$ rpki-client -vvf rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft File: 9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft (raw, json) Hash identifier: SPSgBxVzHjcZoJbM+gyR+AEk4IDkRpkBSbYnfBfNHG4= Subject key identifier: 7F:B3:A1:74:8E:13:60:31:F2:2D:DE:FF:96:BE:9D:B3:30:E8:33:3F Authority key identifier: 9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2 Certificate issuer: /CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2 Certificate serial: 4E6CD699491F346391F63FA0C3D90ABA412D6434 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft Manifest number: 023F Signing time: Sun 08 Jun 2025 11:33:50 +0000 Manifest this update: Sun 08 Jun 2025 11:28:50 +0000 Manifest next update: Mon 09 Jun 2025 13:49:50 +0000 Files and hashes: 1: 323830343a336234633a3a2f33322d313238203d3e20323636313430.roa (hash: wtL9IYalkHyva3LZqTtTEMQ7BxCRTX/aVoPlnkJnyRE=) 2: 9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl (hash: y+DtjJGCk+33fZyg2hsBAyO5z7LbfzuCGBVI0HSixg0=) 3: 34352e362e3136342e302f32322d3332203d3e20323636313430.roa (hash: qMvBmq1pgzlHrJKNsO9NjVqPj2Gyp6zALArUCGJqi18=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Jun 2025 13:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:6c:d6:99:49:1f:34:63:91:f6:3f:a0:c3:d9:0a:ba:41:2d:64:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2 Validity Not Before: Jun 8 11:28:50 2025 GMT Not After : Jun 9 13:49:50 2025 GMT Subject: CN=7FB3A1748E136031F22DDEFF96BE9DB330E8333F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:3e:da:eb:f5:2b:82:4b:3a:bc:8a:a4:ca: 06:f1:d7:02:7b:22:b8:e9:7c:01:d6:43:4b:15:60: e3:26:a5:4a:c7:4a:23:c6:82:76:00:99:dc:66:33: 0a:50:bc:c2:17:aa:24:22:93:10:81:c1:44:a4:80: e1:bf:47:1e:d4:5d:00:f8:6a:20:46:6b:b3:e1:ba: 18:5c:a3:43:ae:85:d6:e9:b8:c4:16:a4:27:2a:b8: 65:31:d1:e1:1c:fa:df:0e:12:2e:9e:f9:b6:b4:d5: 61:ba:12:1c:43:fb:e9:e8:eb:9d:3e:ec:b0:15:cb: 9a:27:68:14:e4:09:12:79:b0:07:e3:5f:a6:45:34: 84:06:84:eb:08:ef:04:f0:c4:28:fb:3d:85:c1:46: f2:02:c4:b4:cc:7c:fc:82:0f:3b:4c:84:9a:26:86: 8e:aa:b0:39:a7:65:39:70:05:b7:29:61:97:59:9e: 4d:18:da:3c:db:ca:f1:97:e8:19:7a:eb:b0:e8:12: 39:2f:4d:47:9c:1e:82:c8:4d:1b:93:5a:e9:44:31: c8:2d:6b:02:e8:ed:ba:e9:fd:ec:01:b4:81:40:16: dc:13:2b:a5:dc:6c:40:2f:02:7c:84:ba:72:43:47: 77:ba:af:ae:1b:10:86:62:4c:0c:73:e9:6a:43:0a: ff:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B3:A1:74:8E:13:60:31:F2:2D:DE:FF:96:BE:9D:B3:30:E8:33:3F X509v3 Authority Key Identifier: keyid:9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:0f:22:8e:e1:00:7d:10:40:0e:12:48:30:b7:fa:dc:66:db: 