$ rpki-client -vvf rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.mft File: BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.mft (raw, json) Hash identifier: w+cf+gnT0ARTX//KKn/dwpjswPD94LY7teh5zuOf87o= Subject key identifier: DC:25:15:BB:99:D7:8A:14:8D:96:0C:66:CB:5D:F9:86:8B:96:59:79 Authority key identifier: BF:D9:9D:DF:13:2C:A7:F4:F3:8E:7D:EE:A4:F6:EB:DD:D2:E8:F7:41 Certificate issuer: /CN=BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741 Certificate serial: 77A10E72F43E2180DB29312D0F9FAC664AB523CB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.cer Subject info access: rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.mft Manifest number: 023E Signing time: Sun 08 Jun 2025 17:00:01 +0000 Manifest this update: Sun 08 Jun 2025 16:55:01 +0000 Manifest next update: Mon 09 Jun 2025 19:35:01 +0000 Files and hashes: 1: 323830343a386465383a3a2f33322d3332203d3e20323733333839.roa (hash: UiXjDidkD0nAk2B9x3CihHP/bHAmAf6Pe10O64bz2Pk=) 2: BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.crl (hash: 87gqC//IFIf3hWIrzZpOA2vFlHL9p0WI4KdlRFu8gmc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.crl rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Jun 2025 14:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a1:0e:72:f4:3e:21:80:db:29:31:2d:0f:9f:ac:66:4a:b5:23:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741 Validity Not Before: Jun 8 16:55:01 2025 GMT Not After : Jun 9 19:35:01 2025 GMT Subject: CN=DC2515BB99D78A148D960C66CB5DF9868B965979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c6:20:5b:4f:fe:29:8f:ff:5f:51:49:08:a9: 4d:a8:b9:f6:48:6e:72:a3:dd:7b:a7:dd:26:08:10: 08:6e:43:ba:9e:43:2c:a8:c0:f6:80:63:67:ed:c7: 6c:57:18:96:f4:4d:99:48:72:40:40:93:07:7d:ed: ad:f6:1a:7a:49:68:9d:18:c6:33:09:26:8a:3c:e3: ef:88:7d:c3:c1:dc:fd:e3:28:c8:da:1a:52:4d:fd: 83:14:a7:70:fd:af:95:74:25:7e:72:e7:46:0e:4d: 6d:23:14:99:b9:83:9e:52:d4:78:3d:f4:7e:e5:a1: be:80:14:19:01:46:cc:d0:fe:d6:b0:b3:09:2c:a8: 02:63:f9:64:ab:4f:8e:d7:3c:17:22:5c:61:61:d1: 20:72:d9:8b:9a:94:e9:8b:09:46:0c:63:ad:80:95: 98:a5:ff:81:ed:42:03:57:d9:ac:8f:b6:2d:ab:55: 93:c9:dd:58:44:df:3e:17:44:1d:f3:ae:9a:80:f2: 67:ca:46:ac:65:b3:3c:71:ac:5c:69:ae:06:8b:0e: e0:c7:d3:39:bd:01:9f:b9:28:b8:04:dc:e2:f8:99: 93:82:56:cf:0d:23:66:6e:26:14:ad:b7:16:04:39: 47:b7:9e:f9:71:41:94:26:af:54:8d:8d:14:88:f9: b4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:25:15:BB:99:D7:8A:14:8D:96:0C:66:CB:5D:F9:86:8B:96:59:79 X509v3 Authority Key Identifier: keyid:BF:D9:9D:DF:13:2C:A7:F4:F3:8E:7D:EE:A4:F6:EB:DD:D2:E8:F7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CweHrY7tr7bth5qfdbnDHF7y9yZpGxRY749q7SU16izX/1/BFD99DDF132CA7F4F38E7DEEA4F6EBDDD2E8F741.