$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft File: F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft (raw, json) Hash identifier: y9FakmxqNXHcxBajtOMIwcnRRDjUmOEWT2ErKaymUNk= Subject key identifier: 57:1A:F0:8D:AB:D9:59:2F:04:79:AD:21:91:EC:B0:39:C9:4A:0B:3A Authority key identifier: F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 Certificate issuer: /CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5 Certificate serial: 11EE75CAFFA6A3C2A8A3633D4310D8EE9BA395A5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer Subject info access: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft Manifest number: 024C Signing time: Mon 16 Jun 2025 16:17:16 +0000 Manifest this update: Mon 16 Jun 2025 16:12:16 +0000 Manifest next update: Tue 17 Jun 2025 17:11:16 +0000 Files and hashes: 1: F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl (hash: B9zaR1OtpfEolK9rRHqUJ4jQnhzqr2uOf5dQyuS+IW4=) 2: 3137392e3130362e3139322e302f31382d3234203d3e20323633303833.roa (hash: fFcuOyny+lMAM8e0QThYzGDXjn34h9O3teYEKFUfcPs=) 3: 3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa (hash: rojlOjdeX3UrPuGCG6PrXeAls8xreKNh9ggg9OI9Em4=) 4: 323830313a62363a3a2f33322d3438203d3e20323633303833.roa (hash: /sq5AM8I6YaMflMxl5q4xXK1dCuBrTD/NmShXyjbG5M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 17:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ee:75:ca:ff:a6:a3:c2:a8:a3:63:3d:43:10:d8:ee:9b:a3:95:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5 Validity Not Before: Jun 16 16:12:16 2025 GMT Not After : Jun 17 17:11:16 2025 GMT Subject: CN=571AF08DABD9592F0479AD2191ECB039C94A0B3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3a:8a:80:32:be:9d:9b:b9:84:b1:3b:7c:04: 00:1e:6e:cd:ba:a8:fd:a1:7a:3d:2f:90:b6:ea:36: 69:ff:dc:18:f4:34:b3:48:ab:10:8c:b5:a1:7b:c1: 6e:db:94:fa:44:7f:c0:83:42:52:92:c3:f7:7d:34: 6e:71:37:b0:79:24:54:a0:0d:58:f9:1a:56:71:2c: 6f:1e:6b:3d:11:2e:13:54:da:94:53:01:a1:b2:71: 89:97:18:3f:ab:93:fa:d8:8c:1e:b8:b7:ca:83:52: b5:51:58:e2:75:4c:41:e3:fa:ba:f4:d1:75:e7:b0: 95:22:d9:d7:61:c3:c9:69:4e:e7:4a:fb:52:49:64: 6d:14:28:66:cf:f3:a8:c7:c4:51:3a:0b:b7:a5:ca: 67:a0:3e:9d:8d:b2:55:c4:0e:5c:32:56:4b:4a:34: 1b:6e:da:c5:ed:4e:42:f7:c5:bf:60:da:d5:b7:3d: de:b4:0a:85:eb:9e:ec:ee:34:be:ae:09:7b:25:9d: 3c:8f:71:70:0d:75:ff:59:da:c3:44:b1:b9:3d:c1: 9e:12:a8:33:b2:0a:4e:cb:5f:26:21:32:a8:c3:dd: b8:48:c7:4b:58:70:cd:01:b2:7c:fb:39:76:af:1e: 5f:83:a1:45:ce:3e:bc:b9:44:37:71:37:b2:aa:f8: b1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1A:F0:8D:AB:D9:59:2F:04:79:AD:21:91:EC:B0:39:C9:4A:0B:3A X509v3 Authority Key Identifier: