$ rpki-client -vvf rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft File: C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft (raw, json) Hash identifier: afs2Hmk7tyaPYM27U8ML6zvJtWLtNbzTfA8qUcirpY0= Subject key identifier: D4:AA:B9:43:F0:8C:64:98:3C:37:AF:4F:F5:6D:83:4B:41:37:2C:F6 Authority key identifier: C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B Certificate issuer: /CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B Certificate serial: 09E994232D98FB535D6BDA11BB498A698366E811 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer Subject info access: rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft Manifest number: 01C7 Signing time: Sat 21 Jun 2025 05:19:37 +0000 Manifest this update: Sat 21 Jun 2025 05:14:37 +0000 Manifest next update: Sun 22 Jun 2025 08:40:37 +0000 Files and hashes: 1: 323830343a373739383a3a2f33342d313238203d3e20323731313838.roa (hash: cQjGN5WENW46/jBuhJA1lT+mTYrjHprWmDjgq2R5zjY=) 2: 3230302e362e34382e302f32342d3332203d3e20323731313838.roa (hash: HXzDFfjvaudy+HCQJ3LevFAJF+IlNvHbKDb7azvjpI4=) 3: C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl (hash: 33Rt9Icc8URdKtOAJbQQBGoi/diDHDlwKXfTwVeieFE=) 4: 323830343a373739383a3a2f33322d313238203d3e20323731313838.roa (hash: Oq8XP3wv/ghsrdwyvbkipNglCVLH6ofbbhpDuh9rzrI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Jun 2025 08:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e9:94:23:2d:98:fb:53:5d:6b:da:11:bb:49:8a:69:83:66:e8:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B Validity Not Before: Jun 21 05:14:37 2025 GMT Not After : Jun 22 08:40:37 2025 GMT Subject: CN=D4AAB943F08C64983C37AF4FF56D834B41372CF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:d6:0f:47:6c:bc:43:26:fd:d3:75:82:88: 71:e4:a8:98:43:b4:45:f1:0a:0e:08:39:f5:2d:5d: 30:59:4e:27:eb:28:b4:21:32:12:38:9b:c8:e2:64: eb:d9:21:c8:91:38:34:bd:10:7b:ca:a7:c5:81:0b: 2e:88:4a:8a:08:05:4f:9e:63:41:8f:03:08:eb:92: 36:15:7e:f2:dd:57:51:2d:03:ae:e0:58:cc:02:2a: 8d:b4:3a:62:76:92:ea:be:59:6d:08:22:3e:59:5e: f6:6c:86:c2:8d:59:b9:f6:ba:75:2a:08:97:7e:cd: e0:76:d1:ba:92:01:1b:57:5f:69:37:34:c3:8a:95: 1a:62:83:67:72:43:f1:82:cc:d1:0c:4f:00:7a:e9: 7b:ee:86:1e:91:cc:eb:18:5b:2d:f8:17:80:1c:d0: bb:ac:1c:38:57:49:fb:e2:e5:7b:9c:ab:af:90:7b: c3:fe:e1:d1:5d:2c:1b:e8:f8:56:06:78:3f:77:9b: d6:96:74:fc:33:b0:44:e7:db:e0:c5:05:91:69:14: f8:e6:4c:ea:04:31:47:66:7f:9e:f1:ce:f5:e0:89: 8a:76:80:0c:84:d7:7b:2a:06:0a:4f:8b:18:14:ee: 7c:88:65:b4:26:92:2a:52:af:c3:08:08:c2:01:75: 15:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AA:B9:43:F0:8C:64:98:3C:37:AF:4F:F5:6D:83:4B:41:37:2C:F6 X509v3 