$ rpki-client -vvf rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A823754A25B666811A7A3D363B66B25C14736772.mft File: A823754A25B666811A7A3D363B66B25C14736772.mft (raw, json) Hash identifier: tvPk0yI9JhmLBmEfpvaommw9JtiMO9rq5X9CbRVA1jg= Subject key identifier: 0F:E2:56:79:6F:94:FB:3C:66:4F:6B:D6:D2:33:B5:0A:F1:70:DD:E6 Authority key identifier: A8:23:75:4A:25:B6:66:81:1A:7A:3D:36:3B:66:B2:5C:14:73:67:72 Certificate issuer: /CN=A823754A25B666811A7A3D363B66B25C14736772 Certificate serial: 0F766C609840F28942B49BEFD322E5B45FEC1D3B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A823754A25B666811A7A3D363B66B25C14736772.cer Subject info access: rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A823754A25B666811A7A3D363B66B25C14736772.mft Manifest number: 88 Signing time: Wed 11 Jun 2025 19:23:20 +0000 Manifest this update: Wed 11 Jun 2025 19:18:20 +0000 Manifest next update: Thu 12 Jun 2025 19:38:20 +0000 Files and hashes: 1: A823754A25B666811A7A3D363B66B25C14736772.crl (hash: eQk0bXrsGqRRv0q8fBmLWkd5jXpFTfqLKAH6KaPrHGA=) 2: 3136372e3234392e3132382e302f32322d3332203d3e20323635313738.roa (hash: PYNyriI+LgOMeAHqzV6RhBRJ8g4JrKI+L5Kit7oddIg=) 3: 323830343a326264343a3a2f33322d313238203d3e20323635313738.roa (hash: YbXvx4zeyrAWMZt7jY0Nxfrx9/wHx1yJDUWqLR0a0fo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A823754A25B666811A7A3D363B66B25C14736772.crl rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A823754A25B666811A7A3D363B66B25C14736772.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A823754A25B666811A7A3D363B66B25C14736772.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Jun 2025 19:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:76:6c:60:98:40:f2:89:42:b4:9b:ef:d3:22:e5:b4:5f:ec:1d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A823754A25B666811A7A3D363B66B25C14736772 Validity Not Before: Jun 11 19:18:20 2025 GMT Not After : Jun 12 19:38:20 2025 GMT Subject: CN=0FE256796F94FB3C664F6BD6D233B50AF170DDE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:93:ac:4a:69:22:87:05:c1:18:2f:42:61: 9d:8d:62:1f:a8:7c:f9:9a:12:06:c5:8a:d6:8a:da: ba:3c:64:ee:f4:0e:ee:20:9c:06:db:98:45:e4:fc: 84:8b:8c:4a:4f:27:59:82:4b:c0:88:4a:ae:78:68: 84:8f:1f:d3:94:48:e2:78:77:8b:c2:8c:c6:ce:71: 8e:44:03:ac:17:8b:e9:2a:10:fe:ae:5b:08:b9:0c: ec:72:3c:1d:f5:2b:b5:f3:57:5a:51:b2:c5:b2:cb: 98:ad:89:00:45:d2:b5:7f:19:d7:8e:0a:de:e3:ae: 69:47:ff:42:89:90:59:4c:f0:4c:0f:be:3c:88:b7: 7d:5b:be:ef:d0:f0:f0:3d:7e:67:54:e5:d5:de:8c: 3e:94:e5:b1:6b:3f:3c:83:0c:fe:1a:8b:a4:c4:a4: d8:67:c3:c2:2d:4b:63:40:2e:d9:26:15:03:b4:1f: d0:6a:69:65:33:6e:07:e4:34:e1:46:7f:6c:94:ca: 41:3f:85:dc:6a:b5:7a:91:74:da:17:c7:b9:66:fe: fc:26:7c:85:86:1b:13:fd:10:69:12:e2:95:76:73: 53:12:ce:d0:a7:3d:76:8a:82:47:12:de:a8:94:ae: 80:f9:d3:b0:bf:94:03:49:e9:3b:69:52:87:21:2a: 83:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E2:56:79:6F:94:FB:3C:66:4F:6B:D6:D2:33:B5:0A:F1:70:DD:E6 X509v3 Authority Key Identifier: keyid:A8:23:75:4A:25:B6:66:81:1A:7A:3D:36:3B:66:B2:5C:14:73:67:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A823754A25B666811A7A3D363B66B25C14736772.