$ rpki-client -vvf rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft File: 69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft (raw, json) Hash identifier: qYNvFLTryhnssr0Cf8BX/t9G1c7cfHdT2hekninEmHk= Subject key identifier: 70:7A:D8:D5:C8:59:2C:04:FC:3F:AC:4C:CE:84:02:D9:61:1C:94:2A Authority key identifier: 69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23 Certificate issuer: /CN=69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123 Certificate serial: 084BEFE0410B4C9D35E9B19C0716BBEC38EA988C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer Subject info access: rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft Manifest number: 62 Signing time: Tue 10 Jun 2025 01:20:49 +0000 Manifest this update: Tue 10 Jun 2025 01:15:49 +0000 Manifest next update: Wed 11 Jun 2025 02:42:49 +0000 Files and hashes: 1: 3138392e33382e33322e302f32302d3234203d3e203238333039.roa (hash: 9htZ/FrsfimiBtIRqe4S+q6Q8vdfYo+stxFxu6+6KXM=) 2: 3136382e3232382e39362e302f32322d3234203d3e203238333039.roa (hash: P4GcC84l5CNw0HIyuFql5vqXvV7osJssOwZyF9l46qM=) 3: 69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl (hash: sX2slCio5Ce3K763f3G+WxsSk8U3+Lt07fhfHDT0imc=) 4: 323830343a3136633a3a2f33322d3438203d3e203238333039.roa (hash: ExtPc8BcnrlABDGyELCaMKx1KVqxUBfgTRnIpEc/mhg=) 5: 3138372e34342e36342e302f32302d3234203d3e203238333039.roa (hash: ytWMeT7a+5e3RhiY9vsuprXfI161f6tC472OLXTHDx0=) 6: 3137392e3138392e302e302f32302d3234203d3e203238333039.roa (hash: gj4anIFoqS5An8dBcpGfcziSjC/4vyS/7Ef60ioYdXI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 02:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:4b:ef:e0:41:0b:4c:9d:35:e9:b1:9c:07:16:bb:ec:38:ea:98:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123 Validity Not Before: Jun 10 01:15:49 2025 GMT Not After : Jun 11 02:42:49 2025 GMT Subject: CN=707AD8D5C8592C04FC3FAC4CCE8402D9611C942A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:81:47:87:39:02:a8:2f:43:66:1b:ea:27: 00:f0:5c:d7:28:27:3e:05:12:b1:96:77:5d:fe:b3: a8:a1:c2:7b:8c:87:98:c6:6a:b6:4c:4a:eb:47:d8: e6:5b:1d:08:14:d9:80:a3:29:ec:18:ba:fc:92:cc: 39:b7:62:19:b3:67:9e:fd:53:b4:2f:3d:bd:31:cd: 3e:68:ce:0c:c6:10:e6:1b:20:e2:40:6f:56:d7:7f: bc:84:6e:9d:57:28:ab:fc:0b:1c:1a:68:ae:94:26: 83:b3:e5:1c:74:8e:bd:7b:ad:e0:6f:b0:0f:d4:e4: 12:fd:4d:d7:56:f9:55:6f:8d:d0:0b:f3:39:7a:03: a9:c3:38:08:02:b7:ab:39:31:a4:07:5a:a7:75:45: 55:0b:e4:38:f5:d5:8d:10:81:66:9c:c9:37:d6:58: 09:8b:d5:ca:37:f2:16:aa:cc:ac:0f:5f:d5:45:0a: ed:1d:9c:fa:f7:5c:53:85:38:2c:ef:77:0b:d7:bf: 5b:ea:c4:c7:24:38:c8:09:96:4d:90:47:c4:96:3d: 23:02:6d:15:4f:64:56:d0:83:e5:75:b0:0c:75:c6: b3:47:7b:2d:34:8c:f3:2d:c7:e4:f9:6b:71:1b:75: e7:da:05:c4:d7:6b:e4:86:a3:87:af:1d:f3:e0:c8: 64:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7A:D8:D5:C8:59:2C:04:FC:3F:AC:4C:CE:84:02:D9:61:1C:94:2A X509v3 Authority Key Identifier: keyid:69:DE:5A:D1:A5:B1:F9:78:84:D1:9D:C3:E9:EF:DA:3F:96:54:C1:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H73Dag9oyrGwW9yE8Cru1KBtoeefahJatbiyx4xH8wCo/0/69DE5AD1A5B1F97884D19DC3E9EFDA3F9654C123.