$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft File: 2AADFACED9C75E320914697A02E254A3D463839A.mft (raw, json) Hash identifier: gysI6seWEVOuBDGRMZo4bbAjNWknuHU4YXC51Zy5wKM= Subject key identifier: B3:9F:68:CF:57:91:86:10:8B:DA:BB:70:26:C7:A4:D6:B5:3A:22:9E Authority key identifier: 2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A Certificate issuer: /CN=2AADFACED9C75E320914697A02E254A3D463839A Certificate serial: 71DC66B8B70858CDAFE5BB71E1856509108F8168 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject info access: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft Manifest number: 023C Signing time: Mon 09 Jun 2025 16:07:33 +0000 Manifest this update: Mon 09 Jun 2025 16:02:33 +0000 Manifest next update: Tue 10 Jun 2025 18:21:33 +0000 Files and hashes: 1: 2AADFACED9C75E320914697A02E254A3D463839A.crl (hash: m/p+CURBD2+6KlxOwFcyUeEk4BxhuCIfdXA8Pwb0v0k=) 2: 3134312e3139332e3135312e302f32342d3234203d3e203533313230.roa (hash: DuI4Mug1p6teJxzujuasFd0ujWIU2EvbfZhNpCjPypI=) 3: 3138372e3131312e31362e302f32302d3234203d3e203533313230.roa (hash: olPEUYzQeXbpm2M5qdX3HUxqCDHC3YBr2Etr9x7gT/w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 18:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:dc:66:b8:b7:08:58:cd:af:e5:bb:71:e1:85:65:09:10:8f:81:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AADFACED9C75E320914697A02E254A3D463839A Validity Not Before: Jun 9 16:02:33 2025 GMT Not After : Jun 10 18:21:33 2025 GMT Subject: CN=B39F68CF579186108BDABB7026C7A4D6B53A229E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f0:e3:3f:d9:9e:30:00:e9:37:b9:56:67:64: aa:f2:41:71:3b:3e:c4:0a:40:db:43:7a:6f:bb:f4: e4:a2:2b:06:78:3b:d1:ac:5e:0d:7f:c4:e2:6e:93: c8:d2:16:f2:cd:31:89:37:e7:d7:a3:4f:9d:95:05: 2d:cc:fb:af:5a:70:1f:4d:96:db:57:25:c1:57:4e: 4b:56:8c:cc:00:72:36:93:ac:ae:77:ed:94:e3:ad: 78:52:07:34:1c:4f:38:83:9b:8b:16:71:a8:22:3c: 2e:49:c9:01:6f:01:a5:78:80:f1:b4:6a:ea:a0:38: 76:4f:bb:8e:cb:f1:50:f5:c6:6f:44:25:1e:c6:0f: 78:c5:00:95:18:aa:f1:e5:21:9d:6f:57:6e:d8:ef: 70:51:32:17:e1:da:3b:15:cb:51:c1:dd:88:ed:b8: 4e:4a:47:77:cd:7d:41:40:5b:1b:2e:61:7e:bd:bf: e2:c4:51:7c:29:55:fb:5a:d3:5c:97:a7:8b:24:77: 0f:0d:54:32:da:a6:19:6f:c9:a9:c5:07:e9:bc:76: 03:94:b2:5b:eb:c2:40:db:2c:4f:e5:3d:79:a4:15: dd:5e:36:05:a4:49:5a:08:a2:0e:97:c2:e8:d7:03: 3a:5d:4e:38:cc:5c:2f:e8:aa:ec:a9:16:3f:72:08: 26:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9F:68:CF:57:91:86:10:8B:DA:BB:70:26:C7:A4:D6:B5:3A:22:9E X509v3 Authority Key Identifier: keyid:2A:AD:FA:CE:D9:C7:5E:32:09:14:69:7A:02:E2:54:A3:D4:63:83:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AADFACED9C75E320914697A02E254A3D463839A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/1/2AADFACED9C75E320914697A02E254A3D463839A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:da:cb:c1:1e:70:6b:1f:fd:b7:46:14:f0:66:dc:20:9b:6b: 31:ba:e2:ff:9a:48:60:72:1a:2a:f8:24:a6:7c:99:cf:b5:a6: 80:c5:b3:49:b1:86:71:56:dc:ed:26:47:ca:5c:f1:9f:e4:04: 24:94:94:0d:2c:61:a7:2e:ae:86:fd:e8:38:06:9a:ad:de:fc: f1:da:8d:b6:8d:c1:d1:c1:fe:ec:13:35:e7:3a:48:f8:9b:a1: b2:a2:51:d1:9d:b1:24:61:28:b8:be:ac:8a:03:34:87:3a:3b: b0:fb:e7:4a:2d:ea:01:2f:6a:f3:ad:02:56:36:99:84:f2:4c: 91:23:24:f1:26:d9:a1:dd:76:43:98:8b:7d:fc:75:f7:3f:2a: f7:6b:fe:38:47:4b:22:41:34:43:2b:94:53:1b:73:e6:a7:72: df:be:b6:1a:85:b9:3b:23:5c:8f:82:20:95:d4:e2:80:23:fb: 93:43:c4:c9:96:8d:ef:cf:dd:89:59:d5:08:9b:6c:f0:b1:d2: bd:c4:23:9d:bb:49:0f:d1:9f:2a:a9:a3:ef:94:d1:3e:c8:7a: 7a:fe:22:d6:aa:75:ec:28:db:7b:9d:2f:c4:e0:20:da:40:ed: 62:a4:1c:01:83:c4:68:39:f0:b7:9e:79:6e:7e:be:3a:3c:b0: b1:ea:59:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcdxmuLcIWM2v5btx4YVlCRCPgWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBREZBQ0VEOUM3NUUzMjA5MTQ2OTdBMDJFMjU0QTNE NDYzODM5QTAeFw0yNTA2MDkxNjAyMzNaFw0yNTA2MTAxODIxMzNaMDMxMTAvBgNV BAMTKEIzOUY2OENGNTc5MTg2MTA4QkRBQkI3MDI2QzdBNEQ2QjUzQTIyOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC58OM/2Z4wAOk3uVZnZKryQXE7 PsQKQNtDem+79OSiKwZ4O9GsXg1/xOJuk8jSFvLNMYk359ejT52VBS3M+69acB9N lttXJcFXTktWjMwAcjaTrK537ZTjrXhSBzQcTziDm4sWcagiPC5JyQFvAaV4gPG0 auqgOHZPu47L8VD1xm9EJR7GD3jFAJUYqvHlIZ1vV27Y73BRMhfh2jsVy1HB3Yjt uE5KR3fNfUFAWxsuYX69v+LEUXwpVfta01yXp4skdw8NVDLaphlvyanFB+m8dgOU slvrwkDbLE/lPXmkFd1eNgWkSVoIog6XwujXAzpdTjjMXC/oquypFj9yCCbhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUs59oz1eRhhCL2rtwJsek1rU6Ip4wHwYDVR0j BBgwFoAUKq36ztnHXjIJFGl6AuJUo9Rjg5owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0Ru eW8vMS8yQUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQURGQUNFRDlDNzVFMzIw OTE0Njk3QTAyRTI1NEEzRDQ2MzgzOUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHVyY0FKek1GTEY4ZTRncEg2SmVqUkRxM2p2UEpqYmttMW05bVJCU0RueW8vMS8y QUFERkFDRUQ5Qzc1RTMyMDkxNDY5N0EwMkUyNTRBM0Q0NjM4MzlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANtrLwR5wax/9t0YU8GbcIJtrMbri/5pIYHIaKvgkpnyZz7WmgMWzSbGGcVbc 7SZHylzxn+QEJJSUDSxhpy6uhv3oOAaard788dqNto3B0cH+7BM15zpI+JuhsqJR 0Z2xJGEouL6sigM0hzo7sPvnSi3qAS9q860CVjaZhPJMkSMk8SbZod12Q5iLffx1 9z8q92v+OEdLIkE0QyuUUxtz5qdy3762GoW5OyNcj4IgldTigCP7k0PEyZaN78/d iVnVCJts8LHSvcQjnbtJD9GfKqmj75TRPsh6ev4i1qp17Cjbe50vxOAg2kDtYqQc AYPEaDnwt555bn6+OjywsepZIg== -----END CERTIFICATE-----Generated at Tue Jun 10 05:29:42 2025 by rpki-client