$ rpki-client -vvf rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft File: 9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft (raw, json) Hash identifier: PryIP8MJKBKcTwDFp7vuT+zvHgjqLuwx/+QHlZf9c/o= Subject key identifier: 9D:B0:5E:CE:1E:C1:21:0C:37:94:F6:D6:D1:D2:8D:AB:43:DD:A5:3F Authority key identifier: 93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9 Certificate issuer: /CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9 Certificate serial: 38AC91C39240AD1C5B45DE40D44227BEA3A0E074 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer Subject info access: rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft Manifest number: 016F Signing time: Tue 03 Jun 2025 16:42:16 +0000 Manifest this update: Tue 03 Jun 2025 16:37:16 +0000 Manifest next update: Wed 04 Jun 2025 19:33:16 +0000 Files and hashes: 1: 323830343a6634633a3a2f33322d313238203d3e20323633353738.roa (hash: B6daVyJaghirt79xvfIbfN4GpwDsvjw5NaxWiYZAtfI=) 2: 9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl (hash: 7uVdmBeqWE3Nd5mEETHLRPMsJYmQN7Xo0bVyOxTDfkA=) 3: 3137392e3130392e36342e302f32302d3332203d3e20323633353738.roa (hash: GrklC+iJFrsRI0w34SWrbnIjXmvJwXpX2cd9jvwvrmw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Jun 2025 19:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ac:91:c3:92:40:ad:1c:5b:45:de:40:d4:42:27:be:a3:a0:e0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9397C28E3065FBE481254AA8C0CEF6906F66ABE9 Validity Not Before: Jun 3 16:37:16 2025 GMT Not After : Jun 4 19:33:16 2025 GMT Subject: CN=9DB05ECE1EC1210C3794F6D6D1D28DAB43DDA53F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:93:00:27:7f:37:23:d1:96:e8:07:d4:9f:dd: 60:15:18:9a:1f:ab:3d:65:63:c6:94:67:5b:7b:61: d3:04:7a:0f:81:fa:c0:f7:f9:3b:c0:70:82:95:f6: 9f:d3:b8:28:dd:c8:3d:25:10:9e:88:89:30:e8:cb: 0b:6e:36:f5:ce:b1:95:e2:21:44:00:ce:d5:eb:43: 62:b1:58:06:06:0d:4f:2c:da:bf:56:db:c8:01:78: 3d:c7:f0:ea:f8:a8:0c:86:15:76:4d:c6:81:92:14: 4b:02:61:6a:a8:de:51:e1:cb:f8:b9:09:8f:6c:47: 5e:21:51:06:6e:85:e3:4d:28:de:ae:ed:ae:ac:5a: b6:3e:5f:c3:8d:83:d2:10:9f:18:3d:44:f4:52:88: d3:43:42:1d:7b:19:6a:ec:70:22:9c:57:b7:74:1a: 08:6b:44:58:e3:f7:5f:61:e2:86:37:8b:ab:e9:23: 8b:67:a2:32:82:68:d0:e8:87:f3:2c:5d:56:ce:ac: 10:70:6d:d6:d5:e4:86:7e:b2:1f:e6:f2:d3:a8:38: d1:25:3f:8d:5e:4a:a4:20:c3:42:a0:c1:31:33:9d: 7a:fa:90:21:06:16:4f:d4:9d:1d:05:28:6c:1f:d4: 68:e5:bc:7d:33:6a:16:a6:ae:70:c3:e5:0a:b2:be: 55:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B0:5E:CE:1E:C1:21:0C:37:94:F6:D6:D1:D2:8D:AB:43:DD:A5:3F X509v3 Authority Key Identifier: