$ rpki-client -vvf rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft File: CA9298E26EC7D83F990DD29EFD395097A928590F.mft (raw, json) Hash identifier: TP3Af1I7hOKolOkIxg8aym+rbNUbTTmViFLnQOlODZc= Subject key identifier: 3D:E7:84:53:41:C5:C6:B9:05:D7:44:33:52:7D:CD:29:4B:24:22:A8 Authority key identifier: CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F Certificate issuer: /CN=CA9298E26EC7D83F990DD29EFD395097A928590F Certificate serial: 69D9A8F09431D6C0A52D05034BABA8DD90052C88 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer Subject info access: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft Manifest number: 015E Signing time: Tue 03 Jun 2025 20:57:47 +0000 Manifest this update: Tue 03 Jun 2025 20:52:47 +0000 Manifest next update: Wed 04 Jun 2025 23:18:47 +0000 Files and hashes: 1: CA9298E26EC7D83F990DD29EFD395097A928590F.crl (hash: a5CkXTymP9umayZZLUbTtJaCmNuWyci3zdTnJan3P28=) 2: 323830343a316165633a3a2f33322d3438203d3e203631363938.roa (hash: D4gDikxqDsVeC2Nk5fkAJu3epdejkNKVzJenlLXCHIw=) 3: 3136382e3232372e38302e302f32322d3234203d3e203631363938.roa (hash: IiEN5Jt+IjiGA4rrpcidQwaTrr06LXFl6U2s56QvoZI=) 4: 3133312e302e3136342e302f32322d3234203d3e203631363938.roa (hash: cirAaasu6EfpKysSqYLdkvU3mPEjtgroPBBXO7Qvj7A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Jun 2025 23:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d9:a8:f0:94:31:d6:c0:a5:2d:05:03:4b:ab:a8:dd:90:05:2c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA9298E26EC7D83F990DD29EFD395097A928590F Validity Not Before: Jun 3 20:52:47 2025 GMT Not After : Jun 4 23:18:47 2025 GMT Subject: CN=3DE7845341C5C6B905D74433527DCD294B2422A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:54:d5:2f:2e:c8:bc:e4:ef:aa:96:72:27:e0: 41:de:11:1a:27:d1:d9:a9:04:8e:4c:09:0d:91:e5: 35:e8:94:06:23:d2:3a:c9:12:4f:ee:6d:8a:f4:ce: 1f:71:4b:1b:bd:dd:6e:a0:e9:ed:67:87:cc:fa:ba: 32:84:b4:60:c3:d1:bb:81:01:8a:9b:05:eb:87:b4: b7:91:ea:3d:f4:21:02:47:48:ba:02:48:28:f0:01: a4:c1:e2:f9:2a:9c:26:4c:f5:89:9a:c6:62:98:25: 2e:74:8a:99:ab:33:b1:85:7e:25:4f:ad:34:6b:c4: c5:a9:36:77:cb:23:9c:61:ca:ab:ca:0a:36:9b:a8: 5d:31:49:80:d6:49:78:b8:2b:ad:15:92:61:e8:fd: 41:7d:c9:a2:d2:14:ab:9b:fa:5d:3d:f6:72:9f:96: 02:ea:37:8f:14:17:3f:6d:bc:3b:3a:09:04:ba:25: 2e:f0:49:62:6e:44:39:76:44:1e:b7:1a:56:c0:5e: 96:88:ea:1c:9c:6b:af:1c:f2:fc:50:ee:77:a7:59: 05:87:87:39:b7:22:35:fa:af:6d:28:c4:51:d4:9b: 09:fe:4a:8f:93:53:33:a0:0b:d7:bd:d1:1b:0f:96: 4c:f1:27:ae:ea:ab:54:4c:d0:ef:34:57:f8:2a:57: 83:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E7:84:53:41:C5:C6:B9:05:D7:44:33:52:7D:CD:29:4B:24:22:A8 X509v3 Authority Key