$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft File: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft (raw, json) Hash identifier: dq9EhJDlWoVnnQSjjTASlvB4SPaupk6fcBqHtRg88Vg= Subject key identifier: C7:1E:93:09:7E:BC:DE:BB:C5:9D:CB:98:C1:FD:1F:75:7A:04:D6:D4 Authority key identifier: 9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D Certificate issuer: /CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D Certificate serial: 1716C9BB0FFC5F4CCB3C59000194BD5DDF7F9EDA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer Subject info access: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft Manifest number: EF Signing time: Sun 15 Jun 2025 04:49:49 +0000 Manifest this update: Sun 15 Jun 2025 04:44:49 +0000 Manifest next update: Mon 16 Jun 2025 07:35:49 +0000 Files and hashes: 1: 34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa (hash: zwE7+BkACCSkaLuprz1tnvVDwiMXOKL8M0S4eDl2SuI=) 2: 323830343a363861383a3a2f33322d313238203d3e20323639373037.roa (hash: z8KvPm2mQOim4DJBvpBUShLU77s/9n6vTftmZoh8lWE=) 3: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl (hash: 8VbfngaHive1Ji9gpElRVaHqkbpAmHcErp8E8zVvUyI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 05:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:16:c9:bb:0f:fc:5f:4c:cb:3c:59:00:01:94:bd:5d:df:7f:9e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D Validity Not Before: Jun 15 04:44:49 2025 GMT Not After : Jun 16 07:35:49 2025 GMT Subject: CN=C71E93097EBCDEBBC59DCB98C1FD1F757A04D6D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2a:5f:a7:e5:0e:d0:e4:8d:26:16:03:78:92: e5:b7:45:6d:ed:75:62:f8:c2:85:cf:f4:10:09:4f: a9:61:fd:1e:6b:df:8f:d8:13:fe:85:8f:ce:20:32: b7:cc:07:06:e5:ba:1e:27:5f:20:58:27:29:a6:1e: 6e:f7:f8:05:d1:a2:ff:c6:17:28:c5:23:b4:a6:a8: c2:73:e8:9a:f0:49:3d:91:67:6a:c3:72:9b:c8:fc: ed:a0:ee:9b:7a:17:23:e7:36:36:45:4d:2c:b5:72: 93:f1:72:c9:1f:a9:a0:b7:dc:09:8e:4d:dc:87:e6: 32:a8:25:b5:ef:98:11:5f:5e:c4:3f:29:92:2b:04: 57:f7:4e:36:25:bb:91:a7:7e:08:7b:80:27:07:f8: 8c:3d:96:73:cb:90:10:15:15:b9:55:97:94:d1:a2: 09:fb:64:4b:8d:9f:90:aa:73:58:3c:19:f3:b9:76: 3d:53:60:b3:f0:24:a9:dd:1a:44:a6:9e:53:d9:dc: ec:8d:a7:05:2e:83:75:7f:65:02:59:1b:cb:a5:88: fb:84:d0:db:59:ea:ff:f6:5d:1c:0f:71:7a:59:2f: 50:07:f7:44:cc:4a:42:12:4a:d8:4b:e4:c7:fb:04: 79:e0:b6:0a:49:8f:11:d6:56:aa:b6:f7:11:27:56: 99:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1E:93:09:7E:BC:DE:BB:C5:9D:CB:98:C1:FD:1F:75:7A:04:D6:D4 X509v3 Authority Key Identifier: keyid:9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:96:55:d7:68:46:69:96:d5:b8:cd:4d:98:1a:ad:59:05:32: e8:8f:b9:e5:9a:fc:4c:bd:fe:6f:2a:5f:d1:0e:0d:f5:de:e9: 70:3d:38:86:a3:86:86:ab:bf:70:91:f3:24:22:23:87:14:f3: 41:62:a7:6e:5d:b0:e3:6b:8c:bf:46:18:6e:3a:e3:62:68:8f: 19:46:6d:0e:18:67:e3:28:10:ac:35:ee:54:67:18:75:9d:0b: 27:35:2f:7d:b4:50:52:33:29:b8:87:d3:25:af:59:3b:f9:d6: 98:4d:39:c5:91:db:e4:8e:22:c4:61:34:f7:3d:1b:cf:da:63: ab:47:14:1d:36:22:e4:91:23:ca:a2:11:71:da:20:6e:04:8e: 42:8c:df:30:a0:03:99:95:3c:7e:32:69:15:e2:76:e2:f0:17: 77:4d:04:69:a9:1f:53:2c:b7:9e:f6:f0:b7:7c:10:ec:5d:8c: 42:32:4e:7c:e2:bd:2f:96:64:1c:50:86:94:1f:52:45:e9:33: 5e:22:13:69:75:09:54:b4:84:7c:47:3f:6c:23:61:e2:da:62: f5:c1:91:11:d2:f6:8e:6c:9d:eb:11:be:04:12:43:87:56:db: b9:24:b9:54:13:0a:35:47:42:23:23:d8:5a:3f:db:d9:bc:f9: e9:5a:b8:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFxbJuw/8X0zLPFkAAZS9Xd9/ntowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ0Rjk5QzUwQkNFNjIyQzI1RjZDRjQwODNCM0NCRTM2 NEM4QkExRDAeFw0yNTA2MTUwNDQ0NDlaFw0yNTA2MTYwNzM1NDlaMDMxMTAvBgNV BAMTKEM3MUU5MzA5N0VCQ0RFQkJDNTlEQ0I5OEMxRkQxRjc1N0EwNEQ2RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtKl+n5Q7Q5I0mFgN4kuW3RW3t dWL4woXP9BAJT6lh/R5r34/YE/6Fj84gMrfMBwbluh4nXyBYJymmHm73+AXRov/G FyjFI7SmqMJz6JrwST2RZ2rDcpvI/O2g7pt6FyPnNjZFTSy1cpPxcskfqaC33AmO TdyH5jKoJbXvmBFfXsQ/KZIrBFf3TjYlu5Gnfgh7gCcH+Iw9lnPLkBAVFblVl5TR ogn7ZEuNn5Cqc1g8GfO5dj1TYLPwJKndGkSmnlPZ3OyNpwUug3V/ZQJZG8uliPuE 0NtZ6v/2XRwPcXpZL1AH90TMSkISSthL5Mf7BHngtgpJjxHWVqq29xEnVpl5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxx6TCX683rvFncuYwf0fdXoE1tQwHwYDVR0j BBgwFoAUnU+ZxQvOYiwl9s9Ag7PL42TIuh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmFQQ25nTGtjTG9ja3JBTnNLWHV1dFVvTnJkNE5vNURWeDYzQmZoQ0w2 TUcvMC85RDRGOTlDNTBCQ0U2MjJDMjVGNkNGNDA4M0IzQ0JFMzY0QzhCQTFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlENEY5OUM1MEJDRTYyMkMy NUY2Q0Y0MDgzQjNDQkUzNjRDOEJBMUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmFQQ25nTGtjTG9ja3JBTnNLWHV1dFVvTnJkNE5vNURWeDYzQmZoQ0w2TUcvMC85 RDRGOTlDNTBCQ0U2MjJDMjVGNkNGNDA4M0IzQ0JFMzY0QzhCQTFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS5ZV12hGaZbVuM1NmBqtWQUy6I+55Zr8TL3+bypf0Q4N9d7pcD04hqOGhqu/ cJHzJCIjhxTzQWKnbl2w42uMv0YYbjrjYmiPGUZtDhhn4ygQrDXuVGcYdZ0LJzUv fbRQUjMpuIfTJa9ZO/nWmE05xZHb5I4ixGE09z0bz9pjq0cUHTYi5JEjyqIRcdog bgSOQozfMKADmZU8fjJpFeJ24vAXd00EaakfUyy3nvbwt3wQ7F2MQjJOfOK9L5Zk HFCGlB9SRekzXiITaXUJVLSEfEc/bCNh4tpi9cGREdL2jmyd6xG+BBJDh1bbuSS5 VBMKNUdCIyPYWj/b2bz56Vq44w== -----END CERTIFICATE-----Generated at Sun Jun 15 21:56:06 2025 by rpki-client