$ rpki-client -vvf rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/D3237D5995E1D5C681CD7F512F69829F6DB60E6A.mft File: D3237D5995E1D5C681CD7F512F69829F6DB60E6A.mft (raw, json) Hash identifier: vGRujuNtlUr1DFobVFjQk0oo48tMpa5gnwn0SZF1tHw= Subject key identifier: 9A:9A:ED:77:77:09:4F:AE:C7:2A:9B:10:0E:BA:2D:97:EF:A3:9F:5C Authority key identifier: D3:23:7D:59:95:E1:D5:C6:81:CD:7F:51:2F:69:82:9F:6D:B6:0E:6A Certificate issuer: /CN=D3237D5995E1D5C681CD7F512F69829F6DB60E6A Certificate serial: 01620E8285A081FB3D4A7FB6C9438188CA3A8A91 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3237D5995E1D5C681CD7F512F69829F6DB60E6A.cer Subject info access: rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/D3237D5995E1D5C681CD7F512F69829F6DB60E6A.mft Manifest number: 0219 Signing time: Thu 12 Jun 2025 11:41:52 +0000 Manifest this update: Thu 12 Jun 2025 11:36:52 +0000 Manifest next update: Fri 13 Jun 2025 12:59:52 +0000 Files and hashes: 1: D3237D5995E1D5C681CD7F512F69829F6DB60E6A.crl (hash: dgxsJTpQlkOJh7hqrbeBH1rwhP/qhDn8a4Mnl8KNR24=) 2: 323830343a333434633a3a2f33322d313238203d3e20323632383138.roa (hash: eC98xOd74xPFe0elH1fHRaLIjQkYokaFAv4Gxl3c2uM=) 3: 3138362e3235302e3136302e302f32322d3332203d3e20323632383138.roa (hash: MHnZ8mlvOU/jVler+NqCQij7yp4dQwW78BO5OjrasbI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/D3237D5995E1D5C681CD7F512F69829F6DB60E6A.crl rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/D3237D5995E1D5C681CD7F512F69829F6DB60E6A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3237D5995E1D5C681CD7F512F69829F6DB60E6A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 13 Jun 2025 12:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:62:0e:82:85:a0:81:fb:3d:4a:7f:b6:c9:43:81:88:ca:3a:8a:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3237D5995E1D5C681CD7F512F69829F6DB60E6A Validity Not Before: Jun 12 11:36:52 2025 GMT Not After : Jun 13 12:59:52 2025 GMT Subject: CN=9A9AED7777094FAEC72A9B100EBA2D97EFA39F5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:46:b5:11:c7:9a:bf:37:de:2f:c4:ba:24:7c: 58:a5:a7:d4:72:1c:7c:f9:47:95:80:03:93:ce:3d: e6:c9:c3:09:8e:07:0b:a2:51:c3:48:f3:a3:f1:88: 55:94:5b:56:ff:62:22:6c:0d:0c:aa:44:c1:ba:1f: c2:2b:22:b0:d8:f4:cd:79:67:02:4c:c6:40:97:f7: ef:18:ff:05:38:5f:21:1b:28:c3:7f:4d:b5:97:8d: 8e:b0:9d:8d:9e:17:9d:c4:85:8b:a0:d7:9d:9b:c2: ac:b9:16:22:78:a6:fa:df:67:dd:2c:7f:db:f7:3b: d1:4f:0c:3e:30:00:cf:aa:2c:19:29:0c:ca:ad:aa: cd:ba:d9:ef:e3:9d:1e:36:9a:12:25:11:0a:97:29: ac:07:98:60:22:32:d2:20:84:d0:d3:4a:d4:aa:bf: 35:f1:3e:bc:66:21:a8:8c:11:47:13:f9:1e:e4:2d: de:f6:29:35:9e:59:07:9f:f7:6c:0f:48:60:cb:fd: a1:83:96:bc:07:45:3d:94:b5:04:41:52:ef:35:30: 36:1c:9e:40:8c:83:e4:cd:f4:09:85:e3:e5:c3:29: 73:61:31:16:5f:67:cc:de:8c:28:a9:db:df:d0:b2: cf:68:bf:b4:34:c7:21:92:a4:5a:db:22:49:a6:8b: 6b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9A:ED:77:77:09:4F:AE:C7:2A:9B:10:0E:BA:2D:97:EF:A3:9F:5C X509v3 Authority Key Identifier: keyid:D3:23:7D:59:95:E1:D5:C6:81:CD:7F:51:2F:69:82:9F:6D:B6:0E:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/D3237D5995E1D5C681CD7F512F69829F6DB60E6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3237D5995E1D5C681CD7F512F69829F6DB60E6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECrSp8Gt5axDVfryFpNEw1DN5TS8exX6csj8EtUduGfm/0/D3237D5995E1D5C681CD7F512F69829F6DB60E6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c9:fc:d8:a8:8f:a0:fe:65:4f:69:ad:91:92:8b:16:51:6b: 1d:4f:e9:92:ae:77:5b:4d:3d:04:39:28:ad:88:b8:26:9d:98: 49:04:15:52:d2:c9:4d:31:13:59:c6:41:26:97:7d:0e:b2:fd: 62:a1:a9:52:48:f8:f0:e1:1e:9a:99:c5:7e:48:1d:90:21:ea: 27:09:39:f3:34:22:75:18:a7:e1:34:64:1a:a5:b5:52:7d:61: cc:9a:b7:76:e0:b1:91:50:83:c3:52:02:83:9e:7f:dc:34:35: ba:58:27:7c:6a:0f:cb:e3:8d:b7:64:7d:28:8d:e8:97:3b:25: 5d:4f:65:c9:83:0f:5c:a5:f0:b4:91:72:81:ff:1c:d3:b5:15: 87:1e:0f:04:7b:f4:4d:2f:32:35:a7:b7:d8:6c:57:3a:30:5b: 04:dc:7e:ff:62:ab:77:74:c8:6e:39:92:69:9e:62:63:cf:a7: 73:38:86:0b:21:bf:7c:c4:ec:7b:1a:7b:c8:09:f9:8c:2d:48: 5e:80:da:35:1f:b8:06:4b:61:0a:fe:93:0f:81:d5:52:01:e0: a9:7c:66:cb:ef:48:68:ac:bb:02:7c:a2:ce:4f:7c:a2:a4:2b: d1:1f:e6:3c:c5:9c:51:cb:2c:32:1a:f4:27:0c:70:98:92:25: f6:64:79:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAWIOgoWggfs9Sn+2yUOBiMo6ipEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMyMzdENTk5NUUxRDVDNjgxQ0Q3RjUxMkY2OTgyOUY2 REI2MEU2QTAeFw0yNTA2MTIxMTM2NTJaFw0yNTA2MTMxMjU5NTJaMDMxMTAvBgNV BAMTKDlBOUFFRDc3NzcwOTRGQUVDNzJBOUIxMDBFQkEyRDk3RUZBMzlGNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpRrURx5q/N94vxLokfFilp9Ry HHz5R5WAA5POPebJwwmOBwuiUcNI86PxiFWUW1b/YiJsDQyqRMG6H8IrIrDY9M15 ZwJMxkCX9+8Y/wU4XyEbKMN/TbWXjY6wnY2eF53EhYug152bwqy5FiJ4pvrfZ90s f9v3O9FPDD4wAM+qLBkpDMqtqs262e/jnR42mhIlEQqXKawHmGAiMtIghNDTStSq vzXxPrxmIaiMEUcT+R7kLd72KTWeWQef92wPSGDL/aGDlrwHRT2UtQRBUu81MDYc nkCMg+TN9AmF4+XDKXNhMRZfZ8zejCip29/Qss9ov7Q0xyGSpFrbIkmmi2uhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmprtd3cJT67HKpsQDrotl++jn1wwHwYDVR0j BBgwFoAU0yN9WZXh1caBzX9RL2mCn222DmowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUNyU3A4R3Q1YXhEVmZyeUZwTkV3MURONVRTOGV4WDZjc2o4RXRVZHVH Zm0vMC9EMzIzN0Q1OTk1RTFENUM2ODFDRDdGNTEyRjY5ODI5RjZEQjYwRTZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzMjM3RDU5OTVFMUQ1QzY4 MUNEN0Y1MTJGNjk4MjlGNkRCNjBFNkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RUNyU3A4R3Q1YXhEVmZyeUZwTkV3MURONVRTOGV4WDZjc2o4RXRVZHVHZm0vMC9E MzIzN0Q1OTk1RTFENUM2ODFDRDdGNTEyRjY5ODI5RjZEQjYwRTZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPcn82KiPoP5lT2mtkZKLFlFrHU/pkq53W009BDkorYi4Jp2YSQQVUtLJTTET WcZBJpd9DrL9YqGpUkj48OEempnFfkgdkCHqJwk58zQidRin4TRkGqW1Un1hzJq3 duCxkVCDw1ICg55/3DQ1ulgnfGoPy+ONt2R9KI3olzslXU9lyYMPXKXwtJFygf8c 07UVhx4PBHv0TS8yNae32GxXOjBbBNx+/2Krd3TIbjmSaZ5iY8+ncziGCyG/fMTs exp7yAn5jC1IXoDaNR+4BkthCv6TD4HVUgHgqXxmy+9IaKy7Anyizk98oqQr0R/m PMWcUcssMhr0JwxwmJIl9mR58w== -----END CERTIFICATE-----Generated at Thu Jun 12 15:20:34 2025 by rpki-client