Identifier: keyid:CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:9f:4b:16:5f:d6:8c:c7:93:0b:97:61:28:67:db:5f:a6:5b: 72:02:12:37:30:e6:91:a0:17:92:92:a3:9e:51:90:ec:63:be: 2e:99:2a:d1:69:34:c1:bd:30:8a:7f:fe:90:c3:cd:d2:23:46: 04:f1:2f:11:73:67:7a:5d:84:ff:4b:8d:0a:ce:4b:c3:24:33: 26:8e:ff:a2:e3:00:c6:bf:9c:7c:6d:98:7e:74:35:91:d8:29: 42:ce:f9:e3:d6:e3:48:a2:12:37:3e:b9:a9:53:df:ab:8e:99: 64:c2:02:5d:6d:53:46:62:42:33:ab:39:4b:19:7c:ad:0a:3a: 98:a4:df:37:79:59:a6:a0:37:9c:85:c6:7c:cd:9b:5d:f2:aa: bf:81:6f:56:fe:07:90:3f:96:56:f5:02:f6:34:80:06:a0:32: 83:8c:ec:83:71:58:4a:d6:85:41:b5:27:15:de:d9:d3:ad:5e: 40:ea:3a:2d:82:6b:08:eb:f3:d0:75:ba:8d:06:be:8a:80:9a: c3:e1:1e:35:44:75:11:1e:a1:41:0f:cd:fe:be:11:24:6a:67: 1a:ad:02:f1:1e:04:d0:e6:48:f1:0c:af:d6:ef:39:09:97:ae: c5:24:7e:d6:c2:bd:4f:22:d9:10:89:fb:2f:62:bf:bf:46:15: 42:dd:86:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUadmo8JQx1sClLQUDS6uo3ZAFLIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5Mjk4RTI2RUM3RDgzRjk5MEREMjlFRkQzOTUwOTdB OTI4NTkwRjAeFw0yNTA2MDMyMDUyNDdaFw0yNTA2MDQyMzE4NDdaMDMxMTAvBgNV BAMTKDNERTc4NDUzNDFDNUM2QjkwNUQ3NDQzMzUyN0RDRDI5NEIyNDIyQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSVNUvLsi85O+qlnIn4EHeERon 0dmpBI5MCQ2R5TXolAYj0jrJEk/ubYr0zh9xSxu93W6g6e1nh8z6ujKEtGDD0buB AYqbBeuHtLeR6j30IQJHSLoCSCjwAaTB4vkqnCZM9YmaxmKYJS50ipmrM7GFfiVP rTRrxMWpNnfLI5xhyqvKCjabqF0xSYDWSXi4K60VkmHo/UF9yaLSFKub+l099nKf lgLqN48UFz9tvDs6CQS6JS7wSWJuRDl2RB63GlbAXpaI6hyca68c8vxQ7nenWQWH hzm3IjX6r20oxFHUmwn+So+TUzOgC9e90RsPlkzxJ67qq1RM0O80V/gqV4P3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPeeEU0HFxrkF10QzUn3NKUskIqgwHwYDVR0j BBgwFoAUypKY4m7H2D+ZDdKe/TlQl6koWQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmloa2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZm emovMC9DQTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5Mjg1OTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBOTI5OEUyNkVDN0Q4M0Y5 OTBERDI5RUZEMzk1MDk3QTkyODU5MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qmloa2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZmemovMC9D QTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5Mjg1OTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWZ9LFl/WjMeTC5dhKGfbX6ZbcgISNzDmkaAXkpKjnlGQ7GO+Lpkq0Wk0wb0w in/+kMPN0iNGBPEvEXNnel2E/0uNCs5LwyQzJo7/ouMAxr+cfG2YfnQ1kdgpQs75 49bjSKISNz65qVPfq46ZZMICXW1TRmJCM6s5Sxl8rQo6mKTfN3lZpqA3nIXGfM2b XfKqv4FvVv4HkD+WVvUC9jSABqAyg4zsg3FYStaFQbUnFd7Z061eQOo6LYJrCOvz 0HW6jQa+ioCaw+EeNUR1ER6hQQ/N/r4RJGpnGq0C8R4E0OZI8Qyv1u85CZeuxSR+ 1sK9TyLZEIn7L2K/v0YVQt2GOA== -----END CERTIFICATE-----Generated at Wed Jun 4 12:31:35 2025 by rpki-client