$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json) Hash identifier: l9iiCnhTH79CMZRwsltRMKHKW+iUV9dprFNnbzBn544= Subject key identifier: 32:12:0E:DC:BE:42:54:5A:8C:04:82:28:85:09:4E:39:DD:1B:3A:91 Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201 Certificate serial: 57D754EAD43CF5A486BF5C93B00D5BBB6AB3553F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft Manifest number: 010E Signing time: Tue 03 Jun 2025 14:48:35 +0000 Manifest this update: Tue 03 Jun 2025 14:43:35 +0000 Manifest next update: Wed 04 Jun 2025 18:29:35 +0000 Files and hashes: 1: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: QObwHrA+cVOTOYv+XQdR1wEXYLlHREZYXlmlsyVqB90=) 2: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: KTNEcC6Y2VHqLL+qb3kt3ywe3wmftinMc6r4trZIlnw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Jun 2025 18:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d7:54:ea:d4:3c:f5:a4:86:bf:5c:93:b0:0d:5b:bb:6a:b3:55:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201 Validity Not Before: Jun 3 14:43:35 2025 GMT Not After : Jun 4 18:29:35 2025 GMT Subject: CN=32120EDCBE42545A8C04822885094E39DD1B3A91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d8:24:ff:7a:4e:32:05:cf:96:3b:03:fb:4d: c5:5d:1f:0f:82:46:4e:2a:c5:fe:a4:2b:0e:d9:73: 27:e6:f6:97:d4:14:20:d5:a2:66:5f:7e:91:22:f0: 6d:e1:bf:5d:d3:e4:63:f5:30:25:33:79:df:e1:1f: 51:74:88:5e:f4:33:3a:18:46:9d:72:41:da:1a:fe: da:ce:e8:0a:a5:f2:0d:4d:5a:05:6a:83:95:8f:1f: 01:24:b9:c4:db:05:26:7a:17:4c:17:7f:67:0e:cc: 9d:1a:e4:b1:ae:9d:44:d8:b6:15:4d:b2:44:40:62: d9:60:65:87:55:04:fd:be:a6:d9:17:e5:cb:5d:4f: 7c:34:46:81:98:55:90:9b:1e:a5:67:4d:0e:a9:0c: a8:50:ab:68:24:21:b2:f1:14:b9:55:2a:87:c8:1e: c8:ba:f4:92:54:cf:b2:77:f4:b2:77:76:db:0f:18: cc:fe:0f:1d:86:e4:b0:c5:fe:1a:a3:f9:7a:7a:c0: 4f:b0:cb:30:1c:ea:fe:dd:bc:bc:77:3c:38:63:4b: 20:87:be:6c:c5:ae:49:5d:8c:98:11:50:33:28:c5: 33:56:97:43:95:76:6f:66:e9:77:8f:8d:c5:d4:9f: a4:7e:25:bc:58:db:9a:80:10:8b:bf:a2:90:06:82: ea:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:12:0E:DC:BE:42:54:5A:8C:04:82:28:85:09:4E:39:DD:1B:3A:91 X509v3 Authority Key Identifier: keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e4:dc:3c:b2:83:ea:5e:05:33:93:60:5f:d3:92:35:56:12: 50:e0:b0:0c:30:f5:b9:63:81:61:6e:bb:15:19:56:cd:7b:42: ba:d6:cd:75:bf:0a:d4:e3:d0:bd:0a:43:99:b4:3a:8f:b3:f5: 25:ca:75:85:99:4b:c0:73:79:89:81:9d:3a:50:fe:be:f1:7c: 0c:57:e5:f1:31:54:a8:30:38:85:37:9e:16:5f:39:68:e0:55: 39:fd:58:45:b3:18:3f:e8:e6:78:8d:e6:d7:8c:41:ba:cc:f4: 5a:60:5a:ce:57:71:21:25:8d:a8:a8:3d:46:86:30:0f:91:dc: 6c:19:cb:79:e1:91:6b:b0:9b:17:00:58:90:9e:6d:df:74:b3: 88:0c:bc:da:49:da:c0:c0:ba:22:b9:0b:a5:7e:42:f3:6d:26: e9:9b:1e:69:85:33:79:1a:42:c5:c5:5c:e8:ae:76:c4:3e:24: 72:fe:f9:84:f0:a5:69:51:06:68:17:68:36:92:07:c1:b6:6d: 2f:63:83:fa:a2:2e:33:0c:31:1d:23:c1:bd:01:df:95:52:c5: 6e:bd:b7:18:d7:33:24:57:36:ef:d9:ea:c4:6d:6f:42:9b:76: c7:09:19:e4:8e:72:f7:e4:8a:e2:41:ac:c9:93:8d:65:74:6f: 81:32:07:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUV9dU6tQ89aSGv1yTsA1bu2qzVT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy NzBBOTIwMTAeFw0yNTA2MDMxNDQzMzVaFw0yNTA2MDQxODI5MzVaMDMxMTAvBgNV BAMTKDMyMTIwRURDQkU0MjU0NUE4QzA0ODIyODg1MDk0RTM5REQxQjNBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52CT/ek4yBc+WOwP7TcVdHw+C Rk4qxf6kKw7Zcyfm9pfUFCDVomZffpEi8G3hv13T5GP1MCUzed/hH1F0iF70MzoY Rp1yQdoa/trO6Aql8g1NWgVqg5WPHwEkucTbBSZ6F0wXf2cOzJ0a5LGunUTYthVN skRAYtlgZYdVBP2+ptkX5ctdT3w0RoGYVZCbHqVnTQ6pDKhQq2gkIbLxFLlVKofI Hsi69JJUz7J39LJ3dtsPGMz+Dx2G5LDF/hqj+Xp6wE+wyzAc6v7dvLx3PDhjSyCH vmzFrkldjJgRUDMoxTNWl0OVdm9m6XePjcXUn6R+JbxY25qAEIu/opAGguoNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMhIO3L5CVFqMBIIohQlOOd0bOpEwHwYDVR0j BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1 OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC9E Mjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT+TcPLKD6l4FM5NgX9OSNVYSUOCwDDD1uWOBYW67FRlWzXtCutbNdb8K1OPQ vQpDmbQ6j7P1Jcp1hZlLwHN5iYGdOlD+vvF8DFfl8TFUqDA4hTeeFl85aOBVOf1Y RbMYP+jmeI3m14xBusz0WmBazldxISWNqKg9RoYwD5HcbBnLeeGRa7CbFwBYkJ5t 33SziAy82knawMC6IrkLpX5C820m6ZseaYUzeRpCxcVc6K52xD4kcv75hPClaVEG aBdoNpIHwbZtL2OD+qIuMwwxHSPBvQHflVLFbr23GNczJFc279nqxG1vQpt2xwkZ 5I5y9+SK4kGsyZONZXRvgTIHpg== -----END CERTIFICATE-----Generated at Wed Jun 4 12:29:03 2025 by rpki-client