1c:9b:3b:9c:a7:d2:28:91:1a:76:c6:cf:22:de:60:26:ff:67: cc:35:cf:ac:ef:39:ad:25:96:7c:19:93:e2:df:ae:96:a7:72: 02:cf:82:5b:89:bf:66:50:b8:60:f4:d2:7e:13:9e:5d:6f:5a: 4a:45:05:50:63:db:0e:ae:23:39:d0:9d:0a:96:ef:2f:3d:3b: 7c:41:13:91:21:ea:44:96:3e:8a:e5:22:b9:62:9b:f0:11:7c: e2:09:54:85:64:f6:41:0b:d3:06:d7:e7:e9:e8:83:c0:79:b6: 9c:37:6b:1d:88:09:8d:36:7e:e7:5d:52:87:4a:44:49:85:3f: b9:58:89:c9:75:40:e4:f5:36:20:f0:b6:14:ad:49:0f:b1:a9: 38:c8:58:7a:82:f1:58:b0:6c:e1:b4:3a:29:31:e8:97:f5:2e: 8e:d0:f4:b2:01:ae:84:c4:36:a5:e8:6a:14:56:5e:c0:75:1c: 6a:3f:44:7d:90:75:f6:15:4f:e4:cd:40:7c:a8:54:a3:6d:ed: 30:b6:c2:34:e1:36:cf:a6:23:a0:fc:80:67:91:b5:41:70:a9: 58:fb:e7:90:9e:15:7f:6c:ae:01:51:45:28:bf:8b:60:b0:d7: 94:f1:9f:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTmzWmUkfNGOR9j+gw9kKukEtZDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNDRTkxMzUyQkFBQzBFQTMzNzFGQjQyQ0FDMTAzMEFB OTFCOEJFMjAeFw0yNTA2MDgxMTI4NTBaFw0yNTA2MDkxMzQ5NTBaMDMxMTAvBgNV BAMTKDdGQjNBMTc0OEUxMzYwMzFGMjJEREVGRjk2QkU5REIzMzBFODMzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy7D7a6/Urgks6vIqkygbx1wJ7 IrjpfAHWQ0sVYOMmpUrHSiPGgnYAmdxmMwpQvMIXqiQikxCBwUSkgOG/Rx7UXQD4 aiBGa7Phuhhco0OuhdbpuMQWpCcquGUx0eEc+t8OEi6e+ba01WG6EhxD++no650+ 7LAVy5onaBTkCRJ5sAfjX6ZFNIQGhOsI7wTwxCj7PYXBRvICxLTMfPyCDztMhJom ho6qsDmnZTlwBbcpYZdZnk0Y2jzbyvGX6Bl667DoEjkvTUecHoLITRuTWulEMcgt awLo7brp/ewBtIFAFtwTK6XcbEAvAnyEunJDR3e6r64bEIZiTAxz6WpDCv+5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUf7OhdI4TYDHyLd7/lr6dszDoMz8wHwYDVR0j BBgwFoAUnM6RNSuqwOozcftCysEDCqkbi+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2VQaXNzWVU5RWNUNksyWHVxTjE3N1RuQnNvSjRreUtRNkJrZDVuM1Ey UGEvMS85Q0NFOTEzNTJCQUFDMEVBMzM3MUZCNDJDQUMxMDMwQUE5MUI4QkUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQ0U5MTM1MkJBQUMwRUEz MzcxRkI0MkNBQzEwMzBBQTkxQjhCRTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2VQaXNzWVU5RWNUNksyWHVxTjE3N1RuQnNvSjRreUtRNkJrZDVuM1EyUGEvMS85 Q0NFOTEzNTJCQUFDMEVBMzM3MUZCNDJDQUMxMDMwQUE5MUI4QkUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPg8ijuEAfRBADhJIMLf63GbbHJs7nKfSKJEadsbPIt5gJv9nzDXPrO85rSWW fBmT4t+ulqdyAs+CW4m/ZlC4YPTSfhOeXW9aSkUFUGPbDq4jOdCdCpbvLz07fEET kSHqRJY+iuUiuWKb8BF84glUhWT2QQvTBtfn6eiDwHm2nDdrHYgJjTZ+511Sh0pE SYU/uViJyXVA5PU2IPC2FK1JD7GpOMhYeoLxWLBs4bQ6KTHol/UujtD0sgGuhMQ2 pehqFFZewHUcaj9EfZB19hVP5M1AfKhUo23tMLbCNOE2z6YjoPyAZ5G1QXCpWPvn kJ4Vf2yuAVFFKL+LYLDXlPGfvg== -----END CERTIFICATE-----Generated at Sun Jun 8 15:33:44 2025 by rpki-client