$ rpki-client -vvf rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.mft File: D72D3F46524FD32B12A8857ADA6A36351587C90E.mft (raw, json) Hash identifier: hp2DKekrVY6AR8atBbZV+mzIHMU59risbDTS4+yZ27Q= Subject key identifier: 1D:60:2E:4E:D4:2F:52:94:71:30:23:F5:34:62:58:A2:A4:4D:55:F2 Authority key identifier: D7:2D:3F:46:52:4F:D3:2B:12:A8:85:7A:DA:6A:36:35:15:87:C9:0E Certificate issuer: /CN=D72D3F46524FD32B12A8857ADA6A36351587C90E Certificate serial: ADEBDEA7A0A4B1F90E0A6FB13AD6F56195F181 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D72D3F46524FD32B12A8857ADA6A36351587C90E.cer Subject info access: rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.mft Manifest number: 3D Signing time: Thu 19 Jun 2025 07:52:31 +0000 Manifest this update: Thu 19 Jun 2025 07:47:31 +0000 Manifest next update: Fri 20 Jun 2025 11:31:31 +0000 Files and hashes: 1: D72D3F46524FD32B12A8857ADA6A36351587C90E.crl (hash: GR3k2b1qagOs/g50EtxQQKlMVfVyfVFrv4geb5E/asU=) 2: 323830343a313334383a3a2f33322d3438203d3e20323633353236.roa (hash: 4IqY6bCQyoXzC2os25yTR1czK6/VXqAkjmT52V5zXn0=) 3: 3136382e3232372e3133362e302f32322d3234203d3e20323633353236.roa (hash: wxO2HWruIc267ooUXcBOclGbDVuFfgiJr4HNWI0zXcc=) 4: 3139312e3235332e32302e302f32322d3234203d3e20323633353236.roa (hash: 8VduWI6q3z2//+F/2lXJ91+usvdBT+2WkfCrAhcQiQc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.crl rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D72D3F46524FD32B12A8857ADA6A36351587C90E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 08:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ad:eb:de:a7:a0:a4:b1:f9:0e:0a:6f:b1:3a:d6:f5:61:95:f1:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D72D3F46524FD32B12A8857ADA6A36351587C90E Validity Not Before: Jun 19 07:47:31 2025 GMT Not After : Jun 20 11:31:31 2025 GMT Subject: CN=1D602E4ED42F5294713023F5346258A2A44D55F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0d:dd:2e:73:39:02:d6:a1:ea:d2:10:be:e8: 4b:ef:6b:76:36:2e:70:eb:9b:74:a6:d4:88:00:a4: 25:7f:aa:db:c5:56:27:46:52:66:9e:51:72:83:cc: 8b:65:08:37:b8:58:0d:79:d2:19:98:2c:80:57:d9: 14:49:2c:90:6b:29:c3:08:6c:82:83:5a:28:c3:62: 94:ac:83:19:85:d2:ba:7f:62:53:5b:f1:6b:96:32: d2:0b:bc:9b:55:27:e4:2b:9f:1d:14:c9:e3:d5:9f: a6:41:ff:49:ae:0d:a3:ae:3f:96:1e:d2:bc:5c:76: d0:6d:78:66:9f:82:f2:f9:2d:97:d1:1e:db:48:11: 13:b6:48:b0:66:48:45:73:71:bf:f2:e5:72:89:e8: 7c:e3:ba:a1:84:8a:72:fb:f5:b6:64:7c:bb:25:4b: 6a:2a:b3:3a:25:3a:03:af:a4:56:3b:5b:ea:d9:69: d5:7c:05:33:1d:cc:37:a8:f8:8c:84:3a:0b:67:69: e3:9a:19:42:d0:a1:26:c8:f3:e4:6f:6b:71:6e:9e: 70:f3:cb:be:72:3e:49:04:1a:ea:83:3f:c1:d1:f8: 64:d6:19:26:8e:5d:21:6f:f7:3b:2e:46:9e:09:16: 66:8e:93:1e:b7:6a:2c:69:87:e8:93:4d:d8:cf:5f: 46:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:60:2E:4E:D4:2F:52:94:71:30:23:F5:34:62:58:A2:A4:4D:55:F2 