$ rpki-client -vvf rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/CF89EDA5B266281791C7B4E6530567E41282E06E.mft File: CF89EDA5B266281791C7B4E6530567E41282E06E.mft (raw, json) Hash identifier: QKL0LH0H51PDJiysLvOFzYOJWmEYc3MHegSKuTXf63M= Subject key identifier: FD:46:AC:7E:D7:A0:55:7D:F5:A3:87:8C:52:C4:54:FC:1E:33:E7:C9 Authority key identifier: CF:89:ED:A5:B2:66:28:17:91:C7:B4:E6:53:05:67:E4:12:82:E0:6E Certificate issuer: /CN=CF89EDA5B266281791C7B4E6530567E41282E06E Certificate serial: 2A3E0C37EB26E158CAE0EB76D7F437FCD5FEDF55 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF89EDA5B266281791C7B4E6530567E41282E06E.cer Subject info access: rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/CF89EDA5B266281791C7B4E6530567E41282E06E.mft Manifest number: 17 Signing time: Sat 21 Jun 2025 11:55:14 +0000 Manifest this update: Sat 21 Jun 2025 11:50:14 +0000 Manifest next update: Sun 22 Jun 2025 12:11:14 +0000 Files and hashes: 1: 323830343a383761383a3a2f33322d3438203d3e20323732373234.roa (hash: aS9xwuplkrWrVSbdzG+kmPvMB+w9vd7M1YXneTl56PA=) 2: CF89EDA5B266281791C7B4E6530567E41282E06E.crl (hash: KTWdwPClXm78RSm1taH2qOfPU1TmXsEkpjccCwP7d2c=) 3: 3137372e35352e39322e302f32332d3234203d3e20323732373234.roa (hash: f+J8mX+CV8eVdMU5r+UbhyNBRx9evJZe3fDkgntcbQk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/CF89EDA5B266281791C7B4E6530567E41282E06E.crl rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/CF89EDA5B266281791C7B4E6530567E41282E06E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF89EDA5B266281791C7B4E6530567E41282E06E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Jun 2025 12:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:3e:0c:37:eb:26:e1:58:ca:e0:eb:76:d7:f4:37:fc:d5:fe:df:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF89EDA5B266281791C7B4E6530567E41282E06E Validity Not Before: Jun 21 11:50:14 2025 GMT Not After : Jun 22 12:11:14 2025 GMT Subject: CN=FD46AC7ED7A0557DF5A3878C52C454FC1E33E7C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:74:c0:55:93:c3:02:02:0e:f9:05:98:46:75: 4e:28:16:60:5b:49:ae:cf:0d:04:7e:7c:cf:6f:d7: 84:93:c3:a1:00:a8:b3:42:06:26:37:6e:aa:cd:d9: 49:3c:01:a0:c8:0c:2f:6f:9d:78:1b:29:f1:dd:34: 45:8b:49:4e:08:ba:90:f4:a9:21:48:7c:26:5c:ed: 89:5a:73:c0:f8:3c:6f:cc:09:30:54:29:a7:fd:32: 4c:aa:53:2c:1a:4d:89:de:81:73:97:19:e7:a3:07: 9c:75:53:1f:bf:2b:4d:67:3e:80:b9:f2:2d:9d:6a: db:1a:30:cf:a5:ef:46:d6:4b:5a:06:ba:9b:dc:45: 00:c4:5c:79:6b:ab:0a:6a:3c:1f:3b:8e:89:0e:b4: 7a:f8:4e:81:6e:93:95:e7:83:69:5b:dd:3b:46:93: b5:76:62:02:01:58:ff:66:98:6a:11:86:dc:0f:18: b4:88:db:97:67:70:a1:14:d7:1f:7c:4a:cb:ea:c8: 92:d5:9c:fd:ee:0d:3b:23:6b:e9:5f:46:eb:ae:5a: 8f:8b:85:2f:78:61:b8:73:e7:78:6e:d5:81:70:c1: 9e:4b:86:43:19:d1:21:9d:e4:f7:c0:39:55:92:1c: 47:3f:ca:51:e6:d1:10:a9:60:04:13:a5:b1:1a:fe: 27:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:46:AC:7E:D7:A0:55:7D:F5:A3:87:8C:52:C4:54:FC:1E:33:E7:C9 X509v3 Authority Key