$ rpki-client -vvf rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft File: C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft (raw, json) Hash identifier: 03simJd4GGqX8PIuhPJSJPQbk3tiy+4IyDQQpWnM9WU= Subject key identifier: F4:FC:75:43:AD:3A:33:18:76:0E:31:E3:BA:34:61:53:C3:E0:93:51 Authority key identifier: C0:04:F2:CC:C9:AC:B9:EC:01:A2:6E:FA:FF:53:A1:5B:B3:09:EC:E3 Certificate issuer: /CN=C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3 Certificate serial: 3C948A227F6F7D56EDAA1C5607DA3FAA96E25B1A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer Subject info access: rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft Manifest number: AF Signing time: Tue 03 Jun 2025 23:58:02 +0000 Manifest this update: Tue 03 Jun 2025 23:53:02 +0000 Manifest next update: Thu 05 Jun 2025 02:43:02 +0000 Files and hashes: 1: 34352e3139312e34302e302f32322d3234203d3e20323730323534.roa (hash: +ELc/cdHA6pm2kddxyuB8cT9ZxmW8xhCo1C9X8j7nOc=) 2: C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl (hash: /isETKv/AG/YCv1ZbncxsN3/stpO9M41ZVYSw2XaH6Q=) 3: 323830343a363933303a3a2f33322d3338203d3e20323730323534.roa (hash: Vi58jILCPaGdfjCNKSlfegkMsczPE3KoQ/bs4WgeL5s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Jun 2025 02:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:94:8a:22:7f:6f:7d:56:ed:aa:1c:56:07:da:3f:aa:96:e2:5b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3 Validity Not Before: Jun 3 23:53:02 2025 GMT Not After : Jun 5 02:43:02 2025 GMT Subject: CN=F4FC7543AD3A3318760E31E3BA346153C3E09351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:37:06:71:c4:d5:20:b4:66:b8:e2:ed:8f:0d: 1e:33:d4:31:56:f6:a0:0c:a7:ea:b2:58:9b:ca:cb: a0:9d:a7:d7:a1:8a:48:37:01:2c:34:c1:ec:30:44: e9:1d:4e:2e:67:af:1f:46:a9:5b:9f:88:fd:e3:48: e7:c7:fd:9e:0f:9a:9b:77:f8:d6:f4:52:12:73:3c: d1:33:a3:6d:cc:37:1c:09:05:ff:60:a4:68:da:6c: 00:31:f1:58:99:a6:5a:d1:c8:8e:46:bf:77:e7:27: fb:db:fd:9e:23:3f:77:6e:c8:63:4f:72:be:2d:84: 80:68:43:33:dd:d0:6c:b1:df:35:d2:ea:e6:e4:18: 75:2d:2e:ea:f9:aa:26:03:b5:9c:be:e4:13:0d:da: 47:fc:d7:6f:65:4e:8f:c3:84:06:8c:99:6c:3a:86: 7c:fe:88:75:93:eb:f9:ad:2f:81:a4:be:c6:d0:5f: 32:aa:fa:79:60:f2:ae:21:c0:c0:04:d0:0d:cc:07: a6:64:f2:7f:3a:1a:73:32:c4:66:ac:65:25:cb:90: fb:48:b1:63:e9:b4:ee:59:98:a5:43:45:83:80:58: d0:c8:a9:02:8b:24:19:8f:cf:0b:4b:a2:e2:3e:be: 04:1f:1e:31:41:9e:63:e9:ba:cb:82:e7:89:b1:00: 9f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FC:75:43:AD:3A:33:18:76:0E:31:E3:BA:34:61:53:C3:E0:93:51 X509v3 Authority Key Identifier: keyid:C0:04:F2:CC:C9:AC:B9:EC:01:A2:6E:FA:FF:53:A1:5B:B3:09:EC:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:aa:4e:b1:5e:6c:26:48:fa:21:02:7c:f6:b5:11:d6:18:17: 66:2c:77:cc:c5:6c:d0:85:64:7f:d2:8f:2d:b8:0e:42:06:57: a4:cd:32:bc:05:a0:f0:f7:0a:b3:43:60:fa:49:46:ae:79:bf: fa:6f:f1:db:f3:44:de:5b:c6:48:a7:10:40:aa:71:c1:49:09: 61:2a:b0:0f:38:d3:83:47:b3:2e:e7:8c:ea:8e:4e:85:1f:cb: 6d:78:46:d7:e3:d2:1d:0a:e7:49:61:6f:64:a0:fe:15:ae:54: 25:c2:3f:1f:fa:89:08:fd:14:27:06:4e:b8:15:8f:81:3a:37: 7c:1a:96:31:a6:a2:6d:0e:86:e0:c3:3d:61:23:b9:9a:bc:3f: 58:51:2f:4a:81:2f:8c:46:b3:2b:0c:c5:e1:42:4a:4a:81:f0: 25:3c:77:c1:e1:a9:f5:c7:f6:72:ac:ca:5b:1c:b1:74:16:89: ef:82:32:83:e6:8c:1e:d7:74:bb:59:86:58:67:68:1b:14:f0: 42:a1:81:c2:cb:18:17:dd:69:d6:3a:e7:b5:02:c6:fb:1b:20: 09:32:cb:12:29:20:94:9f:4a:8a:ca:ee:46:c7:5e:ec:b8:e9: 37:f4:50:e2:61:5d:96:60:01:7c:96:b2:d2:31:8a:21:b2:1b: ba:15:15:a6 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUPJSKIn9vfVbtqhxWB9o/qpbiWxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNEYyQ0NDOUFDQjlFQzAxQTI2RUZBRkY1M0ExNUJC MzA5RUNFMzAeFw0yNTA2MDMyMzUzMDJaFw0yNTA2MDUwMjQzMDJaMDMxMTAvBgNV BAMTKEY0RkM3NTQzQUQzQTMzMTg3NjBFMzFFM0JBMzQ2MTUzQzNFMDkzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPNwZxxNUgtGa44u2PDR4z1DFW 9qAMp+qyWJvKy6Cdp9ehikg3ASw0wewwROkdTi5nrx9GqVufiP3jSOfH/Z4Pmpt3 +Nb0UhJzPNEzo23MNxwJBf9gpGjabAAx8ViZplrRyI5Gv3fnJ/vb/Z4jP3duyGNP cr4thIBoQzPd0Gyx3zXS6ubkGHUtLur5qiYDtZy+5BMN2kf8129lTo/DhAaMmWw6 hnz+iHWT6/mtL4GkvsbQXzKq+nlg8q4hwMAE0A3MB6Zk8n86GnMyxGasZSXLkPtI sWPptO5ZmKVDRYOAWNDIqQKLJBmPzwtLouI+vgQfHjFBnmPpusuC54mxAJ8nAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU9Px1Q606Mxh2DjHjujRhU8Pgk1EwHwYDVR0j BBgwFoAUwATyzMmsuewBom76/1OhW7MJ7OMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YRHZicVQ4RmdoUEJ4NVBMTlpFUDNkMndrNDd4N1o2ZG9DZ1hWOGlrZktz LzAvQzAwNEYyQ0NDOUFDQjlFQzAxQTI2RUZBRkY1M0ExNUJCMzA5RUNFMy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DMDA0RjJDQ0M5QUNCOUVDMDFB MjZFRkFGRjUzQTE1QkIzMDlFQ0UzLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1hE dmJxVDhGZ2hQQng1UExOWkVQM2Qyd2s0N3g3WjZkb0NnWFY4aWtmS3MvMC9DMDA0 RjJDQ0M5QUNCOUVDMDFBMjZFRkFGRjUzQTE1QkIzMDlFQ0UzLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA lqpOsV5sJkj6IQJ89rUR1hgXZix3zMVs0IVkf9KPLbgOQgZXpM0yvAWg8PcKs0Ng +klGrnm/+m/x2/NE3lvGSKcQQKpxwUkJYSqwDzjTg0ezLueM6o5OhR/LbXhG1+PS HQrnSWFvZKD+Fa5UJcI/H/qJCP0UJwZOuBWPgTo3fBqWMaaibQ6G4MM9YSO5mrw/ WFEvSoEvjEazKwzF4UJKSoHwJTx3weGp9cf2cqzKWxyxdBaJ74Iyg+aMHtd0u1mG WGdoGxTwQqGBwssYF91p1jrntQLG+xsgCTLLEikglJ9KisruRsde7LjpN/RQ4mFd lmABfJay0jGKIbIbuhUVpg== -----END CERTIFICATE-----Generated at Wed Jun 4 11:05:56 2025 by rpki-client