$ rpki-client -vvf rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft File: 1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft (raw, json) Hash identifier: fFRDEjWUPOFuEMeHBBDmWSi2l2Fz/QW0luHSy9dpmEE= Subject key identifier: 54:1C:D9:D6:F9:A6:03:A1:F7:B8:DA:3D:BB:8E:8F:D0:44:55:6C:48 Authority key identifier: 1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55 Certificate issuer: /CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555 Certificate serial: 1EC23D407E6EF648EE4D85DF70B92D4E7054FE27 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft Manifest number: 023E Signing time: Fri 06 Jun 2025 23:53:56 +0000 Manifest this update: Fri 06 Jun 2025 23:48:56 +0000 Manifest next update: Sun 08 Jun 2025 03:43:56 +0000 Files and hashes: 1: 1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl (hash: PagD77cj9MoMD+pgR88QzeMhreffXzeRHRyxIcjZ+V0=) 2: 3136382e302e3234302e302f32322d3234203d3e20323632343038.roa (hash: nc1KYLiIl6MQ2cB8LAaJ1Ei9pNJhoTR2e/w7ESX0VCI=) 3: 3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa (hash: WWQDaPRjLqL6gxa8oKBNJP8aA85LM8dmmWOF68n+4eM=) 4: 323830343a326430633a3a2f33322d3332203d3e20323632343038.roa (hash: I/xjLRtE0sns2aDZvy2RT2f40WrXsCM4pXsxx+HtLKQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 03:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c2:3d:40:7e:6e:f6:48:ee:4d:85:df:70:b9:2d:4e:70:54:fe:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555 Validity Not Before: Jun 6 23:48:56 2025 GMT Not After : Jun 8 03:43:56 2025 GMT Subject: CN=541CD9D6F9A603A1F7B8DA3DBB8E8FD044556C48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d9:5e:9b:3a:4a:9d:bf:7a:6f:6c:9a:a9:db: ae:e8:22:f6:f1:eb:4a:33:7c:6b:a5:e0:5e:a9:45: eb:f2:ce:dd:13:79:82:6c:d6:80:9b:0d:84:8a:ee: 82:77:9f:e0:a2:a3:e4:c5:48:04:38:6b:30:c2:0f: f3:66:e0:a0:73:f5:c2:d8:d8:c3:93:7e:87:7e:0f: 02:7b:58:6d:25:b8:a5:96:62:7c:e1:28:09:9a:99: 63:61:09:87:60:42:90:36:b8:51:cb:60:c5:58:d5: 58:0f:a3:58:51:78:85:20:d6:83:e5:5e:1c:95:ce: 60:46:b8:26:a2:84:4f:7c:ce:55:10:e3:e5:89:f4: ae:a1:e2:ad:14:90:e7:7e:da:9f:14:6b:f6:32:6d: 34:41:7a:7b:22:04:f4:e8:d5:61:18:46:aa:40:70: 01:29:65:68:c2:67:96:c8:56:38:7c:6f:98:64:eb: e2:b1:75:6f:15:7a:11:9a:24:4e:0b:bd:5c:f7:0c: e3:de:e8:dc:fb:04:81:e0:dd:42:a7:c3:ce:ec:ad: ab:b8:2c:32:68:55:ea:e2:34:ca:37:34:7f:76:12: ad:64:ca:74:dd:3f:b1:2d:6f:32:f2:71:a5:b1:5e: 0c:24:c1:02:1f:2d:f5:ef:9c:2f:5d:56:7e:fd:98: ef:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1C:D9:D6:F9:A6:03:A1:F7:B8:DA:3D:BB:8E:8F:D0:44:55:6C:48 X509v3 Authority Key Identifier: keyid:1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:fe:bf:b8:ee:8c:0f:86:64:21:b2:75:c2:75:43:f2:ed:7c: 2a:f2:3a:79:5c:0c:f9:e3:24:0c:9a:1d:07:f9:da:68:55:a2: a4:1a:d2:07:0a:05:25:13:e1:d3:3a:1a:a2:ed:31:cb:3b:2e: db:19:b5:00:4b:8f:94:73:14:0a:2e:03:ef:2c:c8:a6:06:d7: 68:10:ae:a7:fb:0b:22:e0:1f:70:4d:4f:6f:69:d4:64:27:b5: 82:69:c2:13:84:2c:25:be:f5:79:71:50:b0:ab:6d:de:23:d6: 3b:87:07:7c:d4:3f:2c:e0:c7:70:64:15:e3:a9:4a:3c:9c:1a: 7a:3d:5b:4b:b0:2c:bd:b4:56:1a:48:97:06:a4:a5:e8:10:70: 13:73:f1:87:60:9c:8b:86:d2:96:a6:c9:74:41:07:c4:88:0a: 04:fb:16:e5:70:01:4a:01:e0:09:fb:9e:54:95:e2:2d:3b:ca: 49:eb:a3:b9:8c:0b:5a:96:8e:7d:56:3d:c3:ee:45:f3:55:90: cc:a9:0b:de:92:b0:d3:e3:d9:4c:cb:19:11:8b:d8:8d:8f:f4: fe:aa:d3:ae:c6:79:e7:21:6e:3d:d0:88:c8:8b:c1:7d:96:bd: be:53:eb:6b:bb:b7:0d:75:d7:37:b8:6d:95:70:5d:74:55:a6: 55:16:4f:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHsI9QH5u9kjuTYXfcLktTnBU/icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFGRkZGMUUzM0VBQkYyOThFOUIwNUYxNzcxNjZDOTZG MkMzQjU1NTAeFw0yNTA2MDYyMzQ4NTZaFw0yNTA2MDgwMzQzNTZaMDMxMTAvBgNV BAMTKDU0MUNEOUQ2RjlBNjAzQTFGN0I4REEzREJCOEU4RkQwNDQ1NTZDNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ2V6bOkqdv3pvbJqp267oIvbx 60ozfGul4F6pRevyzt0TeYJs1oCbDYSK7oJ3n+Cio+TFSAQ4azDCD/Nm4KBz9cLY 2MOTfod+DwJ7WG0luKWWYnzhKAmamWNhCYdgQpA2uFHLYMVY1VgPo1hReIUg1oPl XhyVzmBGuCaihE98zlUQ4+WJ9K6h4q0UkOd+2p8Ua/YybTRBensiBPTo1WEYRqpA cAEpZWjCZ5bIVjh8b5hk6+KxdW8VehGaJE4LvVz3DOPe6Nz7BIHg3UKnw87srau4 LDJoVeriNMo3NH92Eq1kynTdP7EtbzLycaWxXgwkwQIfLfXvnC9dVn79mO/ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVBzZ1vmmA6H3uNo9u46P0ERVbEgwHwYDVR0j BBgwFoAUGv//HjPqvymOmwXxdxZslvLDtVUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmQzU1p5cXhlc2pMTUQ1QTd5R3dYZlA0WHBiNDh0QmpRcEZwa2NiRWQx c0MvMS8xQUZGRkYxRTMzRUFCRjI5OEU5QjA1RjE3NzE2NkM5NkYyQzNCNTU1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBRkZGRjFFMzNFQUJGMjk4 RTlCMDVGMTc3MTY2Qzk2RjJDM0I1NTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmQzU1p5cXhlc2pMTUQ1QTd5R3dYZlA0WHBiNDh0QmpRcEZwa2NiRWQxc0MvMS8x QUZGRkYxRTMzRUFCRjI5OEU5QjA1RjE3NzE2NkM5NkYyQzNCNTU1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtv6/uO6MD4ZkIbJ1wnVD8u18KvI6eVwM+eMkDJodB/naaFWipBrSBwoFJRPh 0zoaou0xyzsu2xm1AEuPlHMUCi4D7yzIpgbXaBCup/sLIuAfcE1Pb2nUZCe1gmnC E4QsJb71eXFQsKtt3iPWO4cHfNQ/LODHcGQV46lKPJwaej1bS7AsvbRWGkiXBqSl 6BBwE3Pxh2Cci4bSlqbJdEEHxIgKBPsW5XABSgHgCfueVJXiLTvKSeujuYwLWpaO fVY9w+5F81WQzKkL3pKw0+PZTMsZEYvYjY/0/qrTrsZ55yFuPdCIyIvBfZa9vlPr a7u3DXXXN7htlXBddFWmVRZPkA== -----END CERTIFICATE-----Generated at Sat Jun 7 12:31:48 2025 by rpki-client