$ rpki-client -vvf rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.mft File: 98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.mft (raw, json) Hash identifier: gCICZcOXDAQaTRB22jIPIuRfsjq2NJ5v2GdtWjlTT8c= Subject key identifier: 96:44:46:D7:6F:31:55:52:06:E9:30:D4:A9:B7:42:2A:7B:88:C3:26 Authority key identifier: 98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2 Certificate issuer: /CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2 Certificate serial: 54E1ADA59B03C092E92E5FB55D9AF3E4E4C8633A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.mft Manifest number: FF Signing time: Tue 17 Jun 2025 09:04:01 +0000 Manifest this update: Tue 17 Jun 2025 08:59:01 +0000 Manifest next update: Wed 18 Jun 2025 12:00:01 +0000 Files and hashes: 1: 98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.crl (hash: 0n1hYrLLEZa3q1tqs0FTCsnAZCG7nQjjhN8erlxhNMc=) 2: 323830343a356166383a3a2f33322d3438203d3e20323638383130.roa (hash: m8yM79Ui0jUcrLIMqQSDhUwukcLiQdHQnioL1vHdmkw=) 3: 34352e3137332e3131362e302f32322d3234203d3e20323638383130.roa (hash: JNyxID+gpuiIJFxC2JoVZpDW5lJY/bY+ID0T+4W/0SU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.crl rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 12:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e1:ad:a5:9b:03:c0:92:e9:2e:5f:b5:5d:9a:f3:e4:e4:c8:63:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2 Validity Not Before: Jun 17 08:59:01 2025 GMT Not After : Jun 18 12:00:01 2025 GMT Subject: CN=964446D76F31555206E930D4A9B7422A7B88C326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6f:12:37:c9:7b:ce:2b:03:b1:84:74:d5:c9: 45:34:c5:c5:43:23:c8:ee:44:24:b3:08:d6:be:78: b3:57:bc:96:71:f6:36:32:c9:7b:72:ed:36:b0:7e: e7:35:f3:aa:9d:1e:15:41:8b:2c:33:48:a8:91:48: 44:9a:98:9c:10:dc:5b:9a:9e:a8:89:fd:1d:23:74: 52:77:a8:ec:e6:e9:9d:23:3d:1f:bc:40:0d:54:a6: 86:d8:6c:ba:44:5b:dd:d5:a0:15:dd:7b:95:a0:d0: 33:a3:03:d5:ae:8d:0c:7d:21:8c:03:5e:d9:fb:9e: eb:d2:2f:cd:02:56:f0:86:a4:0c:01:5c:15:52:7a: 8b:5a:47:36:0a:16:13:0f:b1:7d:82:e8:b7:e1:56: 20:97:61:61:66:04:89:ad:a4:19:0e:65:c8:cf:c5: cd:0b:ed:4b:64:f1:70:b0:e8:c4:3d:07:ab:09:5a: 22:da:0f:f8:a4:06:2a:fc:c1:4e:41:5e:9b:b0:b2: b0:f8:ba:32:66:0b:0d:fc:9c:4e:66:10:e1:07:18: 1a:3d:18:58:32:00:04:9f:36:89:c1:2b:8e:ef:36: 45:f8:de:85:5c:58:10:c3:7f:50:b5:3f:42:9f:08: 3d:08:91:31:43:03:b1:0a:f7:fe:26:91:45:df:e1: 0b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:44:46:D7:6F:31:55:52:06:E9:30:D4:A9:B7:42:2A:7B:88:C3:26 X509v3 Authority Key Identifier: keyid:98:E3:16:4E:FA:6E:A9:AA:9D:88:B7:2E:AF:FA:0C:CF:E9:3C:44:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T67Vwc4SVzBXEGvXwfbzAWYPWqr2HxN4RzBe7o7Z9t2/0/98E3164EFA6EA9AA9D88B72EAFFA0CCFE93C44E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:67:18:a8:b6:df:ef:86:fd:05:a6:5f:7a:d5:70:ae:d7:cf: 85:c1:bb:ae:a3:b2:e5:52:f6:09:66:99:3e:9b:5c:20:7c:31: 1f:c7:19:ce:ee:d8:92:6b:d5:29:ab:be:c1:63:0a:6a:f0:33: b5:8f:f1:b7:43:f9:8b:4f:d1:86:b0:04:46:00:b0:f8:5b:6a: 37:a1:f9:d0:5d:c8:46:02:f8:0d:2d:ec:7f:49:3f:44:90:5d: bc:5c:7d:22:c6:20:96:ec:de:65:85:73:82:9c:92:3c:48:14: 8d:94:77:ab:7c:3a:15:13:63:e9:70:64:88:c3:d6:90:c4:3c: 7d:7f:f2:d1:59:bb:96:aa:f5:12:2b:49:26:6c:a5:d9:4b:6d: 2a:9e:78:7b:0c:b9:d3:b8:a5:a6:a2:af:67:86:90:a7:18:83: 3e:f2:ea:8d:ea:7e:14:32:f8:e5:f7:eb:6c:05:28:b1:38:de: 83:79:81:3f:61:54:8b:98:a5:13:ac:74:c3:41:f9:63:e1:48: e0:b6:05:dc:17:cb:42:16:69:f0:d3:d1:c0:75:57:9f:13:bc: 6b:cc:b3:d3:e2:d8:ea:a0:ad:4a:e2:f4:cb:ee:7b:37:0d:87: c5:a5:c9:b2:8d:1d:9c:48:b4:df:81:a9:57:86:5e:53:81:1b: bd:19:cb:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVOGtpZsDwJLpLl+1XZrz5OTIYzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThFMzE2NEVGQTZFQTlBQTlEODhCNzJFQUZGQTBDQ0ZF OTNDNDRFMjAeFw0yNTA2MTcwODU5MDFaFw0yNTA2MTgxMjAwMDFaMDMxMTAvBgNV BAMTKDk2NDQ0NkQ3NkYzMTU1NTIwNkU5MzBENEE5Qjc0MjJBN0I4OEMzMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUbxI3yXvOKwOxhHTVyUU0xcVD I8juRCSzCNa+eLNXvJZx9jYyyXty7Tawfuc186qdHhVBiywzSKiRSESamJwQ3Fua nqiJ/R0jdFJ3qOzm6Z0jPR+8QA1UpobYbLpEW93VoBXde5Wg0DOjA9WujQx9IYwD Xtn7nuvSL80CVvCGpAwBXBVSeotaRzYKFhMPsX2C6LfhViCXYWFmBImtpBkOZcjP xc0L7Utk8XCw6MQ9B6sJWiLaD/ikBir8wU5BXpuwsrD4ujJmCw38nE5mEOEHGBo9 GFgyAASfNonBK47vNkX43oVcWBDDf1C1P0KfCD0IkTFDA7EK9/4mkUXf4QtLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlkRG128xVVIG6TDUqbdCKnuIwyYwHwYDVR0j BBgwFoAUmOMWTvpuqaqdiLcur/oMz+k8ROIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFQ2N1Z3YzRTVnpCWEVHdlh3ZmJ6QVdZUFdxcjJIeE40UnpCZTdvN1o5 dDIvMC85OEUzMTY0RUZBNkVBOUFBOUQ4OEI3MkVBRkZBMENDRkU5M0M0NEUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4RTMxNjRFRkE2RUE5QUE5 RDg4QjcyRUFGRkEwQ0NGRTkzQzQ0RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFQ2N1Z3YzRTVnpCWEVHdlh3ZmJ6QVdZUFdxcjJIeE40UnpCZTdvN1o5dDIvMC85 OEUzMTY0RUZBNkVBOUFBOUQ4OEI3MkVBRkZBMENDRkU5M0M0NEUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaWcYqLbf74b9BaZfetVwrtfPhcG7rqOy5VL2CWaZPptcIHwxH8cZzu7YkmvV Kau+wWMKavAztY/xt0P5i0/RhrAERgCw+FtqN6H50F3IRgL4DS3sf0k/RJBdvFx9 IsYgluzeZYVzgpySPEgUjZR3q3w6FRNj6XBkiMPWkMQ8fX/y0Vm7lqr1EitJJmyl 2UttKp54ewy507ilpqKvZ4aQpxiDPvLqjep+FDL45ffrbAUosTjeg3mBP2FUi5il E6x0w0H5Y+FI4LYF3BfLQhZp8NPRwHVXnxO8a8yz0+LY6qCtSuL0y+57Nw2HxaXJ so0dnEi034GpV4ZeU4EbvRnLYw== -----END CERTIFICATE-----Generated at Tue Jun 17 18:08:21 2025 by rpki-client