$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.mft File: CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.mft (raw, json) Hash identifier: WM+35e5e5/UqKhyOdc6PyZjiPSitLU++n+3VhfLQqxs= Subject key identifier: A6:AE:91:E2:DC:61:31:9D:0E:B5:5E:F3:B9:CD:0F:0B:00:63:AD:8B Authority key identifier: CA:AA:D4:3E:EF:6D:A3:FC:BA:65:80:EB:4E:34:A2:30:2B:19:BC:EF Certificate issuer: /CN=CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF Certificate serial: 41D27EA869AF4DE0A7053A7746C8035F4072B2D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.cer Subject info access: rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.mft Manifest number: 9B Signing time: Tue 03 Jun 2025 14:19:17 +0000 Manifest this update: Tue 03 Jun 2025 14:14:17 +0000 Manifest next update: Wed 04 Jun 2025 17:56:17 +0000 Files and hashes: 1: 34352e3138372e36302e302f32322d3232203d3e20323639343537.roa (hash: H8vg+/aGRep9VIXudtxLNxdC5kTOFSH+n2sFWuHCzEE=) 2: 323830343a363465383a383030303a3a2f33332d3333203d3e20323639343537.roa (hash: zGh7UqL2DDmX9WrYgb+qU0kcX1WftTr4K3sjVCejqoQ=) 3: 323830343a363465383a3a2f33322d3332203d3e20323639343537.roa (hash: ++wPJ3C/mJVmNLKg2RJpWh9Ctx5LS0gw+l1Ur9v3FUA=) 4: 34352e3138372e36322e302f32332d3233203d3e20323639343537.roa (hash: 0QY9GpejJghvNVjajtaiFW5uKSTj2YhGAcaSnk8J4pM=) 5: CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.crl (hash: QklCu36gqenzPxphxmM6zfe6Sqf1gO0i6gBlwGr9JnQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.crl rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Jun 2025 17:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:d2:7e:a8:69:af:4d:e0:a7:05:3a:77:46:c8:03:5f:40:72:b2:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF Validity Not Before: Jun 3 14:14:17 2025 GMT Not After : Jun 4 17:56:17 2025 GMT Subject: CN=A6AE91E2DC61319D0EB55EF3B9CD0F0B0063AD8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9b:6a:f2:b6:89:f0:1d:1e:31:ed:72:92:d0: a1:1f:26:3a:32:dd:06:36:23:c1:91:b7:30:dd:3c: 51:58:a4:a5:0f:15:61:db:92:5e:16:94:87:b5:c2: 83:f4:25:67:d3:b4:a5:b2:6d:fe:f8:ef:fe:17:94: 58:3c:69:30:54:8e:8a:d9:05:b4:c8:82:5d:6d:84: 8a:45:12:4a:f5:a5:e4:4c:9c:1c:fd:f5:00:a6:74: 1a:64:aa:b8:19:d5:a9:a7:a4:28:de:5e:04:00:03: 12:86:84:d2:a8:f3:c1:c6:fb:3c:c6:cd:c3:df:fa: 02:46:97:a7:d3:95:9d:1d:55:9d:09:ec:a4:1d:4b: cc:3b:57:64:a0:63:ef:9a:ca:90:1d:f8:c0:0a:b1: 14:30:f3:4d:5f:8f:4d:4f:fa:05:4d:e1:1d:db:af: f3:07:97:83:9e:67:4b:6f:3f:74:dd:f4:8c:e1:7f: 41:83:76:4a:5c:1a:2d:61:cb:e3:11:9b:fb:3d:3e: 90:bb:cf:b2:85:d0:c2:fa:a1:ca:db:a9:40:ed:2d: f3:5b:2e:c7:7e:b9:6a:4d:12:50:35:3a:00:8e:ff: 16:af:7d:fa:64:ba:dc:fc:8e:02:cf:68:53:61:af: 28:2b:f9:2b:10:1e:2e:c7:91:be:72:70:91:59:d0: c7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AE:91:E2:DC:61:31:9D:0E:B5:5E:F3:B9:CD:0F:0B:00:63:AD:8B