$ rpki-client -vvf rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.mft File: B52A0D870CC703D8D9FE35123E1890C611011310.mft (raw, json) Hash identifier: jGp9kFY1dAKJwD2rFnZr0SrWDOn8k/AyM6gt48OZeik= Subject key identifier: 11:29:6B:D9:96:AC:4E:EF:7A:7D:87:C3:1E:8E:06:10:6E:73:CD:73 Authority key identifier: B5:2A:0D:87:0C:C7:03:D8:D9:FE:35:12:3E:18:90:C6:11:01:13:10 Certificate issuer: /CN=B52A0D870CC703D8D9FE35123E1890C611011310 Certificate serial: 4DB3B03FA49141153B47A02D6DF4E1726F8674E2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52A0D870CC703D8D9FE35123E1890C611011310.cer Subject info access: rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.mft Manifest number: C9 Signing time: Wed 11 Jun 2025 00:48:44 +0000 Manifest this update: Wed 11 Jun 2025 00:43:44 +0000 Manifest next update: Thu 12 Jun 2025 01:42:44 +0000 Files and hashes: 1: B52A0D870CC703D8D9FE35123E1890C611011310.crl (hash: jqb8mQKgGbIMRm1OrjXdeH4dFexH3+yd29Yre/4i8g0=) 2: 3133312e3235352e32382e302f32322d3234203d3e20323634343438.roa (hash: aU/MtJ/9aeIF0VSIvMVL3f1p1fHqwO9eh2i+7lRvC14=) 3: 323830343a316563633a3a2f33322d3438203d3e20323634343438.roa (hash: yTXAwNWbp7WNlHhKketoEKnsfr3BDlqsNppl/voJ7z0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.crl rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52A0D870CC703D8D9FE35123E1890C611011310.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Jun 2025 01:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b3:b0:3f:a4:91:41:15:3b:47:a0:2d:6d:f4:e1:72:6f:86:74:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B52A0D870CC703D8D9FE35123E1890C611011310 Validity Not Before: Jun 11 00:43:44 2025 GMT Not After : Jun 12 01:42:44 2025 GMT Subject: CN=11296BD996AC4EEF7A7D87C31E8E06106E73CD73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9a:ce:aa:cd:18:ea:0a:55:68:f9:46:13:b8: 1a:0f:cd:0d:bc:9c:43:40:f3:bc:7e:2c:d2:ab:96: 70:7e:00:c1:6c:bd:f6:62:e7:f4:88:10:32:b5:9b: f3:b8:e9:d6:73:58:96:aa:13:8d:a5:8b:c6:14:63: 0c:7f:53:6f:2a:c1:2c:b8:95:c5:f5:df:9a:29:fc: ab:86:05:48:3b:34:8c:86:e0:ce:a1:e7:90:85:bb: e7:f8:9e:ae:ae:f9:1d:e3:0b:da:6e:0c:5c:20:95: 55:89:0c:50:61:f3:27:93:dc:24:d8:a4:9c:a8:c2: af:61:bb:4e:38:d0:56:df:2a:90:9f:4f:7a:fe:da: 15:03:ca:f2:c0:0c:ae:21:03:01:65:bb:b5:c4:0e: 04:d7:46:d9:22:d6:b5:3a:64:3a:ad:5a:c6:f4:3e: 3e:a6:f1:c5:98:13:65:63:27:e6:01:dc:fc:98:bd: 8b:ec:c3:05:a3:c0:70:38:0d:94:22:55:d1:c0:00: bf:1c:fd:98:ec:7b:b6:8b:c1:43:f1:8f:41:e0:fc: d4:20:45:3b:9b:58:85:0d:d5:56:05:31:66:2e:97: 5a:42:89:15:9b:52:15:0f:b3:d5:ad:b0:e9:6d:9f: 7b:c0:0c:9e:13:eb:21:4d:74:55:44:4c:53:89:32: 26:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:29:6B:D9:96:AC:4E:EF:7A:7D:87:C3:1E:8E:06:10:6E:73:CD:73 X509v3 Authority Key Identifier: keyid:B5:2A:0D:87:0C:C7:03:D8:D9:FE:35:12:3E:18:90:C6:11:01:13:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52A0D870CC703D8D9FE35123E1890C611011310.