$ rpki-client -vvf rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft File: D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft (raw, json) Hash identifier: oUrE4DEIpspBOlZeZKWfmcOL87wX6iWOQCc4C6yQbVw= Subject key identifier: BB:17:17:48:C5:F0:6A:58:D1:E6:50:63:68:E0:BF:9F:2B:98:07:46 Authority key identifier: D9:18:92:54:B7:5B:9D:BB:CA:84:EA:D7:98:65:C5:C5:F7:F1:0E:5D Certificate issuer: /CN=D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D Certificate serial: 0404CFC226FE5F1EC3CAB062AF27093C108450B6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.cer Subject info access: rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft Manifest number: 15 Signing time: Fri 04 Jul 2025 08:11:47 +0000 Manifest this update: Fri 04 Jul 2025 08:06:47 +0000 Manifest next update: Sat 05 Jul 2025 11:35:47 +0000 Files and hashes: 1: D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.crl (hash: phOXjYce/ECtNHgOvIVW0/Xq+v657u2zLDsRXqDQc5A=) 2: 323830343a346237343a3a2f33322d313238203d3e20323637333037.roa (hash: dUZNvF/89BKD0mmyDTVw/iy7hWhShcuVbo/kVaXn0wc=) 3: 34352e3233332e3130342e302f32322d3332203d3e20323637333037.roa (hash: 9GALASwvDqxvBvCAHp51gmtuAoBU3cDGHtT6KouQUqs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.crl rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Jul 2025 09:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:04:cf:c2:26:fe:5f:1e:c3:ca:b0:62:af:27:09:3c:10:84:50:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D Validity Not Before: Jul 4 08:06:47 2025 GMT Not After : Jul 5 11:35:47 2025 GMT Subject: CN=BB171748C5F06A58D1E6506368E0BF9F2B980746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:05:9b:86:54:71:b9:11:cc:ac:bd:a2:07:5c: 34:1d:21:77:47:be:b5:32:58:8a:0e:ab:c0:ff:64: df:85:d5:1d:0d:a8:ab:42:79:ab:db:23:02:58:74: af:c0:67:dc:24:f3:08:09:13:f5:22:fe:b4:f8:12: b8:b9:12:96:8f:3a:f9:81:cc:59:e1:af:9b:ac:12: 8f:47:24:04:32:c5:98:d9:a4:fa:9a:8c:5e:a4:c9: 55:f5:30:b9:d1:96:13:10:6b:ba:1c:0c:9b:f8:05: f3:3b:60:c3:02:da:7a:ba:9c:ad:c9:51:3b:26:92: b0:7c:57:75:8e:5c:86:60:29:3c:fd:0d:73:b9:4a: 84:a5:18:63:f3:9f:c1:6d:6c:25:6c:e3:25:81:ab: 2e:42:61:ea:3c:96:80:09:3e:59:79:e6:7b:9f:66: 25:39:21:9f:be:b6:01:5c:b2:25:72:8c:1b:f9:18: 97:f9:30:29:7e:3f:d0:9a:73:69:41:c5:00:e6:89: 7e:f0:62:e6:ba:34:bd:18:bf:4a:6d:31:ff:83:ac: c6:25:9e:6c:cc:f9:57:da:8a:2f:07:a7:80:03:a4: 59:10:2b:67:ba:61:97:c4:f3:a6:04:04:79:4a:66: 48:88:fb:a0:f6:6f:f2:5a:2e:b1:0a:8b:67:46:3d: d1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:17:17:48:C5:F0:6A:58:D1:E6:50:63:68:E0:BF:9F:2B:98:07:46 X509v3 Authority Key Identifier: keyid:D9:18:92:54:B7:5B:9D:BB:CA:84:EA:D7:98:65:C5:C5:F7:F1:0E:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HAvxg28FCKdD96HgYrymasTourCykKuk8ha5zM6Htqs/0/D9189254B75B9DBBCA84EAD79865C5C5F7F10E5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e7:4a:6a:03:a3:6a:a6:f9:d9:a3:cd:8c:15:35:5c:46:52: 88:31:cb:1b:2f:0d:5e:cb:49:5d:b4:4d:96:08:a6:1d:ec:0d: 63:92:1b:90:4d:57:55:a4:6c:2e:b2:13:1e:15:1d:d7:2d:ac: c9:ae:87:0b:19:fd:e0:bc:96:33:9f:11:18:c8:36:6c:8d:c2: 46:ec:7c:60:93:32:fd:02:bb:e7:de:9c:3f:12:16:ac:4e:63: a9:bf:15:d5:de:a4:9a:ac:96:cd:9c:c4:9f:3a:48:ae:a7:2d: 8a:1c:80:f2:14:25:a8:25:31:6b:cf:be:a7:e2:7e:05:52:52: 97:6d:46:f9:20:ed:76:06:60:d1:93:6d:7d:95:0b:6b:16:59: 78:b6:30:b7:02:86:77:0d:16:bb:c4:cc:b2:ba:96:e0:3f:ee: 92:ba:7d:55:52:c4:a8:0b:71:ae:b3:5e:8f:b7:42:54:7f:01: 13:b7:39:b2:13:b1:e5:ce:7d:c9:b1:9a:92:90:3c:dd:3f:f0: ed:2a:6a:fc:22:34:12:76:c1:c2:20:b7:7b:71:1d:c7:5a:38: b4:75:03:4d:22:03:d6:65:5f:cc:e6:66:7d:b4:e1:3e:fe:6a: d2:5a:c1:f5:a0:ab:73:67:b1:30:55:38:d1:7e:f8:ff:59:f7: e8:4b:b1:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBATPwib+Xx7DyrBirycJPBCEULYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkxODkyNTRCNzVCOURCQkNBODRFQUQ3OTg2NUM1QzVG N0YxMEU1RDAeFw0yNTA3MDQwODA2NDdaFw0yNTA3MDUxMTM1NDdaMDMxMTAvBgNV BAMTKEJCMTcxNzQ4QzVGMDZBNThEMUU2NTA2MzY4RTBCRjlGMkI5ODA3NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqBZuGVHG5EcysvaIHXDQdIXdH vrUyWIoOq8D/ZN+F1R0NqKtCeavbIwJYdK/AZ9wk8wgJE/Ui/rT4Eri5EpaPOvmB zFnhr5usEo9HJAQyxZjZpPqajF6kyVX1MLnRlhMQa7ocDJv4BfM7YMMC2nq6nK3J UTsmkrB8V3WOXIZgKTz9DXO5SoSlGGPzn8FtbCVs4yWBqy5CYeo8loAJPll55nuf ZiU5IZ++tgFcsiVyjBv5GJf5MCl+P9Cac2lBxQDmiX7wYua6NL0Yv0ptMf+DrMYl nmzM+Vfaii8Hp4ADpFkQK2e6YZfE86YEBHlKZkiI+6D2b/JaLrEKi2dGPdF1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUuxcXSMXwaljR5lBjaOC/nyuYB0YwHwYDVR0j BBgwFoAU2RiSVLdbnbvKhOrXmGXFxffxDl0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUhBdnhnMjhGQ0tkRDk2SGdZcnltYXNUb3VyQ3lrS3VrOGhhNXpNNkh0 cXMvMC9EOTE4OTI1NEI3NUI5REJCQ0E4NEVBRDc5ODY1QzVDNUY3RjEwRTVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5MTg5MjU0Qjc1QjlEQkJD QTg0RUFENzk4NjVDNUM1RjdGMTBFNUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUhBdnhnMjhGQ0tkRDk2SGdZcnltYXNUb3VyQ3lrS3VrOGhhNXpNNkh0cXMvMC9E OTE4OTI1NEI3NUI5REJCQ0E4NEVBRDc5ODY1QzVDNUY3RjEwRTVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACedKagOjaqb52aPNjBU1XEZSiDHLGy8NXstJXbRNlgimHewNY5IbkE1XVaRs LrITHhUd1y2sya6HCxn94LyWM58RGMg2bI3CRux8YJMy/QK7596cPxIWrE5jqb8V 1d6kmqyWzZzEnzpIrqctihyA8hQlqCUxa8++p+J+BVJSl21G+SDtdgZg0ZNtfZUL axZZeLYwtwKGdw0Wu8TMsrqW4D/ukrp9VVLEqAtxrrNej7dCVH8BE7c5shOx5c59 ybGakpA83T/w7Spq/CI0EnbBwiC3e3Edx1o4tHUDTSID1mVfzOZmfbThPv5q0lrB 9aCrc2exMFU40X74/1n36EuxhA== -----END CERTIFICATE-----Generated at Fri Jul 4 10:24:26 2025 by rpki-client