$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft File: 9BAD7480D68EE59406D3FBBE7F30557285587474.mft (raw, json) Hash identifier: /w8Zgv1biStnO5d8tpqr/ENaizLzlm7RlfLnVGoym3c= Subject key identifier: 5A:F0:F0:93:AA:16:6F:EF:0C:3C:3A:CD:A1:43:44:41:63:7F:0F:C9 Authority key identifier: 9B:AD:74:80:D6:8E:E5:94:06:D3:FB:BE:7F:30:55:72:85:58:74:74 Certificate issuer: /CN=9BAD7480D68EE59406D3FBBE7F30557285587474 Certificate serial: 746FC07E248A1397EA1A4C80F2668E3C5EB8E7F4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft Manifest number: 0241 Signing time: Sun 08 Jun 2025 15:07:49 +0000 Manifest this update: Sun 08 Jun 2025 15:02:49 +0000 Manifest next update: Mon 09 Jun 2025 17:58:49 +0000 Files and hashes: 1: 9BAD7480D68EE59406D3FBBE7F30557285587474.crl (hash: RgMxGBl8kyM2+yhGoy64L0dixJwQjfz28d/6nHZ+ge0=) 2: 323830343a323563303a3a2f33322d3332203d3e20323634333030.roa (hash: L06efUO1+vC2w7zP0ypGVVsEcp/3D2fU1pOY4umhEf4=) 3: 3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa (hash: nePLrI7joRrgQbt2fVsGs3GZCbneiBCFymjlsXZNuSI=) 4: 3137302e3234342e3131322e302f32322d3232203d3e20323634333030.roa (hash: 3Bhf53UxlegeRmPK19xaYrMRnKpA/2NUddq4Nia28JA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.crl rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Jun 2025 17:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:6f:c0:7e:24:8a:13:97:ea:1a:4c:80:f2:66:8e:3c:5e:b8:e7:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BAD7480D68EE59406D3FBBE7F30557285587474 Validity Not Before: Jun 8 15:02:49 2025 GMT Not After : Jun 9 17:58:49 2025 GMT Subject: CN=5AF0F093AA166FEF0C3C3ACDA1434441637F0FC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3f:37:20:eb:62:c0:87:f2:3b:4a:24:40:00: a7:b5:42:8a:78:4d:6c:d8:5d:58:d2:19:e6:9c:a3: 9f:17:43:8d:29:02:5a:02:80:8c:f4:67:80:fd:69: 00:fb:2e:75:24:da:0b:a7:37:ee:6e:ef:71:f9:03: cd:8b:9e:e6:bc:57:e5:8a:7c:ab:d7:13:28:66:42: ba:b3:7d:50:59:7f:f3:96:7b:c3:12:53:95:17:47: 59:ee:ea:d4:db:4f:d0:99:4f:84:1c:2a:a9:7c:00: 54:c7:a9:de:7a:00:81:82:43:4d:f7:75:b7:fa:e0: 55:d7:b8:92:3a:3f:be:bf:a1:be:e8:5a:3c:bf:e6: 25:07:8e:83:1f:7b:f7:74:89:42:29:21:e3:c9:90: 0e:91:21:cc:e6:ba:b4:06:72:7e:c6:01:7e:f1:94: 8f:4c:f5:7f:bb:13:cf:c9:5b:70:ff:13:95:f4:c0: 71:fe:cc:85:91:51:92:bc:c0:4e:82:7a:1c:88:9d: ba:0d:85:bd:be:7c:aa:be:4b:b1:b8:16:97:ba:ec: 72:74:3c:6c:35:e7:f0:24:4d:d1:0c:91:a3:07:e4: aa:43:80:ea:26:c1:c1:ae:99:53:4e:bc:e7:fb:1b: 3b:75:97:49:e8:0d:3c:60:22:ff:0c:19:92:06:6b: 6a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F0:F0:93:AA:16:6F:EF:0C:3C:3A:CD:A1:43:44:41:63:7F:0F:C9 X509v3 Authority Key Identifier: keyid:9B:AD:74:80:D6:8E:E5:94:06:D3:FB:BE:7F:30:55:72:85:58:74:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:5b:c1:59:1f:8d:70:fc:70:82:61:64:14:0a:bc:ea:25:0f: f5:27:c9:23:7a:b5:b2:02:43:b4:0a:65:9f:39:6b:cb:8a:4b: e6:5d:88:36:5f:d4:20:6b:1d:ac:aa:24:40:9d:e8:9e:ab:32: ab:24:fd:dd:dc:f6:9f:05:53:6d:83:b2:24:93:d6:4e:10:ce: d8:4e:1f:15:1b:fc:55:6a:29:71:e5:df:a9:5e:27:3c:ac:1f: de:e0:8b:39:66:26:d8:9c:3c:cc:ff:c8:17:5d:7e:79:d4:8a: f6:b1:ec:ae:15:a7:13:a4:6d:e1:d3:74:4e:05:37:3b:48:a0: b4:eb:eb:05:19:38:71:73:6c:9c:a0:0a:f2:01:1f:a0:23:41: cb:7c:ee:37:92:5f:6d:e0:08:84:9a:61:16:0b:96:ae:9d:fd: 8a:5c:2e:78:a6:28:d6:d3:a9:6c:8e:da:7f:18:3f:67:ae:6e: 96:3e:eb:7e:5e:43:69:0e:c0:d6:e5:fa:57:e4:f8:27:fa:c0: 37:00:c3:0b:e4:10:8c:8c:16:32:72:e0:3c:5e:55:91:51:c8: e9:9f:99:11:a2:41:b8:52:cd:a2:2e:be:6b:ef:c4:4d:1a:dc: ce:54:ff:b2:3e:78:e8:73:72:a9:9a:eb:f1:36:53:41:00:f6: 6b:3e:4f:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdG/AfiSKE5fqGkyA8maOPF645/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJBRDc0ODBENjhFRTU5NDA2RDNGQkJFN0YzMDU1NzI4 NTU4NzQ3NDAeFw0yNTA2MDgxNTAyNDlaFw0yNTA2MDkxNzU4NDlaMDMxMTAvBgNV BAMTKDVBRjBGMDkzQUExNjZGRUYwQzNDM0FDREExNDM0NDQxNjM3RjBGQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Pzcg62LAh/I7SiRAAKe1Qop4 TWzYXVjSGeaco58XQ40pAloCgIz0Z4D9aQD7LnUk2gunN+5u73H5A82Lnua8V+WK fKvXEyhmQrqzfVBZf/OWe8MSU5UXR1nu6tTbT9CZT4QcKql8AFTHqd56AIGCQ033 dbf64FXXuJI6P76/ob7oWjy/5iUHjoMfe/d0iUIpIePJkA6RIczmurQGcn7GAX7x lI9M9X+7E8/JW3D/E5X0wHH+zIWRUZK8wE6CehyInboNhb2+fKq+S7G4Fpe67HJ0 PGw15/AkTdEMkaMH5KpDgOomwcGumVNOvOf7Gzt1l0noDTxgIv8MGZIGa2obAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWvDwk6oWb+8MPDrNoUNEQWN/D8kwHwYDVR0j BBgwFoAUm610gNaO5ZQG0/u+fzBVcoVYdHQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmIyMzV2eVhVN2ZEaVJRaVh4YldQTUpMUmFpczVmWEJrOEZKemRUZ0Rt eVQvMS85QkFENzQ4MEQ2OEVFNTk0MDZEM0ZCQkU3RjMwNTU3Mjg1NTg3NDc0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCQUQ3NDgwRDY4RUU1OTQw NkQzRkJCRTdGMzA1NTcyODU1ODc0NzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmIyMzV2eVhVN2ZEaVJRaVh4YldQTUpMUmFpczVmWEJrOEZKemRUZ0RteVQvMS85 QkFENzQ4MEQ2OEVFNTk0MDZEM0ZCQkU3RjMwNTU3Mjg1NTg3NDc0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdVvBWR+NcPxwgmFkFAq86iUP9SfJI3q1sgJDtAplnzlry4pL5l2INl/UIGsd rKokQJ3onqsyqyT93dz2nwVTbYOyJJPWThDO2E4fFRv8VWopceXfqV4nPKwf3uCL OWYm2Jw8zP/IF11+edSK9rHsrhWnE6Rt4dN0TgU3O0igtOvrBRk4cXNsnKAK8gEf oCNBy3zuN5JfbeAIhJphFguWrp39ilwueKYo1tOpbI7afxg/Z65ulj7rfl5DaQ7A 1uX6V+T4J/rANwDDC+QQjIwWMnLgPF5VkVHI6Z+ZEaJBuFLNoi6+a+/ETRrczlT/ sj546HNyqZrr8TZTQQD2az5Phw== -----END CERTIFICATE-----Generated at Sun Jun 8 23:21:32 2025 by rpki-client