$ rpki-client -vvf rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft File: CA09CE87D7962722451F9BB1B0BABEB641024526.mft (raw, json) Hash identifier: ewRqFasIAmH1icbETTTVqoSpughSOfebslk5rcu0yWA= Subject key identifier: DC:85:1E:7E:9E:FE:A6:C3:E6:1C:57:FA:04:57:D8:9A:9B:4E:80:D6 Authority key identifier: CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26 Certificate issuer: /CN=CA09CE87D7962722451F9BB1B0BABEB641024526 Certificate serial: 284E3F9982C8A0F0D64083DD4C4DF280F9038E65 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer Subject info access: rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft Manifest number: F2 Signing time: Wed 11 Jun 2025 07:36:00 +0000 Manifest this update: Wed 11 Jun 2025 07:31:00 +0000 Manifest next update: Thu 12 Jun 2025 10:53:00 +0000 Files and hashes: 1: 323830343a326666303a3a2f33322d3438203d3e20323634393231.roa (hash: hMF3hpHloqESzD4QlqhEjuvJdOxJcm128UKFYbCgFNs=) 2: CA09CE87D7962722451F9BB1B0BABEB641024526.crl (hash: FukiI4kFTiR1onKvZ/Nl711d7cDozp9tIHfGa3tzkVQ=) 3: 3136382e3232382e3136342e302f32322d3234203d3e20323634393231.roa (hash: NKXUigyoNgvGw8sUtLKz4YtdCSr4kmNU60Zrw78lgfY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Jun 2025 10:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4e:3f:99:82:c8:a0:f0:d6:40:83:dd:4c:4d:f2:80:f9:03:8e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA09CE87D7962722451F9BB1B0BABEB641024526 Validity Not Before: Jun 11 07:31:00 2025 GMT Not After : Jun 12 10:53:00 2025 GMT Subject: CN=DC851E7E9EFEA6C3E61C57FA0457D89A9B4E80D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:88:e0:7e:4e:ff:84:75:aa:7c:83:63:ce:73: 16:f5:59:6c:22:51:5f:cf:45:74:ce:7d:ba:0a:d6: ea:81:c2:82:f2:d7:b7:fa:f6:c5:c4:ed:8b:0c:3c: f1:33:60:2c:50:98:42:40:de:34:59:2f:bb:a7:b3: bb:37:6d:5f:2a:0b:39:ed:b1:0f:88:cc:9f:73:38: 67:96:95:b2:3e:7e:e5:8c:fd:f7:77:9c:f0:3c:43: 63:af:5b:2d:75:63:e8:ea:43:3d:49:03:e3:a7:71: 3d:d1:a4:c3:ac:53:08:59:40:a5:df:8e:3c:c1:0b: 3b:d8:53:93:a0:69:51:17:9c:96:e4:db:47:e8:40: 91:bb:c3:06:d5:53:7e:a9:da:1d:b1:c6:02:de:ca: b0:6b:5f:42:2e:15:fd:4d:9e:17:c2:09:89:7a:79: 87:5b:32:d7:e1:21:ff:62:47:f9:e1:47:2d:56:dd: 35:6b:d3:c8:d4:8f:44:56:c9:b9:7a:97:d7:4f:24: 0d:3a:d0:89:07:55:48:e9:e6:07:ad:2a:7b:d2:ab: 7c:e9:61:d5:84:20:9c:8d:ca:2b:73:49:f4:7b:3d: 3d:f4:3a:b5:4a:92:59:28:d5:80:ba:b8:2f:9d:8c: 46:19:09:b6:7a:9d:92:54:c6:a4:75:49:fd:9c:a2: d8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:85:1E:7E:9E:FE:A6:C3:E6:1C:57:FA:04:57:D8:9A:9B:4E:80:D6 X509v3 Authority Key Identifier: keyid:CA:09:CE:87:D7:96:27:22:45:1F:9B:B1:B0:BA:BE:B6:41:02:45:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA09CE87D7962722451F9BB1B0BABEB641024526.