$ rpki-client -vvf rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.mft File: 443681E3ADAB56666689B0FFC0971A173CEEB409.mft (raw, json) Hash identifier: vwzYnxyz3pBNJ5bocBM9MwYxtcgpf8Ma+ApU2pVfDLg= Subject key identifier: BF:21:EB:E2:21:14:74:D1:F1:92:EF:29:DE:C9:2D:21:B8:8A:5D:70 Authority key identifier: 44:36:81:E3:AD:AB:56:66:66:89:B0:FF:C0:97:1A:17:3C:EE:B4:09 Certificate issuer: /CN=443681E3ADAB56666689B0FFC0971A173CEEB409 Certificate serial: 6D8E220349E04C29D4FA88A5A63E1ED527C28259 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer Subject info access: rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.mft Manifest number: 21 Signing time: Fri 04 Jul 2025 18:03:13 +0000 Manifest this update: Fri 04 Jul 2025 17:58:13 +0000 Manifest next update: Sat 05 Jul 2025 22:02:13 +0000 Files and hashes: 1: 443681E3ADAB56666689B0FFC0971A173CEEB409.crl (hash: yff8WBXpP63+PpJVR6Fx0qi6wYgkUyU1Ci9oBC0O0+0=) 2: 34352e3233372e35372e302f32342d3234203d3e20323638333030.roa (hash: 0G6Rc9933/qHstSZKBeJRFPJUt45FqB9MIGYMGctzpo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.crl rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Jul 2025 22:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:8e:22:03:49:e0:4c:29:d4:fa:88:a5:a6:3e:1e:d5:27:c2:82:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=443681E3ADAB56666689B0FFC0971A173CEEB409 Validity Not Before: Jul 4 17:58:13 2025 GMT Not After : Jul 5 22:02:13 2025 GMT Subject: CN=BF21EBE2211474D1F192EF29DEC92D21B88A5D70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8f:73:87:f2:b0:8c:82:a8:1c:c0:ed:de:b2: 7c:df:6d:66:0f:14:1d:d9:65:d4:a5:bc:f8:50:aa: 0f:e7:87:74:19:46:28:35:1a:bc:ba:78:68:ac:e2: f9:74:0c:58:25:f6:4a:98:2c:2e:c3:3e:dc:59:b1: d2:a7:7c:e7:00:60:ba:00:e3:1a:35:7a:42:7e:87: 5f:71:f9:f5:22:bb:e6:e3:2e:cc:40:83:8f:67:b1: b0:65:45:40:f0:c4:57:1b:5f:37:63:10:cf:a9:af: 5b:ac:51:91:59:36:34:47:75:7f:e8:96:5f:a8:f5: 73:bf:26:6f:fe:dd:f6:7b:dc:25:22:8d:72:9d:ea: 43:9f:d1:9f:26:de:91:e4:5f:1e:d5:40:ca:95:f1: c2:5e:19:26:1f:73:a2:a2:d8:76:5a:0a:4a:45:a0: 2a:a5:ce:3c:4f:aa:e1:8c:5b:70:92:e6:cb:d3:5e: 51:36:86:82:84:a3:5a:0a:e9:c4:3f:a2:e0:3c:5f: 38:97:ef:32:bf:c5:37:2c:07:d1:0f:b0:5b:73:5e: ee:b4:a6:fc:4e:51:53:f8:57:a0:17:75:bd:24:bc: f5:49:11:56:2f:98:52:e3:c4:28:da:f3:67:d0:68: d1:6b:a1:52:f2:38:fc:67:32:5b:10:80:84:67:76: 7f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:21:EB:E2:21:14:74:D1:F1:92:EF:29:DE:C9:2D:21:B8:8A:5D:70 X509v3 Authority Key Identifier: keyid:44:36:81:E3:AD:AB:56:66:66:89:B0:FF:C0:97:1A:17:3C:EE:B4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/443681E3ADAB56666689B0FFC0971A173CEEB409.