$ rpki-client -vvf rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/8174C9AD000FD5B5D370A3A331707606802570C2.mft File: 8174C9AD000FD5B5D370A3A331707606802570C2.mft (raw, json) Hash identifier: 67sYAOAxGBZU0I1b7QC1+qcXR0W7/dqReM3ASaovlKY= Subject key identifier: 62:ED:93:3F:D9:E1:CD:F3:B0:5F:E4:86:6D:E5:F2:9B:0D:62:1D:9A Authority key identifier: 81:74:C9:AD:00:0F:D5:B5:D3:70:A3:A3:31:70:76:06:80:25:70:C2 Certificate issuer: /CN=8174C9AD000FD5B5D370A3A331707606802570C2 Certificate serial: 5F3AAD6DAFD6FA03D3C055E5C23221AFF7B20589 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8174C9AD000FD5B5D370A3A331707606802570C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/8174C9AD000FD5B5D370A3A331707606802570C2.mft Manifest number: 2A Signing time: Wed 18 Jun 2025 03:58:30 +0000 Manifest this update: Wed 18 Jun 2025 03:53:30 +0000 Manifest next update: Thu 19 Jun 2025 07:40:30 +0000 Files and hashes: 1: 34352e3232342e3130382e302f32322d3234203d3e20323636393131.roa (hash: Y4uaCalFDYJeMlhnElq3+KKXmmxI32b7osNH5I7SdOE=) 2: 8174C9AD000FD5B5D370A3A331707606802570C2.crl (hash: Mu5C9auaE5cpSfpteUqkGEJtIT7SajhpKcewVoC3eYM=) 3: 323830343a343533343a3a2f33322d3438203d3e20323636393131.roa (hash: WREFsJM0CtOiXp9pDlzbtedjIshUxwt+RtArOn60iu4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/8174C9AD000FD5B5D370A3A331707606802570C2.crl rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/8174C9AD000FD5B5D370A3A331707606802570C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8174C9AD000FD5B5D370A3A331707606802570C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Jun 2025 07:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3a:ad:6d:af:d6:fa:03:d3:c0:55:e5:c2:32:21:af:f7:b2:05:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8174C9AD000FD5B5D370A3A331707606802570C2 Validity Not Before: Jun 18 03:53:30 2025 GMT Not After : Jun 19 07:40:30 2025 GMT Subject: CN=62ED933FD9E1CDF3B05FE4866DE5F29B0D621D9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f4:49:ac:1a:3c:38:e2:0c:be:41:bb:9f:df: c0:9d:5a:f3:71:79:7f:d9:2a:f3:57:48:0b:b8:61: 60:fe:6a:09:de:eb:a5:72:12:1c:bc:b8:f4:e2:55: cf:3e:1f:f8:f3:08:30:d1:f7:3e:9a:d4:39:6e:1d: 74:5e:fc:0c:d7:3c:f5:6b:dc:8d:f0:8d:39:79:42: 36:01:91:0e:66:b0:90:9c:3d:aa:b9:96:1e:49:75: 0a:62:93:e9:ba:69:9b:59:93:95:5a:7e:77:4f:d3: b9:07:0b:81:a3:69:e7:bb:8d:67:3f:6b:a1:5d:84: df:65:18:59:72:b1:70:3c:46:ea:d9:75:1d:6d:5b: 6a:96:e7:65:83:23:20:3c:d2:0d:c3:f9:b5:31:a1: 73:81:c2:77:49:b6:dd:ea:29:77:94:30:6a:92:c1: 4c:f6:a2:7f:6f:50:0b:1a:11:56:4c:33:27:f8:15: 6a:f1:dc:dc:45:5a:ea:ec:ff:2a:86:63:94:ee:b4: 8d:7a:40:aa:72:76:72:bf:b1:f2:25:d0:52:10:7a: bc:88:4a:8e:a3:ff:76:0f:80:b9:d8:54:a2:45:6d: cb:b3:0f:f2:15:fa:73:5f:b1:70:a6:c5:17:dd:06: af:69:c9:86:37:1d:29:44:f8:78:ea:4d:9f:51:bd: 2f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:ED:93:3F:D9:E1:CD:F3:B0:5F:E4:86:6D:E5:F2:9B:0D:62:1D:9A X509v3 Authority Key Identifier: keyid:81:74:C9:AD:00:0F:D5:B5:D3:70:A3:A3:31:70:76:06:80:25:70:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/8174C9AD000FD5B5D370A3A331707606802570C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8174C9AD000FD5B5D370A3A331707606802570C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/8174C9AD000FD5B5D370A3A331707606802570C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e5:c0:b5:3b:19:8b:c4:ff:5d:ef:b7:fd:6f:60:ea:d1:dd: 94:f5:6d:35:c8:7b:2e:0c:ef:b7:30:9d:c8:ba:b0:21:e7:5e: ae:db:e1:d8:43:20:87:26:fb:0c:15:e9:8d:80:3e:e0:1d:ef: 02:ff:76:92:0c:b7:a9:1c:f2:b9:2d:59:0d:9a:a8:8a:de:9f: 0f:a4:2d:7a:97:fd:b9:42:09:18:19:5c:0d:10:a1:24:ae:e7: 56:57:02:c4:49:e3:b4:8b:7d:09:06:3e:8b:54:59:43:26:64: 6e:68:56:03:60:09:fe:94:3d:f7:54:42:b5:65:04:fa:4a:4e: 18:19:62:de:8e:b1:23:f7:f1:35:26:74:37:3e:2d:91:86:39: ab:91:c7:10:3b:75:4c:4d:03:e3:45:e4:22:c6:9f:31:ae:b7: 7d:0f:02:be:7d:d9:44:36:66:03:f7:12:e2:dd:ac:97:99:97: 7e:c3:5a:e4:f1:9d:0f:be:7f:d5:67:fa:23:3c:e8:a6:8c:07: fa:8a:ad:24:b0:62:9d:2d:ca:ad:13:66:ad:76:59:75:44:97: 5b:4d:67:18:f5:7f:aa:d3:fb:64:ed:52:2b:4b:ea:ad:b1:7e: 97:73:32:56:c0:ff:b9:55:d2:1e:dc:55:05:3e:c7:1c:3d:4c: 75:66:73:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXzqtba/W+gPTwFXlwjIhr/eyBYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE3NEM5QUQwMDBGRDVCNUQzNzBBM0EzMzE3MDc2MDY4 MDI1NzBDMjAeFw0yNTA2MTgwMzUzMzBaFw0yNTA2MTkwNzQwMzBaMDMxMTAvBgNV BAMTKDYyRUQ5MzNGRDlFMUNERjNCMDVGRTQ4NjZERTVGMjlCMEQ2MjFEOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv9EmsGjw44gy+Qbuf38CdWvNx eX/ZKvNXSAu4YWD+agne66VyEhy8uPTiVc8+H/jzCDDR9z6a1DluHXRe/AzXPPVr 3I3wjTl5QjYBkQ5msJCcPaq5lh5JdQpik+m6aZtZk5VafndP07kHC4Gjaee7jWc/ a6FdhN9lGFlysXA8RurZdR1tW2qW52WDIyA80g3D+bUxoXOBwndJtt3qKXeUMGqS wUz2on9vUAsaEVZMMyf4FWrx3NxFWurs/yqGY5TutI16QKpydnK/sfIl0FIQeryI So6j/3YPgLnYVKJFbcuzD/IV+nNfsXCmxRfdBq9pyYY3HSlE+HjqTZ9RvS/9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYu2TP9nhzfOwX+SGbeXymw1iHZowHwYDVR0j BBgwFoAUgXTJrQAP1bXTcKOjMXB2BoAlcMIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2g5NzZaYlJZY1RUaWVTdWVWQ0FDRkxHRG1SRUREM0N4aGpDSFFUTGVR WHcvMC84MTc0QzlBRDAwMEZENUI1RDM3MEEzQTMzMTcwNzYwNjgwMjU3MEMyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxNzRDOUFEMDAwRkQ1QjVE MzcwQTNBMzMxNzA3NjA2ODAyNTcwQzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2g5NzZaYlJZY1RUaWVTdWVWQ0FDRkxHRG1SRUREM0N4aGpDSFFUTGVRWHcvMC84 MTc0QzlBRDAwMEZENUI1RDM3MEEzQTMzMTcwNzYwNjgwMjU3MEMyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX+XAtTsZi8T/Xe+3/W9g6tHdlPVtNch7LgzvtzCdyLqwIedertvh2EMghyb7 DBXpjYA+4B3vAv92kgy3qRzyuS1ZDZqoit6fD6Qtepf9uUIJGBlcDRChJK7nVlcC xEnjtIt9CQY+i1RZQyZkbmhWA2AJ/pQ991RCtWUE+kpOGBli3o6xI/fxNSZ0Nz4t kYY5q5HHEDt1TE0D40XkIsafMa63fQ8Cvn3ZRDZmA/cS4t2sl5mXfsNa5PGdD75/ 1Wf6IzzopowH+oqtJLBinS3KrRNmrXZZdUSXW01nGPV/qtP7ZO1SK0vqrbF+l3My VsD/uVXSHtxVBT7HHD1MdWZzhw== -----END CERTIFICATE-----Generated at Wed Jun 18 08:26:06 2025 by rpki-client