$ rpki-client -vvf rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft File: 9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft (raw, json) Hash identifier: CNSKnSJunQYETDupcLnyBLkyYXR4GVd57C7IHtZKrvo= Subject key identifier: 11:47:66:A8:22:80:49:70:C9:01:54:14:07:56:71:FB:EE:D5:86:7F Authority key identifier: 9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2 Certificate issuer: /CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2 Certificate serial: 78EF7A4BF1FF40DB328190113E457E447116BA7F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft Manifest number: 024A Signing time: Mon 16 Jun 2025 18:52:33 +0000 Manifest this update: Mon 16 Jun 2025 18:47:33 +0000 Manifest next update: Tue 17 Jun 2025 20:29:33 +0000 Files and hashes: 1: 323830343a336234633a3a2f33322d313238203d3e20323636313430.roa (hash: wtL9IYalkHyva3LZqTtTEMQ7BxCRTX/aVoPlnkJnyRE=) 2: 34352e362e3136342e302f32322d3332203d3e20323636313430.roa (hash: qMvBmq1pgzlHrJKNsO9NjVqPj2Gyp6zALArUCGJqi18=) 3: 9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl (hash: 7itknvvDWuGLzr1D1MeenbquJB4hY77SgVUp3t3dm9s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 20:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ef:7a:4b:f1:ff:40:db:32:81:90:11:3e:45:7e:44:71:16:ba:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2 Validity Not Before: Jun 16 18:47:33 2025 GMT Not After : Jun 17 20:29:33 2025 GMT Subject: CN=114766A822804970C9015414075671FBEED5867F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:59:a6:12:6d:eb:b5:96:7d:72:2a:44:81: 20:3c:86:4f:b2:9b:78:0f:27:3a:b9:c3:7d:d4:2e: dc:48:23:42:1b:40:12:73:d9:85:1e:1c:b0:58:59: f2:c7:29:57:7f:3e:ab:f4:c7:78:4a:a8:46:ab:4e: 99:18:77:14:86:25:6c:ba:66:4b:7a:68:ce:df:4a: fe:c1:f8:f6:a0:f1:cd:eb:47:38:24:ed:04:45:3b: 03:11:8a:2e:e0:08:66:a5:6c:07:d9:51:fa:41:64: 9e:4d:5a:22:75:d4:f1:17:c7:b0:64:e0:8e:42:9e: 0e:fd:a3:d5:e8:7b:8f:d5:dd:a4:94:1b:e0:ad:f7: cd:f2:79:70:36:2a:62:68:8a:55:31:10:ed:e9:03: 33:bd:02:4a:b9:20:14:ef:9e:67:1b:81:08:86:6e: 18:c5:68:f0:01:39:cc:b3:34:42:bd:57:6f:b3:e7: bc:f0:ce:3c:dd:fb:2d:f6:c0:9d:f6:a4:de:ba:3a: c3:7d:f9:85:8a:ad:42:ea:e7:a7:9e:0d:49:16:62: f2:2a:e6:27:a2:d5:ac:74:b7:98:dc:9a:36:8e:8f: e8:6c:09:f9:08:59:e0:10:58:03:38:ff:12:1b:2e: a6:85:e8:4a:f6:3d:cf:b7:27:a2:a4:3b:a2:5c:4b: e2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:47:66:A8:22:80:49:70:C9:01:54:14:07:56:71:FB:EE:D5:86:7F X509v3 Authority Key Identifier: keyid:9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:f4:15:6e:84:fa:cc:47:36:5e:a0:a9:11:e5:57:0c:fa:e6: a2:6e:ce:c2:57:d3:7d:4d:40:50:f2:6b:85:c1:9a:b4:c4:90: 22:fd:90:6b:b4:d6:72:9e:04:b0:b1:f2:42:c7:ad:e4:c1:9d: 09:83:b6:4f:60:9a:f6:8d:70:73:3f:5e:76:1a:be:d3:db:ad: 83:f6:46:d1:f5:52:de:06:69:34:bd:4e:94:08:f9:79:24:4f: 4c:f9:73:da:17:fd:4a:65:52:01:9f:f7:27:c6:9c:ee:fb:83: 41:8b:68:5f:9d:03:94:b6:4e:36:a6:e2:31:19:f2:73:41:f4: fd:e2:79:12:01:e0:5b:ca:02:04:33:1c:3d:92:4a:32:9d:4e: b5:38:cf:aa:9a:90:98:e0:51:20:d5:cb:7a:d3:a8:80:0a:df: ed:8a:71:dc:c5:44:75:97:76:66:9b:ac:43:b9:2c:c8:96:2e: 2f:78:2f:e5:7a:e0:22:40:25:ef:57:e8:cc:d6:96:da:b8:c4: c6:12:47:a9:77:2f:9a:d0:91:ad:8d:49:20:2d:cf:ea:f0:ea: 40:6c:f0:1a:df:0e:9c:01:3b:a0:12:39:0f:a7:7a:fd:45:11: b3:20:94:a9:92:0f:f7:4f:c0:70:d6:58:a0:e3:3a:b6:34:c8: b1:5b:3e:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeO96S/H/QNsygZARPkV+RHEWun8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNDRTkxMzUyQkFBQzBFQTMzNzFGQjQyQ0FDMTAzMEFB OTFCOEJFMjAeFw0yNTA2MTYxODQ3MzNaFw0yNTA2MTcyMDI5MzNaMDMxMTAvBgNV BAMTKDExNDc2NkE4MjI4MDQ5NzBDOTAxNTQxNDA3NTY3MUZCRUVENTg2N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBlmmEm3rtZZ9cipEgSA8hk+y m3gPJzq5w33ULtxII0IbQBJz2YUeHLBYWfLHKVd/Pqv0x3hKqEarTpkYdxSGJWy6 Zkt6aM7fSv7B+Pag8c3rRzgk7QRFOwMRii7gCGalbAfZUfpBZJ5NWiJ11PEXx7Bk 4I5Cng79o9Xoe4/V3aSUG+Ct983yeXA2KmJoilUxEO3pAzO9Akq5IBTvnmcbgQiG bhjFaPABOcyzNEK9V2+z57zwzjzd+y32wJ32pN66OsN9+YWKrULq56eeDUkWYvIq 5iei1ax0t5jcmjaOj+hsCfkIWeAQWAM4/xIbLqaF6Er2Pc+3J6KkO6JcS+JhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEUdmqCKASXDJAVQUB1Zx++7Vhn8wHwYDVR0j BBgwFoAUnM6RNSuqwOozcftCysEDCqkbi+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2VQaXNzWVU5RWNUNksyWHVxTjE3N1RuQnNvSjRreUtRNkJrZDVuM1Ey UGEvMS85Q0NFOTEzNTJCQUFDMEVBMzM3MUZCNDJDQUMxMDMwQUE5MUI4QkUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQ0U5MTM1MkJBQUMwRUEz MzcxRkI0MkNBQzEwMzBBQTkxQjhCRTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2VQaXNzWVU5RWNUNksyWHVxTjE3N1RuQnNvSjRreUtRNkJrZDVuM1EyUGEvMS85 Q0NFOTEzNTJCQUFDMEVBMzM3MUZCNDJDQUMxMDMwQUE5MUI4QkUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp/QVboT6zEc2XqCpEeVXDPrmom7OwlfTfU1AUPJrhcGatMSQIv2Qa7TWcp4E sLHyQset5MGdCYO2T2Ca9o1wcz9edhq+09utg/ZG0fVS3gZpNL1OlAj5eSRPTPlz 2hf9SmVSAZ/3J8ac7vuDQYtoX50DlLZONqbiMRnyc0H0/eJ5EgHgW8oCBDMcPZJK Mp1OtTjPqpqQmOBRINXLetOogArf7Ypx3MVEdZd2ZpusQ7ksyJYuL3gv5XrgIkAl 71fozNaW2rjExhJHqXcvmtCRrY1JIC3P6vDqQGzwGt8OnAE7oBI5D6d6/UURsyCU qZIP90/AcNZYoOM6tjTIsVs+mg== -----END CERTIFICATE-----Generated at Tue Jun 17 06:24:38 2025 by rpki-client