$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft File: A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft (raw, json) Hash identifier: VukNYqtw1riFs/LPdnKxe9Ctd2eLtk08lTcEEC1nTRI= Subject key identifier: E0:5D:02:5B:7B:AC:0F:84:FC:CA:A2:A4:97:EE:1C:39:AA:1D:75:ED Authority key identifier: A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3 Certificate issuer: /CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3 Certificate serial: 2AB0B2DBDC411D057D5BAE185E11A122434FBEA0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft Manifest number: 01A6 Signing time: Wed 18 Jun 2025 04:58:07 +0000 Manifest this update: Wed 18 Jun 2025 04:53:07 +0000 Manifest next update: Thu 19 Jun 2025 08:06:07 +0000 Files and hashes: 1: 3133382e39372e32302e302f32322d3234203d3e20323634313132.roa (hash: AhtVw8+m+BE2xIGpEOoG2xLgZpn+7eLrWC9ArM8aH28=) 2: 323830343a323261303a3a2f33322d3438203d3e20323634313132.roa (hash: xjN6sHaV4vO2I0ogT4RW4ELkCzroQkdpCfyvnk2SDZM=) 3: 3137302e38332e3136302e302f32322d3234203d3e20323634313132.roa (hash: Axay2FXOHlab3Zbtc8prF8iZEWyctVL766TnXVI/cRU=) 4: A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl (hash: ZgsyRyJyjuKMV7e3a0Dr5Mdj1peHrW1uxZnABBdgzGQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Jun 2025 08:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b0:b2:db:dc:41:1d:05:7d:5b:ae:18:5e:11:a1:22:43:4f:be:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3 Validity Not Before: Jun 18 04:53:07 2025 GMT Not After : Jun 19 08:06:07 2025 GMT Subject: CN=E05D025B7BAC0F84FCCAA2A497EE1C39AA1D75ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:94:12:1b:6d:af:df:a8:89:7f:dd:91:64:65: 05:8a:68:67:d8:a3:3d:02:69:60:25:8f:5e:a9:52: ac:20:4f:be:6f:38:b4:9a:47:ef:6e:cb:ec:49:23: 83:ff:b8:c6:f5:02:36:8c:a4:bc:89:f4:88:04:7c: 04:c5:a7:b5:a3:be:12:d6:86:cf:48:33:65:d3:de: 02:60:a4:8b:6b:65:9d:0e:1e:a3:10:82:a7:0d:4a: bd:6f:38:4d:a5:e4:f7:ab:3b:7e:d8:98:b7:f1:89: 9c:38:3a:7b:c6:e6:06:63:37:68:58:31:40:ec:ad: 8c:65:44:9d:bc:cb:d3:30:e3:fb:44:61:44:1b:0d: 02:1a:20:3b:34:69:93:de:51:0a:ec:d1:1e:83:2d: 31:8d:64:45:62:7f:2e:a6:8d:7e:67:f8:7a:98:dc: 64:26:28:f9:c5:0f:35:9b:2f:56:1d:2a:04:eb:44: 67:d0:59:ea:41:a4:f6:5e:7d:5a:2e:94:90:ed:b6: 73:7e:8d:fd:48:0f:7a:64:dd:d7:b2:73:bc:03:e9: 7f:2c:27:5a:fe:df:20:05:83:62:47:04:fd:29:de: b4:8b:87:93:30:99:cf:5d:e7:1a:1b:da:49:1e:38: 54:85:74:46:8d:81:62:65:c6:5e:bd:a4:f7:86:00: ce:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5D:02:5B:7B:AC:0F:84:FC:CA:A2:A4:97:EE:1C:39:AA:1D:75:ED X509v3 Authority Key Identifier: keyid:A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:98:07:9b:1b:fc:2d:f2:28:a3:bd:8a:91:65:80:03:c4:be: 14:41:95:0c:3b:04:89:a6:ea:d9:81:bd:1e:91:60:ff:b7:98: af:00:7c:f8:c5:c5:de:4d:e0:0f:6c:e9:24:39:2d:d0:1e:9d: ed:47:dc:9b:82:1a:0b:66:46:c4:11:94:bc:f5:a1:c1:c3:22: f6:6f:7a:cb:fa:45:44:45:5c:0e:c0:1b:6a:eb:fc:bd:a6:9c: 48:fc:37:fc:54:e3:f9:0b:c1:e4:30:fa:21:cd:9a:0a:b6:5e: 0a:a8:17:a1:38:7e:57:f1:40:4e:80:f9:8b:93:bb:b0:f0:17: 02:66:ff:28:74:65:b6:f3:30:3a:30:99:9d:01:89:b8:e2:9f: d1:7e:91:58:57:b6:f0:72:4b:9b:ca:2d:20:23:af:d0:15:f8: 17:cf:f5:c2:10:dc:2c:af:39:0f:9b:44:d7:4a:f7:08:13:05: 73:81:29:b3:6d:5f:39:6a:bc:aa:31:d3:db:5d:c9:76:72:74: 46:7c:4e:26:18:9d:85:85:d8:96:79:6b:2c:07:b3:14:a8:3f: 0a:01:21:d9:b4:7a:76:00:78:1a:02:2c:79:85:0f:29:35:18: 58:75:35:e5:3d:40:32:ae:fb:7f:ea:bf:a5:cf:dd:a4:0f:cb: c0:6e:a7:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKrCy29xBHQV9W64YXhGhIkNPvqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA5RkZCMEZEQzM0REQwNzk2MUZFREJCNzlEODU5M0ZD MjgxMTJGMzAeFw0yNTA2MTgwNDUzMDdaFw0yNTA2MTkwODA2MDdaMDMxMTAvBgNV BAMTKEUwNUQwMjVCN0JBQzBGODRGQ0NBQTJBNDk3RUUxQzM5QUExRDc1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5lBIbba/fqIl/3ZFkZQWKaGfY oz0CaWAlj16pUqwgT75vOLSaR+9uy+xJI4P/uMb1AjaMpLyJ9IgEfATFp7WjvhLW hs9IM2XT3gJgpItrZZ0OHqMQgqcNSr1vOE2l5PerO37YmLfxiZw4OnvG5gZjN2hY MUDsrYxlRJ28y9Mw4/tEYUQbDQIaIDs0aZPeUQrs0R6DLTGNZEVify6mjX5n+HqY 3GQmKPnFDzWbL1YdKgTrRGfQWepBpPZefVoulJDttnN+jf1ID3pk3deyc7wD6X8s J1r+3yAFg2JHBP0p3rSLh5Mwmc9d5xob2kkeOFSFdEaNgWJlxl69pPeGAM4zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4F0CW3usD4T8yqKkl+4cOaodde0wHwYDVR0j BBgwFoAUoJ/7D9w03QeWH+27edhZP8KBEvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE1zTkRwZUFodnY4d2RqV0hnajR5SHR0VkRjVk04UFh5eWR0ellUOWly VVAvMC9BMDlGRkIwRkRDMzRERDA3OTYxRkVEQkI3OUQ4NTkzRkMyODExMkYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwOUZGQjBGREMzNEREMDc5 NjFGRURCQjc5RDg1OTNGQzI4MTEyRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE1zTkRwZUFodnY4d2RqV0hnajR5SHR0VkRjVk04UFh5eWR0ellUOWlyVVAvMC9B MDlGRkIwRkRDMzRERDA3OTYxRkVEQkI3OUQ4NTkzRkMyODExMkYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAx5gHmxv8LfIoo72KkWWAA8S+FEGVDDsEiabq2YG9HpFg/7eYrwB8+MXF3k3g D2zpJDkt0B6d7Ufcm4IaC2ZGxBGUvPWhwcMi9m96y/pFREVcDsAbauv8vaacSPw3 /FTj+QvB5DD6Ic2aCrZeCqgXoTh+V/FAToD5i5O7sPAXAmb/KHRltvMwOjCZnQGJ uOKf0X6RWFe28HJLm8otICOv0BX4F8/1whDcLK85D5tE10r3CBMFc4Eps21fOWq8 qjHT213JdnJ0RnxOJhidhYXYlnlrLAezFKg/CgEh2bR6dgB4GgIseYUPKTUYWHU1 5T1AMq77f+q/pc/dpA/LwG6nOw== -----END CERTIFICATE-----Generated at Wed Jun 18 18:16:05 2025 by rpki-client