Identifier: keyid:CF:89:ED:A5:B2:66:28:17:91:C7:B4:E6:53:05:67:E4:12:82:E0:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/CF89EDA5B266281791C7B4E6530567E41282E06E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF89EDA5B266281791C7B4E6530567E41282E06E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/CF89EDA5B266281791C7B4E6530567E41282E06E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:06:66:57:59:eb:df:09:6b:5c:99:f2:ef:8f:ef:0b:e9:6d: 7a:26:ce:15:a0:4f:7f:13:eb:51:7e:a0:81:f9:90:b5:d6:7f: 08:71:8c:fb:66:5d:5d:fa:30:ea:26:a5:2e:6e:da:89:5c:d6: 0b:e1:2b:89:3a:55:56:f5:10:8c:6a:88:98:02:8f:49:58:7e: 3a:dd:77:94:73:08:28:73:e8:64:97:5f:86:2a:14:d7:43:89: e3:94:ab:a1:94:96:62:f3:71:d8:da:11:bb:f6:35:6e:b0:5f: b3:51:9f:83:24:cd:46:1e:f2:72:0c:ad:2f:95:4b:05:31:d4: 8a:bc:15:bd:f9:90:cf:7c:11:54:3b:34:ba:96:8f:79:e9:d4: 8d:e5:c9:12:80:13:d7:3f:b2:55:17:aa:8c:4c:9c:b5:38:c6: 3d:e5:26:ab:34:b8:11:f1:f2:81:8c:6e:69:e3:2d:63:2f:ad: f1:51:8d:60:6c:b3:a6:4f:d7:69:df:9e:ab:5d:0d:bd:a3:d7: 62:9d:21:24:f9:85:4f:f5:e6:07:61:6e:92:e0:3e:8b:63:6a: 29:fa:b4:3e:94:b5:a9:4a:38:e1:ce:86:3a:e1:ce:64:bd:0f: 05:db:7d:8c:bf:a9:a9:cc:70:95:99:38:d0:45:08:26:31:40: 98:f1:df:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKj4MN+sm4VjK4Ot21/Q3/NX+31UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y4OUVEQTVCMjY2MjgxNzkxQzdCNEU2NTMwNTY3RTQx MjgyRTA2RTAeFw0yNTA2MjExMTUwMTRaFw0yNTA2MjIxMjExMTRaMDMxMTAvBgNV BAMTKEZENDZBQzdFRDdBMDU1N0RGNUEzODc4QzUyQzQ1NEZDMUUzM0U3QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDndMBVk8MCAg75BZhGdU4oFmBb Sa7PDQR+fM9v14STw6EAqLNCBiY3bqrN2Uk8AaDIDC9vnXgbKfHdNEWLSU4IupD0 qSFIfCZc7Ylac8D4PG/MCTBUKaf9MkyqUywaTYnegXOXGeejB5x1Ux+/K01nPoC5 8i2datsaMM+l70bWS1oGupvcRQDEXHlrqwpqPB87jokOtHr4ToFuk5Xng2lb3TtG k7V2YgIBWP9mmGoRhtwPGLSI25dncKEU1x98SsvqyJLVnP3uDTsja+lfRuuuWo+L hS94Ybhz53hu1YFwwZ5LhkMZ0SGd5PfAOVWSHEc/ylHm0RCpYAQTpbEa/if9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/UasftegVX31o4eMUsRU/B4z58kwHwYDVR0j BBgwFoAUz4ntpbJmKBeRx7TmUwVn5BKC4G4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMllqNnd0VVloYVlZM0RwMUthUUNleHB1OG1wMzZyc012eVRxZ3kxbzZ1 TmkvMC9DRjg5RURBNUIyNjYyODE3OTFDN0I0RTY1MzA1NjdFNDEyODJFMDZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGODlFREE1QjI2NjI4MTc5 MUM3QjRFNjUzMDU2N0U0MTI4MkUwNkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MllqNnd0VVloYVlZM0RwMUthUUNleHB1OG1wMzZyc012eVRxZ3kxbzZ1TmkvMC9D Rjg5RURBNUIyNjYyODE3OTFDN0I0RTY1MzA1NjdFNDEyODJFMDZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaAZmV1nr3wlrXJny74/vC+lteibOFaBPfxPrUX6ggfmQtdZ/CHGM+2ZdXfow 6ialLm7aiVzWC+EriTpVVvUQjGqImAKPSVh+Ot13lHMIKHPoZJdfhioU10OJ45Sr oZSWYvNx2NoRu/Y1brBfs1GfgyTNRh7ycgytL5VLBTHUirwVvfmQz3wRVDs0upaP eenUjeXJEoAT1z+yVReqjEyctTjGPeUmqzS4EfHygYxuaeMtYy+t8VGNYGyzpk/X ad+eq10NvaPXYp0hJPmFT/XmB2FukuA+i2NqKfq0PpS1qUo44c6GOuHOZL0PBdt9 jL+pqcxwlZk40EUIJjFAmPHfdQ== -----END CERTIFICATE-----Generated at Sun Jun 22 05:06:52 2025 by rpki-client