9:85: 97:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:ED:29:22:96:02:62:78:5A:25:06:39:31:BA:33:43:E8:1E:05:98 X509v3 Authority Key Identifier: keyid:06:85:BB:63:77:E4:38:23:F6:EA:F7:CD:0E:E0:4B:7B:50:8B:B4:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/65KNGrKHwK7d712EP4UZ8oP5osGZd227bmg4G8RW5FHS/1/0685BB6377E43823F6EAF7CD0EE04B7B508BB43A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:95:ca:94:40:4a:ad:95:bd:c9:5e:96:2c:44:3e:a4:16:49: ad:d7:bc:32:10:0d:ae:37:07:34:9b:7e:cd:99:9e:de:4f:48: ec:22:27:83:04:bc:d8:84:2a:11:e3:f9:a3:0d:96:c0:9f:01: 20:aa:8a:fa:03:04:00:2d:ab:90:c2:f9:53:4d:c2:14:d4:64: 07:c3:b5:22:77:37:75:1e:cc:6e:69:59:77:d3:5e:87:5e:f7: dc:0f:8d:f2:0f:54:47:a2:fb:4e:89:fa:ce:a1:ce:c0:3e:ab: 6a:74:c5:65:87:02:e7:1d:9d:e4:51:21:9f:e9:41:4c:5d:a6: 5f:7f:3e:b0:8f:d6:e5:7f:ad:17:7b:b6:36:62:98:8d:83:f7: 1a:70:75:0c:5c:db:77:98:2d:01:30:69:a6:e9:b3:18:9b:ee: ae:ea:b4:9b:79:3f:f1:64:2d:85:cf:69:d4:e3:2b:01:ab:9b: a6:ec:40:cf:4a:39:9a:f9:f5:34:3b:81:0b:41:e0:42:4d:63: 47:74:9b:cf:ac:4f:1b:c0:30:06:e8:20:cd:70:70:84:57:49: 3b:06:b7:14:e2:fd:6b:43:1f:c2:ee:51:5d:09:05:1a:16:d9: 93:0f:f0:45:af:70:86:8f:f9:d1:11:c9:82:27:df:d0:ca:5a: ed:33:eb:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQfZjz/ztZKnKf0XABGb+vXpcRIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4NUJCNjM3N0U0MzgyM0Y2RUFGN0NEMEVFMDRCN0I1 MDhCQjQzQTAeFw0yNTA2MDYxNTAyNDJaFw0yNTA2MDcxNTU3NDJaMDMxMTAvBgNV BAMTKDkyRUQyOTIyOTYwMjYyNzg1QTI1MDYzOTMxQkEzMzQzRTgxRTA1OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFEa+UB0kMnArVk4cEXrevwB4F naStScveCg0pwKhoQlJgVEeyJQ68AgN9xKMTBqb5njyTVip4t/bNsxhStRBmNr6f mijV0Arp70/jsdy6bNdS/Ye1MxsPRynBJhs7YqMeGv4q+FcFqJPVmYBK6QhpcsCt +x5nuGcFJWrOk2/Q+FjPq47v00OEhF9WUM3CRydEQRqUON46siVFbzH3pvmRbfbs EXa8rssWJAhnYzMK6CD02IexJHqTH4f07McMztmJDFMen5gl6r8Zy+BPBSFeMBis DIR6TNU9yVeo4XFWVwHTD+nJvzu/br8nRnGwc0JIgipcDJrjO5naIknphZeHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUku0pIpYCYnhaJQY5MbozQ+geBZgwHwYDVR0j BBgwFoAUBoW7Y3fkOCP26vfNDuBLe1CLtDowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjVLTkdyS0h3SzdkNzEyRVA0VVo4b1A1b3NHWmQyMjdibWc0RzhSVzVG SFMvMS8wNjg1QkI2Mzc3RTQzODIzRjZFQUY3Q0QwRUUwNEI3QjUwOEJCNDNBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODVCQjYzNzdFNDM4MjNG NkVBRjdDRDBFRTA0QjdCNTA4QkI0M0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NjVLTkdyS0h3SzdkNzEyRVA0VVo4b1A1b3NHWmQyMjdibWc0RzhSVzVGSFMvMS8w Njg1QkI2Mzc3RTQzODIzRjZFQUY3Q0QwRUUwNEI3QjUwOEJCNDNBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkpXKlEBKrZW9yV6WLEQ+pBZJrde8MhANrjcHNJt+zZme3k9I7CIngwS82IQq EeP5ow2WwJ8BIKqK+gMEAC2rkML5U03CFNRkB8O1Inc3dR7MbmlZd9Neh1733A+N 8g9UR6L7Ton6zqHOwD6ranTFZYcC5x2d5FEhn+lBTF2mX38+sI/W5X+tF3u2NmKY jYP3GnB1DFzbd5gtATBppumzGJvuruq0m3k/8WQthc9p1OMrAaubpuxAz0o5mvn1 NDuBC0HgQk1jR3Sbz6xPG8AwBuggzXBwhFdJOwa3FOL9a0Mfwu5RXQkFGhbZkw/w Ra9who/50RHJgiff0Mpa7TPrdA== -----END CERTIFICATE-----Generated at Sat Jun 7 09:43:10 2025 by rpki-client