keyid:F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:74:60:c5:b5:42:60:fb:07:68:16:0f:af:ae:10:6e:7e:71: 5f:a4:50:04:b3:b4:d1:50:8c:58:83:56:5b:06:8e:82:be:00: f8:ba:23:31:a6:73:b3:cb:53:1e:dd:e0:64:82:4d:a1:e7:cc: 8e:11:ac:50:f3:6e:03:f4:3d:7d:42:93:2a:11:e7:b0:93:d5: da:ac:4f:20:75:d4:9a:14:a7:7e:e6:21:ec:63:cd:d2:9d:be: 02:b7:50:47:a7:7a:fa:18:27:b1:60:a4:85:88:58:da:05:2e: c4:be:0d:27:24:3c:d4:e6:b7:bb:68:50:8d:3a:a4:b3:7b:46: f8:b4:c8:72:3c:8d:03:ee:e7:12:5c:e3:c3:76:9e:4a:de:4a: 46:82:fc:47:47:21:77:60:cf:1e:ed:5a:c3:2a:cf:8b:73:44: 5c:cf:de:6a:8d:c0:c6:a7:9d:72:4d:c6:bd:e7:14:3c:b2:b2: 28:00:9c:25:a7:fd:e8:99:70:ce:c5:f3:d6:fa:4a:59:81:f9: 42:df:6d:4a:22:1a:84:93:60:08:3f:e2:ef:63:a7:c7:6a:9f: 46:78:b3:a9:23:7a:0d:40:43:e5:3a:5c:d2:1b:f7:09:81:4f: 47:a5:7d:69:00:f3:99:16:29:ba:a4:48:49:09:22:c9:24:ec: 61:e7:36:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEe51yv+mo8Koo2M9QxDY7pujlaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBOThGNzc5RDNCRUY2NTk1OTZCNjRCMzJCMjhFQjZB RkU4RUFCNTAeFw0yNTA2MTYxNjEyMTZaFw0yNTA2MTcxNzExMTZaMDMxMTAvBgNV BAMTKDU3MUFGMDhEQUJEOTU5MkYwNDc5QUQyMTkxRUNCMDM5Qzk0QTBCM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuOoqAMr6dm7mEsTt8BAAebs26 qP2hej0vkLbqNmn/3Bj0NLNIqxCMtaF7wW7blPpEf8CDQlKSw/d9NG5xN7B5JFSg DVj5GlZxLG8eaz0RLhNU2pRTAaGycYmXGD+rk/rYjB64t8qDUrVRWOJ1TEHj+rr0 0XXnsJUi2ddhw8lpTudK+1JJZG0UKGbP86jHxFE6C7elymegPp2NslXEDlwyVktK NBtu2sXtTkL3xb9g2tW3Pd60CoXrnuzuNL6uCXslnTyPcXANdf9Z2sNEsbk9wZ4S qDOyCk7LXyYhMqjD3bhIx0tYcM0Bsnz7OXavHl+DoUXOPry5RDdxN7Kq+LE5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVxrwjavZWS8Eea0hkeywOclKCzowHwYDVR0j BBgwFoAU8KmPd50772WVlrZLMrKOtq/o6rUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE5uWjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRt OWIvMS9GMEE5OEY3NzlEM0JFRjY1OTU5NkI2NEIzMkIyOEVCNkFGRThFQUI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwQTk4Rjc3OUQzQkVGNjU5 NTk2QjY0QjMyQjI4RUI2QUZFOEVBQjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE5uWjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRtOWIvMS9G MEE5OEY3NzlEM0JFRjY1OTU5NkI2NEIzMkIyOEVCNkFGRThFQUI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi3RgxbVCYPsHaBYPr64Qbn5xX6RQBLO00VCMWINWWwaOgr4A+LojMaZzs8tT Ht3gZIJNoefMjhGsUPNuA/Q9fUKTKhHnsJPV2qxPIHXUmhSnfuYh7GPN0p2+ArdQ R6d6+hgnsWCkhYhY2gUuxL4NJyQ81Oa3u2hQjTqks3tG+LTIcjyNA+7nElzjw3ae St5KRoL8R0chd2DPHu1awyrPi3NEXM/eao3Axqedck3GvecUPLKyKACcJaf96Jlw zsXz1vpKWYH5Qt9tSiIahJNgCD/i72Onx2qfRnizqSN6DUBD5Tpc0hv3CYFPR6V9 aQDzmRYpuqRISQkiySTsYec2dA== -----END CERTIFICATE-----Generated at Mon Jun 16 21:28:08 2025 by rpki-client