X509v3 Authority Key Identifier: keyid:CA:AA:D4:3E:EF:6D:A3:FC:BA:65:80:EB:4E:34:A2:30:2B:19:BC:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:15:e7:ca:a5:e2:77:be:79:4f:aa:e1:33:5a:e3:50:15:26: c6:c2:a9:78:12:a4:48:39:9f:ac:38:83:d5:62:e3:f6:21:6e: 9a:9f:35:80:52:3a:b7:26:9a:ab:2f:87:fd:cc:55:36:3a:0f: 71:0e:cc:d7:ac:9a:6d:9f:a9:37:a5:83:34:d0:90:dd:ff:17: c6:59:26:74:6c:1f:5c:f2:9b:ea:a8:64:4f:a0:80:9f:b8:aa: a1:91:e7:13:e3:63:85:77:37:5e:5b:e8:52:6c:49:ae:b4:bc: e9:bb:3b:24:7a:2f:75:fa:46:75:47:e4:71:3d:c2:db:ef:08: fc:a4:33:6b:0e:c6:63:53:d1:88:5d:e8:f1:0f:3b:f4:de:68: d0:e3:5d:5c:37:54:18:69:fd:19:ed:52:5f:f2:66:f4:32:4a: 4e:9c:2b:cb:c6:c8:bf:dc:92:f5:94:86:28:c9:b7:44:6e:a4: 54:fb:a6:b2:c6:32:a5:09:3c:54:39:52:f8:e4:41:50:3e:e4: 4d:0e:b7:e7:f4:94:b3:ec:02:e2:cc:e8:6f:fa:ca:6e:c1:ce: 57:94:1c:63:56:38:5f:52:fc:7e:a7:7d:8e:62:26:2c:a9:62: f0:2f:fd:62:06:e4:b5:c3:1c:25:36:46:50:e8:53:a5:2a:3b: 2f:4f:da:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQdJ+qGmvTeCnBTp3RsgDX0BystIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBQUQ0M0VFRjZEQTNGQ0JBNjU4MEVCNEUzNEEyMzAy QjE5QkNFRjAeFw0yNTA2MDMxNDE0MTdaFw0yNTA2MDQxNzU2MTdaMDMxMTAvBgNV BAMTKEE2QUU5MUUyREM2MTMxOUQwRUI1NUVGM0I5Q0QwRjBCMDA2M0FEOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCym2rytonwHR4x7XKS0KEfJjoy 3QY2I8GRtzDdPFFYpKUPFWHbkl4WlIe1woP0JWfTtKWybf747/4XlFg8aTBUjorZ BbTIgl1thIpFEkr1peRMnBz99QCmdBpkqrgZ1amnpCjeXgQAAxKGhNKo88HG+zzG zcPf+gJGl6fTlZ0dVZ0J7KQdS8w7V2SgY++aypAd+MAKsRQw801fj01P+gVN4R3b r/MHl4OeZ0tvP3Td9Izhf0GDdkpcGi1hy+MRm/s9PpC7z7KF0ML6ocrbqUDtLfNb Lsd+uWpNElA1OgCO/xavffpkutz8jgLPaFNhrygr+SsQHi7Hkb5ycJFZ0MclAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpq6R4txhMZ0OtV7zuc0PCwBjrYswHwYDVR0j BBgwFoAUyqrUPu9to/y6ZYDrTjSiMCsZvO8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2RhOUczaXJUM1g5VVEzYzJaNFlRdUN0bUxVek5xN1NzUFR1ZGQ2V2dl V0MvMC9DQUFBRDQzRUVGNkRBM0ZDQkE2NTgwRUI0RTM0QTIzMDJCMTlCQ0VGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBQUFENDNFRUY2REEzRkNC QTY1ODBFQjRFMzRBMjMwMkIxOUJDRUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2RhOUczaXJUM1g5VVEzYzJaNFlRdUN0bUxVek5xN1NzUFR1ZGQ2V2dlV0MvMC9D QUFBRDQzRUVGNkRBM0ZDQkE2NTgwRUI0RTM0QTIzMDJCMTlCQ0VGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIBXnyqXid755T6rhM1rjUBUmxsKpeBKkSDmfrDiD1WLj9iFump81gFI6tyaa qy+H/cxVNjoPcQ7M16yabZ+pN6WDNNCQ3f8XxlkmdGwfXPKb6qhkT6CAn7iqoZHn E+NjhXc3XlvoUmxJrrS86bs7JHovdfpGdUfkcT3C2+8I/KQzaw7GY1PRiF3o8Q87 9N5o0ONdXDdUGGn9Ge1SX/Jm9DJKTpwry8bIv9yS9ZSGKMm3RG6kVPumssYypQk8 VDlS+ORBUD7kTQ635/SUs+wC4szob/rKbsHOV5QcY1Y4X1L8fqd9jmImLKli8C/9 YgbktcMcJTZGUOhTpSo7L0/aCg== -----END CERTIFICATE-----Generated at Wed Jun 4 10:42:10 2025 by rpki-client