$ rpki-client -vvf rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft File: 1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft (raw, json) Hash identifier: D6Y1kIjoEfY6iaeox0+R99kLLYLp9a005D+a+oDSDdM= Subject key identifier: 69:2B:5A:8E:EB:B6:0E:CD:7D:8E:37:51:8E:86:1A:8E:F5:96:A2:B9 Authority key identifier: 1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55 Certificate issuer: /CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555 Certificate serial: 782288BDA1AEFA1DE1E51CC204C437C09CC600D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft Manifest number: 027D Signing time: Thu 24 Jul 2025 09:53:16 +0000 Manifest this update: Thu 24 Jul 2025 09:48:16 +0000 Manifest next update: Fri 25 Jul 2025 10:33:16 +0000 Files and hashes: 1: 3136382e302e3234302e302f32322d3234203d3e20323632343038.roa (hash: nc1KYLiIl6MQ2cB8LAaJ1Ei9pNJhoTR2e/w7ESX0VCI=) 2: 3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa (hash: WWQDaPRjLqL6gxa8oKBNJP8aA85LM8dmmWOF68n+4eM=) 3: 1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl (hash: e/QEQtZIGiuxmOND9XG0HPmJ/2vSQNNjxQMWB+QhmbA=) 4: 323830343a326430633a3a2f33322d3332203d3e20323632343038.roa (hash: I/xjLRtE0sns2aDZvy2RT2f40WrXsCM4pXsxx+HtLKQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 10:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:22:88:bd:a1:ae:fa:1d:e1:e5:1c:c2:04:c4:37:c0:9c:c6:00:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555 Validity Not Before: Jul 24 09:48:16 2025 GMT Not After : Jul 25 10:33:16 2025 GMT Subject: CN=692B5A8EEBB60ECD7D8E37518E861A8EF596A2B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:61:60:30:f0:34:cb:b3:b1:d6:7d:3f:36:0b: 9b:64:ec:68:ba:61:56:34:35:2d:4a:cc:a9:47:61: 50:af:20:89:05:24:61:6b:96:9a:55:b7:43:a0:b0: f4:69:9b:77:2b:0e:d6:19:a9:11:65:26:0c:35:72: 7e:78:4c:78:d8:49:ba:89:b7:b4:71:17:f1:18:78: 0a:95:ef:23:0f:cf:5a:33:7d:cb:72:23:da:27:74: da:be:48:eb:5c:2e:04:16:1c:41:30:1d:30:b0:cf: 7d:2a:ce:f2:6b:53:4a:20:3f:33:d5:82:12:04:26: 28:d5:42:84:09:f5:19:9c:44:bf:68:9b:2a:46:ab: 20:fc:e8:4b:36:82:1a:ed:8e:e9:7a:06:2f:05:4f: e7:d9:1c:80:b5:33:01:7f:6b:00:37:16:02:45:b5: 4b:4b:dc:90:46:8e:a0:2e:a9:2c:4d:66:49:63:1e: 73:c4:ea:4f:e5:6b:0b:cb:df:6a:da:63:6b:a9:74: 46:f0:ad:eb:68:dd:50:c2:95:68:de:5c:46:ff:53: 2d:f1:51:9d:5b:e3:d6:36:95:9e:fe:8b:30:d9:34: 70:af:e1:20:1f:b9:23:77:93:e8:b8:53:79:58:ff: 48:36:0f:64:8b:2f:be:13:16:45:29:10:16:8f:1a: 22:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2B:5A:8E:EB:B6:0E:CD:7D:8E:37:51:8E:86:1A:8E:F5:96:A2:B9 X509v3 Authority Key Identifier: keyid:1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:53:fd:b4:b4:dc:3d:d3:c7:d9:71:ab:a3:54:06:7f:6a:6b: 24:ab:c0:86:5f:a0:70:ba:5e:0f:eb:7c:6f:a9:c9:94:6a:3d: 98:27:b0:8d:ff:08:df:ad:08:f5:77:2d:d1:1a:95:b1:0e:75: 39:20:a4:e3:8f:17:6d:f2:a3:e2:54:5c:11:40:8a:6c:5c:62: af:95:d6:8b:06:50:0b:55:1a:de:58:3c:d1:18:15:d0:cb:fe: 52:5f:ab:e5:68:92:71:c4:7e:1e:6e:3d:cb:83:1f:4f:ad:f1: 94:76:6a:89:ad:6c:4c:61:ca:a4:ea:47:42:cc:4d:c8:fa:c9: fe:cb:71:21:39:01:1d:be:02:23:65:0b:6e:f5:cf:e9:ac:51: ce:be:c4:92:c6:ed:7b:7e:7d:46:c6:fb:2b:8b:a9:98:e6:c7: 72:95:f9:d5:26:da:6a:86:77:59:78:e1:95:f1:94:5b:4a:8f: 49:d7:74:ea:3c:cd:b4:ce:d7:7a:4b:9f:9c:d7:30:40:79:61: c0:ae:b2:a5:24:7d:a4:50:d1:52:12:9b:87:22:3f:7a:16:be: 34:51:c1:a5:53:06:2f:90:b6:47:44:cf:8d:f8:34:54:e3:df: 55:0e:f0:bc:f2:8d:06:29:29:bf:da:2a:d4:ae:a9:d1:54:91: d7:8c:86:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeCKIvaGu+h3h5RzCBMQ3wJzGANIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFGRkZGMUUzM0VBQkYyOThFOUIwNUYxNzcxNjZDOTZG MkMzQjU1NTAeFw0yNTA3MjQwOTQ4MTZaFw0yNTA3MjUxMDMzMTZaMDMxMTAvBgNV BAMTKDY5MkI1QThFRUJCNjBFQ0Q3RDhFMzc1MThFODYxQThFRjU5NkEyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgYWAw8DTLs7HWfT82C5tk7Gi6 YVY0NS1KzKlHYVCvIIkFJGFrlppVt0OgsPRpm3crDtYZqRFlJgw1cn54THjYSbqJ t7RxF/EYeAqV7yMPz1ozfctyI9ondNq+SOtcLgQWHEEwHTCwz30qzvJrU0ogPzPV ghIEJijVQoQJ9RmcRL9omypGqyD86Es2ghrtjul6Bi8FT+fZHIC1MwF/awA3FgJF tUtL3JBGjqAuqSxNZkljHnPE6k/lawvL32raY2updEbwreto3VDClWjeXEb/Uy3x UZ1b49Y2lZ7+izDZNHCv4SAfuSN3k+i4U3lY/0g2D2SLL74TFkUpEBaPGiIDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaStajuu2Ds19jjdRjoYajvWWorkwHwYDVR0j BBgwFoAUGv//HjPqvymOmwXxdxZslvLDtVUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmQzU1p5cXhlc2pMTUQ1QTd5R3dYZlA0WHBiNDh0QmpRcEZwa2NiRWQx c0MvMS8xQUZGRkYxRTMzRUFCRjI5OEU5QjA1RjE3NzE2NkM5NkYyQzNCNTU1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBRkZGRjFFMzNFQUJGMjk4 RTlCMDVGMTc3MTY2Qzk2RjJDM0I1NTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmQzU1p5cXhlc2pMTUQ1QTd5R3dYZlA0WHBiNDh0QmpRcEZwa2NiRWQxc0MvMS8x QUZGRkYxRTMzRUFCRjI5OEU5QjA1RjE3NzE2NkM5NkYyQzNCNTU1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxlP9tLTcPdPH2XGro1QGf2prJKvAhl+gcLpeD+t8b6nJlGo9mCewjf8I360I 9Xct0RqVsQ51OSCk448XbfKj4lRcEUCKbFxir5XWiwZQC1Ua3lg80RgV0Mv+Ul+r 5WiSccR+Hm49y4MfT63xlHZqia1sTGHKpOpHQsxNyPrJ/stxITkBHb4CI2ULbvXP 6axRzr7Eksbte359Rsb7K4upmObHcpX51SbaaoZ3WXjhlfGUW0qPSdd06jzNtM7X ekufnNcwQHlhwK6ypSR9pFDRUhKbhyI/eha+NFHBpVMGL5C2R0TPjfg0VOPfVQ7w vPKNBikpv9oq1K6p0VSR14yGpg== -----END CERTIFICATE-----Generated at Fri Jul 25 00:25:36 2025 by rpki-client