$ rpki-client -vvf rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft File: 9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft (raw, json) Hash identifier: lb//WtTN/NtynWqPOob5NZDjVm/NGTMM53EdzsHmrVI= Subject key identifier: 32:27:33:96:C2:DB:4A:9A:CC:BE:64:93:99:96:59:13:D4:97:7D:72 Authority key identifier: 9E:1D:7C:47:8D:88:0E:09:3C:83:DC:BE:1D:E4:0D:E8:8E:F8:54:6F Certificate issuer: /CN=9E1D7C478D880E093C83DCBE1DE40DE88EF8546F Certificate serial: 0E54E34731B589E889231D8BF64E30EDA47ECDE4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer Subject info access: rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft Manifest number: 0243 Signing time: Thu 12 Jun 2025 08:04:04 +0000 Manifest this update: Thu 12 Jun 2025 07:59:04 +0000 Manifest next update: Fri 13 Jun 2025 10:39:04 +0000 Files and hashes: 1: 323830343a6662303a3a2f33322d3332203d3e20323632383431.roa (hash: RbYXVffjJdvIeDJVoaVQ4H7OCdhMNRWApBNY9cjM2es=) 2: 9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl (hash: UtqVanXcUdRcA6X2IU0q6h8ZTdcdWnfhWxxKR2SVRq8=) 3: 3137372e3133362e3231362e302f32312d3234203d3e20323632383431.roa (hash: pkwtlkOIUTOW0vCXw7qG1lC1xTCoa8/0oVE1nZMmSW4=) 4: 3137372e31302e32342e302f32322d3234203d3e20323632383431.roa (hash: U+A01WCuvZZPHwlM0t2T4L3RVjEHPKcBpkgoSeAHY4M=) 5: 3137372e31302e32382e302f32322d3234203d3e20323632383431.roa (hash: psmOj8EmDDzyd0bmAsj109hherhULfNzcjmq4S7y+B4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 13 Jun 2025 03:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:54:e3:47:31:b5:89:e8:89:23:1d:8b:f6:4e:30:ed:a4:7e:cd:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E1D7C478D880E093C83DCBE1DE40DE88EF8546F Validity Not Before: Jun 12 07:59:04 2025 GMT Not After : Jun 13 10:39:04 2025 GMT Subject: CN=32273396C2DB4A9ACCBE649399965913D4977D72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:74:4e:56:36:d4:ea:6d:f1:da:3f:fc:3e:48: 1a:c3:79:10:92:b8:4e:01:69:4e:4a:28:f3:ad:d4: 0d:74:80:18:40:c5:b2:8f:79:8b:00:f6:63:51:08: 7c:bb:da:7b:e4:1c:39:fc:d9:b3:14:a2:f7:19:98: 9a:7d:3b:e8:c7:f2:a7:d2:26:0d:33:6a:86:c8:a2: 77:7a:49:23:18:48:1d:07:d3:58:f3:c4:04:0f:38: ad:e6:16:09:18:92:e6:60:3c:ff:5f:b7:fa:b2:81: ed:b2:25:3f:cd:20:a4:a2:04:81:0a:13:de:27:a3: 04:49:ba:c4:42:e5:43:66:fa:27:e4:bf:8d:e9:3e: 4d:a8:1e:5b:1a:4c:bc:00:b3:d1:7b:40:1c:6e:80: 5b:ed:f6:b3:e2:5a:13:eb:12:50:d9:52:71:5e:bb: cc:19:9c:d3:95:ad:fd:70:f9:5b:f0:77:77:ba:49: b4:1f:d9:31:f3:38:44:29:65:ad:9b:6b:1c:e5:0c: 10:c6:61:ed:ab:f7:54:e9:1b:62:60:84:8f:e5:a9: bb:c8:b5:e7:b1:a7:aa:d7:9c:07:1e:7b:af:d4:58: 57:4b:05:99:f7:29:85:16:ba:f3:97:87:d3:73:a2: c8:82:11:62:f1:08:20:81:e6:6f:e7:3a:fa:c7:bb: cb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:27:33:96:C2:DB:4A:9A:CC:BE:64:93:99:96:59:13:D4:97:7D:72 