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:23:74:50:cb:f1:41:19:d6:46:e2:43:bb:4d:32:1e:b8:09: e9:fe:95:4e:e7:5c:22:20:7c:e8:e1:e3:19:38:92:cf:58:88: c8:41:0f:f9:7e:88:92:2c:0e:f9:e9:87:1d:c5:4b:3a:2b:89: ea:16:2e:43:01:32:a6:cf:d3:6d:5d:f4:58:4f:a4:38:6a:57: 2e:a5:ad:1e:b2:97:65:3f:e6:84:4c:42:15:d8:a5:e4:69:56: ef:ed:f5:6a:58:35:77:0b:8a:4f:a6:60:70:d3:27:5e:36:21: 54:27:4d:c1:03:41:4f:fd:9a:86:9d:08:cc:cb:ef:0c:0f:36: 35:5d:1a:db:81:a8:3e:63:ac:b8:d1:99:9d:19:5f:b4:fc:bd: 77:cf:39:19:74:22:44:e9:99:61:43:1d:5a:77:8c:06:c1:09: 4c:26:40:39:f7:37:8b:3a:c5:a4:e9:28:7b:f1:1b:62:fe:cd: 61:3a:48:23:74:ec:d0:ab:94:3d:1c:18:c0:6b:03:d0:d9:7c: 99:ed:a2:bf:a5:50:0f:13:ba:d5:2e:6d:5a:e3:a3:1d:bc:d3: 19:6c:f0:55:b8:31:7b:12:73:e5:17:28:23:79:9f:fa:15:9c: 24:49:a7:df:c3:36:46:93:14:af:6c:29:6a:72:78:f0:ed:74: 0d:7f:d4:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCEvv4EELTJ016bGcBxa77DjqmIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlERTVBRDFBNUIxRjk3ODg0RDE5REMzRTlFRkRBM0Y5 NjU0QzEyMzAeFw0yNTA2MTAwMTE1NDlaFw0yNTA2MTEwMjQyNDlaMDMxMTAvBgNV BAMTKDcwN0FEOEQ1Qzg1OTJDMDRGQzNGQUM0Q0NFODQwMkQ5NjExQzk0MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrNYFHhzkCqC9DZhvqJwDwXNco Jz4FErGWd13+s6ihwnuMh5jGarZMSutH2OZbHQgU2YCjKewYuvySzDm3YhmzZ579 U7QvPb0xzT5ozgzGEOYbIOJAb1bXf7yEbp1XKKv8CxwaaK6UJoOz5Rx0jr17reBv sA/U5BL9TddW+VVvjdAL8zl6A6nDOAgCt6s5MaQHWqd1RVUL5Dj11Y0QgWacyTfW WAmL1co38haqzKwPX9VFCu0dnPr3XFOFOCzvdwvXv1vqxMckOMgJlk2QR8SWPSMC bRVPZFbQg+V1sAx1xrNHey00jPMtx+T5a3EbdefaBcTXa+SGo4evHfPgyGRDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcHrY1chZLAT8P6xMzoQC2WEclCowHwYDVR0j BBgwFoAUad5a0aWx+XiE0Z3D6e/aP5ZUwSMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDczRGFnOW95ckd3Vzl5RThDcnUxS0J0b2VlZmFoSmF0Yml5eDR4SDh3 Q28vMC82OURFNUFEMUE1QjFGOTc4ODREMTlEQzNFOUVGREEzRjk2NTRDMTIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5REU1QUQxQTVCMUY5Nzg4 NEQxOURDM0U5RUZEQTNGOTY1NEMxMjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDczRGFnOW95ckd3Vzl5RThDcnUxS0J0b2VlZmFoSmF0Yml5eDR4SDh3Q28vMC82 OURFNUFEMUE1QjFGOTc4ODREMTlEQzNFOUVGREEzRjk2NTRDMTIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMCN0UMvxQRnWRuJDu00yHrgJ6f6VTudcIiB86OHjGTiSz1iIyEEP+X6IkiwO +emHHcVLOiuJ6hYuQwEyps/TbV30WE+kOGpXLqWtHrKXZT/mhExCFdil5GlW7+31 alg1dwuKT6ZgcNMnXjYhVCdNwQNBT/2ahp0IzMvvDA82NV0a24GoPmOsuNGZnRlf tPy9d885GXQiROmZYUMdWneMBsEJTCZAOfc3izrFpOkoe/EbYv7NYTpII3Ts0KuU PRwYwGsD0Nl8me2iv6VQDxO61S5tWuOjHbzTGWzwVbgxexJz5RcoI3mf+hWcJEmn 38M2RpMUr2wpanJ48O10DX/UzA== -----END CERTIFICATE-----Generated at Tue Jun 10 06:05:23 2025 by rpki-client