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/0/B52A0D870CC703D8D9FE35123E1890C611011310.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:64:dc:28:45:08:83:f2:62:2a:6f:57:28:55:2c:ef:0c:38: ac:85:2a:9e:be:c6:7d:e6:20:e6:ba:b7:86:e2:9b:00:08:a7: 1e:ef:77:c0:cc:d7:d3:18:40:20:37:9f:cc:52:47:2a:e1:66: 11:f7:82:2b:ab:fa:87:8a:be:66:0c:5b:d0:ba:dc:45:ac:6d: 48:50:0a:e2:76:8b:bd:7f:e0:b7:13:a8:40:7b:cf:85:18:db: a3:f2:c7:e8:e5:f7:e6:a8:af:4a:96:5d:d9:dc:d7:7c:cb:ad: 61:12:f7:11:8d:62:70:80:01:06:bb:b5:93:59:d4:4b:82:b5: 5c:fd:b1:fe:2e:76:87:70:19:9d:91:f6:a1:36:dc:04:02:7b: b6:b9:ec:f2:56:5f:2c:a4:2b:01:ec:fb:d8:ee:88:b8:cf:88: f1:ba:a4:69:d1:49:e9:00:e9:8a:c1:2e:8f:f8:c1:ea:b4:bf: cb:9c:69:01:20:9f:34:c5:57:a5:4c:18:f7:c2:90:ac:58:7b: d7:ff:bf:31:16:61:18:ba:36:36:1e:0e:75:89:80:2c:93:04: 4e:46:73:90:56:f9:2a:78:34:57:c7:8f:59:1a:1a:bf:e4:2b: da:9a:21:4f:33:20:15:31:1a:12:45:14:87:f0:b4:36:a0:7b: 9f:d4:7e:21 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUTbOwP6SRQRU7R6AtbfThcm+GdOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUyQTBEODcwQ0M3MDNEOEQ5RkUzNTEyM0UxODkwQzYx MTAxMTMxMDAeFw0yNTA2MTEwMDQzNDRaFw0yNTA2MTIwMTQyNDRaMDMxMTAvBgNV BAMTKDExMjk2QkQ5OTZBQzRFRUY3QTdEODdDMzFFOEUwNjEwNkU3M0NENzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXms6qzRjqClVo+UYTuBoPzQ28 nENA87x+LNKrlnB+AMFsvfZi5/SIEDK1m/O46dZzWJaqE42li8YUYwx/U28qwSy4 lcX135op/KuGBUg7NIyG4M6h55CFu+f4nq6u+R3jC9puDFwglVWJDFBh8yeT3CTY pJyowq9hu0440FbfKpCfT3r+2hUDyvLADK4hAwFlu7XEDgTXRtki1rU6ZDqtWsb0 Pj6m8cWYE2VjJ+YB3PyYvYvswwWjwHA4DZQiVdHAAL8c/Zjse7aLwUPxj0Hg/NQg RTubWIUN1VYFMWYul1pCiRWbUhUPs9WtsOltn3vADJ4T6yFNdFVETFOJMiYvAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUESlr2ZasTu96fYfDHo4GEG5zzXMwHwYDVR0j BBgwFoAUtSoNhwzHA9jZ/jUSPhiQxhEBExAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9wOWJ4cFhNandnNE1UUW5MQnRqR2RNelJiamZTUnBGUjFHQ0JmV01Ba1pV LzAvQjUyQTBEODcwQ0M3MDNEOEQ5RkUzNTEyM0UxODkwQzYxMTAxMTMxMC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CNTJBMEQ4NzBDQzcwM0Q4RDlG RTM1MTIzRTE4OTBDNjExMDExMzEwLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3A5 YnhwWE1qd2c0TVRRbkxCdGpHZE16UmJqZlNScEZSMUdDQmZXTUFrWlUvMC9CNTJB MEQ4NzBDQzcwM0Q4RDlGRTM1MTIzRTE4OTBDNjExMDExMzEwLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA VWTcKEUIg/JiKm9XKFUs7ww4rIUqnr7GfeYg5rq3huKbAAinHu93wMzX0xhAIDef zFJHKuFmEfeCK6v6h4q+Zgxb0LrcRaxtSFAK4naLvX/gtxOoQHvPhRjbo/LH6OX3 5qivSpZd2dzXfMutYRL3EY1icIABBru1k1nUS4K1XP2x/i52h3AZnZH2oTbcBAJ7 trns8lZfLKQrAez72O6IuM+I8bqkadFJ6QDpisEuj/jB6rS/y5xpASCfNMVXpUwY 98KQrFh71/+/MRZhGLo2Nh4OdYmALJMETkZzkFb5Kng0V8ePWRoav+Qr2pohTzMg FTEaEkUUh/C0NqB7n9R+IQ== -----END CERTIFICATE-----Generated at Wed Jun 11 13:01:55 2025 by rpki-client