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:81:7f:a2:d2:0b:8c:32:e9:d2:f7:a4:3c:83:c1:63:7b:6d: 34:59:31:b2:06:67:92:b6:db:21:e9:26:cb:29:bd:57:a8:3a: 18:86:d1:1c:57:86:e4:b8:64:a7:12:a1:c1:2f:6b:1b:7d:e4: b9:ab:cb:10:3b:b0:53:3e:5f:6c:f5:6f:8e:94:eb:f7:78:0f: 13:15:11:fb:b2:22:b6:71:b5:5b:39:e8:69:6b:f0:86:4e:62: f7:f3:ad:85:da:68:06:e7:90:5d:7a:f3:e1:8f:94:d9:7b:7f: 92:bb:46:11:59:5d:38:a2:86:35:7c:81:be:ea:d8:b6:76:fb: eb:9f:4a:f8:b0:7b:d7:89:6b:b9:3c:15:eb:04:6c:4a:44:ba: 78:77:b0:b4:7c:82:e2:c8:66:ff:b2:99:1a:83:7c:3e:e7:34: 0e:7f:16:3c:79:e0:ab:b3:b3:ac:02:9c:3c:56:d6:02:1a:52: 75:79:3e:d4:41:35:e5:6c:8d:06:84:61:9c:a4:50:14:32:56: 8c:71:44:bc:f8:20:4f:3b:b0:6b:2e:50:ac:ec:ab:cd:76:60: 5a:8e:c9:49:71:ea:42:a2:39:4f:7c:7d:41:38:f3:6b:c7:79: 0e:f8:13:03:fa:91:b8:4f:ab:3d:62:c5:62:5b:f4:1f:9a:25: b4:9d:bd:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUd6EOcvQ+IYDbKTEtD5+sZkq1I8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZEOTlEREYxMzJDQTdGNEYzOEU3REVFQTRGNkVCRERE MkU4Rjc0MTAeFw0yNTA2MDgxNjU1MDFaFw0yNTA2MDkxOTM1MDFaMDMxMTAvBgNV BAMTKERDMjUxNUJCOTlENzhBMTQ4RDk2MEM2NkNCNURGOTg2OEI5NjU5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAxiBbT/4pj/9fUUkIqU2oufZI bnKj3Xun3SYIEAhuQ7qeQyyowPaAY2ftx2xXGJb0TZlIckBAkwd97a32GnpJaJ0Y xjMJJoo84++IfcPB3P3jKMjaGlJN/YMUp3D9r5V0JX5y50YOTW0jFJm5g55S1Hg9 9H7lob6AFBkBRszQ/tawswksqAJj+WSrT47XPBciXGFh0SBy2YualOmLCUYMY62A lZil/4HtQgNX2ayPti2rVZPJ3VhE3z4XRB3zrpqA8mfKRqxlszxxrFxprgaLDuDH 0zm9AZ+5KLgE3OL4mZOCVs8NI2ZuJhSttxYEOUe3nvlxQZQmr1SNjRSI+bRzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3CUVu5nXihSNlgxmy135houWWXkwHwYDVR0j BBgwFoAUv9md3xMsp/Tzjn3upPbr3dLo90EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3dlSHJZN3RyN2J0aDVxZmRibkRIRjd5OXlacEd4Ulk3NDlxN1NVMTZp elgvMS9CRkQ5OURERjEzMkNBN0Y0RjM4RTdERUVBNEY2RUJEREQyRThGNzQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGRDk5RERGMTMyQ0E3RjRG MzhFN0RFRUE0RjZFQkRERDJFOEY3NDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3dlSHJZN3RyN2J0aDVxZmRibkRIRjd5OXlacEd4Ulk3NDlxN1NVMTZpelgvMS9C RkQ5OURERjEzMkNBN0Y0RjM4RTdERUVBNEY2RUJEREQyRThGNzQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK4F/otILjDLp0vekPIPBY3ttNFkxsgZnkrbbIekmyym9V6g6GIbRHFeG5Lhk pxKhwS9rG33kuavLEDuwUz5fbPVvjpTr93gPExUR+7IitnG1WznoaWvwhk5i9/Ot hdpoBueQXXrz4Y+U2Xt/krtGEVldOKKGNXyBvurYtnb7659K+LB714lruTwV6wRs SkS6eHewtHyC4shm/7KZGoN8Puc0Dn8WPHngq7OzrAKcPFbWAhpSdXk+1EE15WyN BoRhnKRQFDJWjHFEvPggTzuway5QrOyrzXZgWo7JSXHqQqI5T3x9QTjza8d5DvgT A/qRuE+rPWLFYlv0H5oltJ29dA== -----END CERTIFICATE-----Generated at Sun Jun 8 21:43:45 2025 by rpki-client