$ rpki-client -vvf rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.mft File: 939B31761D811EC12BDF8456C574E6874A3AAD78.mft (raw, json) Hash identifier: XLmC/PUrG6lv9Bct2CUdwoyaYjjX6Xya6e7lLUfXFnA= Subject key identifier: 06:09:95:EB:35:71:FE:30:B6:EC:32:4A:8E:1E:D6:CD:FE:16:64:13 Authority key identifier: 93:9B:31:76:1D:81:1E:C1:2B:DF:84:56:C5:74:E6:87:4A:3A:AD:78 Certificate issuer: /CN=939B31761D811EC12BDF8456C574E6874A3AAD78 Certificate serial: 06AC9BCDADABB7C0CDF3A6B4387DBE8B9EA5ABBE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/939B31761D811EC12BDF8456C574E6874A3AAD78.cer Subject info access: rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.mft Manifest number: B9 Signing time: Thu 19 Jun 2025 21:50:21 +0000 Manifest this update: Thu 19 Jun 2025 21:45:21 +0000 Manifest next update: Fri 20 Jun 2025 22:23:21 +0000 Files and hashes: 1: 323830343a363036303a3a2f33322d3332203d3e20323639313633.roa (hash: XdvzsjrTVduK7gKFmmN86hpBolyGt02sb5cx99ef1zA=) 2: 34352e3138312e32372e302f32342d3234203d3e20323639313633.roa (hash: s71CdDpUcZ4A30shJW5mOVFgvP++dX5FAxSaWex9Ssg=) 3: 939B31761D811EC12BDF8456C574E6874A3AAD78.crl (hash: 8MkOu2Qv06xjz4WZeYt9u6fOdE0lpLlvAGE6j+erZno=) 4: 34352e3138312e32342e302f32342d3234203d3e20323639313633.roa (hash: gi8pqk0YG8xuI770HmRS/Gm8wi1gMlrR0AnPzNvnq5o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.crl rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/939B31761D811EC12BDF8456C574E6874A3AAD78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 22:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ac:9b:cd:ad:ab:b7:c0:cd:f3:a6:b4:38:7d:be:8b:9e:a5:ab:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=939B31761D811EC12BDF8456C574E6874A3AAD78 Validity Not Before: Jun 19 21:45:21 2025 GMT Not After : Jun 20 22:23:21 2025 GMT Subject: CN=060995EB3571FE30B6EC324A8E1ED6CDFE166413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:09:4c:3b:22:5b:9c:f7:4f:7e:01:2d:16:d9: 57:ef:1f:a0:20:bb:53:93:51:ef:33:d8:3d:e9:0f: a5:d7:e2:8e:53:79:8b:20:1e:77:b6:9c:76:93:9e: 05:f9:ec:94:55:6e:3d:93:ac:c8:2f:d0:1c:db:e1: cd:35:29:cb:48:06:e0:75:ba:f2:9f:f8:c7:b0:ac: 92:54:43:cd:70:81:b5:07:c6:4c:63:f2:0a:73:13: 8f:85:8d:b9:07:c7:f0:9a:5b:55:b8:b3:3c:a4:7d: 8f:77:8a:e3:0b:14:28:d7:50:f1:af:59:b8:50:fb: 86:ad:1a:07:39:69:49:88:23:0e:06:f1:2d:16:f6: 0e:fa:2a:49:e6:0e:83:d7:e8:86:e0:a8:f0:27:9e: 1b:ed:cd:aa:85:34:9a:0a:fc:c0:bd:4c:68:f0:4c: a9:e8:9c:49:db:44:0d:9b:39:6f:16:35:33:41:43: fe:72:7d:8e:1c:d2:8c:11:f6:08:9b:7f:1b:9d:ef: af:37:00:23:f8:39:aa:67:d3:12:e4:54:38:c8:e0: be:e6:1b:d6:c0:f1:56:97:3e:13:f5:6e:7a:f1:95: b7:e0:a5:27:cd:79:36:4b:d0:cd:3d:ee:c8:bb:91: 13:e5:91:e5:a5:8a:33:87:44:91:97:9d:36:67:b1: 66:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:09:95:EB:35:71:FE:30:B6:EC:32:4A:8E:1E:D6:CD:FE:16:64:13 