$ rpki-client -vvf rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.mft File: A524FE3F2C38E55657BE6FF4933831B625A9332B.mft (raw, json) Hash identifier: pK2KW+jVqoktHzOe32TM0Ow+Zp43aPRKhR/m02Q+c0U= Subject key identifier: 1B:97:2C:75:A3:CE:F2:AC:DC:0B:84:C8:0A:65:69:89:59:A9:BB:FB Authority key identifier: A5:24:FE:3F:2C:38:E5:56:57:BE:6F:F4:93:38:31:B6:25:A9:33:2B Certificate issuer: /CN=A524FE3F2C38E55657BE6FF4933831B625A9332B Certificate serial: 40087D84F572AD729A1B9F762C88540470D1B0C4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.cer Subject info access: rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.mft Manifest number: 023C Signing time: Fri 13 Jun 2025 19:19:36 +0000 Manifest this update: Fri 13 Jun 2025 19:14:36 +0000 Manifest next update: Sat 14 Jun 2025 22:27:36 +0000 Files and hashes: 1: A524FE3F2C38E55657BE6FF4933831B625A9332B.crl (hash: d9ah9oB3MvDy1MShBb++ugtvtJWUhsQy9VEmGeMP2Ks=) 2: 323830343a316537303a3a2f33322d3334203d3e20323634343239.roa (hash: ODMy6+S4LJPQ+NMHFs89TQ2hu933OwMNp7GUaWR/S8I=) 3: 3133312e3232312e3133322e302f32322d3234203d3e20323634343239.roa (hash: a27Kyl8uwoD3BNv5lWKqfWcw5mbVizuhYvOIPwoPNw0=) 4: 3137302e3234352e3131362e302f32322d3234203d3e20323634343239.roa (hash: mA+e9BCepKleZteT2rVyUGBhw78+faT2AP7dF7f/kuw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.crl rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 14 Jun 2025 22:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:08:7d:84:f5:72:ad:72:9a:1b:9f:76:2c:88:54:04:70:d1:b0:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A524FE3F2C38E55657BE6FF4933831B625A9332B Validity Not Before: Jun 13 19:14:36 2025 GMT Not After : Jun 14 22:27:36 2025 GMT Subject: CN=1B972C75A3CEF2ACDC0B84C80A65698959A9BBFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:de:00:58:2a:38:b5:e7:5f:5c:76:aa:c6:0b: 44:bf:b3:9e:9c:4d:f9:72:11:d6:69:68:99:68:4d: 72:ac:b7:b9:fe:dc:f7:93:76:3c:54:08:9c:49:14: a4:d5:fe:99:da:58:7e:9e:f5:95:59:4a:b7:34:05: a3:f9:62:a9:0f:c8:05:88:77:12:49:b6:fd:cb:30: da:16:74:a1:36:96:50:50:26:32:0a:d3:14:73:11: d1:8d:34:88:24:3b:e2:3a:57:0b:eb:31:4b:48:b6: 7a:0b:2a:fa:f7:ee:79:df:4f:f3:93:a8:d8:7a:b5: 3d:dc:0f:80:80:0f:01:15:27:17:e7:3c:9b:b4:1c: 64:6e:f8:2c:7d:2d:2f:25:97:7c:84:8b:08:73:cb: ac:1c:b8:d3:c7:aa:ec:5c:f9:47:04:04:cc:05:ce: 82:84:a2:3b:da:c7:84:54:ff:e7:69:e4:ab:97:70: 0f:3b:ed:f2:8e:c4:84:ba:53:26:19:b3:0c:e5:1e: 1e:4e:a4:bf:6e:95:49:70:b9:e9:81:09:70:9d:0d: de:7f:8d:32:aa:06:8c:f4:58:40:1b:6c:27:05:c9: ad:f7:c3:1c:01:e5:76:25:aa:73:1a:c0:49:67:4d: 45:9f:27:24:c5:26:0d:02:0e:c8:5f:d9:39:29:19: 69:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:97:2C:75:A3:CE:F2:AC:DC:0B:84:C8:0A:65:69:89:59:A9:BB:FB