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A823754A25B666811A7A3D363B66B25C14736772.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/0/A823754A25B666811A7A3D363B66B25C14736772.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:6b:9a:97:45:b4:35:76:02:1e:15:02:5b:8a:cf:d8:85:e2: 7f:f3:20:c8:f6:f0:eb:ce:3e:8d:c0:13:06:6e:2e:15:32:25: ea:ad:fa:dc:4f:cc:12:f2:77:9a:55:dd:30:a6:5a:fd:91:f6: cf:7f:ff:0e:9f:af:1b:89:af:ca:7b:4b:5d:61:d9:06:73:60: 8c:b5:61:33:7a:bf:87:26:cf:c2:00:b5:a9:5b:a9:ea:57:01: 43:b9:12:94:49:e7:7f:e7:e6:26:b0:9b:e4:34:b0:48:81:67: c2:d0:39:90:d8:8c:75:d9:cb:a2:8c:72:43:73:82:c6:3e:f8: d5:35:fd:3b:d9:f2:92:9b:10:c1:0c:42:93:8f:7d:68:82:2c: ce:26:84:a7:55:f1:f1:54:26:a6:64:14:d9:74:5b:14:dc:79: 46:d4:84:12:69:10:b1:b4:bd:d8:87:59:cf:c8:19:68:76:50: 21:6c:30:cb:94:af:98:c4:b3:00:67:de:bc:76:c6:ad:b3:9e: 72:d9:14:32:23:53:9c:85:d8:a8:ea:91:ac:3a:99:98:15:f4: eb:a0:b6:5e:55:b3:74:40:00:eb:9c:46:eb:ad:51:f4:16:2f: 14:46:d3:41:67:f3:6d:99:0d:52:19:0d:46:c1:9d:04:62:9d: ce:65:88:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD3ZsYJhA8olCtJvv0yLltF/sHTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgyMzc1NEEyNUI2NjY4MTFBN0EzRDM2M0I2NkIyNUMx NDczNjc3MjAeFw0yNTA2MTExOTE4MjBaFw0yNTA2MTIxOTM4MjBaMDMxMTAvBgNV BAMTKDBGRTI1Njc5NkY5NEZCM0M2NjRGNkJENkQyMzNCNTBBRjE3MERERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAX5OsSmkihwXBGC9CYZ2NYh+o fPmaEgbFitaK2ro8ZO70Du4gnAbbmEXk/ISLjEpPJ1mCS8CISq54aISPH9OUSOJ4 d4vCjMbOcY5EA6wXi+kqEP6uWwi5DOxyPB31K7XzV1pRssWyy5itiQBF0rV/GdeO Ct7jrmlH/0KJkFlM8EwPvjyIt31bvu/Q8PA9fmdU5dXejD6U5bFrPzyDDP4ai6TE pNhnw8ItS2NALtkmFQO0H9BqaWUzbgfkNOFGf2yUykE/hdxqtXqRdNoXx7lm/vwm fIWGGxP9EGkS4pV2c1MSztCnPXaKgkcS3qiUroD507C/lANJ6TtpUochKoOtAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUD+JWeW+U+zxmT2vW0jO1CvFw3eYwHwYDVR0j BBgwFoAUqCN1SiW2ZoEaej02O2ayXBRzZ3IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1JHclZpaDlCU1J3eUwyVWZlNW1UN3RYaXNhdzFjQWpNWFdqTHVVeGc2 Y20vMC9BODIzNzU0QTI1QjY2NjgxMUE3QTNEMzYzQjY2QjI1QzE0NzM2NzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4MjM3NTRBMjVCNjY2ODEx QTdBM0QzNjNCNjZCMjVDMTQ3MzY3NzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1JHclZpaDlCU1J3eUwyVWZlNW1UN3RYaXNhdzFjQWpNWFdqTHVVeGc2Y20vMC9B ODIzNzU0QTI1QjY2NjgxMUE3QTNEMzYzQjY2QjI1QzE0NzM2NzcyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANGual0W0NXYCHhUCW4rP2IXif/MgyPbw684+jcATBm4uFTIl6q363E/MEvJ3 mlXdMKZa/ZH2z3//Dp+vG4mvyntLXWHZBnNgjLVhM3q/hybPwgC1qVup6lcBQ7kS lEnnf+fmJrCb5DSwSIFnwtA5kNiMddnLooxyQ3OCxj741TX9O9nykpsQwQxCk499 aIIsziaEp1Xx8VQmpmQU2XRbFNx5RtSEEmkQsbS92IdZz8gZaHZQIWwwy5SvmMSz AGfevHbGrbOectkUMiNTnIXYqOqRrDqZmBX066C2XlWzdEAA65xG661R9BYvFEbT QWfzbZkNUhkNRsGdBGKdzmWI8w== -----END CERTIFICATE-----Generated at Wed Jun 11 22:34:36 2025 by rpki-client