keyid:93:97:C2:8E:30:65:FB:E4:81:25:4A:A8:C0:CE:F6:90:6F:66:AB:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AshjTbxxikcwvN2KExwCFhdDhBtV7DWJJLc65C11AThu/0/9397C28E3065FBE481254AA8C0CEF6906F66ABE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:92:83:4f:c5:77:52:3d:0a:6f:e8:26:a8:ab:b5:ca:08:ab: 4b:80:b0:c8:2d:f5:f9:bf:d4:14:d9:fc:c7:04:1a:de:0c:27: b7:1b:80:6e:01:a4:37:12:a4:b7:06:f9:36:82:9d:5a:94:25: 25:62:7a:ab:e5:a1:a3:bc:39:3e:07:71:d5:e5:af:13:dd:4d: 44:52:6d:fc:cc:4e:4d:05:00:ab:3f:f3:88:a8:fc:a2:a9:e4: 5e:ce:ca:77:8c:e1:b7:49:70:c4:ef:28:ad:5c:9c:23:b5:86: 25:e7:7b:d4:11:72:54:a8:d3:58:46:2d:8e:cb:e6:54:4c:45: cc:5f:b6:93:7a:05:22:4d:cd:fb:5a:24:09:0f:24:1c:43:37: 19:12:02:20:a2:bd:da:80:2d:87:2e:84:d4:29:c8:48:7d:68: b8:99:29:aa:cf:f5:80:eb:3c:54:f4:9b:7d:3b:9d:3a:55:11: 22:6a:5e:96:02:fb:c5:be:c8:db:41:a8:3e:7f:e0:75:16:18: df:d2:37:ac:05:17:ae:6b:e1:5d:99:5e:db:09:14:9e:c1:45: 7d:75:80:b7:01:6c:ab:c9:87:04:d8:89:12:d2:7f:6f:c8:65: 5e:5d:70:4e:66:45:df:0b:9f:00:6b:7f:44:77:72:e3:46:f8: 81:89:82:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOKyRw5JArRxbRd5A1EInvqOg4HQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM5N0MyOEUzMDY1RkJFNDgxMjU0QUE4QzBDRUY2OTA2 RjY2QUJFOTAeFw0yNTA2MDMxNjM3MTZaFw0yNTA2MDQxOTMzMTZaMDMxMTAvBgNV BAMTKDlEQjA1RUNFMUVDMTIxMEMzNzk0RjZENkQxRDI4REFCNDNEREE1M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvkwAnfzcj0ZboB9Sf3WAVGJof qz1lY8aUZ1t7YdMEeg+B+sD3+TvAcIKV9p/TuCjdyD0lEJ6IiTDoywtuNvXOsZXi IUQAztXrQ2KxWAYGDU8s2r9W28gBeD3H8Or4qAyGFXZNxoGSFEsCYWqo3lHhy/i5 CY9sR14hUQZuheNNKN6u7a6sWrY+X8ONg9IQnxg9RPRSiNNDQh17GWrscCKcV7d0 GghrRFjj919h4oY3i6vpI4tnojKCaNDoh/MsXVbOrBBwbdbV5IZ+sh/m8tOoONEl P41eSqQgw0KgwTEznXr6kCEGFk/UnR0FKGwf1GjlvH0zahamrnDD5QqyvlX7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnbBezh7BIQw3lPbW0dKNq0PdpT8wHwYDVR0j BBgwFoAUk5fCjjBl++SBJUqowM72kG9mq+kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXNoalRieHhpa2N3dk4yS0V4d0NGaGREaEJ0VjdEV0pKTGM2NUMxMUFU aHUvMC85Mzk3QzI4RTMwNjVGQkU0ODEyNTRBQThDMENFRjY5MDZGNjZBQkU5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzOTdDMjhFMzA2NUZCRTQ4 MTI1NEFBOEMwQ0VGNjkwNkY2NkFCRTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QXNoalRieHhpa2N3dk4yS0V4d0NGaGREaEJ0VjdEV0pKTGM2NUMxMUFUaHUvMC85 Mzk3QzI4RTMwNjVGQkU0ODEyNTRBQThDMENFRjY5MDZGNjZBQkU5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFJKDT8V3Uj0Kb+gmqKu1ygirS4CwyC31+b/UFNn8xwQa3gwntxuAbgGkNxKk twb5NoKdWpQlJWJ6q+Who7w5Pgdx1eWvE91NRFJt/MxOTQUAqz/ziKj8oqnkXs7K d4zht0lwxO8orVycI7WGJed71BFyVKjTWEYtjsvmVExFzF+2k3oFIk3N+1okCQ8k HEM3GRICIKK92oAthy6E1CnISH1ouJkpqs/1gOs8VPSbfTudOlURImpelgL7xb7I 20GoPn/gdRYY39I3rAUXrmvhXZle2wkUnsFFfXWAtwFsq8mHBNiJEtJ/b8hlXl1w TmZF3wufAGt/RHdy40b4gYmCYg== -----END CERTIFICATE-----Generated at Wed Jun 4 11:27:40 2025 by rpki-client