$ rpki-client -vvf rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft File: 99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft (raw, json) Hash identifier: wUTsUvWgpkgyvawtIJXBtqWAWv0GGvteO+ZBJLmkBXk= Subject key identifier: 58:B6:69:A1:5F:19:0E:C8:AC:35:3A:08:16:99:FC:A7:FE:A6:1B:5F Authority key identifier: 99:CB:E6:12:CF:98:7B:C1:9B:2E:BF:A7:75:C3:7A:A8:87:04:A0:2A Certificate issuer: /CN=99CBE612CF987BC19B2EBFA775C37AA88704A02A Certificate serial: 47EE86F895A43DF2323A2E3BBB9902EB85B0D501 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99CBE612CF987BC19B2EBFA775C37AA88704A02A.cer Subject info access: rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft Manifest number: 3A Signing time: Sun 15 Jun 2025 14:58:02 +0000 Manifest this update: Sun 15 Jun 2025 14:53:02 +0000 Manifest next update: Mon 16 Jun 2025 16:38:02 +0000 Files and hashes: 1: 34352e3137372e342e302f32332d3332203d3e20323638393433.roa (hash: 0+kYLD8yHBn8SEvHZmP6Lna69QmTu4oRBPJPDeUnb5c=) 2: 323830343a356366383a3a2f33322d313238203d3e20323638393433.roa (hash: GcYsJrCgHMe99NpgpZuWCzNu1TQaO1J+BqBAsKQkiDU=) 3: 99CBE612CF987BC19B2EBFA775C37AA88704A02A.crl (hash: Bz4Whsk7YMcjqdkymoMtBBu5hwMw3mj1zK9xmgX4RxQ=) 4: 34352e3137362e3133362e302f32322d3332203d3e20323638393433.roa (hash: Vrt0CzEyM2PFJe+InYR1IwnM+I67HCAmxDrqTTmERvo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.crl rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99CBE612CF987BC19B2EBFA775C37AA88704A02A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 16:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ee:86:f8:95:a4:3d:f2:32:3a:2e:3b:bb:99:02:eb:85:b0:d5:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99CBE612CF987BC19B2EBFA775C37AA88704A02A Validity Not Before: Jun 15 14:53:02 2025 GMT Not After : Jun 16 16:38:02 2025 GMT Subject: CN=58B669A15F190EC8AC353A081699FCA7FEA61B5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9f:e0:35:1a:ec:78:1e:10:7f:a7:8e:28:95: cf:2a:b4:67:ff:1f:37:ce:ee:f0:56:b6:32:6b:50: 2c:42:70:fd:03:6d:f3:3d:0c:0c:ed:67:fc:35:ab: 96:54:6c:fa:7e:91:3f:12:08:e4:a7:ba:5c:0b:1c: d4:79:34:53:57:25:2d:50:6e:10:74:80:8a:24:4c: 97:b1:11:9a:c3:98:fa:66:d4:9c:ed:04:70:ba:fd: 37:ca:3c:86:a3:b2:c5:c8:59:2c:db:99:0a:74:63: 74:19:ca:24:d3:8b:50:e0:6b:12:4e:12:23:c3:f4: a2:35:49:7c:c1:42:6c:5e:3d:08:d2:94:df:ad:d1: ab:07:c9:11:19:4c:3b:2a:65:c8:3e:f8:4e:c4:d4: b0:eb:1e:8d:db:78:e6:46:fb:dd:a7:3e:1d:0d:7a: de:dd:1e:8a:da:87:88:98:bb:1c:ef:f4:48:5b:b9: 4a:bc:c6:af:9f:5e:a5:29:28:2c:65:76:8b:2d:8f: 28:ab:0e:5d:b3:ff:31:ba:1f:1d:17:36:f0:51:c9: 27:be:b3:91:8d:74:29:f6:5f:e3:59:a4:b0:be:2a: 5c:ef:98:8f:dd:53:e3:2e:f0:a4:1a:ee:e2:f4:0f: e7:d8:d6:4f:40:7e:65:2e:a1:2d:3a:5a:06:bc:ff: 49:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B6:69:A1:5F:19:0E:C8:AC:35:3A:08:16:99:FC:A7:FE:A6:1B:5F X509v3 Authority Key Identifier: keyid:99:CB:E6:12:CF:98:7B:C1:9B:2E:BF:A7:75:C3:7A:A8:87:04:A0:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99CBE612CF987BC19B2EBFA775C37AA88704A02A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/665hkvWRmPAgU6FiMnL1wi12FkmeCkeyQAdC3DoRFsC4/0/99CBE612CF987BC19B2EBFA775C37AA88704A02A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:6f:d1:c9:53:47:b9:ed:44:5d:56:06:ac:11:8d:e4:7d:23: 1f:34:63:b0:46:57:4f:9e:f8:a7:a6:d0:e5:24:5d:a3:70:dd: 5f:bf:fe:56:28:64:18:55:28:a2:40:20:c9:09:e0:d1:b1:8f: 8a:9e:3b:01:e3:a4:57:f4:8e:db:c2:e0:e7:49:e5:8c:70:9c: 53:ba:7c:7e:37:06:dd:d9:a4:d8:92:c2:db:16:9b:5a:51:96: 31:0c:95:d3:8e:47:2b:e1:a3:24:d0:65:34:5a:90:e8:74:95: 37:e0:88:3b:2c:a5:9e:7a:5f:5c:5e:4e:78:a2:e5:17:68:94: 25:a3:f4:bf:9e:f5:6a:cb:71:55:45:38:10:fb:0a:7a:82:34: 48:8e:a2:19:73:27:3d:1e:18:30:6e:80:9e:61:01:bb:ff:fb: 72:27:91:0e:f7:b4:e5:f1:1d:67:9f:0d:69:ac:fa:0f:ce:37: 8a:fa:5a:7f:6b:c3:a7:6f:ae:9b:24:21:55:6f:b2:b2:b7:ae: c6:9f:eb:e4:c0:58:80:5e:a8:f7:44:ef:a7:bc:fc:8b:3a:2e: 4e:b8:a0:95:86:33:c5:bf:26:b5:0d:66:65:a9:16:72:f5:e1: 41:fe:19:02:ad:77:e0:77:3e:ab:4c:58:73:13:48:d2:59:0e: 89:ec:13:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUR+6G+JWkPfIyOi47u5kC64Ww1QEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDQkU2MTJDRjk4N0JDMTlCMkVCRkE3NzVDMzdBQTg4 NzA0QTAyQTAeFw0yNTA2MTUxNDUzMDJaFw0yNTA2MTYxNjM4MDJaMDMxMTAvBgNV BAMTKDU4QjY2OUExNUYxOTBFQzhBQzM1M0EwODE2OTlGQ0E3RkVBNjFCNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMn+A1Gux4HhB/p44olc8qtGf/ HzfO7vBWtjJrUCxCcP0DbfM9DAztZ/w1q5ZUbPp+kT8SCOSnulwLHNR5NFNXJS1Q bhB0gIokTJexEZrDmPpm1JztBHC6/TfKPIajssXIWSzbmQp0Y3QZyiTTi1DgaxJO EiPD9KI1SXzBQmxePQjSlN+t0asHyREZTDsqZcg++E7E1LDrHo3beOZG+92nPh0N et7dHorah4iYuxzv9EhbuUq8xq+fXqUpKCxldostjyirDl2z/zG6Hx0XNvBRySe+ s5GNdCn2X+NZpLC+KlzvmI/dU+Mu8KQa7uL0D+fY1k9AfmUuoS06Wga8/0nPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWLZpoV8ZDsisNToIFpn8p/6mG18wHwYDVR0j BBgwFoAUmcvmEs+Ye8GbLr+ndcN6qIcEoCowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjY1aGt2V1JtUEFnVTZGaU1uTDF3aTEyRmttZUNrZXlRQWRDM0RvUkZz QzQvMC85OUNCRTYxMkNGOTg3QkMxOUIyRUJGQTc3NUMzN0FBODg3MDRBMDJBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5Q0JFNjEyQ0Y5ODdCQzE5 QjJFQkZBNzc1QzM3QUE4ODcwNEEwMkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NjY1aGt2V1JtUEFnVTZGaU1uTDF3aTEyRmttZUNrZXlRQWRDM0RvUkZzQzQvMC85 OUNCRTYxMkNGOTg3QkMxOUIyRUJGQTc3NUMzN0FBODg3MDRBMDJBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAam/RyVNHue1EXVYGrBGN5H0jHzRjsEZXT574p6bQ5SRdo3DdX7/+VihkGFUo okAgyQng0bGPip47AeOkV/SO28Lg50nljHCcU7p8fjcG3dmk2JLC2xabWlGWMQyV 045HK+GjJNBlNFqQ6HSVN+CIOyylnnpfXF5OeKLlF2iUJaP0v571astxVUU4EPsK eoI0SI6iGXMnPR4YMG6AnmEBu//7cieRDve05fEdZ58Naaz6D843ivpaf2vDp2+u myQhVW+ysreuxp/r5MBYgF6o90Tvp7z8izouTriglYYzxb8mtQ1mZakWcvXhQf4Z Aq134Hc+q0xYcxNI0lkOiewTpw== -----END CERTIFICATE-----Generated at Mon Jun 16 05:32:59 2025 by rpki-client