$ rpki-client -vvf rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.mft File: AF4A2DB89E34555B8683D2189961132177B11C81.mft (raw, json) Hash identifier: I59xCUHga0OmpQpmD6UytOFGglLszEtVMLAL64dDswo= Subject key identifier: 24:7E:80:2F:BE:CC:E5:6B:85:EB:48:33:EA:D3:E2:96:A9:66:B9:C0 Authority key identifier: AF:4A:2D:B8:9E:34:55:5B:86:83:D2:18:99:61:13:21:77:B1:1C:81 Certificate issuer: /CN=AF4A2DB89E34555B8683D2189961132177B11C81 Certificate serial: 1992F526D38627E62453AF80BC7546762FD05E03 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4A2DB89E34555B8683D2189961132177B11C81.cer Subject info access: rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.mft Manifest number: 39 Signing time: Wed 18 Jun 2025 17:42:46 +0000 Manifest this update: Wed 18 Jun 2025 17:37:46 +0000 Manifest next update: Thu 19 Jun 2025 17:49:46 +0000 Files and hashes: 1: 323830343a323164383a3a2f33322d313238203d3e20323634353737.roa (hash: QNBOlmI1R5nTlUtL4Q8+avShqQstAd9Eh6Nq2rgyZcc=) 2: 3133382e33362e3131362e302f32322d3332203d3e20323634353737.roa (hash: Db8sToV5ujds5q1beOvfPPCXTGcHwubMfh/VEsxLVhg=) 3: AF4A2DB89E34555B8683D2189961132177B11C81.crl (hash: DXf9Tzx7O6lOfLo6Z4Nk1ra9Uf4I7yalYrZHajjbAL8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.crl rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4A2DB89E34555B8683D2189961132177B11C81.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Jun 2025 17:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:92:f5:26:d3:86:27:e6:24:53:af:80:bc:75:46:76:2f:d0:5e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4A2DB89E34555B8683D2189961132177B11C81 Validity Not Before: Jun 18 17:37:46 2025 GMT Not After : Jun 19 17:49:46 2025 GMT Subject: CN=247E802FBECCE56B85EB4833EAD3E296A966B9C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c1:dc:a4:fc:4e:65:f9:8a:cb:5d:1d:52:b6: 77:c9:db:c9:e5:0c:93:31:97:41:44:02:c5:10:26: 79:2b:06:56:eb:3f:d4:9f:40:7c:de:e5:1d:e1:df: f4:e2:c9:dd:90:1a:48:dd:69:74:3c:2a:a6:30:22: 5b:fd:c5:ba:c5:36:d0:fc:4e:b5:3f:12:c0:d7:0f: 00:31:fc:8c:6e:8e:9c:b5:f3:a6:c5:e5:2a:44:65: 71:46:c3:24:47:c7:88:27:52:31:d9:57:91:7a:32: 98:44:6c:ff:4a:73:bb:44:2a:cd:6c:46:bd:f7:9e: 79:1e:f4:f6:b6:15:c3:b5:0a:3b:57:f8:22:b6:1b: 58:56:19:64:28:a5:bc:b5:4a:08:9e:77:53:24:8b: 6e:03:56:61:59:bf:de:1f:21:98:d3:9b:83:45:e4: dc:86:85:b6:e4:93:45:00:35:95:ae:68:ec:e9:5a: 4d:4d:b0:26:7b:a4:18:fe:45:16:9b:de:bb:0c:fb: 64:2e:ac:3d:3e:25:31:41:46:d0:1a:8a:ab:a9:50: 05:e6:2c:04:68:e7:89:77:2f:71:2a:e2:c1:0e:82: cc:de:c2:b9:9b:7b:d6:35:24:be:d0:02:21:65:44: f7:0a:1b:e5:a7:a5:05:a4:74:db:0c:ff:70:eb:60: af:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7E:80:2F:BE:CC:E5:6B:85:EB:48:33:EA:D3:E2:96:A9:66:B9:C0 X509v3 Authority Key Identifier: keyid:AF:4A:2D:B8:9E:34:55:5B:86:83:D2:18:99:61:13:21:77:B1:1C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4A2DB89E34555B8683D2189961132177B11C81.