$ rpki-client -vvf rpki-repo.registro.br/repo/8tV3CLz5GBJWsWJ9W1EMiEgoQz4N7HzNRLUEpunnt7ui/1/B192E36D3AFFBFF2FFDCCD24F351215930336F1E.mft File: B192E36D3AFFBFF2FFDCCD24F351215930336F1E.mft (raw, json) Hash identifier: kHhnH5NiMHKpaSqkXwCfX20RPCIoLyEAx6WvGDrTThw= Subject key identifier: BF:D6:7C:39:97:0A:3B:A7:53:D4:C1:77:FE:EC:D2:7D:37:BD:3B:09 Authority key identifier: B1:92:E3:6D:3A:FF:BF:F2:FF:DC:CD:24:F3:51:21:59:30:33:6F:1E Certificate issuer: /CN=B192E36D3AFFBFF2FFDCCD24F351215930336F1E Certificate serial: 40653D62242CAAD200ED15DFE349BB03D9EA4B7A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B192E36D3AFFBFF2FFDCCD24F351215930336F1E.cer Subject info access: rsync://rpki-repo.registro.br/repo/8tV3CLz5GBJWsWJ9W1EMiEgoQz4N7HzNRLUEpunnt7ui/1/B192E36D3AFFBFF2FFDCCD24F351215930336F1E.mft Manifest number: 024E Signing time: Fri 20 Jun 2025 08:18:04 +0000 Manifest this update: Fri 20 Jun 2025 08:13:04 +0000 Manifest next update: Sat 21 Jun 2025 09:39:04 +0000 Files and hashes: 1: B192E36D3AFFBFF2FFDCCD24F351215930336F1E.crl (hash: H28B+PwEsVWGGi4NPlmKoyZw5RPAYMmzRuJf70iCY3g=) 2: 323830343a383631303a3a2f33322d3438203d3e20323732363138.roa (hash: +gbqMv2+kfPN5ejj6dFG0507kTZkIDsMdyJQvehZTWg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8tV3CLz5GBJWsWJ9W1EMiEgoQz4N7HzNRLUEpunnt7ui/1/B192E36D3AFFBFF2FFDCCD24F351215930336F1E.crl rsync://rpki-repo.registro.br/repo/8tV3CLz5GBJWsWJ9W1EMiEgoQz4N7HzNRLUEpunnt7ui/1/B192E36D3AFFBFF2FFDCCD24F351215930336F1E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B192E36D3AFFBFF2FFDCCD24F351215930336F1E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 09:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:65:3d:62:24:2c:aa:d2:00:ed:15:df:e3:49:bb:03:d9:ea:4b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B192E36D3AFFBFF2FFDCCD24F351215930336F1E Validity Not Before: Jun 20 08:13:04 2025 GMT Not After : Jun 21 09:39:04 2025 GMT Subject: CN=BFD67C39970A3BA753D4C177FEECD27D37BD3B09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:16:9d:43:38:16:85:5b:b3:ec:35:81:9b: 53:2a:02:76:f8:11:44:02:8a:ae:39:7c:c8:16:89: 85:ad:87:40:1b:89:ef:b8:30:e8:cc:66:fe:27:88: 47:04:3a:cd:b4:64:28:30:68:09:15:08:91:38:69: 49:0e:4c:78:3f:9a:2b:28:27:22:fb:47:fb:11:a7: 1f:44:e7:c5:f6:cb:b7:97:9a:69:db:89:27:a2:d9: ac:c4:36:83:1a:65:5a:1f:31:7b:c7:c1:b4:46:1e: 78:9b:cc:77:9a:b6:5b:09:27:ce:36:90:f6:74:6a: 73:d2:0b:e8:ac:cd:6c:01:05:82:c5:a2:66:d0:67: 31:b7:49:2b:b8:6e:7b:e2:76:8b:42:86:3e:38:df: cd:6b:90:7f:2a:a8:72:6b:25:ab:88:ce:6e:90:f3: dd:2e:74:6f:a0:4c:41:ca:79:61:c8:39:7b:fc:21: c4:c1:f0:44:a1:0a:1a:c9:df:93:3a:ca:66:f4:3c: f1:56:73:ec:1e:f6:5e:ce:2b:bd:0a:7a:a2:ab:10: 1a:c4:e5:05:13:ec:80:cb:73:e9:4b:84:64:0d:88: a4:f6:61:ce:6b:ea:8c:92:12:4d:f2:83:9e:33:d2: b7:60:e2:79:7d:c2:b0:13:1d:13:ee:b1:8e:48:e1: 47:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D6:7C:39:97:0A:3B:A7:53:D4:C1:77:FE:EC:D2:7D:37:BD:3B:09 X509v3 Authority Key Identifier: