$ rpki-client -vvf rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.mft File: FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.mft (raw, json) Hash identifier: pqnCt9neUDSSOR/9USSE9D2uG9RPzohUYAV1SqOFbaY= Subject key identifier: 52:D3:9B:57:2A:F3:B0:AC:B6:CD:57:07:9A:AE:AC:D7:64:1E:67:67 Authority key identifier: FF:7F:52:96:B0:F2:ED:E1:0E:D5:7E:3B:FB:8D:49:70:31:8D:7D:C5 Certificate issuer: /CN=FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5 Certificate serial: 4E125AB0D8A29AB23957AC0E905B3C9223E31E27 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.cer Subject info access: rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.mft Manifest number: 09 Signing time: Mon 09 Jun 2025 02:22:07 +0000 Manifest this update: Mon 09 Jun 2025 02:17:07 +0000 Manifest next update: Tue 10 Jun 2025 03:57:07 +0000 Files and hashes: 1: 323830343a336361303a3a2f33322d313238203d3e203631353939.roa (hash: Az1HRYxCLtmiNCgqQqg333qg8goKl+ij8ML1bdBt9PQ=) 2: 3230302e37312e37362e302f32322d3332203d3e203631353939.roa (hash: CaVVHJo0LSZdJMM6ZFVMcgNJs76Zbb9uuX/EB8OanUw=) 3: FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.crl (hash: wnvyEX0hsdopa/zjGmiNV6aCGw5UjBmLbjuiry1YxWc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.crl rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 03:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:12:5a:b0:d8:a2:9a:b2:39:57:ac:0e:90:5b:3c:92:23:e3:1e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5 Validity Not Before: Jun 9 02:17:07 2025 GMT Not After : Jun 10 03:57:07 2025 GMT Subject: CN=52D39B572AF3B0ACB6CD57079AAEACD7641E6767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cf:b1:1c:3b:ae:1e:d2:68:58:ed:f3:ae:07: 5e:2f:7e:fa:60:c6:fc:93:85:ae:6b:b9:8b:89:82: cb:1c:5e:08:80:68:6d:0b:7d:ae:8f:e1:16:d7:ee: 4a:5c:a7:94:f9:89:0d:a4:c5:f0:70:c1:9a:d5:34: 6f:35:46:b2:f6:7e:b5:aa:a1:2d:1f:d2:1b:0b:ed: e3:b1:61:c0:28:59:4f:66:5d:ed:3f:dd:ca:34:b3: b3:61:ef:a1:6b:71:63:f3:5b:37:66:11:59:a6:27: 0d:bd:93:7c:f9:2c:5a:d7:ee:99:5d:5f:68:dc:e3: f7:be:58:ff:78:a3:6f:fa:8a:37:ab:29:4b:2e:ba: c8:2b:96:73:48:b6:79:20:73:6d:67:da:e9:0b:53: 57:93:ed:01:a4:21:a3:e6:b4:62:2f:de:2a:b9:58: 55:ea:38:80:24:38:10:ac:ee:dc:eb:5e:b1:73:9b: 7c:d6:73:d5:bb:35:f8:1d:69:58:29:8e:ff:e7:02: a4:39:b1:7d:88:79:ac:4c:6f:a2:9f:2b:7f:3e:05: d4:50:cc:83:bc:87:a2:48:0e:c8:90:b3:45:97:b2: 31:b3:26:c2:ce:8f:9e:a2:9e:15:6a:0b:7d:0e:32: 9d:e6:d6:13:fe:53:3a:73:6b:e4:e2:a4:cc:d4:34: 12:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D3:9B:57:2A:F3:B0:AC:B6:CD:57:07:9A:AE:AC:D7:64:1E:67:67 X509v3 Authority Key Identifier: keyid:FF:7F:52:96:B0:F2:ED:E1:0E:D5:7E:3B:FB:8D:49:70:31:8D:7D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NiVFvsqYKtC1Si1SDbA23wxWWAemkrJ8CSxzUvsHmNo/0/FF7F5296B0F2EDE10ED57E3BFB8D4970318D7DC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:28:66:8b:5a:ef:6a:30:44:3c:e0:1c:87:62:94:b6:91:a6: c3:c4:25:5f:a9:b6:79:34:7c:85:a4:af:64:38:c9:6c:80:27: 80:c5:db:7a:c2:08:9f:9c:46:af:2a:d7:e2:8b:f2:22:db:81: c5:79:7b:d9:46:88:12:cf:14:81:89:1a:6f:43:70:7d:aa:d4: 47:14:bd:c1:2e:48:86:9e:21:4b:48:28:da:8d:da:0f:57:d1: 1a:50:a2:f7:b0:a8:77:1d:a2:6e:73:c5:3f:63:de:3d:cf:f7: 02:c2:1c:83:b2:43:c0:0c:63:3c:ea:48:0a:41:47:2c:72:5d: 3c:55:bf:21:c8:c1:8f:04:c5:3b:e3:5d:93:dd:36:06:f2:18: dc:48:ab:14:ff:63:8b:c8:e3:2d:59:71:b3:0e:81:ba:7c:9c: df:26:83:c0:89:69:76:65:b7:00:56:55:27:be:9b:70:43:bd: c5:53:39:6c:89:51:54:d2:9c:66:ec:59:81:3d:ba:30:f5:b5: 97:ad:88:2d:13:58:a1:12:6a:63:1f:51:f4:c1:ca:47:2a:e9: 6d:8a:5b:29:de:53:af:de:5a:7f:13:30:2c:c8:02:c0:fb:ae: ad:5b:a2:4d:83:11:30:fc:5d:be:ed:20:fd:a1:aa:41:47:3c: e1:d8:77:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUThJasNiimrI5V6wOkFs8kiPjHicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3RjUyOTZCMEYyRURFMTBFRDU3RTNCRkI4RDQ5NzAz MThEN0RDNTAeFw0yNTA2MDkwMjE3MDdaFw0yNTA2MTAwMzU3MDdaMDMxMTAvBgNV BAMTKDUyRDM5QjU3MkFGM0IwQUNCNkNENTcwNzlBQUVBQ0Q3NjQxRTY3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmz7EcO64e0mhY7fOuB14vfvpg xvyTha5ruYuJgsscXgiAaG0Lfa6P4RbX7kpcp5T5iQ2kxfBwwZrVNG81RrL2frWq oS0f0hsL7eOxYcAoWU9mXe0/3co0s7Nh76FrcWPzWzdmEVmmJw29k3z5LFrX7pld X2jc4/e+WP94o2/6ijerKUsuusgrlnNItnkgc21n2ukLU1eT7QGkIaPmtGIv3iq5 WFXqOIAkOBCs7tzrXrFzm3zWc9W7NfgdaVgpjv/nAqQ5sX2IeaxMb6KfK38+BdRQ zIO8h6JIDsiQs0WXsjGzJsLOj56inhVqC30OMp3m1hP+Uzpza+TipMzUNBLBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUtObVyrzsKy2zVcHmq6s12QeZ2cwHwYDVR0j BBgwFoAU/39SlrDy7eEO1X47+41JcDGNfcUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE5pVkZ2c3FZS3RDMVNpMVNEYkEyM3d4V1dBZW1rcko4Q1N4elV2c0ht Tm8vMC9GRjdGNTI5NkIwRjJFREUxMEVENTdFM0JGQjhENDk3MDMxOEQ3REM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGN0Y1Mjk2QjBGMkVERTEw RUQ1N0UzQkZCOEQ0OTcwMzE4RDdEQzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE5pVkZ2c3FZS3RDMVNpMVNEYkEyM3d4V1dBZW1rcko4Q1N4elV2c0htTm8vMC9G RjdGNTI5NkIwRjJFREUxMEVENTdFM0JGQjhENDk3MDMxOEQ3REM1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQihmi1rvajBEPOAch2KUtpGmw8QlX6m2eTR8haSvZDjJbIAngMXbesIIn5xG ryrX4ovyItuBxXl72UaIEs8UgYkab0NwfarURxS9wS5Ihp4hS0go2o3aD1fRGlCi 97Codx2ibnPFP2PePc/3AsIcg7JDwAxjPOpICkFHLHJdPFW/IcjBjwTFO+Ndk902 BvIY3EirFP9ji8jjLVlxsw6Bunyc3yaDwIlpdmW3AFZVJ76bcEO9xVM5bIlRVNKc ZuxZgT26MPW1l62ILRNYoRJqYx9R9MHKRyrpbYpbKd5Tr95afxMwLMgCwPuurVui TYMRMPxdvu0g/aGqQUc84dh38w== -----END CERTIFICATE-----Generated at Mon Jun 9 16:11:41 2025 by rpki-client