$ rpki-client -vvf rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft File: 16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft (raw, json) Hash identifier: x37RJ/1XeUUfPn2Es1H4AIXCLM7Hkj6ohSp1kQ48r9w= Subject key identifier: 18:CC:F1:3D:17:D5:3F:DC:09:FE:E1:48:84:3F:20:CF:99:B9:53:F1 Authority key identifier: 16:FF:CD:7C:F1:37:4D:25:6D:7E:12:26:D5:1D:91:AF:91:53:AA:A2 Certificate issuer: /CN=16FFCD7CF1374D256D7E1226D51D91AF9153AAA2 Certificate serial: 128FF502E8B2CF034D604A186A0C9E192C5B6D06 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft Manifest number: 17 Signing time: Thu 19 Jun 2025 19:50:14 +0000 Manifest this update: Thu 19 Jun 2025 19:45:14 +0000 Manifest next update: Fri 20 Jun 2025 22:45:14 +0000 Files and hashes: 1: 16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.crl (hash: 6TSCTfmmHlhAoxdktofvFZvP0zdGKKJCGkXJuR+sK6c=) 2: 323830343a366434633a3a2f33322d3438203d3e20323730353233.roa (hash: 2SpWKqeZtpyvOk2iIU96KE99DLd99IqbFLz/vOFGwHs=) 3: 3138372e3130332e3139362e302f32322d3234203d3e20323730353233.roa (hash: PGi32eLOlSnhPw5J0SZ6oEdg+SG2e7g5GjCW+zS2fKA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.crl rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 22:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:8f:f5:02:e8:b2:cf:03:4d:60:4a:18:6a:0c:9e:19:2c:5b:6d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16FFCD7CF1374D256D7E1226D51D91AF9153AAA2 Validity Not Before: Jun 19 19:45:14 2025 GMT Not After : Jun 20 22:45:14 2025 GMT Subject: CN=18CCF13D17D53FDC09FEE148843F20CF99B953F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:af:49:0b:41:9e:f1:96:50:17:e3:8b:b2:95: db:07:fd:46:b0:37:fa:77:6d:d1:7c:03:79:bd:61: 3e:f6:33:d1:e8:62:56:90:f0:30:0d:67:bb:a1:fe: b4:50:c0:18:b4:5c:8e:ab:30:f0:ad:87:04:2a:7c: d3:40:d2:8f:71:00:da:8c:ba:03:1b:10:5d:18:34: 5c:1b:54:10:7c:5d:ce:22:61:60:4a:45:d9:ba:e8: e7:41:f2:65:e2:88:e0:bc:c8:fb:04:fa:7d:14:97: 45:67:35:30:93:8a:10:d8:9d:05:7b:05:0b:19:a1: 28:bb:c3:e0:67:cc:b3:4c:07:db:bf:5e:9f:b7:f3: 96:e8:2e:0b:58:b3:28:6e:02:b2:6e:b4:40:55:b5: ab:dd:85:68:7e:1b:70:b4:9f:c6:8a:90:be:ca:89: ee:ca:dd:ed:34:f0:b5:a0:82:de:16:9c:bd:46:6e: 45:9f:22:28:47:c6:0c:0d:f1:6f:de:b8:25:b0:8f: 22:49:89:d2:83:33:06:71:45:8e:51:b9:e1:c5:7d: 36:eb:32:ea:aa:a6:e2:c1:74:e2:be:81:b3:17:87: a6:79:d9:69:3f:4d:45:79:5e:63:23:47:c6:8e:0b: 20:7b:1f:ca:2c:51:b9:a3:3f:f9:df:67:7d:6f:c3: 52:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CC:F1:3D:17:D5:3F:DC:09:FE:E1:48:84:3F:20:CF:99:B9:53:F1 X509v3 Authority Key Identifier: keyid:16:FF:CD:7C:F1:37:4D:25:6D:7E:12:26:D5:1D:91:AF:91:53:AA:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tpmkVizxqXDbkDRwN1voPdXTEFY5f4GaDmmoKZwuqzn/0/16FFCD7CF1374D256D7E1226D51D91AF9153AAA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:7e:92:99:73:ea:8f:41:34:ca:2a:11:da:0a:21:4a:ff:66: cc:f5:84:72:ab:81:a7:cf:08:8a:65:5f:72:6f:da:ce:06:ed: cc:87:d3:b6:58:d6:9a:8a:ad:4f:a3:1e:67:24:61:7d:76:ef: 7b:93:54:9c:8b:a4:9e:2a:d2:d6:0f:fc:40:11:03:26:37:4c: 45:74:33:d3:b0:8e:d7:ee:a9:bb:e7:b1:d0:fd:17:0d:bb:b9: 95:c1:c6:71:f8:f7:1b:00:b9:11:fa:1c:15:b3:a1:d4:c6:79: 55:8a:2c:bf:50:8b:d7:07:78:56:1a:df:07:28:7c:b3:3d:04: af:a2:74:63:12:2d:d6:7a:9e:7e:04:2f:58:61:ff:78:38:01: dc:71:36:77:4a:aa:f5:94:af:91:44:de:d6:36:e0:2b:8f:52: 16:70:56:30:74:59:e6:b3:42:ce:4e:a9:07:4c:88:b5:ac:03: 07:0e:b4:61:78:93:2e:ef:14:49:71:44:97:a2:ac:f2:9f:f6: 72:5c:ee:3d:b8:ec:14:13:fc:54:72:9f:4d:cd:96:37:aa:6e: b1:65:d7:59:e8:95:d6:52:c9:61:c2:e3:db:ce:85:6f:a7:91: 48:5b:61:68:e1:e6:ad:82:d6:2c:ef:3f:3b:98:c8:02:7d:6f: af:78:f2:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEo/1AuiyzwNNYEoYagyeGSxbbQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGRkNEN0NGMTM3NEQyNTZEN0UxMjI2RDUxRDkxQUY5 MTUzQUFBMjAeFw0yNTA2MTkxOTQ1MTRaFw0yNTA2MjAyMjQ1MTRaMDMxMTAvBgNV BAMTKDE4Q0NGMTNEMTdENTNGREMwOUZFRTE0ODg0M0YyMENGOTlCOTUzRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDur0kLQZ7xllAX44uyldsH/Uaw N/p3bdF8A3m9YT72M9HoYlaQ8DANZ7uh/rRQwBi0XI6rMPCthwQqfNNA0o9xANqM ugMbEF0YNFwbVBB8Xc4iYWBKRdm66OdB8mXiiOC8yPsE+n0Ul0VnNTCTihDYnQV7 BQsZoSi7w+BnzLNMB9u/Xp+385boLgtYsyhuArJutEBVtavdhWh+G3C0n8aKkL7K ie7K3e008LWggt4WnL1GbkWfIihHxgwN8W/euCWwjyJJidKDMwZxRY5RueHFfTbr MuqqpuLBdOK+gbMXh6Z52Wk/TUV5XmMjR8aOCyB7H8osUbmjP/nfZ31vw1KXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGMzxPRfVP9wJ/uFIhD8gz5m5U/EwHwYDVR0j BBgwFoAUFv/NfPE3TSVtfhIm1R2Rr5FTqqIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXRwbWtWaXp4cVhEYmtEUndOMXZvUGRYVEVGWTVmNEdhRG1tb0tad3Vx em4vMC8xNkZGQ0Q3Q0YxMzc0RDI1NkQ3RTEyMjZENTFEOTFBRjkxNTNBQUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2RkZDRDdDRjEzNzREMjU2 RDdFMTIyNkQ1MUQ5MUFGOTE1M0FBQTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXRwbWtWaXp4cVhEYmtEUndOMXZvUGRYVEVGWTVmNEdhRG1tb0tad3Vxem4vMC8x NkZGQ0Q3Q0YxMzc0RDI1NkQ3RTEyMjZENTFEOTFBRjkxNTNBQUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcH6SmXPqj0E0yioR2gohSv9mzPWEcquBp88IimVfcm/azgbtzIfTtljWmoqt T6MeZyRhfXbve5NUnIuknirS1g/8QBEDJjdMRXQz07CO1+6pu+ex0P0XDbu5lcHG cfj3GwC5EfocFbOh1MZ5VYosv1CL1wd4VhrfByh8sz0Er6J0YxIt1nqefgQvWGH/ eDgB3HE2d0qq9ZSvkUTe1jbgK49SFnBWMHRZ5rNCzk6pB0yItawDBw60YXiTLu8U SXFEl6Ks8p/2clzuPbjsFBP8VHKfTc2WN6pusWXXWeiV1lLJYcLj286Fb6eRSFth aOHmrYLWLO8/O5jIAn1vr3jyiA== -----END CERTIFICATE-----Generated at Fri Jun 20 02:26:36 2025 by rpki-client