X509v3 Authority Key Identifier: keyid:A5:24:FE:3F:2C:38:E5:56:57:BE:6F:F4:93:38:31:B6:25:A9:33:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4a:c9:ae:94:80:0e:e3:e6:2f:7f:cc:75:fa:08:cb:3b:52: 14:44:a9:75:6a:0a:6f:3c:4c:0b:14:65:59:3a:42:e0:bc:5e: 4c:82:2d:79:f2:60:9b:30:59:ef:c3:53:69:94:2a:92:cf:2c: 78:ff:cb:a7:e4:fe:22:fa:23:b2:b2:61:80:8d:07:1c:e0:9e: 87:d7:1b:91:c8:01:2e:27:1d:60:86:3d:97:5a:cb:2e:6c:f5: 3c:43:d3:7b:81:ea:53:d3:95:55:3e:3b:f6:ac:d5:bf:43:63: e6:ac:3a:f1:9d:58:5f:67:09:b4:ec:24:47:68:b3:4e:bd:35: 33:63:20:4e:52:ab:61:b8:7e:fd:4f:2c:6f:00:eb:d8:e5:77: aa:74:84:81:b6:82:c2:45:7e:e8:44:a3:2e:f6:b3:ed:27:0a: 78:37:60:0b:4a:36:97:2b:ac:fe:99:40:75:cc:b7:1c:8f:d8: f8:dd:fa:87:13:d8:31:f4:b4:bc:c9:70:88:dc:5a:89:56:3f: 03:49:e0:1b:6f:b4:03:50:4d:03:68:ed:69:a0:e7:f6:44:03: 1f:cd:3f:08:e9:18:b3:38:cd:64:1b:cf:22:a1:8e:22:72:74: 52:8f:a5:42:4d:4d:5d:00:39:64:82:40:02:84:a8:81:8e:e7: 90:df:48:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQAh9hPVyrXKaG592LIhUBHDRsMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUyNEZFM0YyQzM4RTU1NjU3QkU2RkY0OTMzODMxQjYy NUE5MzMyQjAeFw0yNTA2MTMxOTE0MzZaFw0yNTA2MTQyMjI3MzZaMDMxMTAvBgNV BAMTKDFCOTcyQzc1QTNDRUYyQUNEQzBCODRDODBBNjU2OTg5NTlBOUJCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd3gBYKji1519cdqrGC0S/s56c TflyEdZpaJloTXKst7n+3PeTdjxUCJxJFKTV/pnaWH6e9ZVZSrc0BaP5YqkPyAWI dxJJtv3LMNoWdKE2llBQJjIK0xRzEdGNNIgkO+I6VwvrMUtItnoLKvr37nnfT/OT qNh6tT3cD4CADwEVJxfnPJu0HGRu+Cx9LS8ll3yEiwhzy6wcuNPHquxc+UcEBMwF zoKEojvax4RU/+dp5KuXcA877fKOxIS6UyYZswzlHh5OpL9ulUlwuemBCXCdDd5/ jTKqBoz0WEAbbCcFya33wxwB5XYlqnMawElnTUWfJyTFJg0CDshf2TkpGWntAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUG5csdaPO8qzcC4TICmVpiVmpu/swHwYDVR0j BBgwFoAUpST+Pyw45VZXvm/0kzgxtiWpMyswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXNRRTg3cHZMbzJCMllHUFNZSHpWa2g2QWpLdGE3cjVmZkFCTlk1RmpG TlEvMS9BNTI0RkUzRjJDMzhFNTU2NTdCRTZGRjQ5MzM4MzFCNjI1QTkzMzJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1MjRGRTNGMkMzOEU1NTY1 N0JFNkZGNDkzMzgzMUI2MjVBOTMzMkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXNRRTg3cHZMbzJCMllHUFNZSHpWa2g2QWpLdGE3cjVmZkFCTlk1RmpGTlEvMS9B NTI0RkUzRjJDMzhFNTU2NTdCRTZGRjQ5MzM4MzFCNjI1QTkzMzJCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACkrJrpSADuPmL3/MdfoIyztSFESpdWoKbzxMCxRlWTpC4LxeTIItefJgmzBZ 78NTaZQqks8seP/Lp+T+IvojsrJhgI0HHOCeh9cbkcgBLicdYIY9l1rLLmz1PEPT e4HqU9OVVT479qzVv0Nj5qw68Z1YX2cJtOwkR2izTr01M2MgTlKrYbh+/U8sbwDr 2OV3qnSEgbaCwkV+6ESjLvaz7ScKeDdgC0o2lyus/plAdcy3HI/Y+N36hxPYMfS0 vMlwiNxaiVY/A0ngG2+0A1BNA2jtaaDn9kQDH80/COkYszjNZBvPIqGOInJ0Uo+l Qk1NXQA5ZIJAAoSogY7nkN9IhA== -----END CERTIFICATE-----Generated at Sat Jun 14 09:55:08 2025 by rpki-client