X509v3 Authority Key Identifier: keyid:9E:1D:7C:47:8D:88:0E:09:3C:83:DC:BE:1D:E4:0D:E8:8E:F8:54:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:9a:8b:7c:82:e8:5c:67:14:c7:51:bb:4e:f4:ae:a6:e3:01: 08:5f:34:ee:81:3b:46:7c:10:0b:7d:a6:5d:b8:7f:ad:11:36: 25:be:28:fa:03:34:cb:1a:f1:d0:76:ea:8b:d1:70:b3:f8:3f: db:fb:0b:e8:cf:5a:90:17:c1:09:91:df:a0:74:11:24:20:f7: 6b:06:a1:41:1c:f6:4b:59:06:3a:ef:7c:3b:ee:eb:ff:73:a4: dd:5b:b3:14:3f:0b:1c:c2:c4:bd:b6:68:83:27:0d:77:b6:83: 18:59:cc:ad:0f:dd:f6:79:9b:5d:4d:af:1e:cd:3b:e5:e7:66: e9:51:77:9a:65:ea:97:80:d0:b2:74:3a:a5:60:c8:d0:6b:dd: e5:73:61:80:1f:7e:94:07:61:d7:41:b4:85:a4:7a:db:47:ca: bf:55:d8:c2:5a:19:c9:e2:39:b2:8d:03:ba:e4:90:78:3b:71: b5:0f:ab:f3:f5:8a:1c:5d:06:56:3a:23:38:bd:17:82:7a:84: 42:8c:5e:17:98:67:83:bf:89:15:ff:8e:db:5d:6b:a4:78:0d: 03:63:a0:fb:9d:a5:7b:e0:2b:5a:b9:aa:f8:70:ad:b2:2e:20: 21:dc:03:a0:4f:3b:9f:ed:1e:fd:26:d6:7c:48:b8:9b:e5:cc: bc:35:f0:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDlTjRzG1ieiJIx2L9k4w7aR+zeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUxRDdDNDc4RDg4MEUwOTNDODNEQ0JFMURFNDBERTg4 RUY4NTQ2RjAeFw0yNTA2MTIwNzU5MDRaFw0yNTA2MTMxMDM5MDRaMDMxMTAvBgNV BAMTKDMyMjczMzk2QzJEQjRBOUFDQ0JFNjQ5Mzk5OTY1OTEzRDQ5NzdENzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDedE5WNtTqbfHaP/w+SBrDeRCS uE4BaU5KKPOt1A10gBhAxbKPeYsA9mNRCHy72nvkHDn82bMUovcZmJp9O+jH8qfS Jg0zaobIond6SSMYSB0H01jzxAQPOK3mFgkYkuZgPP9ft/qyge2yJT/NIKSiBIEK E94nowRJusRC5UNm+ifkv43pPk2oHlsaTLwAs9F7QBxugFvt9rPiWhPrElDZUnFe u8wZnNOVrf1w+Vvwd3e6SbQf2THzOEQpZa2baxzlDBDGYe2r91TpG2JghI/lqbvI teexp6rXnAcee6/UWFdLBZn3KYUWuvOXh9NzosiCEWLxCCCB5m/nOvrHu8sjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMiczlsLbSprMvmSTmZZZE9SXfXIwHwYDVR0j BBgwFoAUnh18R42IDgk8g9y+HeQN6I74VG8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSE1MVXZuOXRnV2NTalZGc3VHMldac3BpZEFIamRpaThnelByd1JGUEYy UG4vMS85RTFEN0M0NzhEODgwRTA5M0M4M0RDQkUxREU0MERFODhFRjg1NDZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFMUQ3QzQ3OEQ4ODBFMDkz QzgzRENCRTFERTQwREU4OEVGODU0NkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SE1MVXZuOXRnV2NTalZGc3VHMldac3BpZEFIamRpaThnelByd1JGUEYyUG4vMS85 RTFEN0M0NzhEODgwRTA5M0M4M0RDQkUxREU0MERFODhFRjg1NDZGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI5qLfILoXGcUx1G7TvSupuMBCF807oE7RnwQC32mXbh/rRE2Jb4o+gM0yxrx 0Hbqi9Fws/g/2/sL6M9akBfBCZHfoHQRJCD3awahQRz2S1kGOu98O+7r/3Ok3Vuz FD8LHMLEvbZogycNd7aDGFnMrQ/d9nmbXU2vHs075edm6VF3mmXql4DQsnQ6pWDI 0Gvd5XNhgB9+lAdh10G0haR620fKv1XYwloZyeI5so0DuuSQeDtxtQ+r8/WKHF0G VjojOL0XgnqEQoxeF5hng7+JFf+O211rpHgNA2Og+52le+ArWrmq+HCtsi4gIdwD oE87n+0e/SbWfEi4m+XMvDXw7A== -----END CERTIFICATE-----Generated at Thu Jun 12 09:48:01 2025 by rpki-client