$ rpki-client -vvf rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft File: CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft (raw, json) Hash identifier: aV41Aw6XtVGQLBwkbz7R5+ix3tx635NkofbCdpyaG40= Subject key identifier: FD:15:9F:2B:0B:3A:57:C0:5B:C0:6B:00:F9:30:99:E4:BB:0C:26:0A Authority key identifier: CF:C8:86:EC:4D:9F:2C:4A:31:EE:53:AC:15:71:4B:D4:E7:02:87:52 Certificate issuer: /CN=CFC886EC4D9F2C4A31EE53AC15714BD4E7028752 Certificate serial: 44A70834D07BA8B7580BB2B71E7CEFF1C8F879C8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer Subject info access: rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft Manifest number: 12 Signing time: Sun 15 Jun 2025 14:24:42 +0000 Manifest this update: Sun 15 Jun 2025 14:19:42 +0000 Manifest next update: Mon 16 Jun 2025 15:09:42 +0000 Files and hashes: 1: 3136382e3230352e35322e302f32322d3234203d3e20323634383631.roa (hash: sszuikLyJCfK/q7HZ7Bf5gDMhQQ8QEhvjEDczDvmx9s=) 2: CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl (hash: SEc1LllCHBMLEJJ8c1ywupRqIqYo8o3wJ62wLmLD/NU=) 3: 323830343a326565633a3a2f33322d3438203d3e20323634383631.roa (hash: Pmd2oHMVN3RO65spy8KBeP91n4F+2uJwEIYTdWohKkU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 15:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a7:08:34:d0:7b:a8:b7:58:0b:b2:b7:1e:7c:ef:f1:c8:f8:79:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFC886EC4D9F2C4A31EE53AC15714BD4E7028752 Validity Not Before: Jun 15 14:19:42 2025 GMT Not After : Jun 16 15:09:42 2025 GMT Subject: CN=FD159F2B0B3A57C05BC06B00F93099E4BB0C260A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:67:a5:d7:6e:77:34:01:1e:27:b1:6e:da: 6a:a7:47:31:3e:8c:92:3a:2c:d1:f5:6b:f4:46:4a: d4:41:8f:e4:33:f7:49:8f:f8:94:1d:ea:02:9b:d1: 3f:e5:70:ce:fc:84:22:e3:f8:15:c3:4f:18:3a:4f: 47:7e:0b:e8:3d:6d:61:0a:1d:8f:05:a1:fd:f4:d1: ce:b7:27:02:23:14:86:3f:44:2f:d0:c7:bd:d5:83: 61:83:55:7e:2a:77:15:24:d6:3d:72:dd:2d:fa:4f: 42:fb:ce:73:52:c9:d6:b8:d5:6c:de:52:f9:b1:69: b4:d8:43:ff:35:ec:04:04:34:91:23:34:77:f1:9c: 14:3d:5a:43:e4:48:d4:df:14:e8:e7:a2:b2:5f:ec: 26:57:5e:fe:1b:ae:d5:64:26:22:c3:3c:01:38:cb: ca:9b:1d:f1:64:91:69:b9:ce:0a:07:0e:7e:18:94: ac:a1:05:e8:d8:cf:77:db:71:cc:51:05:ff:e5:46: 9e:b0:f3:2a:2c:cb:8f:e2:ee:de:b6:45:7d:eb:83: 9e:10:ed:89:2f:e1:7a:69:1b:fc:fc:a4:fe:36:5d: c9:11:61:ca:3c:3f:5a:19:f2:60:80:04:6d:4c:ce: 1a:83:71:99:85:c1:3d:27:5b:d4:f3:1e:db:fb:7c: 2e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:15:9F:2B:0B:3A:57:C0:5B:C0:6B:00:F9:30:99:E4:BB:0C:26:0A X509v3 Authority Key Identifier: