$ rpki-client -vvf rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/2270C9DA5A582596A97F8555336A391C5725828F.mft File: 2270C9DA5A582596A97F8555336A391C5725828F.mft (raw, json) Hash identifier: zhJKGMfJVxuxj9GEfuLvtxuqsEYLHtdRngbrI+oLmA0= Subject key identifier: 49:73:3F:14:29:7F:EE:CA:4F:6E:FC:48:D9:31:45:15:95:75:9D:7A Authority key identifier: 22:70:C9:DA:5A:58:25:96:A9:7F:85:55:33:6A:39:1C:57:25:82:8F Certificate issuer: /CN=2270C9DA5A582596A97F8555336A391C5725828F Certificate serial: 34A33D94FDC7AFA617633124FC89903626049D5F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2270C9DA5A582596A97F8555336A391C5725828F.cer Subject info access: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/2270C9DA5A582596A97F8555336A391C5725828F.mft Manifest number: 97 Signing time: Mon 09 Jun 2025 23:29:18 +0000 Manifest this update: Mon 09 Jun 2025 23:24:18 +0000 Manifest next update: Wed 11 Jun 2025 01:52:18 +0000 Files and hashes: 1: 3137372e38362e34382e302f32312d3332203d3e20323634323136.roa (hash: PbMy0AvhwEfbXy+dysNZfc79vOPKVgDVL2BZn+SO9m0=) 2: 323830343a323435383a3a2f33322d313238203d3e20323634323136.roa (hash: bADgkU2PLxfqSi5R/80KnriObt5mF6IaK5mtsLmKruE=) 3: 3133382e39392e3139362e302f32322d3332203d3e20323634323136.roa (hash: 9fo+NwowUgunzNW6mIRWW6gHtFnDFs7C2lw9wQT85iU=) 4: 2270C9DA5A582596A97F8555336A391C5725828F.crl (hash: ni9KFtNwOrGvBuoDX2Zq4JriGDIn9+Zqndapd+zIaQI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/2270C9DA5A582596A97F8555336A391C5725828F.crl rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/2270C9DA5A582596A97F8555336A391C5725828F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2270C9DA5A582596A97F8555336A391C5725828F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 01:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a3:3d:94:fd:c7:af:a6:17:63:31:24:fc:89:90:36:26:04:9d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2270C9DA5A582596A97F8555336A391C5725828F Validity Not Before: Jun 9 23:24:18 2025 GMT Not After : Jun 11 01:52:18 2025 GMT Subject: CN=49733F14297FEECA4F6EFC48D931451595759D7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:da:8b:ec:67:8e:b1:d3:72:19:17:9d:82:49: 85:45:6e:f9:f9:cb:58:de:6e:d1:35:9c:8a:30:b4: 92:08:ce:c4:eb:57:a6:ec:24:60:66:c5:af:ec:a6: d4:bb:bd:53:00:a1:e4:04:6c:af:c6:a3:4f:c8:fd: 50:f9:12:4f:c6:74:41:a1:f0:26:74:c5:01:5f:80: eb:4a:29:99:8f:fd:28:46:15:c8:af:34:85:41:a6: 3b:24:a0:76:f9:73:3c:cc:20:06:57:39:6b:d7:9e: 27:69:7c:70:a3:2b:d7:0f:56:f2:b0:90:90:7b:27: a3:02:5d:06:b8:d0:19:f9:82:65:42:b9:e3:f5:06: b8:62:19:85:64:18:59:db:55:52:e8:8c:ad:cc:fc: 77:89:b0:77:20:d6:ce:6b:36:a4:15:42:fb:db:d8: 6a:34:1c:9e:b8:24:ce:0a:b8:32:ed:1c:1f:d0:43: 9e:c3:3a:f7:bf:69:94:2c:b1:65:39:4f:92:2a:68: b0:8a:52:41:0d:41:82:db:6e:0e:dd:6e:e9:32:88: 9b:b4:20:79:93:f3:af:5a:8a:10:77:30:64:fb:06: d9:69:f9:99:16:27:b3:77:d8:b4:d2:65:1c:8d:0f: da:4c:26:6e:3f:27:04:1d:a3:cf:71:b2:9e:88:75: e6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:73:3F:14:29:7F:EE:CA:4F:6E:FC:48:D9:31:45:15:95:75:9D:7A