$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft File: D539CF929B6A6A2B9596B922F417FAD917799ED7.mft (raw, json) Hash identifier: bAVoZC1qldNenkUdTpvG4Q1wR7v5+luNc0dKFtOmA6s= Subject key identifier: 3C:BD:40:29:CF:7B:4B:FD:C5:1E:6B:E6:60:55:FC:97:31:AB:86:79 Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 Certificate issuer: /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Certificate serial: 02E032F63455D6B6A3862E260E7360A90F7228C6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft Manifest number: 0249 Signing time: Thu 12 Jun 2025 23:09:45 +0000 Manifest this update: Thu 12 Jun 2025 23:04:45 +0000 Manifest next update: Sat 14 Jun 2025 01:23:45 +0000 Files and hashes: 1: D539CF929B6A6A2B9596B922F417FAD917799ED7.crl (hash: l9sFemx2fhK8az6LmRS5KpaH6b88x2sQk3U8KuNYTX4=) 2: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: FE+7zbwcRwFNCNZQz6JTL4PFhynEDJA2jUUaWQGOwlw=) 3: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (hash: 01pAW4QCHBpNqYLYxhHBFF+Hirycj7LT0087UnT0sog=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 14 Jun 2025 01:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e0:32:f6:34:55:d6:b6:a3:86:2e:26:0e:73:60:a9:0f:72:28:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Validity Not Before: Jun 12 23:04:45 2025 GMT Not After : Jun 14 01:23:45 2025 GMT Subject: CN=3CBD4029CF7B4BFDC51E6BE66055FC9731AB8679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7f:70:c7:e0:ea:43:63:a6:92:be:72:a3:50: f7:ff:ad:54:70:30:a8:cc:da:14:5a:c1:01:78:36: a4:30:ba:5b:e0:9e:82:7b:2b:59:5e:f9:8b:0e:a8: 7d:d1:e8:81:63:98:ff:e3:c6:0c:5c:8f:81:f3:19: fc:f4:00:59:9c:cd:6d:c6:64:4b:be:86:3e:6b:92: fa:d6:7f:3a:8b:b2:f1:59:12:2c:fe:b7:72:45:b7: 12:5e:27:b0:9f:4e:b4:94:16:9d:79:aa:c5:63:c7: f0:86:83:ae:43:67:a8:8d:c9:61:60:f1:87:e0:79: 59:ab:55:e0:b8:15:43:65:a3:b7:a0:ba:2c:02:d8: bb:58:61:44:40:f1:89:02:87:e2:fd:6b:cf:fe:79: a2:e9:a2:72:32:a0:e7:c3:d5:62:33:4e:30:6b:b5: 25:22:80:45:81:20:39:84:58:a5:0f:a0:f3:57:5d: 83:5d:6d:a1:92:07:fd:31:6b:db:c2:c3:2f:0a:3c: e2:27:3f:92:91:67:4d:38:7d:4a:15:6b:2f:f4:c1: 88:d1:49:38:67:ef:c6:47:de:56:44:52:7e:47:44: 6a:aa:89:4a:96:6c:dc:35:de:a5:87:da:65:db:1a: 09:73:4a:d9:b2:b6:b2:34:b0:02:14:f6:f6:41:e6: 2e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BD:40:29:CF:7B:4B:FD:C5:1E:6B:E6:60:55:FC:97:31:AB:86:79 X509v3 Authority Key Identifier: keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:3a:e8:1b:39:40:d0:91:c7:0b:dc:2d:2a:b3:27:9d:b9:8c: 2e:a1:73:4a:99:bf:3c:b7:1b:9d:50:2e:65:13:88:1a:43:4d: 27:dc:67:d2:0b:89:08:0e:cc:d1:2a:29:eb:fb:31:2e:a6:2b: 7f:34:5d:29:6c:f3:dd:db:f4:21:f1:b2:72:f3:b7:75:13:16: aa:fb:f2:5f:20:61:71:3e:65:73:a8:c9:3e:8c:a5:42:6c:cf: fc:47:0b:d6:2a:26:de:f8:ac:d7:53:d1:ea:24:08:9e:37:0e: da:69:26:ad:77:c1:3b:d3:b1:1e:25:a5:77:49:0b:1d:fe:16: 60:7d:f2:2d:d4:5c:2a:d1:cc:01:df:0f:38:e9:f9:3b:d7:b7: 84:74:8b:94:a9:87:c5:53:dd:f3:fc:2a:7b:ba:0b:93:fe:0e: 9c:7d:86:41:b4:9a:bb:e7:17:5d:fb:56:c5:95:1e:c1:e7:70: b7:96:c6:d9:3b:e6:ba:54:39:46:4c:a7:29:f2:e7:eb:f2:53: 50:2c:82:6f:c8:40:e9:93:8f:98:9f:d4:13:1b:bb:30:06:e2: ba:a3:fa:1b:6a:5a:7a:5d:95:98:3a:2c:29:12:c3:5e:0a:a7: fc:10:1a:df:b3:a2:b3:07:ed:2c:10:9f:ec:cc:3f:f0:90:ff: 48:fa:a7:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAuAy9jRV1rajhi4mDnNgqQ9yKMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUzOUNGOTI5QjZBNkEyQjk1OTZCOTIyRjQxN0ZBRDkx Nzc5OUVENzAeFw0yNTA2MTIyMzA0NDVaFw0yNTA2MTQwMTIzNDVaMDMxMTAvBgNV BAMTKDNDQkQ0MDI5Q0Y3QjRCRkRDNTFFNkJFNjYwNTVGQzk3MzFBQjg2NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSf3DH4OpDY6aSvnKjUPf/rVRw MKjM2hRawQF4NqQwulvgnoJ7K1le+YsOqH3R6IFjmP/jxgxcj4HzGfz0AFmczW3G ZEu+hj5rkvrWfzqLsvFZEiz+t3JFtxJeJ7CfTrSUFp15qsVjx/CGg65DZ6iNyWFg 8YfgeVmrVeC4FUNlo7eguiwC2LtYYURA8YkCh+L9a8/+eaLponIyoOfD1WIzTjBr tSUigEWBIDmEWKUPoPNXXYNdbaGSB/0xa9vCwy8KPOInP5KRZ004fUoVay/0wYjR SThn78ZH3lZEUn5HRGqqiUqWbNw13qWH2mXbGglzStmytrI0sAIU9vZB5i5fAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPL1AKc97S/3FHmvmYFX8lzGrhnkwHwYDVR0j BBgwFoAU1TnPkptqaiuVlrki9Bf62Rd5ntcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNT M1QvMS9ENTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MzlDRjkyOUI2QTZBMkI5 NTk2QjkyMkY0MTdGQUQ5MTc3OTlFRDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNTM1QvMS9E NTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqjroGzlA0JHHC9wtKrMnnbmMLqFzSpm/PLcbnVAuZROIGkNNJ9xn0guJCA7M 0Sop6/sxLqYrfzRdKWzz3dv0IfGycvO3dRMWqvvyXyBhcT5lc6jJPoylQmzP/EcL 1iom3vis11PR6iQInjcO2mkmrXfBO9OxHiWld0kLHf4WYH3yLdRcKtHMAd8POOn5 O9e3hHSLlKmHxVPd8/wqe7oLk/4OnH2GQbSau+cXXftWxZUewedwt5bG2TvmulQ5 RkynKfLn6/JTUCyCb8hA6ZOPmJ/UExu7MAbiuqP6G2pael2VmDosKRLDXgqn/BAa 37OiswftLBCf7Mw/8JD/SPqnwQ== -----END CERTIFICATE-----Generated at Fri Jun 13 16:37:39 2025 by rpki-client