$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.mft File: 9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.mft (raw, json) Hash identifier: 9qoUkkzkiT6R0E9Lz+GinhpdhIA4eIzyXEi0scQndoA= Subject key identifier: 4B:44:66:26:4C:DA:31:48:09:B2:5E:B5:6B:88:26:AB:39:0B:39:28 Authority key identifier: 9E:9E:5E:57:D5:BE:23:95:1A:4F:4F:E4:7E:8B:61:F4:3D:5A:FF:AF Certificate issuer: /CN=9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF Certificate serial: 0FFCAEFABAF1D14FD29A85368CBC09E6AF0075ED Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.cer Subject info access: rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.mft Manifest number: 0170 Signing time: Fri 13 Jun 2025 20:58:21 +0000 Manifest this update: Fri 13 Jun 2025 20:53:21 +0000 Manifest next update: Sat 14 Jun 2025 23:28:21 +0000 Files and hashes: 1: 9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.crl (hash: ZccaS50bLJZg7HlTLLp1ilDylZ6PfORZPobhuM9rf1I=) 2: 3133382e3138352e34302e302f32322d3332203d3e20323633333834.roa (hash: FG5aLxh1P/3sid4mIj0hL/Vnb3T5xPdB9NRMxkJF5sI=) 3: 3137372e38372e32382e302f32322d3332203d3e20323633333834.roa (hash: wPAPW/9soS0HPzpOZph0RVXfe/GT1hQ+I7gMMRgzuE4=) 4: 323830343a313535343a3a2f33322d313238203d3e20323633333834.roa (hash: ApaGC5AuOAFde9Oq93leIV3se7PNiBa3JeV6SkkY67U=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.crl rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 14 Jun 2025 23:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:fc:ae:fa:ba:f1:d1:4f:d2:9a:85:36:8c:bc:09:e6:af:00:75:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF Validity Not Before: Jun 13 20:53:21 2025 GMT Not After : Jun 14 23:28:21 2025 GMT Subject: CN=4B4466264CDA314809B25EB56B8826AB390B3928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0b:35:3f:f4:07:b9:91:fa:3b:f3:9d:21:d8: 03:77:3a:b7:64:64:1e:ca:3a:66:43:11:d0:60:ba: 15:fa:2b:83:43:7f:0b:c0:74:68:66:76:73:2e:bf: 61:00:e0:ac:9f:97:4f:b8:4a:e7:2d:42:99:3b:69: 1d:43:61:71:be:b4:86:53:68:59:7c:83:80:d5:0b: bf:cd:c2:62:85:3c:ad:78:19:0d:b5:90:2a:31:6f: c8:95:bd:df:73:a7:af:35:d8:b5:96:8f:2c:72:99: 58:15:97:6b:9d:fc:18:6d:3e:c2:53:21:1e:8e:03: d3:a9:b0:f3:87:a0:af:4b:02:6b:cf:be:2b:70:75: dd:35:71:f7:19:e7:a1:5a:5f:57:0b:27:44:9e:69: 80:6a:05:29:c8:a8:09:52:69:fc:78:d6:dd:e6:b3: 16:c2:eb:e5:77:8e:27:c5:1d:3c:cf:81:a9:a8:9a: 3c:50:26:e0:d4:59:c3:73:de:a1:5e:53:d1:e9:5f: f4:64:26:4c:79:de:1b:8d:2f:80:b8:f1:c1:91:93: ed:31:85:4b:57:d2:a0:e0:c7:54:43:3d:68:a0:23: 48:c1:dd:1f:cd:5f:ef:78:13:75:d4:0b:74:83:cb: 7b:28:a7:d8:c9:19:d4:89:af:c8:9d:27:53:73:5b: de:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:44:66:26:4C:DA:31:48:09:B2:5E:B5:6B:88:26:AB:39:0B:39:28 X509v3 Authority Key Identifier: