$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft File: AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft (raw, json) Hash identifier: J20l+aMy/cv4XFX83ziYKzarPhdjo1fBhM+eEVIVDvs= Subject key identifier: 00:6E:FE:5B:DE:2A:44:60:6A:B3:9B:5B:F9:69:EC:F2:00:48:4C:D0 Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 Certificate issuer: /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Certificate serial: 16F0B17ECF8F1AF655BEB6C3F55A81CF92A63B58 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject info access: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft Manifest number: 0245 Signing time: Fri 13 Jun 2025 03:50:01 +0000 Manifest this update: Fri 13 Jun 2025 03:45:01 +0000 Manifest next update: Sat 14 Jun 2025 04:46:01 +0000 Files and hashes: 1: 34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (hash: JHU7hFLVcz7KCri5GGmgpJSrExwyJApMd1LcVi/3ahc=) 2: AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl (hash: FsJDBW74iP0QT+Qa+eWY4Ulrk2mcUwLc5VQxMWVMLcw=) 3: 34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (hash: XrgPqt2d+yXrgA5qVsA3hVOyOYJP6pNSPVOYcSw37As=) 4: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (hash: G+9fnKDKYzXcNVDiQbyVgNQLvfSyrAWnEylFjOb1cKM=) 5: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (hash: g+h7ZeJQoiwltb4pTrWxNjM0uMiKUgQuoMSR90spDQE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 14 Jun 2025 04:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f0:b1:7e:cf:8f:1a:f6:55:be:b6:c3:f5:5a:81:cf:92:a6:3b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Validity Not Before: Jun 13 03:45:01 2025 GMT Not After : Jun 14 04:46:01 2025 GMT Subject: CN=006EFE5BDE2A44606AB39B5BF969ECF200484CD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:25:8d:da:2c:f6:b7:4e:12:83:1c:c5:0d: c3:96:2d:0a:d9:2a:01:9e:a9:2e:ac:35:19:c0:b0: 39:65:45:c1:51:02:87:8d:dd:1a:bc:1e:62:08:a9: 59:4f:80:a0:b7:b4:ec:6c:d6:23:f0:d8:23:2a:77: 74:da:f8:2f:75:22:d7:cd:35:f1:e5:a8:63:33:7d: 8e:bd:31:4d:77:66:b3:c8:e3:a6:20:2e:aa:6b:1a: 0d:ed:61:87:10:4d:bc:8a:ff:a4:30:a6:48:ed:80: cf:fc:e6:14:17:52:17:7f:90:08:c7:77:30:3d:f0: f3:a8:81:f4:a4:05:ad:d7:eb:77:3c:e8:f8:2e:3f: c0:94:30:8a:35:1b:2f:b4:d0:de:b1:5d:53:52:1a: 30:08:e3:cf:6a:b9:53:b4:68:c9:23:37:4d:3d:b3: 5c:ea:c8:db:24:73:bc:7b:37:37:23:ce:64:c7:a5: 3b:42:58:37:8d:64:ed:b5:dd:88:18:ed:a2:34:ea: 7b:59:07:61:55:ec:a2:5c:ce:41:ef:3a:7f:0e:82: dd:94:83:fc:34:e2:50:9b:e2:02:27:ff:54:03:dd: 01:49:64:d7:da:8e:33:23:62:c4:e8:f7:34:5d:ff: f2:eb:84:f3:8d:f6:a5:3a:17:0e:5b:f0:f0:44:32: 