$ rpki-client -vvf rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.mft File: 98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.mft (raw, json) Hash identifier: PcjWG+GjPyACR/EXP3NovhjufZXffJIAHawDYRZlfqk= Subject key identifier: AB:64:DE:8B:FD:A7:86:04:EE:9E:51:5A:54:82:19:9D:73:B7:85:CA Authority key identifier: 98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2 Certificate issuer: /CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2 Certificate serial: 0BF7CC48BFED10CCB0638D62459176F52FF7382F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.mft Manifest number: F3 Signing time: Sun 08 Jun 2025 07:47:11 +0000 Manifest this update: Sun 08 Jun 2025 07:42:11 +0000 Manifest next update: Mon 09 Jun 2025 11:03:11 +0000 Files and hashes: 1: 34352e3137332e3131362e302f32322d3234203d3e20323638383130.roa (hash: JNyxID+gpuiIJFxC2JoVZpDW5lJY/bY+ID0T+4W/0SU=) 2: 323830343a356166383a3a2f33322d3438203d3e20323638383130.roa (hash: m8yM79Ui0jUcrLIMqQSDhUwukcLiQdHQnioL1vHdmkw=) 3: 98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.crl (hash: 8WafnWTEYQIY5Wqb02WYwudQ7kxVQFGSr5ZtTvzsVUQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.crl rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Jun 2025 11:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f7:cc:48:bf:ed:10:cc:b0:63:8d:62:45:91:76:f5:2f:f7:38:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2 Validity Not Before: Jun 8 07:42:11 2025 GMT Not After : Jun 9 11:03:11 2025 GMT Subject: CN=AB64DE8BFDA78604EE9E515A5482199D73B785CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ed:7b:e2:35:c8:c9:bd:11:dd:fb:83:74:52: aa:44:43:39:03:c5:56:12:68:cc:ee:9c:4a:bc:f7: ef:40:4a:67:25:a2:92:c5:45:18:c3:0b:bb:41:78: f4:83:1c:b9:23:65:03:fa:a3:96:4f:e4:5b:c7:98: 3f:2c:97:3e:2d:18:09:6e:19:d3:69:3b:bf:2a:f1: b2:41:f0:0f:64:d9:1a:56:a8:81:da:62:9e:42:a1: 4f:14:01:dd:ab:61:0f:1a:91:0e:67:39:ac:c4:4b: 60:06:7a:7a:89:46:00:d7:40:f8:25:a7:43:cd:5f: 1a:b4:4c:28:21:12:2b:a4:08:d0:95:90:74:68:53: 55:68:cf:d4:1f:b8:84:12:4c:74:18:21:00:c3:b7: f4:8e:bb:e8:ce:9c:1f:b1:b8:8a:eb:f5:11:b4:64: b9:ec:95:fd:86:30:f4:7e:e2:c0:a3:7e:d2:65:6f: 1d:87:43:7a:cd:fa:ea:80:1a:6f:0b:25:6d:df:7a: 14:b1:10:ee:f2:f6:fd:4a:a4:7e:e9:a1:5e:9f:20: 63:a0:aa:1a:ed:7e:d7:35:5d:55:fd:3b:2c:8e:34: 19:9c:5e:b8:de:62:38:bd:e5:30:74:4f:eb:9d:b7: 32:c9:5b:58:5e:8d:06:c9:00:f6:ee:3e:73:1c:fa: eb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:64:DE:8B:FD:A7:86:04:EE:9E:51:5A:54:82:19:9D:73:B7:85:CA X509v3 Authority Key Identifier: keyid:98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d5:a7:85:20:01:4c:cc:07:c8:fe:cb:ef:78:ff:e1:c2:5e: 56:dc:22:c9:06:6d:53:6c:37:53:89:81:4a:1a:92:a6:7f:18: dc:96:5a:0c:d0:53:eb:1c:b2:b5:6d:8f:1a:81:13:aa:9d:72: 88:cc:a2:3d:d8:d7:a0:75:55:5e:41:7d:43:c3:e1:1b:89:fb: aa:8a:c2:e5:15:bc:dd:64:12:af:f9:3e:76:95:b4:3c:b8:b8: 5e:8d:b5:01:46:87:ab:e0:87:14:bf:73:fe:03:85:a2:c5:1c: d8:9e:58:fa:48:2b:43:db:03:94:fa:63:0b:97:f0:7b:31:83: fa:ba:e3:24:78:06:cb:b6:47:48:6c:8b:77:fa:f0:11:09:6d: e5:a6:7c:9d:4f:71:97:36:56:19:68:47:64:d0:3c:1c:2a:53: a6:3f:85:c4:44:fc:a1:39:e3:1e:ae:70:63:35:91:b4:9a:53: 7b:ae:d0:d5:98:09:36:ec:00:31:41:f5:c2:7d:1c:29:4a:f2: 86:1a:6e:a0:87:ab:b3:c0:c0:e4:09:40:cf:df:e4:48:ca:7c: eb:6a:8a:5d:55:2f:83:2f:e5:56:78:ac:d7:08:3c:4f:87:81: 4c:68:f1:61:26:6a:e2:2e:11:e0:d9:d8:af:e9:5c:ec:77:b3: 1f:b4:c6:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUC/fMSL/tEMywY41iRZF29S/3OC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThFMzE2NEVGQTZFQTlBQTlEODhCNzJFQUZGQTBDQ0ZF OTNDNDRFMjAeFw0yNTA2MDgwNzQyMTFaFw0yNTA2MDkxMTAzMTFaMDMxMTAvBgNV BAMTKEFCNjRERThCRkRBNzg2MDRFRTlFNTE1QTU0ODIxOTlENzNCNzg1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl7XviNcjJvRHd+4N0UqpEQzkD xVYSaMzunEq89+9ASmclopLFRRjDC7tBePSDHLkjZQP6o5ZP5FvHmD8slz4tGAlu GdNpO78q8bJB8A9k2RpWqIHaYp5CoU8UAd2rYQ8akQ5nOazES2AGenqJRgDXQPgl p0PNXxq0TCghEiukCNCVkHRoU1Voz9QfuIQSTHQYIQDDt/SOu+jOnB+xuIrr9RG0 ZLnslf2GMPR+4sCjftJlbx2HQ3rN+uqAGm8LJW3fehSxEO7y9v1KpH7poV6fIGOg qhrtftc1XVX9OyyONBmcXrjeYji95TB0T+udtzLJW1hejQbJAPbuPnMc+ut5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUq2Tei/2nhgTunlFaVIIZnXO3hcowHwYDVR0j BBgwFoAUmOMWTvpuqaqdiLcur/oMz+k8ROIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFQ2N1Z3YzRTVnpCWEVHdlh3ZmJ6QVdZUFdxcjJIeE40UnpCZTdvN1o5 dDIvMC85OEUzMTY0RUZBNkVBOUFBOUQ4OEI3MkVBRkZBMENDRkU5M0M0NEUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4RTMxNjRFRkE2RUE5QUE5 RDg4QjcyRUFGRkEwQ0NGRTkzQzQ0RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFQ2N1Z3YzRTVnpCWEVHdlh3ZmJ6QVdZUFdxcjJIeE40UnpCZTdvN1o5dDIvMC85 OEUzMTY0RUZBNkVBOUFBOUQ4OEI3MkVBRkZBMENDRkU5M0M0NEUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH9WnhSABTMwHyP7L73j/4cJeVtwiyQZtU2w3U4mBShqSpn8Y3JZaDNBT6xyy tW2PGoETqp1yiMyiPdjXoHVVXkF9Q8PhG4n7qorC5RW83WQSr/k+dpW0PLi4Xo21 AUaHq+CHFL9z/gOFosUc2J5Y+kgrQ9sDlPpjC5fwezGD+rrjJHgGy7ZHSGyLd/rw EQlt5aZ8nU9xlzZWGWhHZNA8HCpTpj+FxET8oTnjHq5wYzWRtJpTe67Q1ZgJNuwA MUH1wn0cKUryhhpuoIers8DA5AlAz9/kSMp862qKXVUvgy/lVnis1wg8T4eBTGjx YSZq4i4R4NnYr+lc7HezH7TGmw== -----END CERTIFICATE-----Generated at Sun Jun 8 18:39:52 2025 by rpki-client