$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft File: D539CF929B6A6A2B9596B922F417FAD917799ED7.mft (raw, json) Hash identifier: bEhx5x1pFtx3TtLuh+sSy96I0SxWYXfqpKlD1S7cNLg= Subject key identifier: 2C:CC:8E:89:9E:FF:B8:68:5B:0D:55:1D:5B:A4:02:EC:C6:50:9A:F4 Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 Certificate issuer: /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Certificate serial: 614BE903AC297ABA8BCB9247B1D6BF93F97719D7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft Manifest number: 0245 Signing time: Tue 10 Jun 2025 01:35:20 +0000 Manifest this update: Tue 10 Jun 2025 01:30:20 +0000 Manifest next update: Wed 11 Jun 2025 01:47:20 +0000 Files and hashes: 1: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (hash: 01pAW4QCHBpNqYLYxhHBFF+Hirycj7LT0087UnT0sog=) 2: D539CF929B6A6A2B9596B922F417FAD917799ED7.crl (hash: Xtuo7jefhdUGudIMcA/l6sdY1TD6Nk4bXq7SFuuvVk0=) 3: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: FE+7zbwcRwFNCNZQz6JTL4PFhynEDJA2jUUaWQGOwlw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 01:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:4b:e9:03:ac:29:7a:ba:8b:cb:92:47:b1:d6:bf:93:f9:77:19:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Validity Not Before: Jun 10 01:30:20 2025 GMT Not After : Jun 11 01:47:20 2025 GMT Subject: CN=2CCC8E899EFFB8685B0D551D5BA402ECC6509AF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f4:2c:e2:38:c9:a3:52:9f:80:85:38:da:3f: 90:15:16:70:e9:22:93:1a:eb:31:90:45:2e:88:db: 58:10:cb:81:57:07:ba:dc:f1:01:98:bb:e6:3b:37: 45:6e:28:54:84:18:07:92:cf:96:60:86:86:00:dd: 0e:5e:60:08:0c:eb:3a:cf:72:91:7e:c1:80:c1:62: d5:41:48:89:7e:b5:ca:21:8a:df:89:a8:79:2c:a3: 09:d5:8f:ed:98:17:05:e3:94:3a:a4:21:0e:fa:8a: a5:ad:c3:dc:fc:7d:ed:2a:4d:94:ab:f0:1d:22:1c: d0:db:2d:1e:68:70:4f:d3:2c:4c:48:e1:f5:3b:dc: 25:fd:ad:34:7f:4e:8d:8e:bd:f0:7e:0f:f3:65:99: 60:49:7f:de:fa:6b:84:80:8a:14:9f:dc:2d:32:f1: af:f8:6b:33:fb:c7:93:8a:02:f9:4a:40:cb:0d:a3: be:72:20:99:a4:4e:5f:11:65:df:83:9c:ab:c1:d9: 20:b3:2a:c9:ec:ba:6e:fb:3a:e3:09:fd:fe:a7:ac: 41:97:04:c0:98:88:5f:af:ad:b3:1b:73:ea:79:2f: 79:68:7c:f6:d5:69:e4:f8:48:62:6e:7c:79:c4:9a: c9:dc:a7:f3:65:c4:7d:c4:fa:b4:e4:bc:25:59:b8: e5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CC:8E:89:9E:FF:B8:68:5B:0D:55:1D:5B:A4:02:EC:C6:50:9A:F4 X509v3 Authority Key Identifier: keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:0e:99:fe:39:e4:ee:bc:8a:0c:80:e9:d7:c5:32:15:1f:a0: 4d:97:33:18:a5:06:28:47:a3:14:b3:92:26:19:b1:07:e6:15: 87:34:49:a9:4c:56:88:5d:71:eb:f3:dd:e3:5a:c7:0f:e9:8a: 05:bf:37:a7:68:53:be:65:0f:68:0e:0d:1c:ef:4d:d0:18:1e: 29:8d:ab:29:c9:5f:e9:9e:60:e8:cf:55:27:b9:c1:a6:9a:02: d4:40:b4:96:8a:ee:bd:04:a0:ba:96:c9:4d:d9:d6:5c:d8:9f: 0f:71:10:c0:81:de:bf:a7:65:54:11:63:93:c5:5b:a8:04:de: e6:b7:6a:58:43:e6:06:b4:0f:ed:d6:1b:0d:4c:65:d1:14:9c: 57:77:a9:24:50:0a:a3:a6:a0:1a:b1:6b:46:39:d8:9d:50:31: fc:d8:96:ab:3b:5f:c4:52:69:61:35:c1:ba:d9:c5:7f:66:d0: 7a:f4:e4:57:f5:69:b0:76:63:b5:93:18:bf:4c:5c:47:af:77: f3:86:5b:3f:aa:a1:39:ba:15:2c:ed:e8:75:85:4a:ce:4d:fd: 7b:57:1e:b6:fe:3e:51:02:2b:5c:b0:ed:a2:21:8f:ba:1e:f4: 3e:71:24:78:bb:f4:c9:52:b8:eb:89:e0:24:ef:7f:41:22:95: ec:ac:89:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYUvpA6wperqLy5JHsda/k/l3GdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUzOUNGOTI5QjZBNkEyQjk1OTZCOTIyRjQxN0ZBRDkx Nzc5OUVENzAeFw0yNTA2MTAwMTMwMjBaFw0yNTA2MTEwMTQ3MjBaMDMxMTAvBgNV BAMTKDJDQ0M4RTg5OUVGRkI4Njg1QjBENTUxRDVCQTQwMkVDQzY1MDlBRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu9CziOMmjUp+AhTjaP5AVFnDp IpMa6zGQRS6I21gQy4FXB7rc8QGYu+Y7N0VuKFSEGAeSz5ZghoYA3Q5eYAgM6zrP cpF+wYDBYtVBSIl+tcohit+JqHksownVj+2YFwXjlDqkIQ76iqWtw9z8fe0qTZSr 8B0iHNDbLR5ocE/TLExI4fU73CX9rTR/To2OvfB+D/NlmWBJf976a4SAihSf3C0y 8a/4azP7x5OKAvlKQMsNo75yIJmkTl8RZd+DnKvB2SCzKsnsum77OuMJ/f6nrEGX BMCYiF+vrbMbc+p5L3lofPbVaeT4SGJufHnEmsncp/NlxH3E+rTkvCVZuOUhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULMyOiZ7/uGhbDVUdW6QC7MZQmvQwHwYDVR0j BBgwFoAU1TnPkptqaiuVlrki9Bf62Rd5ntcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNT M1QvMS9ENTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MzlDRjkyOUI2QTZBMkI5 NTk2QjkyMkY0MTdGQUQ5MTc3OTlFRDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNTM1QvMS9E NTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArg6Z/jnk7ryKDIDp18UyFR+gTZczGKUGKEejFLOSJhmxB+YVhzRJqUxWiF1x 6/Pd41rHD+mKBb83p2hTvmUPaA4NHO9N0BgeKY2rKclf6Z5g6M9VJ7nBppoC1EC0 loruvQSgupbJTdnWXNifD3EQwIHev6dlVBFjk8VbqATe5rdqWEPmBrQP7dYbDUxl 0RScV3epJFAKo6agGrFrRjnYnVAx/NiWqztfxFJpYTXButnFf2bQevTkV/VpsHZj tZMYv0xcR69384ZbP6qhOboVLO3odYVKzk39e1cetv4+UQIrXLDtoiGPuh70PnEk eLv0yVK464ngJO9/QSKV7KyJAQ== -----END CERTIFICATE-----Generated at Tue Jun 10 12:16:23 2025 by rpki-client