$ rpki-client -vvf rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft File: 16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft (raw, json) Hash identifier: sECVgJHbUsBD/P7TNY9H312xghv4+1gKEpG81eXa2+E= Subject key identifier: 46:BC:0B:AD:EC:0E:7B:B4:51:E6:C3:64:F3:85:9E:2C:5E:A9:6C:C2 Authority key identifier: 16:FF:CD:7C:F1:37:4D:25:6D:7E:12:26:D5:1D:91:AF:91:53:AA:A2 Certificate issuer: /CN=16FFCD7CF1374D256D7E1226D51D91AF9153AAA2 Certificate serial: 510A389BD45C030B9B8BA8E6CD72291862CA79CA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft Manifest number: 2A Signing time: Fri 04 Jul 2025 06:32:53 +0000 Manifest this update: Fri 04 Jul 2025 06:27:53 +0000 Manifest next update: Sat 05 Jul 2025 10:04:53 +0000 Files and hashes: 1: 323830343a366434633a3a2f33322d3438203d3e20323730353233.roa (hash: 2SpWKqeZtpyvOk2iIU96KE99DLd99IqbFLz/vOFGwHs=) 2: 16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.crl (hash: vkvV4MMclOpDMu1AvR3+cTHUouO95Rm26nqJUOelVWA=) 3: 3138372e3130332e3139362e302f32322d3234203d3e20323730353233.roa (hash: PGi32eLOlSnhPw5J0SZ6oEdg+SG2e7g5GjCW+zS2fKA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.crl rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Jul 2025 10:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:0a:38:9b:d4:5c:03:0b:9b:8b:a8:e6:cd:72:29:18:62:ca:79:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16FFCD7CF1374D256D7E1226D51D91AF9153AAA2 Validity Not Before: Jul 4 06:27:53 2025 GMT Not After : Jul 5 10:04:53 2025 GMT Subject: CN=46BC0BADEC0E7BB451E6C364F3859E2C5EA96CC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d5:60:a2:60:11:ad:d5:a9:9b:52:ed:af:aa: f0:d3:39:da:e5:e8:15:10:0f:30:a5:d9:d2:50:33: bf:2f:2f:db:88:0f:0c:55:76:4d:2f:45:a5:5f:6c: 00:65:aa:b2:56:12:49:d9:3c:db:17:81:6e:14:fc: 5a:d6:ca:e9:52:48:18:5c:59:5d:96:1f:7c:35:44: 66:4e:06:8a:02:1d:7b:24:84:21:df:3e:20:aa:9b: e5:e0:b7:80:8b:79:aa:42:68:35:f0:ac:08:96:d1: df:4e:4c:c5:d0:be:b9:c3:5b:7d:3a:f0:22:0b:0c: ae:93:61:b9:f5:0c:3a:18:35:d3:67:47:5f:14:bd: 53:b5:34:08:6f:d7:e2:a7:3e:d6:be:d8:e5:3c:d7: 12:61:67:6a:63:3b:31:94:2d:4d:86:6c:38:ad:95: 54:2f:0f:64:6e:65:48:5d:d3:3b:70:a6:1d:25:d0: 3f:06:90:6d:a7:21:ff:bf:61:28:38:44:4e:ed:5e: c2:9e:74:df:dd:1d:17:7c:f8:ef:d7:35:89:87:d8: 4f:cb:3f:d8:0a:9d:52:35:7e:6d:15:0f:a8:bb:00: 87:36:a9:7b:a9:28:ba:2f:a3:c0:e1:8f:56:c9:e6: 0d:15:73:d7:fd:a5:eb:3c:1a:aa:d4:d9:dc:f1:d8: f8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BC:0B:AD:EC:0E:7B:B4:51:E6:C3:64:F3:85:9E:2C:5E:A9:6C:C2 X509v3 Authority Key Identifier: keyid:16:FF:CD:7C:F1:37:4D:25:6D:7E:12:26:D5:1D:91:AF:91:53:AA:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:7b:9d:9c:16:7f:ad:16:91:f8:b7:47:2b:e5:f0:83:d2:b5: 72:c6:ab:f6:70:26:86:43:58:40:c1:89:dd:0c:1b:7b:85:a4: ef:28:90:08:91:49:c4:3b:dc:ed:6c:37:5c:60:4f:73:a2:2f: eb:cd:d5:82:6f:14:57:36:40:21:a8:c0:c4:bf:b1:df:78:e0: a9:b2:7a:f7:2f:39:77:ea:c1:e5:20:59:31:f5:15:49:35:12: a7:ef:67:e8:5b:9f:98:72:e6:df:4c:50:27:fe:04:57:47:61: 3b:f1:12:45:63:78:69:38:20:84:dc:08:90:ea:2f:46:9e:48: b1:2e:f2:31:fe:09:37:6a:a5:72:d9:0a:bb:11:ac:6e:a2:cd: 67:a3:f8:d5:1a:49:32:9d:0a:77:d2:e8:6b:ae:1d:f5:50:ea: a5:de:4b:5e:ec:83:cc:7b:61:ac:8c:ca:22:9a:ef:da:2d:45: 1f:be:b8:8c:9f:0e:9a:92:e7:9d:32:4f:2a:6d:df:68:0c:9a: 8b:23:76:f6:01:b3:97:48:83:c9:cc:63:1f:31:94:c9:e0:97: 7f:d6:c8:40:af:c9:cc:b7:1f:58:ee:26:b3:38:d6:e8:0b:c0: b8:8a:0b:16:b6:db:75:61:35:77:45:6d:12:b3:fe:da:15:d2: 9f:8a:c0:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUQo4m9RcAwubi6jmzXIpGGLKecowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGRkNEN0NGMTM3NEQyNTZEN0UxMjI2RDUxRDkxQUY5 MTUzQUFBMjAeFw0yNTA3MDQwNjI3NTNaFw0yNTA3MDUxMDA0NTNaMDMxMTAvBgNV BAMTKDQ2QkMwQkFERUMwRTdCQjQ1MUU2QzM2NEYzODU5RTJDNUVBOTZDQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1WCiYBGt1ambUu2vqvDTOdrl 6BUQDzCl2dJQM78vL9uIDwxVdk0vRaVfbABlqrJWEknZPNsXgW4U/FrWyulSSBhc WV2WH3w1RGZOBooCHXskhCHfPiCqm+Xgt4CLeapCaDXwrAiW0d9OTMXQvrnDW306 8CILDK6TYbn1DDoYNdNnR18UvVO1NAhv1+KnPta+2OU81xJhZ2pjOzGULU2GbDit lVQvD2RuZUhd0ztwph0l0D8GkG2nIf+/YSg4RE7tXsKedN/dHRd8+O/XNYmH2E/L P9gKnVI1fm0VD6i7AIc2qXupKLovo8Dhj1bJ5g0Vc9f9pes8GqrU2dzx2Pg7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURrwLrewOe7RR5sNk84WeLF6pbMIwHwYDVR0j BBgwFoAUFv/NfPE3TSVtfhIm1R2Rr5FTqqIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXRwbWtWaXp4cVhEYmtEUndOMXZvUGRYVEVGWTVmNEdhRG1tb0tad3Vx em4vMC8xNkZGQ0Q3Q0YxMzc0RDI1NkQ3RTEyMjZENTFEOTFBRjkxNTNBQUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2RkZDRDdDRjEzNzREMjU2 RDdFMTIyNkQ1MUQ5MUFGOTE1M0FBQTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXRwbWtWaXp4cVhEYmtEUndOMXZvUGRYVEVGWTVmNEdhRG1tb0tad3Vxem4vMC8x NkZGQ0Q3Q0YxMzc0RDI1NkQ3RTEyMjZENTFEOTFBRjkxNTNBQUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg3udnBZ/rRaR+LdHK+Xwg9K1csar9nAmhkNYQMGJ3Qwbe4Wk7yiQCJFJxDvc 7Ww3XGBPc6Iv683Vgm8UVzZAIajAxL+x33jgqbJ69y85d+rB5SBZMfUVSTUSp+9n 6FufmHLm30xQJ/4EV0dhO/ESRWN4aTgghNwIkOovRp5IsS7yMf4JN2qlctkKuxGs bqLNZ6P41RpJMp0Kd9Loa64d9VDqpd5LXuyDzHthrIzKIprv2i1FH764jJ8OmpLn nTJPKm3faAyaiyN29gGzl0iDycxjHzGUyeCXf9bIQK/JzLcfWO4mszjW6AvAuIoL FrbbdWE1d0VtErP+2hXSn4rA7Q== -----END CERTIFICATE-----Generated at Fri Jul 4 11:52:09 2025 by rpki-client