$ rpki-client -vvf rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft File: AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft (raw, json) Hash identifier: K03vmxwMNa0SqhxgMnCtnvYCl9fEeKuDULF1ehZSsIA= Subject key identifier: D5:56:8D:F4:47:C0:1E:BC:68:A7:48:E1:E2:EE:A8:97:41:F0:27:0C Authority key identifier: AF:69:F9:77:A8:FB:5F:1C:A9:67:05:D6:2E:BE:EA:CE:46:BF:D9:D6 Certificate issuer: /CN=AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6 Certificate serial: 42D88AEFB0D03755522EFD481FC20D6892D14CD1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.cer Subject info access: rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft Manifest number: A3 Signing time: Mon 16 Jun 2025 17:41:23 +0000 Manifest this update: Mon 16 Jun 2025 17:36:23 +0000 Manifest next update: Tue 17 Jun 2025 18:06:23 +0000 Files and hashes: 1: AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.crl (hash: aniYwGFVFKd38lDoZZzcK+OBiaWji5a3wRzuIpBHp4I=) 2: 323830343a376533343a3a2f33322d3438203d3e20323731363039.roa (hash: Wwy+zWxgBmVi9CrHFR2rVa+/PBim1JXtm5poprqwBgQ=) 3: 34352e3138332e3137362e302f32332d3234203d3e20323731363039.roa (hash: Vsd5QRJjvgtpOCJxhMq6knZBYnpYpxgSgkoH9SpVQ/o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.crl rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 18:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d8:8a:ef:b0:d0:37:55:52:2e:fd:48:1f:c2:0d:68:92:d1:4c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6 Validity Not Before: Jun 16 17:36:23 2025 GMT Not After : Jun 17 18:06:23 2025 GMT Subject: CN=D5568DF447C01EBC68A748E1E2EEA89741F0270C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:54:72:7b:50:51:9c:28:70:eb:6b:21:d8:5e: 2b:30:1e:b1:46:b7:36:74:68:50:87:59:54:1d:e0: 3d:f2:cb:e2:fd:81:e9:b8:2e:d8:57:47:34:71:a8: ad:43:ff:ec:1c:68:a2:53:63:bd:6c:e0:7f:1c:a7: 9b:9a:e8:a4:15:2a:24:ac:5b:01:72:a2:5e:cd:2b: 56:ec:a1:13:01:15:62:68:e3:d8:9a:b9:66:0d:fd: 65:ff:cd:64:22:80:b6:a7:3d:7a:6d:1e:24:93:74: 8a:83:c0:98:5d:a5:a1:19:45:96:95:0c:54:99:42: e0:7e:2f:cf:90:b4:b8:e2:ef:8a:b6:25:bd:3c:ad: 5e:2d:d0:0b:03:c1:4f:74:92:d2:76:1e:57:87:b5: d5:d6:46:11:30:a5:b6:82:3d:8f:a1:0e:d3:bd:43: da:19:c7:0e:f8:51:77:0a:fb:02:7c:99:97:14:db: f0:79:1d:62:1a:e5:01:ca:98:31:dd:6b:35:4e:5e: 55:dc:dd:78:d9:7e:f3:25:08:51:cb:d7:22:75:a8: 29:bc:40:65:c8:af:7d:68:89:e3:9e:f1:e5:f0:7a: 8f:90:41:4f:f3:09:7d:72:46:63:f7:ae:48:c2:24: 02:f0:02:cb:bb:d6:87:9e:e3:bf:9a:db:98:55:a1: 53:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:56:8D:F4:47:C0:1E:BC:68:A7:48:E1:E2:EE:A8:97:41:F0:27:0C X509v3 Authority Key Identifier: keyid:AF:69:F9:77:A8:FB:5F:1C:A9:67:05:D6:2E:BE:EA:CE:46:BF:D9:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/AF69F977A8FB5F1CA96705D62EBEEACE46BFD9D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:85:50:66:67:40:27:5b:5f:fe:65:78:38:51:7d:76:d7:dd: 3a:33:d7:7b:92:56:92:06:2a:79:7b:3e:08:f6:ed:ee:bc:48: 75:77:4f:fd:8a:58:8e:6f:bc:67:97:a9:76:cc:15:b8:40:9a: a2:f2:35:cb:d0:51:65:3d:29:94:44:84:d3:d7:27:fa:75:42: 6e:dc:95:e0:dd:bd:f8:b8:8d:04:3f:04:90:81:44:56:bb:0b: 1c:20:d8:00:81:77:20:e0:90:5b:c6:03:4e:d8:1e:d8:70:35: 1e:15:b7:cd:55:da:3d:b4:52:de:fd:c6:8e:ef:4f:5f:eb:78: fd:e9:86:a2:70:8d:61:a6:b5:be:8d:1c:94:7f:c4:6e:ad:63: 77:f5:c6:43:bd:5a:e3:a6:a4:61:b3:81:99:7b:17:9c:b4:ef: 35:f1:22:40:26:36:c3:98:29:eb:cb:24:c7:ac:b8:f2:b4:6c: 28:7d:32:72:9d:a4:4e:4f:20:9c:95:f7:a8:69:1e:f8:8d:0f: 70:f1:fb:54:9f:4f:2f:44:1c:99:55:f8:5e:e3:fa:32:d4:b9: 4a:7b:be:1c:02:ac:ed:b0:8a:6c:b5:e8:dc:15:59:0a:62:37: 37:6a:b3:79:0c:85:45:f3:4b:51:9e:ad:e9:7a:c3:df:a0:82: 1c:e5:bb:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQtiK77DQN1VSLv1IH8INaJLRTNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2OUY5NzdBOEZCNUYxQ0E5NjcwNUQ2MkVCRUVBQ0U0 NkJGRDlENjAeFw0yNTA2MTYxNzM2MjNaFw0yNTA2MTcxODA2MjNaMDMxMTAvBgNV BAMTKEQ1NTY4REY0NDdDMDFFQkM2OEE3NDhFMUUyRUVBODk3NDFGMDI3MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDVHJ7UFGcKHDrayHYXiswHrFG tzZ0aFCHWVQd4D3yy+L9gem4LthXRzRxqK1D/+wcaKJTY71s4H8cp5ua6KQVKiSs WwFyol7NK1bsoRMBFWJo49iauWYN/WX/zWQigLanPXptHiSTdIqDwJhdpaEZRZaV DFSZQuB+L8+QtLji74q2Jb08rV4t0AsDwU90ktJ2HleHtdXWRhEwpbaCPY+hDtO9 Q9oZxw74UXcK+wJ8mZcU2/B5HWIa5QHKmDHdazVOXlXc3XjZfvMlCFHL1yJ1qCm8 QGXIr31oieOe8eXweo+QQU/zCX1yRmP3rkjCJALwAsu71oee47+a25hVoVN5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1VaN9EfAHrxop0jh4u6ol0HwJwwwHwYDVR0j BBgwFoAUr2n5d6j7XxypZwXWLr7qzka/2dYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHoyNUI2MUtva1MxZVZXVU1UeEJIRlB1NWU0c055QWdBTkRiZmd1VXVL dGovMC9BRjY5Rjk3N0E4RkI1RjFDQTk2NzA1RDYyRUJFRUFDRTQ2QkZEOUQ2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNjlGOTc3QThGQjVGMUNB OTY3MDVENjJFQkVFQUNFNDZCRkQ5RDYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHoyNUI2MUtva1MxZVZXVU1UeEJIRlB1NWU0c055QWdBTkRiZmd1VXVLdGovMC9B RjY5Rjk3N0E4RkI1RjFDQTk2NzA1RDYyRUJFRUFDRTQ2QkZEOUQ2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKoVQZmdAJ1tf/mV4OFF9dtfdOjPXe5JWkgYqeXs+CPbt7rxIdXdP/YpYjm+8 Z5epdswVuECaovI1y9BRZT0plESE09cn+nVCbtyV4N29+LiNBD8EkIFEVrsLHCDY AIF3IOCQW8YDTtge2HA1HhW3zVXaPbRS3v3Gju9PX+t4/emGonCNYaa1vo0clH/E bq1jd/XGQ71a46akYbOBmXsXnLTvNfEiQCY2w5gp68skx6y48rRsKH0ycp2kTk8g nJX3qGke+I0PcPH7VJ9PL0QcmVX4XuP6MtS5Snu+HAKs7bCKbLXo3BVZCmI3N2qz eQyFRfNLUZ6t6XrD36CCHOW7dQ== -----END CERTIFICATE-----Generated at Tue Jun 17 01:36:43 2025 by rpki-client