$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft File: 9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft (raw, json) Hash identifier: RCvRsiIa6B+imAuo6re0mWXFnW2xpWcCt/jJWVkXeho= Subject key identifier: 53:36:15:16:57:D3:AF:10:F2:58:4A:A3:3D:38:2D:75:37:3D:21:FF Authority key identifier: 9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41 Certificate issuer: /CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41 Certificate serial: 37C15F8A31D9E9F84C438F9A84BB1B0DFB7BF438 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer Subject info access: rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft Manifest number: 0261 Signing time: Tue 10 Jun 2025 16:43:46 +0000 Manifest this update: Tue 10 Jun 2025 16:38:46 +0000 Manifest next update: Wed 11 Jun 2025 19:04:46 +0000 Files and hashes: 1: 323830343a346434343a633a3a2f34382d3438203d3e20323632393738.roa (hash: Op1QUlbs1kMgDUhfRTkD0khQVu8yE34ODvSUQUBmo3Q=) 2: 3134332e302e3132302e302f32322d3234203d3e20323632393738.roa (hash: gLs1P9X81n1VFfuY9I9DWXvqDOQ8Y2hZzFOcfoQ0ohc=) 3: 323830343a346434343a3a2f33322d3332203d3e20323632393738.roa (hash: VizvqRIuYKfkI4s8BEKfvxZE9y5806w4B0z2gcdiGkE=) 4: 3138362e3235302e3138342e302f32322d3234203d3e20323632393738.roa (hash: fjUq+2OEZ2tApMzj288/NKrvwEiH+6RX3sAnPykGFRs=) 5: 323830343a346434343a6164613a3a2f34382d3438203d3e20323632393738.roa (hash: Q1hEVTsuLyFppYKVgDI3+N9l+J52P5aA25BwMBKWrFI=) 6: 323830343a346434343a31303a3a2f34382d3438203d3e20323632393738.roa (hash: qeJpzQeOLKkwOi3JlBWrssz8TP7xi7dkX2rBNdr0I2c=) 7: 3133322e3235352e3232302e302f32322d3234203d3e20323632393738.roa (hash: afiDgNmjYoTHl9tBgKdwse060m18ExwL0lIq/AJdzls=) 8: 9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl (hash: nDd8G96+kJPNBfGDBnQGzBSW55v7hXAz0D6uyGPU4Ws=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 19:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c1:5f:8a:31:d9:e9:f8:4c:43:8f:9a:84:bb:1b:0d:fb:7b:f4:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41 Validity Not Before: Jun 10 16:38:46 2025 GMT Not After : Jun 11 19:04:46 2025 GMT Subject: CN=5336151657D3AF10F2584AA33D382D75373D21FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:03:3c:65:8c:eb:0b:d6:14:2b:c0:94:1e: b9:20:ed:94:9a:43:4b:d8:db:6e:98:e5:6f:87:85: a1:15:06:de:76:4c:88:3d:0b:5d:e3:9e:80:76:99: bb:e0:05:04:48:5c:96:59:8a:f9:d0:30:34:46:3c: 33:6a:22:a1:1e:d4:9c:63:bb:29:cd:98:57:f1:f9: a0:d1:a5:51:fa:fa:82:f0:06:99:76:0e:ff:97:0c: 42:cd:29:a8:3b:14:48:91:3c:5c:0b:18:d4:92:c4: 91:f2:b8:19:b9:08:98:1f:01:da:ba:f8:7a:e2:3a: bc:5a:1b:d6:d2:24:b7:85:e1:9e:c4:0c:e0:ed:c7: ac:c7:58:d9:1d:f0:72:dd:6a:c5:a9:5d:9a:7d:50: 25:3a:b8:dc:f6:b7:ea:76:20:6a:f1:62:a2:d4:fc: 13:bb:48:25:56:be:43:46:fe:89:4a:e8:e7:aa:46: 7b:e0:f7:54:4c:93:ef:ae:50:f0:02:d6:6d:2b:fb: bc:b2:9a:3a:1a:ee:e6:42:67:19:b6:d7:52:b4:41: df:ba:e2:cf:65:5b:a7:1d:0f:e4:73:32:47:36:e4: 