Authority Key Identifier: keyid:C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ed:bd:87:2d:ae:4d:6e:21:83:67:d9:65:c1:79:b0:ea:cd: 98:e2:38:9a:f1:20:5b:7c:6a:49:52:03:c4:83:46:94:d5:9c: 4a:e2:76:e8:d5:dd:fb:5f:6b:33:6c:f8:39:3f:4c:1c:07:9c: e2:ee:05:b2:10:d2:f4:43:a6:2c:f9:9f:e7:67:86:a1:12:de: c2:d8:53:35:e9:f9:f6:59:9e:6f:4d:ca:f3:d1:e9:f2:15:7b: d1:2e:23:53:15:d3:94:7a:18:90:61:b3:7a:54:6c:74:fc:25: a1:d0:f3:db:e3:8e:f6:c1:af:14:9a:27:7a:3f:9a:d1:75:58: 53:88:38:c2:21:31:9e:9f:4e:d2:80:8c:8b:9d:28:31:89:f9: 31:6a:db:f6:90:1d:c2:2b:e0:e6:7b:2e:a7:14:49:ef:8f:dd: cc:5a:40:d2:13:0d:d0:c4:b8:d4:f0:b2:ea:2b:15:89:a6:84: 37:c5:38:74:0f:8c:38:73:77:f1:b3:3a:b8:11:c0:97:d2:a5: 67:a7:d2:94:7b:dc:ad:50:9b:2d:1b:71:ce:06:0a:da:1d:1d: 60:db:32:ae:72:8c:1a:a2:18:d7:5e:0a:63:31:64:8f:97:96: 9e:70:c0:0b:a6:b2:ad:d0:bd:e5:a2:f5:bc:c7:36:7e:38:47: 40:4e:95:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCemUIy2Y+1Nda9oRu0mKaYNm6BEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlEQjhFQTExRjZBNUE0ODVBRUMyOTU1NjE0MzgxNURC MjUwN0EzQjAeFw0yNTA2MjEwNTE0MzdaFw0yNTA2MjIwODQwMzdaMDMxMTAvBgNV BAMTKEQ0QUFCOTQzRjA4QzY0OTgzQzM3QUY0RkY1NkQ4MzRCNDEzNzJDRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDButYPR2y8Qyb903WCiHHkqJhD tEXxCg4IOfUtXTBZTifrKLQhMhI4m8jiZOvZIciRODS9EHvKp8WBCy6ISooIBU+e Y0GPAwjrkjYVfvLdV1EtA67gWMwCKo20OmJ2kuq+WW0IIj5ZXvZshsKNWbn2unUq CJd+zeB20bqSARtXX2k3NMOKlRpig2dyQ/GCzNEMTwB66Xvuhh6RzOsYWy34F4Ac 0LusHDhXSfvi5Xucq6+Qe8P+4dFdLBvo+FYGeD93m9aWdPwzsETn2+DFBZFpFPjm TOoEMUdmf57xzvXgiYp2gAyE13sqBgpPixgU7nyIZbQmkipSr8MICMIBdRWDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1Kq5Q/CMZJg8N69P9W2DS0E3LPYwHwYDVR0j BBgwFoAUyduOoR9qWkha7ClVYUOBXbJQejswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVRXeFpWUzVMSnpMdlVYdmdrM2RvUjlhRjZoMW9nWEFCMkM1bWtlZ0p2 SzQvMC9DOURCOEVBMTFGNkE1QTQ4NUFFQzI5NTU2MTQzODE1REIyNTA3QTNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5REI4RUExMUY2QTVBNDg1 QUVDMjk1NTYxNDM4MTVEQjI1MDdBM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVRXeFpWUzVMSnpMdlVYdmdrM2RvUjlhRjZoMW9nWEFCMkM1bWtlZ0p2SzQvMC9D OURCOEVBMTFGNkE1QTQ4NUFFQzI5NTU2MTQzODE1REIyNTA3QTNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApe29hy2uTW4hg2fZZcF5sOrNmOI4mvEgW3xqSVIDxINGlNWcSuJ26NXd+19r M2z4OT9MHAec4u4FshDS9EOmLPmf52eGoRLewthTNen59lmeb03K89Hp8hV70S4j UxXTlHoYkGGzelRsdPwlodDz2+OO9sGvFJonej+a0XVYU4g4wiExnp9O0oCMi50o MYn5MWrb9pAdwivg5nsupxRJ74/dzFpA0hMN0MS41PCy6isViaaEN8U4dA+MOHN3 8bM6uBHAl9KlZ6fSlHvcrVCbLRtxzgYK2h0dYNsyrnKMGqIY114KYzFkj5eWnnDA C6ayrdC95aL1vMc2fjhHQE6V/w== -----END CERTIFICATE-----Generated at Sat Jun 21 21:01:23 2025 by rpki-client