X509v3 Authority Key Identifier: keyid:22:70:C9:DA:5A:58:25:96:A9:7F:85:55:33:6A:39:1C:57:25:82:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/2270C9DA5A582596A97F8555336A391C5725828F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2270C9DA5A582596A97F8555336A391C5725828F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GwEfuuTHgQcUxiMXENWKwjfYjLrzsy5SYPQaWbnvrjSS/0/2270C9DA5A582596A97F8555336A391C5725828F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d6:39:84:de:78:03:76:11:2f:9b:9b:01:5b:17:3a:87:ee: 5b:2a:e8:68:e6:e9:cb:a2:ac:d4:11:54:7a:49:ca:b4:b3:9b: 8c:6a:7b:19:04:23:8b:bb:9a:5a:b4:bb:aa:c6:f5:c9:8d:bc: a5:76:eb:cd:83:9b:c2:a9:b0:33:a2:63:14:56:4f:9d:23:3b: d4:3c:62:a1:3c:c1:1c:5d:39:cf:87:4e:11:39:29:f5:ba:c1: ed:02:5a:f4:50:02:ac:ca:b4:d8:aa:bc:f6:a4:46:83:66:a9: e2:bf:fe:5f:74:e8:fd:f4:e9:e2:3e:4a:99:b4:ee:db:36:c0: 5e:bd:26:73:bf:3d:47:04:b8:40:c7:81:56:34:a4:0b:47:16: e0:b3:a8:63:32:c0:90:2c:3d:9f:e8:57:60:9d:59:7c:db:62: 2b:84:eb:f0:4a:b4:aa:0e:df:27:49:aa:06:72:b9:0b:aa:a0: d1:97:2e:9c:7c:85:28:5b:af:fd:a8:24:cc:c8:80:d5:53:45: 7d:1e:84:c7:96:1b:b7:28:9a:d0:da:7d:51:59:18:13:ac:c1: a8:4f:4f:c9:c7:6e:48:5e:f5:2f:42:c7:7c:b0:25:bb:09:ee: 43:16:a8:a6:c3:b9:7a:d7:c6:35:1d:fa:21:e0:19:14:2e:9e: de:fb:f9:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNKM9lP3Hr6YXYzEk/ImQNiYEnV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI3MEM5REE1QTU4MjU5NkE5N0Y4NTU1MzM2QTM5MUM1 NzI1ODI4RjAeFw0yNTA2MDkyMzI0MThaFw0yNTA2MTEwMTUyMThaMDMxMTAvBgNV BAMTKDQ5NzMzRjE0Mjk3RkVFQ0E0RjZFRkM0OEQ5MzE0NTE1OTU3NTlEN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM2ovsZ46x03IZF52CSYVFbvn5 y1jebtE1nIowtJIIzsTrV6bsJGBmxa/sptS7vVMAoeQEbK/Go0/I/VD5Ek/GdEGh 8CZ0xQFfgOtKKZmP/ShGFcivNIVBpjskoHb5czzMIAZXOWvXnidpfHCjK9cPVvKw kJB7J6MCXQa40Bn5gmVCueP1BrhiGYVkGFnbVVLojK3M/HeJsHcg1s5rNqQVQvvb 2Go0HJ64JM4KuDLtHB/QQ57DOve/aZQssWU5T5IqaLCKUkENQYLbbg7dbukyiJu0 IHmT869aihB3MGT7Btlp+ZkWJ7N32LTSZRyND9pMJm4/JwQdo89xsp6IdeZ5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSXM/FCl/7spPbvxI2TFFFZV1nXowHwYDVR0j BBgwFoAUInDJ2lpYJZapf4VVM2o5HFclgo8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3dFZnV1VEhnUWNVeGlNWEVOV0t3amZZakxyenN5NVNZUFFhV2JudnJq U1MvMC8yMjcwQzlEQTVBNTgyNTk2QTk3Rjg1NTUzMzZBMzkxQzU3MjU4MjhGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyNzBDOURBNUE1ODI1OTZB OTdGODU1NTMzNkEzOTFDNTcyNTgyOEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3dFZnV1VEhnUWNVeGlNWEVOV0t3amZZakxyenN5NVNZUFFhV2JudnJqU1MvMC8y MjcwQzlEQTVBNTgyNTk2QTk3Rjg1NTUzMzZBMzkxQzU3MjU4MjhGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhdY5hN54A3YRL5ubAVsXOofuWyroaObpy6Ks1BFUeknKtLObjGp7GQQji7ua WrS7qsb1yY28pXbrzYObwqmwM6JjFFZPnSM71DxioTzBHF05z4dOETkp9brB7QJa 9FACrMq02Kq89qRGg2ap4r/+X3To/fTp4j5KmbTu2zbAXr0mc789RwS4QMeBVjSk C0cW4LOoYzLAkCw9n+hXYJ1ZfNtiK4Tr8Eq0qg7fJ0mqBnK5C6qg0ZcunHyFKFuv /agkzMiA1VNFfR6Ex5Ybtyia0Np9UVkYE6zBqE9PycduSF71L0LHfLAluwnuQxao psO5etfGNR36IeAZFC6e3vv5oQ== -----END CERTIFICATE-----Generated at Tue Jun 10 08:53:50 2025 by rpki-client