keyid:9E:9E:5E:57:D5:BE:23:95:1A:4F:4F:E4:7E:8B:61:F4:3D:5A:FF:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/9E9E5E57D5BE23951A4F4FE47E8B61F43D5AFFAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:de:5e:97:72:f0:06:b8:1a:30:fc:a0:bc:5e:a2:c7:18:29: 26:08:8e:82:7b:48:94:88:d8:60:61:9b:6f:d9:d5:6d:5a:82: 27:50:02:5a:32:2c:6e:f4:65:1e:e7:05:f3:fc:63:35:ca:39: f5:57:43:dc:dc:24:83:70:4c:f9:09:5e:99:1c:67:ff:79:de: fd:7f:77:80:a4:33:fc:96:1e:f1:df:13:10:61:cf:e3:66:cb: ba:e7:c2:89:91:cd:02:ca:21:37:b7:86:af:8a:cb:a7:71:c9: ff:7a:b8:fe:2e:41:91:26:9f:c1:1b:19:a9:30:cd:05:2f:53: 1b:3c:a5:de:0d:fe:d8:a6:98:61:cb:71:30:b0:b7:b2:80:68: 51:a3:75:f8:b1:e4:04:7a:4f:54:41:91:10:ef:09:db:93:3e: 12:39:f0:f8:5f:33:b5:9f:60:a1:52:d5:f7:9f:bf:31:6f:b4: 9f:62:93:c6:fd:2a:b6:bd:c7:c5:43:d4:a5:51:17:f1:5a:ca: ee:69:e5:43:ce:c6:ad:e6:6b:a7:74:19:82:41:3d:34:cf:26: 36:3e:7c:9d:04:6f:33:9d:e7:d6:e5:c6:01:c3:8d:b9:6a:72: a3:58:2f:c0:40:0d:c3:c9:18:2a:54:6a:65:d3:88:7a:13:35: 91:87:8a:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD/yu+rrx0U/SmoU2jLwJ5q8Ade0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU5RTVFNTdENUJFMjM5NTFBNEY0RkU0N0U4QjYxRjQz RDVBRkZBRjAeFw0yNTA2MTMyMDUzMjFaFw0yNTA2MTQyMzI4MjFaMDMxMTAvBgNV BAMTKDRCNDQ2NjI2NENEQTMxNDgwOUIyNUVCNTZCODgyNkFCMzkwQjM5MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYCzU/9Ae5kfo7850h2AN3Ordk ZB7KOmZDEdBguhX6K4NDfwvAdGhmdnMuv2EA4Kyfl0+4SuctQpk7aR1DYXG+tIZT aFl8g4DVC7/NwmKFPK14GQ21kCoxb8iVvd9zp6812LWWjyxymVgVl2ud/BhtPsJT IR6OA9OpsPOHoK9LAmvPvitwdd01cfcZ56FaX1cLJ0SeaYBqBSnIqAlSafx41t3m sxbC6+V3jifFHTzPgamomjxQJuDUWcNz3qFeU9HpX/RkJkx53huNL4C48cGRk+0x hUtX0qDgx1RDPWigI0jB3R/NX+94E3XUC3SDy3sop9jJGdSJr8idJ1NzW96tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUS0RmJkzaMUgJsl61a4gmqzkLOSgwHwYDVR0j BBgwFoAUnp5eV9W+I5UaT0/kfoth9D1a/68wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRlBXVzdjMlE5Q1RDQkU2clBKWHJLUnBwZUJZMVlyTlNTRXloVm1QbTlI QTEvMC85RTlFNUU1N0Q1QkUyMzk1MUE0RjRGRTQ3RThCNjFGNDNENUFGRkFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFOUU1RTU3RDVCRTIzOTUx QTRGNEZFNDdFOEI2MUY0M0Q1QUZGQUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RlBXVzdjMlE5Q1RDQkU2clBKWHJLUnBwZUJZMVlyTlNTRXloVm1QbTlIQTEvMC85 RTlFNUU1N0Q1QkUyMzk1MUE0RjRGRTQ3RThCNjFGNDNENUFGRkFGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA95el3LwBrgaMPygvF6ixxgpJgiOgntIlIjYYGGbb9nVbVqCJ1ACWjIsbvRl HucF8/xjNco59VdD3Nwkg3BM+QlemRxn/3ne/X93gKQz/JYe8d8TEGHP42bLuufC iZHNAsohN7eGr4rLp3HJ/3q4/i5BkSafwRsZqTDNBS9TGzyl3g3+2KaYYctxMLC3 soBoUaN1+LHkBHpPVEGREO8J25M+Ejnw+F8ztZ9goVLV95+/MW+0n2KTxv0qtr3H xUPUpVEX8VrK7mnlQ87GreZrp3QZgkE9NM8mNj58nQRvM53n1uXGAcONuWpyo1gv wEANw8kYKlRqZdOIehM1kYeKnA== -----END CERTIFICATE-----Generated at Sat Jun 14 00:38:33 2025 by rpki-client