keyid:B1:92:E3:6D:3A:FF:BF:F2:FF:DC:CD:24:F3:51:21:59:30:33:6F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8tV3CLz5GBJWsWJ9W1EMiEgoQz4N7HzNRLUEpunnt7ui/1/B192E36D3AFFBFF2FFDCCD24F351215930336F1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B192E36D3AFFBFF2FFDCCD24F351215930336F1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tV3CLz5GBJWsWJ9W1EMiEgoQz4N7HzNRLUEpunnt7ui/1/B192E36D3AFFBFF2FFDCCD24F351215930336F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:b4:31:e2:a7:d9:73:b3:9a:a2:6c:bb:82:e1:32:b0:3e:f1: d5:01:a9:d1:82:b2:b6:55:c5:c3:9e:52:1f:2d:14:a0:b6:f8: 93:e6:2a:93:84:b7:ad:7d:b5:0c:f9:62:4f:b0:49:fc:eb:f6: 6d:38:ad:c9:0e:8c:84:1a:a4:f8:41:16:7a:c1:19:da:2c:fb: b4:16:ce:67:3d:de:2c:15:f9:06:40:53:98:ba:31:8e:c4:12: 15:16:ae:61:95:c3:f9:ea:18:30:56:45:f0:a5:cd:81:c8:4f: fc:48:b4:0e:0b:65:94:e3:00:ca:49:60:1d:8c:9c:cf:d1:ea: 48:95:33:db:a9:48:c9:7e:29:f9:2d:7e:e7:f7:a6:9f:66:66: 2b:17:9e:2d:97:88:f5:b4:54:1b:e5:db:f9:c3:23:f3:6f:4c: 72:20:f0:94:cd:42:e9:15:6e:a4:98:f0:47:f5:fa:4d:73:14: 5d:25:7f:36:6c:93:17:02:37:29:1e:f9:04:15:ae:3b:20:52: 55:dd:62:7e:55:e9:f9:4b:75:39:3e:90:9a:6a:09:c5:df:ac: 12:08:83:e1:79:5e:b4:fd:bb:cc:19:d1:3a:5b:41:db:55:70: 88:b9:eb:1b:43:a4:f8:e8:5d:e8:f8:71:3c:05:d2:02:2f:e6: ed:9f:42:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQGU9YiQsqtIA7RXf40m7A9nqS3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5MkUzNkQzQUZGQkZGMkZGRENDRDI0RjM1MTIxNTkz MDMzNkYxRTAeFw0yNTA2MjAwODEzMDRaFw0yNTA2MjEwOTM5MDRaMDMxMTAvBgNV BAMTKEJGRDY3QzM5OTcwQTNCQTc1M0Q0QzE3N0ZFRUNEMjdEMzdCRDNCMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyMhadQzgWhVuz7DWBm1MqAnb4 EUQCiq45fMgWiYWth0Abie+4MOjMZv4niEcEOs20ZCgwaAkVCJE4aUkOTHg/miso JyL7R/sRpx9E58X2y7eXmmnbiSei2azENoMaZVofMXvHwbRGHnibzHeatlsJJ842 kPZ0anPSC+iszWwBBYLFombQZzG3SSu4bnvidotChj44381rkH8qqHJrJauIzm6Q 890udG+gTEHKeWHIOXv8IcTB8EShChrJ35M6ymb0PPFWc+we9l7OK70KeqKrEBrE 5QUT7IDLc+lLhGQNiKT2Yc5r6oySEk3yg54z0rdg4nl9wrATHRPusY5I4UcFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUv9Z8OZcKO6dT1MF3/uzSfTe9OwkwHwYDVR0j BBgwFoAUsZLjbTr/v/L/3M0k81EhWTAzbx4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHRWM0NMejVHQkpXc1dKOVcxRU1pRWdvUXo0TjdIek5STFVFcHVubnQ3 dWkvMS9CMTkyRTM2RDNBRkZCRkYyRkZEQ0NEMjRGMzUxMjE1OTMwMzM2RjFFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxOTJFMzZEM0FGRkJGRjJG RkRDQ0QyNEYzNTEyMTU5MzAzMzZGMUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHRWM0NMejVHQkpXc1dKOVcxRU1pRWdvUXo0TjdIek5STFVFcHVubnQ3dWkvMS9C MTkyRTM2RDNBRkZCRkYyRkZEQ0NEMjRGMzUxMjE1OTMwMzM2RjFFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAybQx4qfZc7Oaomy7guEysD7x1QGp0YKytlXFw55SHy0UoLb4k+Yqk4S3rX21 DPliT7BJ/Ov2bTityQ6MhBqk+EEWesEZ2iz7tBbOZz3eLBX5BkBTmLoxjsQSFRau YZXD+eoYMFZF8KXNgchP/Ei0DgtllOMAyklgHYycz9HqSJUz26lIyX4p+S1+5/em n2ZmKxeeLZeI9bRUG+Xb+cMj829MciDwlM1C6RVupJjwR/X6TXMUXSV/NmyTFwI3 KR75BBWuOyBSVd1iflXp+Ut1OT6QmmoJxd+sEgiD4XletP27zBnROltB21VwiLnr G0Ok+Ohd6PhxPAXSAi/m7Z9CNw== -----END CERTIFICATE-----Generated at Fri Jun 20 22:26:37 2025 by rpki-client