$ rpki-client -vvf rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft File: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft (raw, json) Hash identifier: bw+osM8j9YZi/zHaIMN6pJlSnmLBoDrliyAzTHBWIXs= Subject key identifier: 51:B2:02:2C:5B:84:07:DB:7F:C1:1C:06:01:52:ED:CE:36:63:FA:A1 Authority key identifier: D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB Certificate issuer: /CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB Certificate serial: 29CEA0E74D1133DC70DE8306C80AC243ADFC4735 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer Subject info access: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft Manifest number: 08 Signing time: Sun 08 Jun 2025 12:41:00 +0000 Manifest this update: Sun 08 Jun 2025 12:36:00 +0000 Manifest next update: Mon 09 Jun 2025 13:22:00 +0000 Files and hashes: 1: 323830343a343461303a3a2f33322d3438203d3e20323637363433.roa (hash: OhP4AfZLm8wKcC8NRb3lR5wasqSW+ZFcBQBWlmtzm+0=) 2: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl (hash: YJQmLG9vn0NNX68K6LxhbTzcspFEAkoDZ9inEwMQmeY=) 3: 34352e37312e3232302e302f32322d3234203d3e20323637363433.roa (hash: DphYCMXiIhOunJYgpxuGmI/F5WVwTY6x8muqbHvOLD0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Jun 2025 13:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ce:a0:e7:4d:11:33:dc:70:de:83:06:c8:0a:c2:43:ad:fc:47:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB Validity Not Before: Jun 8 12:36:00 2025 GMT Not After : Jun 9 13:22:00 2025 GMT Subject: CN=51B2022C5B8407DB7FC11C060152EDCE3663FAA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:73:88:bf:d1:a6:0e:51:7d:a5:87:bc:25: a0:da:74:d0:86:cb:11:0e:dd:c3:db:7a:74:57:f0: e0:07:c9:4e:2d:8a:51:c0:c8:dd:35:0d:be:54:e8: e7:46:f3:ae:76:39:cb:4a:74:6a:75:70:19:72:f1: c1:a9:c9:93:3b:c9:b6:e9:81:01:ad:21:73:3c:0e: d6:c8:05:77:56:aa:a6:19:4b:f3:a3:a6:36:b3:ec: 9f:ce:b4:69:d1:59:59:30:de:62:1d:b7:6b:25:17: 38:08:b6:bc:29:70:09:97:3f:67:57:d2:f7:a1:11: c4:5e:77:10:1d:91:0e:aa:e1:33:77:98:09:d9:7f: 34:42:d2:e7:b2:fd:00:39:90:43:bd:6a:5c:6e:87: ba:19:24:97:65:f4:9e:b0:49:1c:23:3e:65:42:5d: 27:6e:67:64:b0:c9:d3:6c:fa:e6:a0:71:8d:22:1b: bc:ec:04:b8:4d:76:9b:e1:8c:01:ef:f4:70:61:93: 82:88:02:db:23:fb:b3:ec:a0:3f:e8:75:d6:30:62: d2:52:27:5c:29:74:48:a8:72:40:59:56:d1:38:2f: d5:c5:8b:c2:a1:d0:98:de:63:93:70:dd:a0:13:5a: be:4e:91:ce:29:06:67:7f:58:2e:42:08:31:eb:09: e5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B2:02:2C:5B:84:07:DB:7F:C1:1C:06:01:52:ED:CE:36:63:FA:A1 X509v3 Authority Key Identifier: keyid:D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d0:a2:fe:7b:d5:9f:cf:00:ca:ce:07:b4:6c:34:13:8f:95: 21:c5:b2:b0:2f:88:f3:6b:b2:7f:1c:c8:4c:ac:46:da:1f:6b: cb:04:25:3a:bd:30:f2:72:5a:c7:0d:a8:89:c1:2c:90:f8:7a: a1:53:5c:76:94:2e:79:19:ac:2e:99:4d:d8:ec:c9:65:37:62: f4:00:48:4b:34:3f:33:71:0c:3b:2a:68:f6:da:7a:37:9f:1b: 9a:65:e6:ff:7e:9e:06:70:9a:ce:71:44:68:5b:91:e4:9e:1b: ee:e8:9b:35:8e:6f:1c:93:f2:1c:bb:93:11:c7:09:03:c6:e2: 24:ec:a2:69:64:c1:33:14:93:61:80:7f:bc:3d:86:f0:62:c6: ea:30:ab:4a:59:59:4f:f8:79:91:ab:17:41:ea:53:41:f9:9d: 7b:29:ee:67:e1:a4:c7:83:22:a3:3c:60:25:14:ec:39:a7:63: 16:fe:33:e7:7d:04:ff:44:ea:a1:c6:96:a0:cd:7b:74:ed:81: 45:03:ae:b2:79:c3:23:d1:d9:d1:ef:39:3a:9a:23:8a:d9:21: fa:19:d2:fd:76:90:47:b8:27:3c:04:06:f1:44:cd:1a:db:b0: bb:4d:9f:bf:02:54:56:63:5c:4b:51:3e:d1:b7:ac:14:48:bc: 8f:8c:7a:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKc6g500RM9xw3oMGyArCQ638RzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk3MEYxN0M4NkQ0RDVBOUM2Mzk1RTlFMkQxNjAxQkJE OUZBOEJEQjAeFw0yNTA2MDgxMjM2MDBaFw0yNTA2MDkxMzIyMDBaMDMxMTAvBgNV BAMTKDUxQjIwMjJDNUI4NDA3REI3RkMxMUMwNjAxNTJFRENFMzY2M0ZBQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoh3OIv9GmDlF9pYe8JaDadNCG yxEO3cPbenRX8OAHyU4tilHAyN01Db5U6OdG8652OctKdGp1cBly8cGpyZM7ybbp gQGtIXM8DtbIBXdWqqYZS/Ojpjaz7J/OtGnRWVkw3mIdt2slFzgItrwpcAmXP2dX 0vehEcRedxAdkQ6q4TN3mAnZfzRC0uey/QA5kEO9alxuh7oZJJdl9J6wSRwjPmVC XSduZ2SwydNs+uagcY0iG7zsBLhNdpvhjAHv9HBhk4KIAtsj+7PsoD/oddYwYtJS J1wpdEiockBZVtE4L9XFi8Kh0JjeY5Nw3aATWr5Okc4pBmd/WC5CCDHrCeXVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUbICLFuEB9t/wRwGAVLtzjZj+qEwHwYDVR0j BBgwFoAU2XDxfIbU1anGOV6eLRYBu9n6i9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhv dmIvMS9EOTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NzBGMTdDODZENEQ1QTlD NjM5NUU5RTJEMTYwMUJCRDlGQThCREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhvdmIvMS9E OTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOtCi/nvVn88Ays4HtGw0E4+VIcWysC+I82uyfxzITKxG2h9rywQlOr0w8nJa xw2oicEskPh6oVNcdpQueRmsLplN2OzJZTdi9ABISzQ/M3EMOypo9tp6N58bmmXm /36eBnCaznFEaFuR5J4b7uibNY5vHJPyHLuTEccJA8biJOyiaWTBMxSTYYB/vD2G 8GLG6jCrSllZT/h5kasXQepTQfmdeynuZ+Gkx4MiozxgJRTsOadjFv4z530E/0Tq ocaWoM17dO2BRQOusnnDI9HZ0e85Opojitkh+hnS/XaQR7gnPAQG8UTNGtuwu02f vwJUVmNcS1E+0besFEi8j4x6iw== -----END CERTIFICATE-----Generated at Mon Jun 9 02:33:41 2025 by rpki-client