$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft File: DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft (raw, json) Hash identifier: 8n2Tz/WsLlDSyG8CPEolJykPZYJ9Ag66/xHpQTsjdl4= Subject key identifier: E5:71:BC:90:55:0B:F1:F5:27:5A:71:69:E2:0B:00:FA:64:0B:BB:0E Authority key identifier: DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 Certificate issuer: /CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Certificate serial: 3A167632457DCB57E0255310D55C6CB496337BEE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft Manifest number: 0130 Signing time: Thu 19 Jun 2025 19:54:14 +0000 Manifest this update: Thu 19 Jun 2025 19:49:14 +0000 Manifest next update: Fri 20 Jun 2025 21:36:14 +0000 Files and hashes: 1: DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl (hash: wnlgjO+wGJbdHNM94k+x1rvpWz4UzCJPX8JEu8nZXXk=) 2: AS271724.roa (hash: l5gmeL2yHvrD9TVL4KZFQizJAvhAXD1DWO8q3z+rTGI=) 3: AS262509.roa (hash: z3WtH/Sygr90lElh4BrL1IcwiuvTDrgPHmvGfu++SqQ=) 4: AS262992.roa (hash: LOrGt5rTWX38I9DqRFkfOvwpOY0hC94ElGsl+njChjw=) 5: AS28270.roa (hash: uGHkRPishqbsJJ54+ugErw9R72HvNLzUbFhVrAbllrQ=) 6: AS26506.roa (hash: tFkD2PMWofwimoG981bob/PjPPKK2IynxaWoUB+x+bY=) 7: AS28220.roa (hash: 2f4mdy18qLlx+ZdLI6cTxQUAw0TZ9sUecxUz0WF1Sqw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 21:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:16:76:32:45:7d:cb:57:e0:25:53:10:d5:5c:6c:b4:96:33:7b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72 Validity Not Before: Jun 19 19:49:14 2025 GMT Not After : Jun 20 21:36:14 2025 GMT Subject: CN=E571BC90550BF1F5275A7169E20B00FA640BBB0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2a:99:d1:69:00:d7:f8:7b:76:99:e1:e5:b3: c1:a7:9e:ab:55:20:1b:47:f0:9a:a3:b5:e6:42:f7: 46:a0:bf:73:38:e5:78:d1:ce:70:fa:87:5d:6f:23: 4a:d1:6e:18:85:91:9e:2e:d6:b0:f5:b9:55:45:c3: 86:8f:d0:47:3b:38:74:aa:d7:69:88:aa:04:95:0b: 82:31:7e:75:dc:d7:c7:4f:22:00:68:36:a6:63:ab: c1:01:3c:a7:f3:85:4c:e3:86:cf:f4:33:42:e8:fb: 5e:fb:b5:31:77:7c:d2:18:4a:cd:4b:09:3a:e7:33: 5f:00:2b:74:9e:5c:d9:6f:cc:c1:fd:04:f7:a0:43: 0c:84:d7:89:e0:b3:b6:b7:01:06:dc:dd:78:45:66: 6a:b0:9c:d8:3a:80:f6:4f:41:e4:16:ad:cc:32:08: 3b:50:3c:76:e2:0d:89:bf:61:f9:65:49:66:3b:db: 48:71:6b:08:f3:48:3f:a9:13:0c:4c:d0:a2:19:4d: aa:e5:ae:02:35:35:6a:85:10:05:aa:a7:fd:79:e8: 07:31:f9:3c:ba:ba:42:f7:e8:b4:d7:14:82:22:5d: 68:6e:59:f1:38:1e:fc:9c:8d:56:c8:83:9f:61:de: 91:4b:e4:9d:54:c2:83:7e:ea:6a:80:09:c5:71:1c: e4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:71:BC:90:55:0B:F1:F5:27:5A:71:69:E2:0B:00:FA:64:0B:BB:0E X509v3 Authority Key