$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft File: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft (raw, json) Hash identifier: iA3+7lmrn6Ln1C00dZtm9vAzSTcvt/YR0d6Mc+NxL6c= Subject key identifier: 2E:98:56:52:E3:7B:FC:54:2B:73:EA:B8:0B:4F:08:7F:63:DF:19:4E Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 Certificate issuer: /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Certificate serial: 4B7DD7190E26B85A965105C836F00BD5AC384A7B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft Manifest number: 0249 Signing time: Mon 16 Jun 2025 09:49:24 +0000 Manifest this update: Mon 16 Jun 2025 09:44:24 +0000 Manifest next update: Tue 17 Jun 2025 10:02:24 +0000 Files and hashes: 1: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl (hash: gUFhUrtiX4XdUUXMSjKWO485my8KxmwNuBPchpcG6pc=) 2: 34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa (hash: uvDWAWwHQEIwaeCaS7oSbgW6akspuwjD8Bob8V00050=) 3: 323830343a346335633a3a2f33322d3438203d3e20323637333636.roa (hash: aBuDzalJjtN6QjODimHKIqdgYVt/ZmaeAC/ItTdnYZs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 10:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:7d:d7:19:0e:26:b8:5a:96:51:05:c8:36:f0:0b:d5:ac:38:4a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Validity Not Before: Jun 16 09:44:24 2025 GMT Not After : Jun 17 10:02:24 2025 GMT Subject: CN=2E985652E37BFC542B73EAB80B4F087F63DF194E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2b:e4:9c:11:02:7c:6f:50:b7:8e:ef:3e:46: 6c:01:68:20:b1:01:81:2f:14:1e:cf:7b:75:47:f8: db:11:37:36:9d:55:01:ac:6b:22:a3:62:98:3e:dd: d6:cf:80:4d:d8:55:f0:37:1c:5e:77:5c:2b:a7:87: 59:02:5f:dd:23:20:3c:e7:9d:e3:f9:1f:bd:c6:ad: d3:9a:ce:2e:14:01:f3:aa:bc:05:98:8f:29:b5:39: 95:0a:e2:d6:cd:d9:52:3f:a9:24:07:49:11:3f:8a: 3d:1a:29:a4:81:99:6c:ad:ac:49:4e:03:41:7a:9c: 12:7f:a4:14:59:31:b0:10:d7:57:61:6a:fe:7c:48: 0c:df:72:9c:b0:c8:d7:ae:1b:ca:f5:77:27:cf:3c: 50:cb:64:15:45:cc:62:29:a6:71:d5:19:fe:9b:e4: b4:a3:29:12:62:da:56:e0:03:a1:7d:ea:c9:1b:a9: f1:af:b8:92:36:7a:dc:c0:41:76:d5:cf:77:e4:9f: 0b:09:f0:02:a9:4e:2e:e0:84:39:19:c6:bc:49:4e: e3:31:7e:d7:77:d8:bd:1c:b3:ee:bc:cb:44:4d:ff: 9a:32:bf:c1:2e:38:4f:74:20:32:1b:e2:db:49:8e: ad:b7:3c:5e:b9:cf:90:bb:7c:a7:71:7d:af:7b:c3: 54:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:98:56:52:E3:7B:FC:54:2B:73:EA:B8:0B:4F:08:7F:63:DF:19:4E X509v3 Authority Key Identifier: keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:28:45:38:b3:75:a4:bd:ab:b2:bb:98:ff:15:26:a0:46:3a: b5:2a:f0:b6:49:38:cd:a4:32:1e:4a:f4:c1:d7:08:09:40:66: 9e:14:40:00:b5:ad:a9:a3:ba:4e:01:7d:17:18:01:cf:52:33: 93:4c:74:19:79:d0:de:f0:a3:83:8f:05:57:61:45:62:17:62: af:d0:e1:ee:7e:3f:dc:df:6c:e6:dd:25:dc:1b:90:33:d3:01: 01:47:ed:21:c1:f4:aa:3e:8e:d8:ed:44:56:ab:22:64:53:c3: b9:19:1d:ca:d5:62:66:e8:ee:12:65:81:ba:b9:95:fe:74:21: 41:e2:a2:30:a6:ee:ad:c7:01:40:24:04:d6:6d:b0:35:3d:a8: 9a:d1:d6:4d:76:f3:9a:4a:58:41:0b:5e:16:d4:ef:a3:3a:77: 59:02:e4:7d:3e:be:83:af:55:a2:8b:ba:1b:e1:8b:73:9d:a9: 30:c5:e2:c7:bc:59:fd:55:f9:15:28:48:5c:b4:07:fc:26:89: c0:29:45:e3:d4:f7:fb:24:1d:cc:d3:ff:65:ae:57:a9:fb:43: 1c:0d:47:bf:b2:1d:1b:d3:5a:63:34:43:7b:ce:9c:26:bc:a5: 5e:56:2a:4b:84:44:5e:3d:3d:62:9e:67:98:45:ef:d9:b3:cf: f3:8d:90:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS33XGQ4muFqWUQXINvAL1aw4SnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMEFFNjNFRDk5MTI0RjdEM0YxNEI4RkE5QzFGRjM3 ODAwNjdDMjAeFw0yNTA2MTYwOTQ0MjRaFw0yNTA2MTcxMDAyMjRaMDMxMTAvBgNV BAMTKDJFOTg1NjUyRTM3QkZDNTQyQjczRUFCODBCNEYwODdGNjNERjE5NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaK+ScEQJ8b1C3ju8+RmwBaCCx AYEvFB7Pe3VH+NsRNzadVQGsayKjYpg+3dbPgE3YVfA3HF53XCunh1kCX90jIDzn neP5H73GrdOazi4UAfOqvAWYjym1OZUK4tbN2VI/qSQHSRE/ij0aKaSBmWytrElO A0F6nBJ/pBRZMbAQ11dhav58SAzfcpywyNeuG8r1dyfPPFDLZBVFzGIppnHVGf6b 5LSjKRJi2lbgA6F96skbqfGvuJI2etzAQXbVz3fknwsJ8AKpTi7ghDkZxrxJTuMx ftd32L0cs+68y0RN/5oyv8EuOE90IDIb4ttJjq23PF65z5C7fKdxfa97w1TLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULphWUuN7/FQrc+q4C08If2PfGU4wHwYDVR0j BBgwFoAU9CCuY+2ZEk99PxS4+pwf83gAZ8IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhH MWYvMC9GNDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0MjBBRTYzRUQ5OTEyNEY3 RDNGMTRCOEZBOUMxRkYzNzgwMDY3QzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhHMWYvMC9G NDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYShFOLN1pL2rsruY/xUmoEY6tSrwtkk4zaQyHkr0wdcICUBmnhRAALWtqaO6 TgF9FxgBz1Izk0x0GXnQ3vCjg48FV2FFYhdir9Dh7n4/3N9s5t0l3BuQM9MBAUft IcH0qj6O2O1EVqsiZFPDuRkdytViZujuEmWBurmV/nQhQeKiMKburccBQCQE1m2w NT2omtHWTXbzmkpYQQteFtTvozp3WQLkfT6+g69Voou6G+GLc52pMMXix7xZ/VX5 FShIXLQH/CaJwClF49T3+yQdzNP/Za5XqftDHA1Hv7IdG9NaYzRDe86cJrylXlYq S4REXj09Yp5nmEXv2bPP842QzQ== -----END CERTIFICATE-----Generated at Mon Jun 16 14:40:36 2025 by rpki-client