87:5d:b0:5b:6d:11:35:ff:1e:fc:48:31:21:7b:bd: 11:c6:59:ca:94:5b:68:18:d3:a4:c3:f4:2b:73:92: 0f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:36:15:16:57:D3:AF:10:F2:58:4A:A3:3D:38:2D:75:37:3D:21:FF X509v3 Authority Key Identifier: keyid:9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b2:0a:c6:13:f8:7e:ac:c1:e1:d1:c9:c8:12:25:57:aa:77: c8:9d:79:95:bb:31:26:24:8b:be:d0:a1:19:59:20:9e:67:40: 31:dc:04:c0:fd:a6:cc:8e:e6:bd:ae:d6:70:26:77:20:06:78: 9b:1c:dc:0d:ab:b4:d9:67:4a:98:f4:c7:bf:e3:0e:c3:76:8c: 79:89:c4:35:ac:fa:42:c3:32:10:12:4b:7b:42:77:55:d8:20: 75:6b:b1:72:5e:e9:9d:5a:dd:f8:1a:18:6a:3f:76:19:6e:25: 41:ea:81:8b:e8:44:f4:e5:01:e5:65:75:19:51:76:4f:1c:7b: 62:cf:61:9b:1e:b8:4f:65:9a:09:29:99:c2:69:34:54:5f:73: 17:76:d8:66:fa:80:42:3b:28:ca:e3:13:3d:26:87:75:bf:59: 7f:ca:9c:77:83:a2:7f:af:25:08:ac:32:88:e1:5d:9c:af:7b: 4c:a1:29:2d:bf:05:ca:7c:aa:4c:26:65:37:8f:d0:4d:ad:99: ca:c7:b0:80:74:32:37:39:36:8b:2f:86:6d:3d:05:d5:29:1f: 76:67:49:cb:6f:df:2e:03:a9:ca:56:9d:6c:44:48:c3:8b:d3: df:d9:41:34:f1:59:d4:1e:eb:5d:1a:98:8b:92:4b:83:56:e0: fc:55:97:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN8FfijHZ6fhMQ4+ahLsbDft79DgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4MzI4MTg5QTBDRkY1M0U5RUQzQTJGMjA3RkZCQjlD QUU2MUE0MTAeFw0yNTA2MTAxNjM4NDZaFw0yNTA2MTExOTA0NDZaMDMxMTAvBgNV BAMTKDUzMzYxNTE2NTdEM0FGMTBGMjU4NEFBMzNEMzgyRDc1MzczRDIxRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIlgM8ZYzrC9YUK8CUHrkg7ZSa Q0vY226Y5W+HhaEVBt52TIg9C13jnoB2mbvgBQRIXJZZivnQMDRGPDNqIqEe1Jxj uynNmFfx+aDRpVH6+oLwBpl2Dv+XDELNKag7FEiRPFwLGNSSxJHyuBm5CJgfAdq6 +HriOrxaG9bSJLeF4Z7EDODtx6zHWNkd8HLdasWpXZp9UCU6uNz2t+p2IGrxYqLU /BO7SCVWvkNG/olK6OeqRnvg91RMk++uUPAC1m0r+7yymjoa7uZCZxm211K0Qd+6 4s9lW6cdD+RzMkc25IddsFttETX/HvxIMSF7vRHGWcqUW2gY06TD9Ctzkg9LAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUzYVFlfTrxDyWEqjPTgtdTc9If8wHwYDVR0j BBgwFoAUm4MoGJoM/1Pp7TovIH/7ucrmGkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMloxSmVOY2NvbjdkcVNxVlFSdkpGb3pHN21EQlVlM0RvUk1GWTFNM1F4 WlcvMS85QjgzMjgxODlBMENGRjUzRTlFRDNBMkYyMDdGRkJCOUNBRTYxQTQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCODMyODE4OUEwQ0ZGNTNF OUVEM0EyRjIwN0ZGQkI5Q0FFNjFBNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MloxSmVOY2NvbjdkcVNxVlFSdkpGb3pHN21EQlVlM0RvUk1GWTFNM1F4WlcvMS85 QjgzMjgxODlBMENGRjUzRTlFRDNBMkYyMDdGRkJCOUNBRTYxQTQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVLIKxhP4fqzB4dHJyBIlV6p3yJ15lbsxJiSLvtChGVkgnmdAMdwEwP2mzI7m va7WcCZ3IAZ4mxzcDau02WdKmPTHv+MOw3aMeYnENaz6QsMyEBJLe0J3VdggdWux cl7pnVrd+BoYaj92GW4lQeqBi+hE9OUB5WV1GVF2Txx7Ys9hmx64T2WaCSmZwmk0 VF9zF3bYZvqAQjsoyuMTPSaHdb9Zf8qcd4Oif68lCKwyiOFdnK97TKEpLb8Fynyq TCZlN4/QTa2ZysewgHQyNzk2iy+GbT0F1SkfdmdJy2/fLgOpyladbERIw4vT39lB NPFZ1B7rXRqYi5JLg1bg/FWXNw== -----END CERTIFICATE-----Generated at Wed Jun 11 09:25:21 2025 by rpki-client