Identifier: keyid:DE:1F:6F:9F:B8:40:60:C0:7A:09:BD:D8:E5:2E:BA:52:2E:89:AC:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/DE1F6F9FB84060C07A09BDD8E52EBA522E89AC72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:78:97:fa:46:d6:b8:33:11:8b:a5:9d:d4:b4:d5:c8:12:93: dd:51:a3:be:56:b0:04:07:29:ac:69:7b:71:a7:e3:d0:91:fe: a4:62:d3:a7:62:72:ec:9c:79:64:b3:a7:cf:6d:ff:17:31:49: fc:dc:26:2d:ee:58:20:c0:37:30:78:63:57:3d:cb:5e:f8:c2: 51:e9:b8:03:47:a5:c5:1a:d3:f3:b3:c2:11:95:ab:95:35:ee: 6f:35:d0:90:46:d8:62:e8:45:46:2f:70:93:0a:df:83:24:9a: 3b:6f:89:34:e4:e4:0e:f7:8a:f7:6a:9e:09:24:d5:db:9f:3d: 45:5a:fb:eb:77:18:85:1c:8c:dc:76:aa:9a:ed:4d:90:88:8e: c2:0a:fb:09:35:9b:01:28:a1:55:99:15:7a:4b:57:a9:03:9a: a7:6f:2e:e0:91:ef:fd:9f:b4:8e:c6:48:ad:ea:b9:c0:02:45: 5e:d1:65:f1:94:38:8b:25:20:c6:ac:55:52:61:69:31:a8:56: ea:29:de:31:7c:e5:34:f0:c5:8b:47:16:63:cc:91:0a:1b:16: a3:69:8f:a4:85:09:c5:81:c8:46:18:c2:eb:9f:bc:0f:8a:1e: 0c:bb:7d:a3:2c:06:87:43:48:06:f8:eb:5c:7e:9b:3c:22:e1: a4:fd:0d:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOhZ2MkV9y1fgJVMQ1VxstJYze+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUxRjZGOUZCODQwNjBDMDdBMDlCREQ4RTUyRUJBNTIy RTg5QUM3MjAeFw0yNTA2MTkxOTQ5MTRaFw0yNTA2MjAyMTM2MTRaMDMxMTAvBgNV BAMTKEU1NzFCQzkwNTUwQkYxRjUyNzVBNzE2OUUyMEIwMEZBNjQwQkJCMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZKpnRaQDX+Ht2meHls8GnnqtV IBtH8JqjteZC90agv3M45XjRznD6h11vI0rRbhiFkZ4u1rD1uVVFw4aP0Ec7OHSq 12mIqgSVC4IxfnXc18dPIgBoNqZjq8EBPKfzhUzjhs/0M0Lo+177tTF3fNIYSs1L CTrnM18AK3SeXNlvzMH9BPegQwyE14ngs7a3AQbc3XhFZmqwnNg6gPZPQeQWrcwy CDtQPHbiDYm/YfllSWY720hxawjzSD+pEwxM0KIZTarlrgI1NWqFEAWqp/156Acx +Ty6ukL36LTXFIIiXWhuWfE4HvycjVbIg59h3pFL5J1UwoN+6mqACcVxHOTFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5XG8kFUL8fUnWnFp4gsA+mQLuw4wHwYDVR0j BBgwFoAU3h9vn7hAYMB6Cb3Y5S66Ui6JrHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3 REYvMC9ERTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFMUY2RjlGQjg0MDYwQzA3 QTA5QkREOEU1MkVCQTUyMkU4OUFDNzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3REYvMC9E RTFGNkY5RkI4NDA2MEMwN0EwOUJERDhFNTJFQkE1MjJFODlBQzcyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjHiX+kbWuDMRi6Wd1LTVyBKT3VGjvlawBAcprGl7cafj0JH+pGLTp2Jy7Jx5 ZLOnz23/FzFJ/NwmLe5YIMA3MHhjVz3LXvjCUem4A0elxRrT87PCEZWrlTXubzXQ kEbYYuhFRi9wkwrfgySaO2+JNOTkDveK92qeCSTV2589RVr763cYhRyM3Haqmu1N kIiOwgr7CTWbASihVZkVektXqQOap28u4JHv/Z+0jsZIreq5wAJFXtFl8ZQ4iyUg xqxVUmFpMahW6ineMXzlNPDFi0cWY8yRChsWo2mPpIUJxYHIRhjC65+8D4oeDLt9 oywGh0NIBvjrXH6bPCLhpP0NMA== -----END CERTIFICATE-----Generated at Fri Jun 20 08:07:22 2025 by rpki-client