$ rpki-client -vvf rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft File: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft (raw, json) Hash identifier: Yfp++6Wt3ddZQcrNgMmUxhBOjA9nMdIwMrwL0p5494M= Subject key identifier: C6:B6:84:82:72:22:3E:E1:9F:65:02:AD:EB:38:44:B2:63:78:3A:B0 Authority key identifier: D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0 Certificate issuer: /CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0 Certificate serial: 64C4A21885EFD35258B7662CE12695B333C6C247 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer Subject info access: rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft Manifest number: 01C6 Signing time: Thu 12 Jun 2025 14:50:36 +0000 Manifest this update: Thu 12 Jun 2025 14:45:36 +0000 Manifest next update: Fri 13 Jun 2025 18:44:36 +0000 Files and hashes: 1: D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl (hash: Gj4E5NuYENO0iuxu4hvSt4GX60yeQEOqybLo57wgLY0=) 2: 323830343a336431383a3a2f33322d3438203d3e20323636323533.roa (hash: q5JF9UY+MTB4Mlfj2lWL8AvBvbFDkXWD3ksggtStp3k=) 3: 3139302e3132332e3139322e302f32322d3234203d3e20323636323533.roa (hash: lEGRwhg9phXl2q/TNnF7j2kv/C2pVxAJLq4sIptatEQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 13 Jun 2025 18:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c4:a2:18:85:ef:d3:52:58:b7:66:2c:e1:26:95:b3:33:c6:c2:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0 Validity Not Before: Jun 12 14:45:36 2025 GMT Not After : Jun 13 18:44:36 2025 GMT Subject: CN=C6B6848272223EE19F6502ADEB3844B263783AB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:73:d3:c8:44:e4:32:28:8a:0f:ed:68:57:de: 7e:1b:7c:37:4d:18:83:6f:81:bb:64:13:97:df:62: c4:25:23:19:71:00:88:08:43:77:2c:b7:59:4e:40: e0:48:47:62:1d:75:23:d9:90:3f:99:1a:fd:ac:77: 92:73:48:0e:74:13:7b:4d:6e:cb:0d:4d:a4:d2:2e: e0:5e:1f:d4:a9:bf:1a:0e:8b:a1:1f:5c:44:85:5e: 59:fb:26:9f:48:f7:fe:77:e3:46:0e:a6:d5:f0:9a: e3:a4:16:89:9e:4f:db:d2:9b:a0:0c:9e:8b:3c:e7: 71:7e:ed:90:69:2f:64:1b:2a:c8:f9:48:cb:b2:42: 71:cf:f2:4e:d8:a3:b9:0e:d8:29:60:6b:0f:3b:9f: 06:62:24:77:60:3a:52:e1:2f:a6:16:34:a6:5b:e3: b6:32:3c:d1:11:14:ac:c3:a8:bd:5b:cf:00:53:bc: c5:51:b3:29:0f:93:e1:a5:33:c2:90:4b:c6:ea:6d: 93:d8:4e:c9:ec:cd:58:ce:cf:44:30:43:23:36:82: 96:f0:51:e8:58:5d:4b:65:a7:c8:ec:92:2f:8b:86: d2:95:6b:f6:c4:a4:e2:d2:e5:c0:fa:93:af:69:06: 31:83:eb:97:32:47:b1:ea:3b:65:01:46:31:f6:e5: b5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B6:84:82:72:22:3E:E1:9F:65:02:AD:EB:38:44:B2:63:78:3A:B0 X509v3 Authority Key Identifier: keyid:D2:BE:40:C6:6A:0B:0E:F9:74:7A:CC:9D:2C:3A:0F:45:BC:BD:88:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Lha6r6dzLTbG6jX4THpHF5wvMvnYqSAVNs7qrjvNe6r/0/D2BE40C66A0B0EF9747ACC9D2C3A0F45BCBD88D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:46:a2:13:3d:e3:87:7a:3d:01:4f:7e:74:7e:ee:e6:9a:8e: 25:a6:33:5d:44:95:cf:06:ae:4b:2c:e7:63:d5:d6:cc:51:1f: 10:9d:8a:cc:47:43:10:7f:b6:8c:22:ad:24:e2:55:1b:82:c3: 0d:b7:23:11:5b:18:2e:74:d2:13:0d:ff:48:af:96:68:70:58: ee:db:c8:40:66:99:3a:8f:f0:34:69:bf:c0:46:2b:82:48:bf: 4b:d2:6b:62:58:22:48:e5:25:46:a8:48:c9:16:53:3d:3d:f2: 41:ff:df:c7:ae:10:45:ae:20:af:c1:a1:11:20:1b:dd:0f:0c: 24:fe:c8:65:0e:0b:2a:5a:77:eb:34:2a:c0:f7:06:dd:e3:bb: 25:36:42:0c:51:b8:67:42:13:b0:1d:55:88:b5:ee:6a:e7:af: bd:73:15:85:1c:4b:29:5a:db:02:6a:d7:24:8e:51:b2:93:bb: 0c:a5:81:42:e9:58:86:fe:58:5b:a4:b4:cd:a5:08:cf:27:bd: 54:85:50:68:ab:76:06:39:87:f6:4a:f5:20:92:83:67:4c:85: 9f:86:6d:7a:45:a4:67:f5:d2:5c:73:b5:19:9f:d8:74:48:74: cf:1b:90:15:c1:95:30:a8:77:43:dd:7d:86:a1:85:dd:9c:df: a0:13:c2:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZMSiGIXv01JYt2Ys4SaVszPGwkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJCRTQwQzY2QTBCMEVGOTc0N0FDQzlEMkMzQTBGNDVC Q0JEODhEMDAeFw0yNTA2MTIxNDQ1MzZaFw0yNTA2MTMxODQ0MzZaMDMxMTAvBgNV BAMTKEM2QjY4NDgyNzIyMjNFRTE5RjY1MDJBREVCMzg0NEIyNjM3ODNBQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLc9PIROQyKIoP7WhX3n4bfDdN GINvgbtkE5ffYsQlIxlxAIgIQ3cst1lOQOBIR2IddSPZkD+ZGv2sd5JzSA50E3tN bssNTaTSLuBeH9SpvxoOi6EfXESFXln7Jp9I9/5340YOptXwmuOkFomeT9vSm6AM nos853F+7ZBpL2QbKsj5SMuyQnHP8k7Yo7kO2Clgaw87nwZiJHdgOlLhL6YWNKZb 47YyPNERFKzDqL1bzwBTvMVRsykPk+GlM8KQS8bqbZPYTsnszVjOz0QwQyM2gpbw UehYXUtlp8jski+LhtKVa/bEpOLS5cD6k69pBjGD65cyR7HqO2UBRjH25bU7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxraEgnIiPuGfZQKt6zhEsmN4OrAwHwYDVR0j BBgwFoAU0r5AxmoLDvl0esydLDoPRby9iNAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FWTnM3cXJqdk5l NnIvMC9EMkJFNDBDNjZBMEIwRUY5NzQ3QUNDOUQyQzNBMEY0NUJDQkQ4OEQwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyQkU0MEM2NkEwQjBFRjk3 NDdBQ0M5RDJDM0EwRjQ1QkNCRDg4RDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUxoYTZyNmR6TFRiRzZqWDRUSHBIRjV3dk12bllxU0FWTnM3cXJqdk5lNnIvMC9E MkJFNDBDNjZBMEIwRUY5NzQ3QUNDOUQyQzNBMEY0NUJDQkQ4OEQwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOEaiEz3jh3o9AU9+dH7u5pqOJaYzXUSVzwauSyznY9XWzFEfEJ2KzEdDEH+2 jCKtJOJVG4LDDbcjEVsYLnTSEw3/SK+WaHBY7tvIQGaZOo/wNGm/wEYrgki/S9Jr YlgiSOUlRqhIyRZTPT3yQf/fx64QRa4gr8GhESAb3Q8MJP7IZQ4LKlp36zQqwPcG 3eO7JTZCDFG4Z0ITsB1ViLXuauevvXMVhRxLKVrbAmrXJI5RspO7DKWBQulYhv5Y W6S0zaUIzye9VIVQaKt2BjmH9kr1IJKDZ0yFn4ZtekWkZ/XSXHO1GZ/YdEh0zxuQ FcGVMKh3Q919hqGF3ZzfoBPCYQ== -----END CERTIFICATE-----Generated at Fri Jun 13 06:36:00 2025 by rpki-client