X509v3 Authority Key Identifier: keyid:D7:2D:3F:46:52:4F:D3:2B:12:A8:85:7A:DA:6A:36:35:15:87:C9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D72D3F46524FD32B12A8857ADA6A36351587C90E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:17:b7:a9:45:6b:9c:46:43:4c:4f:1d:36:20:ee:dd:82:c6: 18:78:4a:b3:70:5e:11:95:1a:7f:b6:08:df:4d:3b:54:c7:e3: 74:2e:a1:f5:0c:2a:1e:cb:82:10:3a:e0:f9:42:44:58:c1:30: b8:5f:61:2b:59:39:a4:29:cf:e6:cf:cf:0e:b8:dd:77:2c:53: bf:29:af:7c:e2:ff:e7:a2:cd:32:b0:96:60:53:8d:07:e8:9e: 98:0f:84:cd:f2:97:94:a4:74:80:0e:d4:12:f3:07:d1:b4:e8: 58:b6:77:2e:3a:e0:31:7e:4b:6b:80:68:64:79:60:9f:9d:e0: bb:09:3f:19:ed:fe:d4:f7:c7:6e:c8:05:e3:43:d5:32:26:18: 3f:ce:1c:64:6e:67:56:80:c8:94:f8:f3:ab:06:7c:79:1d:f7: ac:d4:e9:a3:e6:02:5f:7e:69:3a:39:86:27:b5:70:65:b1:36: d8:fd:6a:d9:2a:8c:1a:4b:9c:ee:3f:d6:41:dd:90:12:ab:20: 76:99:61:d6:6c:b9:e7:19:e3:30:8f:42:99:43:61:ee:fb:67: 1a:52:9b:d4:18:d1:ad:d1:79:e0:df:e6:85:10:4f:94:2b:05: b3:fc:1d:6c:69:d6:d1:a1:93:bf:a8:8d:ff:9c:17:84:fa:fb: 93:5a:45:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAK3r3qegpLH5DgpvsTrW9WGV8YEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcyRDNGNDY1MjRGRDMyQjEyQTg4NTdBREE2QTM2MzUx NTg3QzkwRTAeFw0yNTA2MTkwNzQ3MzFaFw0yNTA2MjAxMTMxMzFaMDMxMTAvBgNV BAMTKDFENjAyRTRFRDQyRjUyOTQ3MTMwMjNGNTM0NjI1OEEyQTQ0RDU1RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUDd0uczkC1qHq0hC+6Evva3Y2 LnDrm3Sm1IgApCV/qtvFVidGUmaeUXKDzItlCDe4WA150hmYLIBX2RRJLJBrKcMI bIKDWijDYpSsgxmF0rp/YlNb8WuWMtILvJtVJ+Qrnx0UyePVn6ZB/0muDaOuP5Ye 0rxcdtBteGafgvL5LZfRHttIERO2SLBmSEVzcb/y5XKJ6HzjuqGEinL79bZkfLsl S2oqszolOgOvpFY7W+rZadV8BTMdzDeo+IyEOgtnaeOaGULQoSbI8+Rva3FunnDz y75yPkkEGuqDP8HR+GTWGSaOXSFv9zsuRp4JFmaOkx63aixph+iTTdjPX0bvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHWAuTtQvUpRxMCP1NGJYoqRNVfIwHwYDVR0j BBgwFoAU1y0/RlJP0ysSqIV62mo2NRWHyQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWpqZk14cUtVTUs0NmVieWRWQWpyVFhUZXhpRUduSGpCaEdWYVVXVnBj YXEvMC9ENzJEM0Y0NjUyNEZEMzJCMTJBODg1N0FEQTZBMzYzNTE1ODdDOTBFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3MkQzRjQ2NTI0RkQzMkIx MkE4ODU3QURBNkEzNjM1MTU4N0M5MEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWpqZk14cUtVTUs0NmVieWRWQWpyVFhUZXhpRUduSGpCaEdWYVVXVnBjYXEvMC9E NzJEM0Y0NjUyNEZEMzJCMTJBODg1N0FEQTZBMzYzNTE1ODdDOTBFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkxe3qUVrnEZDTE8dNiDu3YLGGHhKs3BeEZUaf7YI3007VMfjdC6h9QwqHsuC EDrg+UJEWMEwuF9hK1k5pCnP5s/PDrjddyxTvymvfOL/56LNMrCWYFONB+iemA+E zfKXlKR0gA7UEvMH0bToWLZ3LjrgMX5La4BoZHlgn53guwk/Ge3+1PfHbsgF40PV MiYYP84cZG5nVoDIlPjzqwZ8eR33rNTpo+YCX35pOjmGJ7VwZbE22P1q2SqMGkuc 7j/WQd2QEqsgdplh1my55xnjMI9CmUNh7vtnGlKb1BjRrdF54N/mhRBPlCsFs/wd bGnW0aGTv6iN/5wXhPr7k1pFsg== -----END CERTIFICATE-----Generated at Thu Jun 19 12:22:40 2025 by rpki-client