$ rpki-client -vvf rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.mft File: AF4A2DB89E34555B8683D2189961132177B11C81.mft (raw, json) Hash identifier: SgVwQ7XAZiaXcjUUcSIEThjL55eYo9TXQ5dzWQKnJ3k= Subject key identifier: 4A:41:14:04:F4:FD:02:E1:E3:C3:8B:A6:B2:D9:66:FC:99:76:5B:3F Authority key identifier: AF:4A:2D:B8:9E:34:55:5B:86:83:D2:18:99:61:13:21:77:B1:1C:81 Certificate issuer: /CN=AF4A2DB89E34555B8683D2189961132177B11C81 Certificate serial: 0B3F5E37016F7F3F49AAA21A83CA12F7CC94CD07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4A2DB89E34555B8683D2189961132177B11C81.cer Subject info access: rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.mft Manifest number: 29 Signing time: Fri 06 Jun 2025 15:40:47 +0000 Manifest this update: Fri 06 Jun 2025 15:35:47 +0000 Manifest next update: Sat 07 Jun 2025 17:25:47 +0000 Files and hashes: 1: AF4A2DB89E34555B8683D2189961132177B11C81.crl (hash: LJHELT/mwxS5uLQTHGhxddHyJEKlJYzoaQu41Ih2oHk=) 2: 3133382e33362e3131362e302f32322d3332203d3e20323634353737.roa (hash: Db8sToV5ujds5q1beOvfPPCXTGcHwubMfh/VEsxLVhg=) 3: 323830343a323164383a3a2f33322d313238203d3e20323634353737.roa (hash: QNBOlmI1R5nTlUtL4Q8+avShqQstAd9Eh6Nq2rgyZcc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.crl rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4A2DB89E34555B8683D2189961132177B11C81.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 17:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:3f:5e:37:01:6f:7f:3f:49:aa:a2:1a:83:ca:12:f7:cc:94:cd:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4A2DB89E34555B8683D2189961132177B11C81 Validity Not Before: Jun 6 15:35:47 2025 GMT Not After : Jun 7 17:25:47 2025 GMT Subject: CN=4A411404F4FD02E1E3C38BA6B2D966FC99765B3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:91:df:29:10:f0:5d:5a:54:33:f7:4b:83: e7:49:05:c8:c6:f5:55:98:5c:61:17:a7:ee:36:1e: 2f:72:1b:7d:45:6a:ec:40:22:c5:d3:9e:70:b2:8f: f6:35:ee:16:9d:1c:67:79:79:c3:98:d2:b3:fa:99: 9e:84:06:13:2c:37:f4:89:38:c0:e2:c4:45:b3:12: c4:f3:a4:fe:b7:b7:9d:3d:32:de:53:e3:a1:d3:b3: 92:cd:57:45:af:66:e7:8b:ec:65:ef:c9:93:65:c6: 1b:01:8f:b4:1b:6e:6b:d7:28:40:00:3c:5a:3f:e7: 0c:46:0f:eb:df:2a:65:52:d1:34:ef:85:e7:9a:85: 70:ac:40:ef:44:11:20:fe:01:61:1a:16:90:00:62: 40:0f:38:c1:5c:04:eb:27:ea:29:44:ba:f5:0f:4a: df:a2:86:50:c0:43:ba:e9:e2:77:ad:e6:80:bd:ef: fd:d3:9a:5f:80:35:73:e9:cd:3b:3b:5d:dc:d1:81: ec:b4:87:84:25:8b:1a:e0:ef:95:9a:df:0a:2e:dc: 44:10:00:2d:a9:b0:cd:32:3e:77:43:7c:2f:bb:d4: 67:4e:7d:c2:03:b2:d2:75:90:60:de:97:5b:af:5b: 6a:76:71:a2:01:14:51:c7:28:18:38:2f:67:b8:57: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:41:14:04:F4:FD:02:E1:E3:C3:8B:A6:B2:D9:66:FC:99:76:5B:3F X509v3 Authority Key Identifier: keyid:AF:4A:2D:B8:9E:34:55:5B:86:83:D2:18:99:61:13:21:77:B1:1C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4A2DB89E34555B8683D2189961132177B11C81.