$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft File: A99D272225729B303C95F28914878741C6AE29BE.mft (raw, json) Hash identifier: A+S+I/x+HTyCrbpbHlNu4MlNmVu7p/M521hQ1fYl1ZM= Subject key identifier: DF:C7:73:76:FE:26:B5:67:87:FE:06:94:E9:84:6E:D2:B1:C2:74:18 Authority key identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE Certificate issuer: /CN=A99D272225729B303C95F28914878741C6AE29BE Certificate serial: 37E2E1A16B532B2ABF2B6C6BB0995D9AAABCC559 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer Subject info access: rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft Manifest number: 024A Signing time: Mon 09 Jun 2025 01:13:52 +0000 Manifest this update: Mon 09 Jun 2025 01:08:52 +0000 Manifest next update: Tue 10 Jun 2025 03:29:52 +0000 Files and hashes: 1: 323830343a343134633a3a2f33322d3438203d3e203238323034.roa (hash: r8cnAZ/4v8S40dmgDmHooqNyAvqo3wuz9559tBYcDq0=) 2: A99D272225729B303C95F28914878741C6AE29BE.crl (hash: gjwPtXRj/yRWHdLoG4mYLZHE9HzVw8jTDhkQzp/23eg=) 3: 3138392e39312e34382e302f32302d3332203d3e203238323034.roa (hash: mVhez4oH+ZZe1MpwRKuWrOKm17wq5GZedCe2C7CQYTo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 03:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e2:e1:a1:6b:53:2b:2a:bf:2b:6c:6b:b0:99:5d:9a:aa:bc:c5:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A99D272225729B303C95F28914878741C6AE29BE Validity Not Before: Jun 9 01:08:52 2025 GMT Not After : Jun 10 03:29:52 2025 GMT Subject: CN=DFC77376FE26B56787FE0694E9846ED2B1C27418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8c:ae:f0:d7:69:fc:15:ca:35:e9:2f:c1:eb: 9c:67:46:82:c5:31:74:88:6d:da:b9:d2:53:44:3c: df:6b:c4:7d:96:9a:63:db:8e:19:bf:85:bf:03:ed: 08:f7:9c:c2:09:b9:17:0b:97:f1:c7:a7:20:a7:7f: 1b:8f:23:c1:b4:1e:69:40:23:64:62:93:b5:ee:48: c3:6d:5b:91:25:66:e4:e2:3a:8d:23:2c:2d:40:5a: 09:65:d9:f0:67:86:c0:af:98:7d:6e:b7:f0:8a:8a: 1c:6d:5a:64:86:0d:c3:fd:69:c4:51:29:e2:e4:a3: 72:b3:b5:b0:30:a8:ef:75:7d:06:f6:e2:b2:67:c7: 9c:23:33:9c:83:ae:e2:ef:41:6e:d1:86:0f:74:2b: 50:1d:6b:a0:42:77:08:ae:a5:ca:e1:04:6e:34:d4: a2:4b:50:19:17:0e:4f:90:4c:38:83:10:20:9c:f4: 67:de:b0:57:5d:d2:26:fb:36:58:eb:ec:96:5c:db: a5:d6:f4:76:92:3d:03:38:2c:99:23:37:8c:ee:79: 6f:9d:45:55:90:51:39:3f:f2:7f:e9:bb:73:0e:23: c5:37:77:24:db:3f:d6:44:ed:14:89:03:35:c3:84: 13:71:32:c1:eb:f1:1c:f2:d6:a2:25:fe:82:1d:6b: f8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C7:73:76:FE:26:B5:67:87:FE:06:94:E9:84:6E:D2:B1:C2:74:18 X509v3 Authority Key Identifier: keyid:A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:0f:07:eb:52:c0:21:45:3b:e9:fa:42:91:05:f5:3f:77:ab: 31:1f:e9:fe:55:62:2b:56:97:88:88:77:f3:8b:1c:b3:12:e2: c7:ab:e8:7d:01:a6:42:db:83:9f:59:67:8d:36:f3:97:ab:f1: 04:01:9d:7b:b7:3d:71:3e:e2:2e:9c:48:c2:37:fb:e8:4d:4d: 7d:ef:fd:64:89:32:58:67:73:fa:d2:25:03:e1:14:a4:23:c4: e3:be:44:b6:59:73:2b:86:29:b4:7f:e8:e5:25:20:27:29:36: 37:19:31:95:fe:4d:91:27:97:85:21:97:c5:d0:fe:fe:99:0e: 9a:f0:8d:9c:1d:6f:5b:ba:64:7b:60:e1:25:cf:fe:c5:cb:8d: 26:7d:08:56:28:10:0b:f1:1c:19:b7:6d:36:4e:fb:de:d8:24: 5f:9a:7c:24:fe:c3:66:80:08:cb:03:db:ef:ed:e9:34:be:07: f9:45:71:71:86:34:af:2d:99:4f:98:6f:f8:e9:08:6d:89:53: 84:01:c2:81:c9:b5:fd:bf:0a:d2:75:d1:fc:49:11:69:f7:15: 28:90:a3:48:fd:f7:e8:47:ea:0c:3b:00:10:c5:eb:9e:a7:fe: be:14:4c:45:c0:0c:07:1c:a1:a5:cd:c2:19:0a:86:b4:99:e8: 72:68:28:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN+LhoWtTKyq/K2xrsJldmqq8xVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk5RDI3MjIyNTcyOUIzMDNDOTVGMjg5MTQ4Nzg3NDFD NkFFMjlCRTAeFw0yNTA2MDkwMTA4NTJaFw0yNTA2MTAwMzI5NTJaMDMxMTAvBgNV BAMTKERGQzc3Mzc2RkUyNkI1Njc4N0ZFMDY5NEU5ODQ2RUQyQjFDMjc0MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLjK7w12n8Fco16S/B65xnRoLF MXSIbdq50lNEPN9rxH2WmmPbjhm/hb8D7Qj3nMIJuRcLl/HHpyCnfxuPI8G0HmlA I2Rik7XuSMNtW5ElZuTiOo0jLC1AWgll2fBnhsCvmH1ut/CKihxtWmSGDcP9acRR KeLko3KztbAwqO91fQb24rJnx5wjM5yDruLvQW7Rhg90K1Ada6BCdwiupcrhBG40 1KJLUBkXDk+QTDiDECCc9GfesFdd0ib7Nljr7JZc26XW9HaSPQM4LJkjN4zueW+d RVWQUTk/8n/pu3MOI8U3dyTbP9ZE7RSJAzXDhBNxMsHr8Rzy1qIl/oIda/gDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU38dzdv4mtWeH/gaU6YRu0rHCdBgwHwYDVR0j BBgwFoAUqZ0nIiVymzA8lfKJFIeHQcauKb4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnRDa2h3eVROSHdMQjFZTG5pTWZNTjh0UmFrNlRRTFkza3Q2SnBXRFBN RmgvMC9BOTlEMjcyMjI1NzI5QjMwM0M5NUYyODkxNDg3ODc0MUM2QUUyOUJFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5OUQyNzIyMjU3MjlCMzAz Qzk1RjI4OTE0ODc4NzQxQzZBRTI5QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnRDa2h3eVROSHdMQjFZTG5pTWZNTjh0UmFrNlRRTFkza3Q2SnBXRFBNRmgvMC9B OTlEMjcyMjI1NzI5QjMwM0M5NUYyODkxNDg3ODc0MUM2QUUyOUJFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUg8H61LAIUU76fpCkQX1P3erMR/p/lViK1aXiIh384scsxLix6vofQGmQtuD n1lnjTbzl6vxBAGde7c9cT7iLpxIwjf76E1Nfe/9ZIkyWGdz+tIlA+EUpCPE475E tllzK4YptH/o5SUgJyk2Nxkxlf5NkSeXhSGXxdD+/pkOmvCNnB1vW7pke2DhJc/+ xcuNJn0IVigQC/EcGbdtNk773tgkX5p8JP7DZoAIywPb7+3pNL4H+UVxcYY0ry2Z T5hv+OkIbYlThAHCgcm1/b8K0nXR/EkRafcVKJCjSP336EfqDDsAEMXrnqf+vhRM RcAMBxyhpc3CGQqGtJnocmgokQ== -----END CERTIFICATE-----Generated at Mon Jun 9 14:41:16 2025 by rpki-client