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zFrH9WH1MGSDo71YPDuzScjLmkwJrozQHerGNB4fZMJ/0/443681E3ADAB56666689B0FFC0971A173CEEB409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d2:d9:6f:16:80:15:6e:31:21:3f:89:39:3b:63:75:22:dd: 97:1c:ba:b6:2e:05:f9:f1:e8:48:7b:ed:4b:6e:c7:1e:73:85: f8:40:c7:09:bb:ec:0d:ac:c0:b2:2d:97:c7:e5:b2:bb:d4:d9: 54:dd:08:b8:f5:00:bd:67:1f:36:be:c9:f8:c3:66:65:7f:27: 2d:f1:65:07:c6:51:3e:1a:5e:5b:6c:6e:d1:fe:c9:cf:30:6a: d9:ba:a9:f9:21:66:a4:9c:56:ee:9e:8f:d9:90:b1:fa:cd:cf: da:3a:2c:31:4c:50:d0:a2:56:5b:e7:2a:8b:b3:db:78:57:1c: f4:79:c9:c2:21:d5:2f:56:da:50:3f:50:68:5b:2f:3b:df:53: 46:01:6b:bf:3f:48:96:2c:35:26:e9:6f:5f:df:cb:2a:c8:54: b4:82:16:07:b4:3b:8d:a5:a0:b4:0e:f9:74:b1:8a:7a:9e:4d: 67:21:d2:49:c4:7c:ee:c3:3b:fc:8b:94:82:0e:a5:22:1a:87: 5d:29:cf:21:91:de:e9:64:24:14:03:da:67:e6:a4:d7:04:db: d7:59:cb:ad:b1:06:b2:13:25:56:b9:4f:7c:c6:9a:3e:94:d1: b3:e3:89:77:e0:9c:e5:f9:5c:c0:fe:1b:aa:62:0e:a0:22:74: c0:9d:94:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbY4iA0ngTCnU+oilpj4e1SfCglkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQzNjgxRTNBREFCNTY2NjY2ODlCMEZGQzA5NzFBMTcz Q0VFQjQwOTAeFw0yNTA3MDQxNzU4MTNaFw0yNTA3MDUyMjAyMTNaMDMxMTAvBgNV BAMTKEJGMjFFQkUyMjExNDc0RDFGMTkyRUYyOURFQzkyRDIxQjg4QTVENzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDj3OH8rCMgqgcwO3esnzfbWYP FB3ZZdSlvPhQqg/nh3QZRig1Gry6eGis4vl0DFgl9kqYLC7DPtxZsdKnfOcAYLoA 4xo1ekJ+h19x+fUiu+bjLsxAg49nsbBlRUDwxFcbXzdjEM+pr1usUZFZNjRHdX/o ll+o9XO/Jm/+3fZ73CUijXKd6kOf0Z8m3pHkXx7VQMqV8cJeGSYfc6Ki2HZaCkpF oCqlzjxPquGMW3CS5svTXlE2hoKEo1oK6cQ/ouA8XziX7zK/xTcsB9EPsFtzXu60 pvxOUVP4V6AXdb0kvPVJEVYvmFLjxCja82fQaNFroVLyOPxnMlsQgIRndn+PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvyHr4iEUdNHxku8p3sktIbiKXXAwHwYDVR0j BBgwFoAURDaB462rVmZmibD/wJcaFzzutAkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNnpGckg5V0gxTUdTRG83MVlQRHV6U2NqTG1rd0pyb3pRSGVyR05CNGZa TUovMC80NDM2ODFFM0FEQUI1NjY2NjY4OUIwRkZDMDk3MUExNzNDRUVCNDA5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0MzY4MUUzQURBQjU2NjY2 Njg5QjBGRkMwOTcxQTE3M0NFRUI0MDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NnpGckg5V0gxTUdTRG83MVlQRHV6U2NqTG1rd0pyb3pRSGVyR05CNGZaTUovMC80 NDM2ODFFM0FEQUI1NjY2NjY4OUIwRkZDMDk3MUExNzNDRUVCNDA5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf9LZbxaAFW4xIT+JOTtjdSLdlxy6ti4F+fHoSHvtS27HHnOF+EDHCbvsDazA si2Xx+Wyu9TZVN0IuPUAvWcfNr7J+MNmZX8nLfFlB8ZRPhpeW2xu0f7JzzBq2bqp +SFmpJxW7p6P2ZCx+s3P2josMUxQ0KJWW+cqi7PbeFcc9HnJwiHVL1baUD9QaFsv O99TRgFrvz9Iliw1JulvX9/LKshUtIIWB7Q7jaWgtA75dLGKep5NZyHSScR87sM7 /IuUgg6lIhqHXSnPIZHe6WQkFAPaZ+ak1wTb11nLrbEGshMlVrlPfMaaPpTRs+OJ d+Cc5flcwP4bqmIOoCJ0wJ2U5A== -----END CERTIFICATE-----Generated at Sat Jul 5 12:17:55 2025 by rpki-client