$ rpki-client -vvf rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft File: 2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft (raw, json) Hash identifier: 5sRHPG+IsA9x0QKfdu6+FjcQ3sKLPGQ7dwnDI3Xkq6E= Subject key identifier: DE:A4:11:60:C7:7B:40:13:8A:B4:A6:B7:9A:45:15:50:A1:B6:B6:DE Authority key identifier: 2A:A9:C0:C8:79:5C:1A:DD:1B:EE:9A:6C:17:22:3F:C7:CC:D4:C3:E3 Certificate issuer: /CN=2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3 Certificate serial: 648523377EA9E0FA769BF47A225FD28B728C4966 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.cer Subject info access: rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft Manifest number: C0 Signing time: Fri 06 Jun 2025 08:02:42 +0000 Manifest this update: Fri 06 Jun 2025 07:57:42 +0000 Manifest next update: Sat 07 Jun 2025 09:05:42 +0000 Files and hashes: 1: 323830313a38303a323436303a3a2f34342d313238203d3e20323638343431.roa (hash: ZPSfVx1LgqAUvWD4JVlPK1AKbkJ6+EyPJ3Dbf/KroU0=) 2: 34352e3136302e37362e302f32332d3332203d3e20323638343431.roa (hash: op6z5zv5bXYx/GC1V945At+HHF1/DnboG7Nwmgwomqc=) 3: 2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.crl (hash: oBf01SUG1rssqGVtzrZtTRfweVjN959ECDe36+gvBhE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.crl rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 09:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:85:23:37:7e:a9:e0:fa:76:9b:f4:7a:22:5f:d2:8b:72:8c:49:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3 Validity Not Before: Jun 6 07:57:42 2025 GMT Not After : Jun 7 09:05:42 2025 GMT Subject: CN=DEA41160C77B40138AB4A6B79A451550A1B6B6DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:41:83:fd:0a:e7:7d:51:07:b1:f1:db:6c:5e: 71:92:7c:b6:1a:0d:8f:49:3e:b6:30:e0:69:6d:44: b3:b4:ac:2e:59:ab:e5:2c:46:25:e1:2c:30:bb:93: c5:dd:6b:53:41:3d:58:a3:3e:64:4c:30:ce:4c:9e: bf:32:a8:cc:ae:ae:08:34:5b:21:1a:17:91:ae:51: 09:fa:c4:91:a6:aa:d4:61:ef:ce:f6:b2:ad:54:0f: 16:f5:32:66:e6:d2:14:24:71:41:0a:07:f4:d6:1e: 37:e0:5c:a8:33:68:c4:a1:42:6d:1d:f7:28:71:f7: 8c:16:e4:a7:35:31:90:85:9a:e6:f5:78:29:b6:af: 4e:97:e2:a9:7b:a8:47:89:2f:56:e0:74:cd:cc:6d: b8:9c:27:e6:fd:ba:d2:1f:db:2d:f8:47:8a:4e:b2: df:18:95:55:a9:a3:3b:e8:29:09:84:c9:3e:a9:25: 48:93:b3:cd:ed:6f:fc:ff:71:e5:df:1b:23:dd:fc: 74:85:91:0e:4c:3e:6d:bc:a8:2b:7c:48:9b:58:a1: f9:98:4a:53:3d:c1:b9:1e:e6:07:8e:42:23:b1:03: 82:ca:34:56:fb:1e:af:b9:c5:4f:6e:6a:00:26:9c: 81:b1:6d:88:18:22:1a:3e:bd:98:56:46:c1:90:d5: 1d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A4:11:60:C7:7B:40:13:8A:B4:A6:B7:9A:45:15:50:A1:B6:B6:DE X509v3 Authority Key Identifier: keyid:2A:A9:C0:C8:79:5C:1A:DD:1B:EE:9A:6C:17:22:3F:C7:CC:D4:C3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:f0:3f:3f:2a:ef:be:39:b0:37:7e:47:6e:f0:ac:83:a2:4a: 1f:bd:95:49:e4:84:c5:ff:37:85:bd:35:68:4a:86:8a:7b:1f: 3e:2b:f0:3e:82:9c:d7:2e:7e:d9:7f:de:9e:6d:fd:cb:99:96: b5:32:c8:60:30:fb:0b:89:0e:0b:7f:72:60:8a:53:24:a0:b2: 5e:b0:68:89:1c:4e:93:60:b9:c3:d9:6c:2e:bd:ff:66:f4:1d: 3d:54:27:ea:a3:e7:bd:7d:0f:ae:e7:5d:52:be:b1:35:80:ea: 18:94:a5:03:55:bd:d4:e2:ff:54:80:b3:38:20:b6:3b:f5:9e: 94:10:09:27:74:16:68:be:ce:a9:20:ce:a8:ec:5b:c5:79:80: 91:73:09:a4:9c:a4:0e:24:eb:6d:80:be:9e:45:78:92:ea:9c: 76:22:d7:fc:2e:7e:c3:6d:09:94:6f:c9:c2:36:49:ed:72:d7: e0:c1:2e:cd:55:79:07:9a:05:07:3f:4d:38:98:7e:e6:6c:6a: f5:bd:38:77:36:84:20:41:36:a9:51:1c:9d:38:8a:4c:5e:69: 48:e5:1d:28:a6:1b:88:83:5c:6b:05:d9:ca:c7:80:00:52:8b: f1:25:37:cb:a0:2e:b6:d7:9d:16:e5:78:82:1a:6a:a2:f5:f5: 2e:19:dc:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZIUjN36p4Pp2m/R6Il/Si3KMSWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBOUMwQzg3OTVDMUFERDFCRUU5QTZDMTcyMjNGQzdD Q0Q0QzNFMzAeFw0yNTA2MDYwNzU3NDJaFw0yNTA2MDcwOTA1NDJaMDMxMTAvBgNV BAMTKERFQTQxMTYwQzc3QjQwMTM4QUI0QTZCNzlBNDUxNTUwQTFCNkI2REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDQYP9Cud9UQex8dtsXnGSfLYa DY9JPrYw4GltRLO0rC5Zq+UsRiXhLDC7k8Xda1NBPVijPmRMMM5Mnr8yqMyurgg0 WyEaF5GuUQn6xJGmqtRh7872sq1UDxb1Mmbm0hQkcUEKB/TWHjfgXKgzaMShQm0d 9yhx94wW5Kc1MZCFmub1eCm2r06X4ql7qEeJL1bgdM3MbbicJ+b9utIf2y34R4pO st8YlVWpozvoKQmEyT6pJUiTs83tb/z/ceXfGyPd/HSFkQ5MPm28qCt8SJtYofmY SlM9wbke5geOQiOxA4LKNFb7Hq+5xU9uagAmnIGxbYgYIho+vZhWRsGQ1R2VAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3qQRYMd7QBOKtKa3mkUVUKG2tt4wHwYDVR0j BBgwFoAUKqnAyHlcGt0b7ppsFyI/x8zUw+MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0pDdXNtMUxUamRlN3Q3dnVSOUE1UkJRS0o0S0RkZTZtWVlVdTl6aGJ0 VWkvMC8yQUE5QzBDODc5NUMxQUREMUJFRTlBNkMxNzIyM0ZDN0NDRDRDM0UzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQTlDMEM4Nzk1QzFBREQx QkVFOUE2QzE3MjIzRkM3Q0NENEMzRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0pDdXNtMUxUamRlN3Q3dnVSOUE1UkJRS0o0S0RkZTZtWVlVdTl6aGJ0VWkvMC8y QUE5QzBDODc5NUMxQUREMUJFRTlBNkMxNzIyM0ZDN0NDRDRDM0UzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVPA/PyrvvjmwN35HbvCsg6JKH72VSeSExf83hb01aEqGinsfPivwPoKc1y5+ 2X/enm39y5mWtTLIYDD7C4kOC39yYIpTJKCyXrBoiRxOk2C5w9lsLr3/ZvQdPVQn 6qPnvX0PruddUr6xNYDqGJSlA1W91OL/VICzOCC2O/WelBAJJ3QWaL7OqSDOqOxb xXmAkXMJpJykDiTrbYC+nkV4kuqcdiLX/C5+w20JlG/JwjZJ7XLX4MEuzVV5B5oF Bz9NOJh+5mxq9b04dzaEIEE2qVEcnTiKTF5pSOUdKKYbiINcawXZyseAAFKL8SU3 y6AuttedFuV4ghpqovX1LhnctA== -----END CERTIFICATE-----Generated at Fri Jun 6 18:39:12 2025 by rpki-client