$ rpki-client -vvf rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft File: CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft (raw, json) Hash identifier: zvifnuSqWxsP1cYRgW3NaLoIxS3VIFa0akXdZdZRh3Q= Subject key identifier: C1:7C:41:40:66:91:1A:F7:6B:A7:33:74:F4:44:A9:D4:EF:0E:95:A8 Authority key identifier: CE:47:DB:DD:28:40:AA:7B:CB:7E:5B:EF:8D:2B:B7:AD:F7:98:56:08 Certificate issuer: /CN=CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608 Certificate serial: 17F5A2B56CC0D2A318BA33CE00FC81CBD1B96CF7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.cer Subject info access: rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft Manifest number: 42 Signing time: Sun 15 Jun 2025 23:30:25 +0000 Manifest this update: Sun 15 Jun 2025 23:25:25 +0000 Manifest next update: Mon 16 Jun 2025 23:44:25 +0000 Files and hashes: 1: 323830343a376234633a3a2f33322d313238203d3e20323731343233.roa (hash: D6UugD7LMSE82MNKuHZ6AsbY2I0FQkZFbm92FJ5UaBg=) 2: 3230302e33362e3139362e302f32322d3332203d3e20323731343233.roa (hash: BN0yNSQYHzO/8PLxpClNHqjhVJbCaoMDHFJ1JsHe/LA=) 3: CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.crl (hash: ZIa0hKaJagFX/o4Um3BLfMdklK+1D5Hh910colsRPu8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.crl rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 23:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f5:a2:b5:6c:c0:d2:a3:18:ba:33:ce:00:fc:81:cb:d1:b9:6c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608 Validity Not Before: Jun 15 23:25:25 2025 GMT Not After : Jun 16 23:44:25 2025 GMT Subject: CN=C17C414066911AF76BA73374F444A9D4EF0E95A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:28:a9:2e:01:2d:18:55:25:56:bb:41:23:7a: b3:b3:89:13:92:58:bf:df:9c:8b:8c:1e:ad:b5:aa: 7c:08:dd:d8:23:30:78:14:51:3d:e7:05:8e:3d:ff: d4:fe:16:8c:94:0e:79:a1:b0:ea:ee:52:92:c3:e9: 91:13:75:58:47:38:11:81:03:12:d8:46:7d:07:73: 1f:56:60:b5:09:4f:f4:41:11:11:7d:f3:2a:25:32: 6f:7c:36:27:93:e7:8d:c9:a0:b1:ac:f7:6f:52:e4: c6:c2:7d:3c:de:15:5f:39:f5:13:d5:3f:0e:60:52: eb:d1:f4:cc:d7:2a:28:60:c7:b9:19:19:f7:a6:2c: a3:62:e6:b4:c2:03:d9:90:bf:e0:84:b2:6d:fc:e6: 47:a6:73:8c:08:b5:56:c9:de:61:c6:81:c5:a4:66: b6:97:91:d0:d9:1f:b3:5e:21:29:17:af:69:7f:0e: 04:5c:3d:c6:ca:aa:90:16:02:43:29:fb:22:45:53: e5:25:f1:ae:9e:d7:f7:c7:b5:f1:b1:5a:b5:e2:ff: eb:73:2d:3e:c7:45:dd:47:1f:dd:2f:af:46:08:43: 63:36:12:53:a6:61:ac:f8:8c:eb:0f:31:f3:0e:88: e6:4c:8e:9d:bd:7c:0e:a6:cd:05:f5:41:9a:2a:38: 1a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7C:41:40:66:91:1A:F7:6B:A7:33:74:F4:44:A9:D4:EF:0E:95:A8 X509v3 Authority Key Identifier: keyid:CE:47:DB:DD:28:40:AA:7B:CB:7E:5B:EF:8D:2B:B7:AD:F7:98:56:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:77:26:a3:c9:fb:43:ef:68:cc:be:b3:48:a3:0e:c7:2a:ad: b9:4d:66:e8:e3:02:7c:3d:ae:18:3a:5e:0d:a8:e8:7a:60:ad: 7f:83:fb:73:67:af:34:f7:49:dc:9c:c8:bf:44:ca:53:52:5d: 1b:6d:3e:9e:4c:a5:0c:12:da:82:eb:0f:69:de:3e:c8:2c:9e: fe:81:a8:d7:a2:cf:fc:19:e8:b9:b6:20:38:36:08:03:0b:7a: ed:89:75:7c:44:1e:bf:7e:fc:ee:10:e4:11:ed:92:d0:aa:52: fa:e8:0c:69:0f:0d:02:c0:f1:9b:19:42:7a:2b:8d:75:21:e0: 8c:f9:3d:f7:70:a5:b1:3d:6e:d1:c1:bb:57:0e:21:ea:90:f9: d3:f5:6e:af:12:cd:fa:82:49:65:82:ce:bb:a1:e7:78:77:48: a4:1b:90:de:7c:55:7b:38:99:59:c6:05:93:55:cc:73:66:de: d6:e9:9c:f6:ad:d0:47:c6:54:50:77:ed:f6:1f:4c:a6:b7:6f: 35:e9:74:17:bd:52:25:70:50:0c:bd:5d:71:18:3e:1e:a4:03: 6f:7a:c5:ff:4d:af:b7:1d:f5:77:9e:7e:57:42:bd:30:2b:e9: 66:4d:1f:05:cd:dc:a4:52:30:e3:4b:a0:90:cc:d6:f1:9d:52: d3:5d:95:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUF/WitWzA0qMYujPOAPyBy9G5bPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U0N0RCREQyODQwQUE3QkNCN0U1QkVGOEQyQkI3QURG Nzk4NTYwODAeFw0yNTA2MTUyMzI1MjVaFw0yNTA2MTYyMzQ0MjVaMDMxMTAvBgNV BAMTKEMxN0M0MTQwNjY5MTFBRjc2QkE3MzM3NEY0NDRBOUQ0RUYwRTk1QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2KKkuAS0YVSVWu0EjerOziROS WL/fnIuMHq21qnwI3dgjMHgUUT3nBY49/9T+FoyUDnmhsOruUpLD6ZETdVhHOBGB AxLYRn0Hcx9WYLUJT/RBERF98yolMm98NieT543JoLGs929S5MbCfTzeFV859RPV Pw5gUuvR9MzXKihgx7kZGfemLKNi5rTCA9mQv+CEsm385kemc4wItVbJ3mHGgcWk ZraXkdDZH7NeISkXr2l/DgRcPcbKqpAWAkMp+yJFU+Ul8a6e1/fHtfGxWrXi/+tz LT7HRd1HH90vr0YIQ2M2ElOmYaz4jOsPMfMOiOZMjp29fA6mzQX1QZoqOBopAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwXxBQGaRGvdrpzN09ESp1O8OlagwHwYDVR0j BBgwFoAUzkfb3ShAqnvLflvvjSu3rfeYVggwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWh2Yjk0QnRQM0M4YjRHVmd5R3RmWUFBS1M4a3ZqSHR4MzZtZFoyOWUy czYvMC9DRTQ3REJERDI4NDBBQTdCQ0I3RTVCRUY4RDJCQjdBREY3OTg1NjA4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNDdEQkREMjg0MEFBN0JD QjdFNUJFRjhEMkJCN0FERjc5ODU2MDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWh2Yjk0QnRQM0M4YjRHVmd5R3RmWUFBS1M4a3ZqSHR4MzZtZFoyOWUyczYvMC9D RTQ3REJERDI4NDBBQTdCQ0I3RTVCRUY4RDJCQjdBREY3OTg1NjA4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOXcmo8n7Q+9ozL6zSKMOxyqtuU1m6OMCfD2uGDpeDajoemCtf4P7c2evNPdJ 3JzIv0TKU1JdG20+nkylDBLagusPad4+yCye/oGo16LP/BnoubYgODYIAwt67Yl1 fEQev3787hDkEe2S0KpS+ugMaQ8NAsDxmxlCeiuNdSHgjPk993ClsT1u0cG7Vw4h 6pD50/VurxLN+oJJZYLOu6HneHdIpBuQ3nxVeziZWcYFk1XMc2be1umc9q3QR8ZU UHft9h9MprdvNel0F71SJXBQDL1dcRg+HqQDb3rF/02vtx31d55+V0K9MCvpZk0f Bc3cpFIw40ugkMzW8Z1S012Vtw== -----END CERTIFICATE-----Generated at Mon Jun 16 03:23:02 2025 by rpki-client