0d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6E:FE:5B:DE:2A:44:60:6A:B3:9B:5B:F9:69:EC:F2:00:48:4C:D0 X509v3 Authority Key Identifier: keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:6c:62:1b:c4:f7:11:79:83:ba:c7:d3:4c:1d:38:a4:20:b4: a6:dd:54:7a:bd:34:03:19:7a:ff:8b:51:d7:51:81:ac:40:ab: 52:25:e4:44:58:87:b1:a2:30:95:f5:d1:71:42:03:2e:09:cb: ce:a6:b2:65:86:76:b8:0d:87:6c:2c:0e:d3:a6:11:19:b0:ba: 63:1d:40:cd:ea:96:88:dc:bd:9c:bd:a3:13:74:53:65:b1:af: f4:ba:d2:33:1c:6b:9a:45:97:31:3a:27:ab:48:1a:e3:ab:48: 31:5a:52:ff:7d:d5:b1:83:13:89:94:35:27:a1:76:66:1e:bd: 5a:5b:2e:75:7c:6a:25:7d:37:7b:09:ea:61:cd:6f:14:0c:52: 46:8e:47:b0:5c:a8:c6:03:72:c8:a1:a4:2b:d2:c1:c0:07:62: b7:3c:f4:6f:fe:98:b3:fd:c6:58:4e:f2:eb:c0:bb:8a:b2:2f: 13:ba:7d:6f:2a:cd:c8:02:40:4b:6c:36:74:2a:e3:d7:e3:a7: 3f:e8:30:d7:c2:64:71:4e:bd:ed:d6:85:68:b8:96:53:a2:51: 25:0f:52:99:87:0e:5b:8d:74:d0:6c:3d:29:6b:67:2b:c7:46: f7:0f:54:a8:02:df:63:88:6d:26:86:55:43:71:e2:03:39:17: 5e:a1:8a:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFvCxfs+PGvZVvrbD9VqBz5KmO1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDNTI5RkIyNDNCNzc4MEEyMEIyN0EyQzRFNzNEQUY2 NUMyNTAyMTAeFw0yNTA2MTMwMzQ1MDFaFw0yNTA2MTQwNDQ2MDFaMDMxMTAvBgNV BAMTKDAwNkVGRTVCREUyQTQ0NjA2QUIzOUI1QkY5NjlFQ0YyMDA0ODRDRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyFCWN2iz2t04SgxzFDcOWLQrZ KgGeqS6sNRnAsDllRcFRAoeN3Rq8HmIIqVlPgKC3tOxs1iPw2CMqd3Ta+C91ItfN NfHlqGMzfY69MU13ZrPI46YgLqprGg3tYYcQTbyK/6QwpkjtgM/85hQXUhd/kAjH dzA98POogfSkBa3X63c86PguP8CUMIo1Gy+00N6xXVNSGjAI489quVO0aMkjN009 s1zqyNskc7x7NzcjzmTHpTtCWDeNZO213YgY7aI06ntZB2FV7KJczkHvOn8Ogt2U g/w04lCb4gIn/1QD3QFJZNfajjMjYsTo9zRd//LrhPON9qU6Fw5b8PBEMg0zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAG7+W94qRGBqs5tb+Wns8gBITNAwHwYDVR0j BBgwFoAUr8Up+yQ7d4CiCyeixOc9r2XCUCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQ UUIvMS9BRkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQzUyOUZCMjQzQjc3ODBB MjBCMjdBMkM0RTczREFGNjVDMjUwMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQUUIvMS9B RkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlmxiG8T3EXmDusfTTB04pCC0pt1Uer00Axl6/4tR11GBrECrUiXkRFiHsaIw lfXRcUIDLgnLzqayZYZ2uA2HbCwO06YRGbC6Yx1AzeqWiNy9nL2jE3RTZbGv9LrS MxxrmkWXMTonq0ga46tIMVpS/33VsYMTiZQ1J6F2Zh69WlsudXxqJX03ewnqYc1v FAxSRo5HsFyoxgNyyKGkK9LBwAditzz0b/6Ys/3GWE7y68C7irIvE7p9byrNyAJA S2w2dCrj1+OnP+gw18JkcU697daFaLiWU6JRJQ9SmYcOW4100Gw9KWtnK8dG9w9U qALfY4htJoZVQ3HiAzkXXqGKXg== -----END CERTIFICATE-----Generated at Fri Jun 13 08:22:41 2025 by rpki-client