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5TcnaenUhyukZgVeYZAXBPLv4ujbMusfZCqb5C3GHheY/1/CA09CE87D7962722451F9BB1B0BABEB641024526.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e5:4f:80:ea:91:74:42:20:cb:44:ec:9b:fb:00:64:9f:dd: c0:85:1f:c2:5c:6a:a4:e8:e4:55:65:eb:12:3e:8b:b5:9b:d6: d1:ca:03:6a:6e:7d:f1:f1:43:ef:ce:4b:c3:13:09:62:a3:d6: 16:a1:b1:0b:f5:cb:af:3d:c9:61:9a:48:cf:11:5c:63:b2:af: 13:3b:6f:01:7e:8e:8a:7a:ff:f5:86:58:e0:49:95:99:57:d4: 23:9d:20:06:cd:15:58:0d:02:c9:12:27:38:8d:2d:9b:e4:ce: f5:2b:d9:6b:8e:87:6c:b2:a5:c6:29:9c:53:5a:de:21:5f:cc: bf:73:9c:71:29:a6:62:92:ed:2a:8a:77:84:65:31:71:23:cc: 14:1f:52:08:7f:6d:5c:52:e5:67:3a:1f:32:cb:db:30:fc:6b: c1:56:12:35:a4:88:7c:87:be:51:59:53:52:42:b2:9c:1d:06: 86:20:aa:e4:1f:9d:4e:01:80:41:43:dd:22:93:19:43:f2:36: 5f:3d:45:36:bd:de:c0:c1:93:0f:6c:b9:46:d3:6c:12:d9:61: 81:f2:90:20:5b:bb:65:05:28:d1:72:fd:76:9a:36:ef:16:4c: b3:84:f1:e7:4f:5d:8d:cf:d8:97:dd:f5:8f:49:53:3b:72:03: f5:b9:8a:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKE4/mYLIoPDWQIPdTE3ygPkDjmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EwOUNFODdENzk2MjcyMjQ1MUY5QkIxQjBCQUJFQjY0 MTAyNDUyNjAeFw0yNTA2MTEwNzMxMDBaFw0yNTA2MTIxMDUzMDBaMDMxMTAvBgNV BAMTKERDODUxRTdFOUVGRUE2QzNFNjFDNTdGQTA0NTdEODlBOUI0RTgwRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2iOB+Tv+Edap8g2POcxb1WWwi UV/PRXTOfboK1uqBwoLy17f69sXE7YsMPPEzYCxQmEJA3jRZL7uns7s3bV8qCznt sQ+IzJ9zOGeWlbI+fuWM/fd3nPA8Q2OvWy11Y+jqQz1JA+OncT3RpMOsUwhZQKXf jjzBCzvYU5OgaVEXnJbk20foQJG7wwbVU36p2h2xxgLeyrBrX0IuFf1NnhfCCYl6 eYdbMtfhIf9iR/nhRy1W3TVr08jUj0RWybl6l9dPJA060IkHVUjp5getKnvSq3zp YdWEIJyNyitzSfR7PT30OrVKklko1YC6uC+djEYZCbZ6nZJUxqR1Sf2coth9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3IUefp7+psPmHFf6BFfYmptOgNYwHwYDVR0j BBgwFoAUygnOh9eWJyJFH5uxsLq+tkECRSYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVRjbmFlblVoeXVrWmdWZVlaQVhCUEx2NHVqYk11c2ZaQ3FiNUMzR0ho ZVkvMS9DQTA5Q0U4N0Q3OTYyNzIyNDUxRjlCQjFCMEJBQkVCNjQxMDI0NTI2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMDlDRTg3RDc5NjI3MjI0 NTFGOUJCMUIwQkFCRUI2NDEwMjQ1MjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVRjbmFlblVoeXVrWmdWZVlaQVhCUEx2NHVqYk11c2ZaQ3FiNUMzR0hoZVkvMS9D QTA5Q0U4N0Q3OTYyNzIyNDUxRjlCQjFCMEJBQkVCNjQxMDI0NTI2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASeVPgOqRdEIgy0Tsm/sAZJ/dwIUfwlxqpOjkVWXrEj6LtZvW0coDam598fFD 785LwxMJYqPWFqGxC/XLrz3JYZpIzxFcY7KvEztvAX6Oinr/9YZY4EmVmVfUI50g Bs0VWA0CyRInOI0tm+TO9SvZa46HbLKlximcU1reIV/Mv3OccSmmYpLtKop3hGUx cSPMFB9SCH9tXFLlZzofMsvbMPxrwVYSNaSIfIe+UVlTUkKynB0GhiCq5B+dTgGA QUPdIpMZQ/I2Xz1FNr3ewMGTD2y5RtNsEtlhgfKQIFu7ZQUo0XL9dpo27xZMs4Tx 509djc/Yl931j0lTO3ID9bmKsA== -----END CERTIFICATE-----Generated at Wed Jun 11 20:32:37 2025 by rpki-client