keyid:CF:C8:86:EC:4D:9F:2C:4A:31:EE:53:AC:15:71:4B:D4:E7:02:87:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:64:cb:52:e4:3e:fd:12:61:2f:93:78:7c:a9:71:db:b7:6b: ac:ac:a4:b5:be:b9:e0:82:e8:a7:79:e4:5c:a1:d0:07:76:66: b4:2f:a6:0d:81:06:e6:42:9e:87:94:c6:3b:80:62:04:14:22: 71:22:d2:91:27:50:aa:76:54:36:a7:ac:7a:da:95:83:11:84: 2e:18:d0:38:89:73:60:91:dd:37:61:6e:58:f0:9e:45:02:10: 2d:d5:49:ad:14:5e:93:88:67:88:86:7f:fb:6d:8f:1d:c7:cc: 40:db:81:fc:88:80:e5:5b:9e:fd:4c:6e:6b:f4:fb:a5:aa:3f: 8f:38:2b:77:80:85:c9:82:a3:f6:6b:d1:d9:64:32:37:f4:88: 5e:5a:01:45:d0:5c:df:76:10:cf:13:c3:1d:ec:c5:f1:14:a1: 50:c0:b6:cd:29:14:35:d1:24:d8:9f:f8:26:01:05:90:77:8b: 9d:e5:81:6b:73:52:0e:b8:4d:23:23:8f:69:99:85:64:25:39: 23:a7:49:c7:b8:b6:65:62:59:d6:72:ce:a4:4a:0c:29:14:55: 88:59:bd:18:46:d4:0c:8e:c6:3d:b0:22:2c:46:8e:d4:d5:fb: 33:be:e1:40:1f:d3:b3:a2:87:dc:70:2d:9e:26:b8:b3:23:13: 0e:87:49:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURKcINNB7qLdYC7K3Hnzv8cj4ecgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZDODg2RUM0RDlGMkM0QTMxRUU1M0FDMTU3MTRCRDRF NzAyODc1MjAeFw0yNTA2MTUxNDE5NDJaFw0yNTA2MTYxNTA5NDJaMDMxMTAvBgNV BAMTKEZEMTU5RjJCMEIzQTU3QzA1QkMwNkIwMEY5MzA5OUU0QkIwQzI2MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4m2el1253NAEeJ7Fu2mqnRzE+ jJI6LNH1a/RGStRBj+Qz90mP+JQd6gKb0T/lcM78hCLj+BXDTxg6T0d+C+g9bWEK HY8Fof300c63JwIjFIY/RC/Qx73Vg2GDVX4qdxUk1j1y3S36T0L7znNSyda41Wze UvmxabTYQ/817AQENJEjNHfxnBQ9WkPkSNTfFOjnorJf7CZXXv4brtVkJiLDPAE4 y8qbHfFkkWm5zgoHDn4YlKyhBejYz3fbccxRBf/lRp6w8yosy4/i7t62RX3rg54Q 7Ykv4XppG/z8pP42XckRYco8P1oZ8mCABG1MzhqDcZmFwT0nW9TzHtv7fC5vAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/RWfKws6V8BbwGsA+TCZ5LsMJgowHwYDVR0j BBgwFoAUz8iG7E2fLEox7lOsFXFL1OcCh1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUJ0b2F0UDY4RWRKeWd0U1hobUdKNUFQSFJ0czlYNDVETUdKSlNZV2Q4 U0wvMC9DRkM4ODZFQzREOUYyQzRBMzFFRTUzQUMxNTcxNEJENEU3MDI4NzUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGQzg4NkVDNEQ5RjJDNEEz MUVFNTNBQzE1NzE0QkQ0RTcwMjg3NTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUJ0b2F0UDY4RWRKeWd0U1hobUdKNUFQSFJ0czlYNDVETUdKSlNZV2Q4U0wvMC9D RkM4ODZFQzREOUYyQzRBMzFFRTUzQUMxNTcxNEJENEU3MDI4NzUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYWTLUuQ+/RJhL5N4fKlx27drrKyktb654ILop3nkXKHQB3ZmtC+mDYEG5kKe h5TGO4BiBBQicSLSkSdQqnZUNqesetqVgxGELhjQOIlzYJHdN2FuWPCeRQIQLdVJ rRRek4hniIZ/+22PHcfMQNuB/IiA5Vue/Uxua/T7pao/jzgrd4CFyYKj9mvR2WQy N/SIXloBRdBc33YQzxPDHezF8RShUMC2zSkUNdEk2J/4JgEFkHeLneWBa3NSDrhN IyOPaZmFZCU5I6dJx7i2ZWJZ1nLOpEoMKRRViFm9GEbUDI7GPbAiLEaO1NX7M77h QB/Ts6KH3HAtnia4syMTDodJaw== -----END CERTIFICATE-----Generated at Mon Jun 16 07:00:56 2025 by rpki-client