$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.mft File: 1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.mft (raw, json) Hash identifier: hlpoiU9wkyUQo/GK86nrE0ItZm/VChKto9CjOzqTO1M= Subject key identifier: 66:C1:0D:EA:95:6F:81:55:A1:E5:24:7B:2E:9A:A3:EF:3A:03:8A:3F Authority key identifier: 1B:7A:42:89:6A:4F:BF:2E:2E:2B:04:94:30:0A:B6:F0:09:4E:F9:E5 Certificate issuer: /CN=1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5 Certificate serial: 71EC63D38FDFFD68A30CE276917F1D8A879D87B3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer Subject info access: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.mft Manifest number: 39 Signing time: Sun 08 Jun 2025 11:43:57 +0000 Manifest this update: Sun 08 Jun 2025 11:38:57 +0000 Manifest next update: Mon 09 Jun 2025 14:01:57 +0000 Files and hashes: 1: 3137302e3235342e3234312e302f32342d3234203d3e20323635333834.roa (hash: OnaHjVE8LBR+ViTWscLt/2ylgBhkQCooiBqyUxk/8xE=) 2: 3137302e3235342e3234332e302f32342d3234203d3e20323635333834.roa (hash: lr1AQk1lsKg0hRF6wOH9PxXUn0vwVQ518r+73GZL5SI=) 3: 3137302e3235342e3234302e302f32342d3234203d3e20323635333834.roa (hash: V/0e23g4mjw9fBs5NjpiXMcIILnanWNLg+Rr6mYaNQ0=) 4: 3137302e3235342e3234302e302f32322d3232203d3e20323635333834.roa (hash: MGzLl5Q69e5V48DIXCvsjtyByr7LzeoG3xWixw5tsPg=) 5: 1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.crl (hash: umuKmrNKDS331TjpaK50qZVnzIz010oNYXVOuvqVYdU=) 6: 3137302e3235342e3234322e302f32342d3234203d3e20323635333834.roa (hash: 48k3BtNnutIT2T8u6Oc7twqZjyUY3slO/gMps199O4I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.crl rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Jun 2025 14:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ec:63:d3:8f:df:fd:68:a3:0c:e2:76:91:7f:1d:8a:87:9d:87:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5 Validity Not Before: Jun 8 11:38:57 2025 GMT Not After : Jun 9 14:01:57 2025 GMT Subject: CN=66C10DEA956F8155A1E5247B2E9AA3EF3A038A3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5c:8d:a0:4d:bd:12:ba:2b:81:98:c7:82:1f: a7:e7:6e:47:32:72:1c:0b:e2:05:34:84:5f:9c:4a: 7a:a0:65:d0:ce:66:79:07:7b:d6:ca:f5:32:30:ca: b3:e3:5d:30:dd:54:aa:40:52:0a:38:22:08:f6:a1: d5:6e:0b:ad:b5:18:7b:13:58:65:2f:cc:64:50:59: 21:03:55:89:05:a8:a7:b7:7f:74:b5:8a:76:2e:2d: 61:e2:f7:53:a4:3b:21:50:b3:c8:09:cf:dd:56:f6: 7b:3c:88:04:57:e0:14:b5:89:71:b1:fa:7e:4d:e5: 1a:e0:5c:29:8d:11:6d:10:38:35:19:4f:ec:f4:bd: 7d:63:25:c6:85:77:ee:fb:8f:74:05:1d:38:f1:9b: 75:60:d7:34:f3:62:38:29:35:66:6a:f2:5a:f3:dc: b0:d6:36:c7:0e:74:47:c3:3c:c2:b5:f1:d0:9a:c6: 38:5e:03:75:74:82:5d:cd:7e:04:6a:29:5f:30:29: e9:3e:10:b9:c1:29:bc:33:8a:36:fa:a8:d3:5a:74: 26:fc:36:78:2c:2a:4d:aa:a4:06:39:24:21:a7:e8: 72:31:23:7c:b0:f2:5a:2a:0f:c1:5d:b3:0f:53:09: 42:15:b0:0a:3b:8a:06:b6:27:e8:cc:9b:aa:1f:0a: 93:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C1:0D:EA:95:6F:81:55:A1:E5:24:7B:2E:9A:A3:EF:3A:03:8A:3F X509v3 Authority Key Identifier: keyid:1B:7A:42:89:6A:4F:BF:2E:2E:2B:04:94:30:0A:B6:F0:09:4E:F9:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/1B7A42896A4FBF2E2E2B0494300AB6F0094EF9E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:49:42:67:75:9a:55:16:d2:cf:7e:ed:e5:34:a7:f6:36:d8: af:fb:ae:4e:1c:42:a2:bb:0b:39:40:1f:3f:5d:1a:40:f7:dc: 41:17:39:8f:d7:1f:28:d6:d0:96:3e:4c:d3:31:96:28:b4:79: bf:95:76:5a:82:0e:bb:43:92:c5:41:a5:df:11:3d:74:9a:f9: 01:df:5e:5e:a4:21:93:b6:cc:56:7c:00:31:51:ea:23:b7:ab: 40:36:81:54:62:eb:d7:ee:4d:5d:a4:4e:93:e1:58:4f:6f:66: 6b:b6:0f:d8:1e:84:0d:fc:85:8d:4c:5b:b5:ef:48:36:90:03: 7e:61:1e:3d:9c:16:c1:cb:aa:b4:84:bd:c8:bb:05:75:90:40: 4f:ed:2a:f4:6a:01:45:b2:15:77:ab:3c:7b:32:99:77:d4:a4: b8:d0:11:47:6e:90:d7:eb:64:ee:45:da:85:41:82:d1:39:1a: 07:52:38:83:9f:db:e9:e4:76:ec:f8:06:7d:99:97:9c:b1:12: ad:00:f6:fc:53:0c:12:9c:b4:43:09:8a:1e:29:ba:67:1f:41: 87:7d:d6:14:36:55:29:27:65:1e:03:04:5c:0c:bd:31:d8:4e: 93:20:b5:23:43:b7:08:8e:15:8a:df:f4:92:73:91:96:a6:de: 49:b1:ee:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcexj04/f/WijDOJ2kX8dioedh7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI3QTQyODk2QTRGQkYyRTJFMkIwNDk0MzAwQUI2RjAw OTRFRjlFNTAeFw0yNTA2MDgxMTM4NTdaFw0yNTA2MDkxNDAxNTdaMDMxMTAvBgNV BAMTKDY2QzEwREVBOTU2RjgxNTVBMUU1MjQ3QjJFOUFBM0VGM0EwMzhBM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnXI2gTb0SuiuBmMeCH6fnbkcy chwL4gU0hF+cSnqgZdDOZnkHe9bK9TIwyrPjXTDdVKpAUgo4Igj2odVuC621GHsT WGUvzGRQWSEDVYkFqKe3f3S1inYuLWHi91OkOyFQs8gJz91W9ns8iARX4BS1iXGx +n5N5RrgXCmNEW0QODUZT+z0vX1jJcaFd+77j3QFHTjxm3Vg1zTzYjgpNWZq8lrz 3LDWNscOdEfDPMK18dCaxjheA3V0gl3NfgRqKV8wKek+ELnBKbwzijb6qNNadCb8 NngsKk2qpAY5JCGn6HIxI3yw8loqD8Fdsw9TCUIVsAo7iga2J+jMm6ofCpOPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZsEN6pVvgVWh5SR7Lpqj7zoDij8wHwYDVR0j BBgwFoAUG3pCiWpPvy4uKwSUMAq28AlO+eUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk5QOGNQRDQ0VGp3ZlBXUER2cFJVM3pTeGdZSjlZVkVXQ2phaWdmY2VR cHQvMC8xQjdBNDI4OTZBNEZCRjJFMkUyQjA0OTQzMDBBQjZGMDA5NEVGOUU1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCN0E0Mjg5NkE0RkJGMkUy RTJCMDQ5NDMwMEFCNkYwMDk0RUY5RTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mk5QOGNQRDQ0VGp3ZlBXUER2cFJVM3pTeGdZSjlZVkVXQ2phaWdmY2VRcHQvMC8x QjdBNDI4OTZBNEZCRjJFMkUyQjA0OTQzMDBBQjZGMDA5NEVGOUU1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdElCZ3WaVRbSz37t5TSn9jbYr/uuThxCorsLOUAfP10aQPfcQRc5j9cfKNbQ lj5M0zGWKLR5v5V2WoIOu0OSxUGl3xE9dJr5Ad9eXqQhk7bMVnwAMVHqI7erQDaB VGLr1+5NXaROk+FYT29ma7YP2B6EDfyFjUxbte9INpADfmEePZwWwcuqtIS9yLsF dZBAT+0q9GoBRbIVd6s8ezKZd9SkuNARR26Q1+tk7kXahUGC0TkaB1I4g5/b6eR2 7PgGfZmXnLESrQD2/FMMEpy0QwmKHim6Zx9Bh33WFDZVKSdlHgMEXAy9MdhOkyC1 I0O3CI4Vit/0knORlqbeSbHuKw== -----END CERTIFICATE-----Generated at Mon Jun 9 07:09:20 2025 by rpki-client