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5d:72:41:59:38:7b:8e:03:da:72:15:7f:45:37:5c:e8:21: 8e:fc:f3:3d:09:da:24:68:9e:0a:59:ff:86:5e:99:4c:a6:39: e7:5f:71:a1:ee:8b:eb:aa:57:41:1d:b4:36:6d:1b:55:a5:b9: 70:1f:dc:f1:a7:0c:2a:e4:fa:55:cc:ae:dd:31:b2:34:bc:dd: 08:56:b0:ca:50:c8:74:e7:56:e7:4a:ac:3c:1a:66:8a:5b:4b: de:ba:a2:03:60:ee:8f:4e:03:23:9d:82:1e:aa:9d:84:62:cb: 1c:7d:7f:47:29:8c:6e:1e:4c:78:68:ee:4d:0f:3d:71:18:ee: a9:35:aa:b9:7c:6c:62:1f:26:e4:03:35:e5:3f:cf:a9:71:ac: 0f:0b:3e:42:99:0b:a2:a9:08:dc:f7:60:fc:a3:7d:65:62:e9: d3:66:7e:8c:29:92:32:0d:72:67:50:6b:0a:b5:16:10:dc:70: 2c:c9:08:77:28:8f:f4:c9:b2:ab:02:a4:e4:77:ce:82:b9:6f: 30:68:92:ee:ee:35:14:2c:03:27:06:8f:12:ac:f0:56:ae:97: 6b:82:4d:25:3e:df:19:0a:b0:ca:a7:38:78:a1:b9:26:c2:aa: 06:b0:98:ec:0f:cb:06:88:7a:ad:78:81:00:91:ca:5b:15:2f: ce:40:b3:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCz9eNwFvfz9JqqIag8oS98yUzQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QTJEQjg5RTM0NTU1Qjg2ODNEMjE4OTk2MTEzMjE3 N0IxMUM4MTAeFw0yNTA2MDYxNTM1NDdaFw0yNTA2MDcxNzI1NDdaMDMxMTAvBgNV BAMTKDRBNDExNDA0RjRGRDAyRTFFM0MzOEJBNkIyRDk2NkZDOTk3NjVCM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jZHfKRDwXVpUM/dLg+dJBcjG 9VWYXGEXp+42Hi9yG31FauxAIsXTnnCyj/Y17hadHGd5ecOY0rP6mZ6EBhMsN/SJ OMDixEWzEsTzpP63t509Mt5T46HTs5LNV0WvZueL7GXvyZNlxhsBj7QbbmvXKEAA PFo/5wxGD+vfKmVS0TTvheeahXCsQO9EESD+AWEaFpAAYkAPOMFcBOsn6ilEuvUP St+ihlDAQ7rp4net5oC97/3Tml+ANXPpzTs7XdzRgey0h4Qlixrg75Wa3wou3EQQ AC2psM0yPndDfC+71GdOfcIDstJ1kGDel1uvW2p2caIBFFHHKBg4L2e4V/qpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSkEUBPT9AuHjw4umstlm/Jl2Wz8wHwYDVR0j BBgwFoAUr0otuJ40VVuGg9IYmWETIXexHIEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1cyY1NrUVF5cXNBZnVSNjY5NFZaRjJFQmQ3V1Boa0RNY3ZlRDN0ZHl6 ZmIvMC9BRjRBMkRCODlFMzQ1NTVCODY4M0QyMTg5OTYxMTMyMTc3QjExQzgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNEEyREI4OUUzNDU1NUI4 NjgzRDIxODk5NjExMzIxNzdCMTFDODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1cyY1NrUVF5cXNBZnVSNjY5NFZaRjJFQmQ3V1Boa0RNY3ZlRDN0ZHl6ZmIvMC9B RjRBMkRCODlFMzQ1NTVCODY4M0QyMTg5OTYxMTMyMTc3QjExQzgxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnV1yQVk4e44D2nIVf0U3XOghjvzzPQnaJGieCln/hl6ZTKY5519xoe6L66pX QR20Nm0bVaW5cB/c8acMKuT6Vcyu3TGyNLzdCFawylDIdOdW50qsPBpmiltL3rqi A2Duj04DI52CHqqdhGLLHH1/RymMbh5MeGjuTQ89cRjuqTWquXxsYh8m5AM15T/P qXGsDws+QpkLoqkI3Pdg/KN9ZWLp02Z+jCmSMg1yZ1BrCrUWENxwLMkIdyiP9Mmy qwKk5HfOgrlvMGiS7u41FCwDJwaPEqzwVq6Xa4JNJT7fGQqwyqc4eKG5JsKqBrCY 7A/LBoh6rXiBAJHKWxUvzkCzvA== -----END CERTIFICATE-----Generated at Fri Jun 6 19:07:42 2025 by rpki-client