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:1c:58:6b:d3:4b:c9:7d:d0:8b:a4:ce:13:ee:61:42:2a:b1: b6:c4:e6:80:27:b3:5f:ef:6c:94:d1:80:b2:09:92:7e:25:f9: be:87:d5:2b:e2:b4:0b:16:9a:fc:f8:bc:7c:90:76:44:7a:c6: be:80:9b:70:3c:50:ae:de:38:aa:9b:f2:4a:06:f8:2e:6d:7b: 64:d5:a5:70:a8:06:38:46:ed:7f:b3:48:f2:63:51:9e:92:05: 0b:1f:e8:58:17:73:e2:fb:51:8f:15:3c:67:54:c0:d7:7f:af: 8e:5a:fc:91:84:87:e1:15:9d:ef:e1:54:e3:db:15:90:a7:b9: 37:63:46:aa:61:f2:97:2c:ee:4f:cb:7d:aa:f0:a3:b5:2f:98: 0a:47:cc:85:49:b4:8b:dc:8f:99:29:77:54:b1:6d:89:94:74: d1:30:d8:48:fd:60:6f:c0:90:78:b6:ca:73:b6:13:5c:e5:60: 6a:29:74:ad:99:56:b8:12:1c:8b:0a:45:38:b3:d9:b0:8d:7d: 95:b8:df:fb:46:01:04:ed:a5:5a:50:ee:a1:4a:25:47:c9:75: d1:68:44:47:26:10:a0:bd:90:13:38:55:a6:eb:f5:57:52:6e: de:b0:5e:c2:0d:ab:da:89:6c:b3:1d:03:26:b8:10:cc:c6:58: 37:ef:f0:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGZL1JtOGJ+YkU6+AvHVGdi/QXgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QTJEQjg5RTM0NTU1Qjg2ODNEMjE4OTk2MTEzMjE3 N0IxMUM4MTAeFw0yNTA2MTgxNzM3NDZaFw0yNTA2MTkxNzQ5NDZaMDMxMTAvBgNV BAMTKDI0N0U4MDJGQkVDQ0U1NkI4NUVCNDgzM0VBRDNFMjk2QTk2NkI5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgwdyk/E5l+YrLXR1StnfJ28nl DJMxl0FEAsUQJnkrBlbrP9SfQHze5R3h3/Tiyd2QGkjdaXQ8KqYwIlv9xbrFNtD8 TrU/EsDXDwAx/Ixujpy186bF5SpEZXFGwyRHx4gnUjHZV5F6MphEbP9Kc7tEKs1s Rr33nnke9Pa2FcO1CjtX+CK2G1hWGWQopby1Sgied1Mki24DVmFZv94fIZjTm4NF 5NyGhbbkk0UANZWuaOzpWk1NsCZ7pBj+RRab3rsM+2QurD0+JTFBRtAaiqupUAXm LARo54l3L3Eq4sEOgszewrmbe9Y1JL7QAiFlRPcKG+WnpQWkdNsM/3DrYK8HAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJH6AL77M5WuF60gz6tPilqlmucAwHwYDVR0j BBgwFoAUr0otuJ40VVuGg9IYmWETIXexHIEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1cyY1NrUVF5cXNBZnVSNjY5NFZaRjJFQmQ3V1Boa0RNY3ZlRDN0ZHl6 ZmIvMC9BRjRBMkRCODlFMzQ1NTVCODY4M0QyMTg5OTYxMTMyMTc3QjExQzgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNEEyREI4OUUzNDU1NUI4 NjgzRDIxODk5NjExMzIxNzdCMTFDODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1cyY1NrUVF5cXNBZnVSNjY5NFZaRjJFQmQ3V1Boa0RNY3ZlRDN0ZHl6ZmIvMC9B RjRBMkRCODlFMzQ1NTVCODY4M0QyMTg5OTYxMTMyMTc3QjExQzgxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbhxYa9NLyX3Qi6TOE+5hQiqxtsTmgCezX+9slNGAsgmSfiX5vofVK+K0Cxaa /Pi8fJB2RHrGvoCbcDxQrt44qpvySgb4Lm17ZNWlcKgGOEbtf7NI8mNRnpIFCx/o WBdz4vtRjxU8Z1TA13+vjlr8kYSH4RWd7+FU49sVkKe5N2NGqmHylyzuT8t9qvCj tS+YCkfMhUm0i9yPmSl3VLFtiZR00TDYSP1gb8CQeLbKc7YTXOVgail0rZlWuBIc iwpFOLPZsI19lbjf+0YBBO2lWlDuoUolR8l10WhERyYQoL2QEzhVpuv1V1Ju3rBe wg2r2olssx0DJrgQzMZYN+/wPQ== -----END CERTIFICATE-----Generated at Thu Jun 19 00:13:17 2025 by rpki-client