X509v3 Authority Key Identifier: keyid:93:9B:31:76:1D:81:1E:C1:2B:DF:84:56:C5:74:E6:87:4A:3A:AD:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/939B31761D811EC12BDF8456C574E6874A3AAD78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:74:08:69:08:00:bb:d3:8b:87:2f:c5:43:d1:70:0d:8f:d1: a2:ca:d5:46:db:5a:37:0f:06:8a:b9:5d:9b:70:22:a3:de:85: 50:43:e9:e0:e6:b6:20:93:a8:36:e8:92:2e:a2:54:59:6f:73: 33:a5:0d:71:ec:75:3d:91:dc:bb:a4:8e:d2:7f:09:9f:a2:ae: 14:35:9d:70:85:eb:89:24:09:8e:c7:81:7e:c8:f9:78:85:81: ae:7c:d3:3f:7a:0f:8f:49:ce:0c:87:11:47:e0:ca:98:85:00: 70:9d:55:14:c7:5b:dc:a5:c8:e6:75:6d:33:1e:c0:0d:9f:04: f8:9b:20:f5:fb:1d:af:e4:10:c1:2e:3a:39:da:79:95:7b:8e: 08:93:40:87:c0:aa:f6:02:4f:74:d4:b4:a5:43:54:a4:ef:16: 26:05:0c:52:0d:ac:1f:eb:81:38:06:66:53:07:87:35:4f:09: ba:bc:00:5a:53:8a:db:25:4d:25:38:a1:d7:23:7c:b7:04:c8: 49:64:6c:4d:c7:62:70:37:fb:fd:d8:0d:78:eb:51:57:2a:fe: 61:71:e6:b7:2f:2f:54:4e:02:c4:91:de:c5:0c:40:16:99:aa: 69:8d:9a:7f:b9:10:65:7d:1e:f9:28:dd:bd:e3:7e:0f:e9:42: a6:58:2e:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBqybza2rt8DN86a0OH2+i56lq74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM5QjMxNzYxRDgxMUVDMTJCREY4NDU2QzU3NEU2ODc0 QTNBQUQ3ODAeFw0yNTA2MTkyMTQ1MjFaFw0yNTA2MjAyMjIzMjFaMDMxMTAvBgNV BAMTKDA2MDk5NUVCMzU3MUZFMzBCNkVDMzI0QThFMUVENkNERkUxNjY0MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTCUw7Iluc909+AS0W2VfvH6Ag u1OTUe8z2D3pD6XX4o5TeYsgHne2nHaTngX57JRVbj2TrMgv0Bzb4c01KctIBuB1 uvKf+MewrJJUQ81wgbUHxkxj8gpzE4+FjbkHx/CaW1W4szykfY93iuMLFCjXUPGv WbhQ+4atGgc5aUmIIw4G8S0W9g76KknmDoPX6IbgqPAnnhvtzaqFNJoK/MC9TGjw TKnonEnbRA2bOW8WNTNBQ/5yfY4c0owR9gibfxud7683ACP4Oapn0xLkVDjI4L7m G9bA8VaXPhP1bnrxlbfgpSfNeTZL0M097si7kRPlkeWlijOHRJGXnTZnsWbZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBgmV6zVx/jC27DJKjh7Wzf4WZBMwHwYDVR0j BBgwFoAUk5sxdh2BHsEr34RWxXTmh0o6rXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE43TmlRQU1WMWd5eHJ5emt5TDE3OTRYb1d4SHFoWmljVmd6VDdtYjhx M3ovMC85MzlCMzE3NjFEODExRUMxMkJERjg0NTZDNTc0RTY4NzRBM0FBRDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzOUIzMTc2MUQ4MTFFQzEy QkRGODQ1NkM1NzRFNjg3NEEzQUFENzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE43TmlRQU1WMWd5eHJ5emt5TDE3OTRYb1d4SHFoWmljVmd6VDdtYjhxM3ovMC85 MzlCMzE3NjFEODExRUMxMkJERjg0NTZDNTc0RTY4NzRBM0FBRDc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjHQIaQgAu9OLhy/FQ9FwDY/RosrVRttaNw8Girldm3Aio96FUEPp4Oa2IJOo NuiSLqJUWW9zM6UNcex1PZHcu6SO0n8Jn6KuFDWdcIXriSQJjseBfsj5eIWBrnzT P3oPj0nODIcRR+DKmIUAcJ1VFMdb3KXI5nVtMx7ADZ8E+Jsg9fsdr+QQwS46Odp5 lXuOCJNAh8Cq9gJPdNS0pUNUpO8WJgUMUg2sH+uBOAZmUweHNU8JurwAWlOK2yVN JTih1yN8twTISWRsTcdicDf7/dgNeOtRVyr+YXHmty8vVE4CxJHexQxAFpmqaY2a f7kQZX0e+SjdveN+D+lCplguKA== -----END CERTIFICATE-----Generated at Fri Jun 20 02:55:26 2025 by rpki-client