$ rpki-client -vvf rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/EE8233F1CB1F21F30C90968BCE1B449A4776B768.mft File: EE8233F1CB1F21F30C90968BCE1B449A4776B768.mft (raw, json) Hash identifier: dljBYqeHLUbEHBrdf8z1cvp7zKFHyLxkvdvh/m5JGx0= Subject key identifier: A6:11:35:AC:2F:2B:8A:77:0F:8A:43:0B:41:32:26:2A:0E:3D:72:8E Authority key identifier: EE:82:33:F1:CB:1F:21:F3:0C:90:96:8B:CE:1B:44:9A:47:76:B7:68 Certificate issuer: /CN=EE8233F1CB1F21F30C90968BCE1B449A4776B768 Certificate serial: 2A4AAF27BEA14A9257C55AF9BD9EFD2F9492EE46 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8233F1CB1F21F30C90968BCE1B449A4776B768.cer Subject info access: rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/EE8233F1CB1F21F30C90968BCE1B449A4776B768.mft Manifest number: 023C Signing time: Tue 17 Jun 2025 08:16:37 +0000 Manifest this update: Tue 17 Jun 2025 08:11:37 +0000 Manifest next update: Wed 18 Jun 2025 10:37:37 +0000 Files and hashes: 1: 3230302e362e34342e302f32322d3234203d3e203533303732.roa (hash: NKPxzRS8W4gPll6O1HUvKkSy2pz1IiteTW269RYxIR0=) 2: 323830343a3538343a3a2f33322d3335203d3e203533303732.roa (hash: l8MTsY7EBi0UNiOnf8MrrZZoMNDvDZlKWNAzh6o96HA=) 3: 3138372e38362e3234302e302f32302d3234203d3e203533303732.roa (hash: wYY4D58ESPeNy3EKElZg0h67p26qsJQsAYYkDdcSsoc=) 4: EE8233F1CB1F21F30C90968BCE1B449A4776B768.crl (hash: syV6Rt5TQ5aOThmX4qY0DwvvhQFLolnU1ae3iJsbRt8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/EE8233F1CB1F21F30C90968BCE1B449A4776B768.crl rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/EE8233F1CB1F21F30C90968BCE1B449A4776B768.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8233F1CB1F21F30C90968BCE1B449A4776B768.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 10:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:4a:af:27:be:a1:4a:92:57:c5:5a:f9:bd:9e:fd:2f:94:92:ee:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE8233F1CB1F21F30C90968BCE1B449A4776B768 Validity Not Before: Jun 17 08:11:37 2025 GMT Not After : Jun 18 10:37:37 2025 GMT Subject: CN=A61135AC2F2B8A770F8A430B4132262A0E3D728E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9a:b5:e2:b9:c9:12:ce:ae:9b:d6:c4:5d:0e: d9:6c:1b:d9:58:0f:35:6a:7e:f6:b6:2f:51:c7:6d: 6c:ee:4c:a9:68:c4:99:bf:3f:2b:5b:41:0e:10:d9: fa:f1:15:a1:53:41:10:40:45:1a:c6:75:21:37:ee: ad:b1:ec:b6:b1:cd:25:5b:f4:ae:4e:da:1c:69:c6: 96:a7:62:71:f8:ba:d3:bd:0e:78:48:40:73:bf:25: 2e:a1:17:d4:6c:56:29:57:2c:80:91:d7:9f:8b:4a: 73:81:14:bc:b2:4b:c6:fe:a2:de:16:c5:62:37:7a: dc:2d:7c:ce:bf:00:b3:16:83:38:93:8a:a4:0b:1f: 4a:8d:c0:87:07:01:bb:77:b8:64:f4:23:f9:4c:9e: 78:63:ff:49:70:59:e9:74:20:b8:01:86:3d:e7:dd: a9:92:45:2b:72:90:e1:7a:ec:d2:3a:ec:2a:7a:25: 7e:64:40:28:85:70:72:09:0a:b1:09:30:d4:62:d7: 20:34:de:90:eb:cd:f5:5e:1a:6f:f1:c9:3a:87:f5: 0d:f9:32:6a:9e:09:ef:1d:38:aa:81:5d:ff:cf:58: c4:75:83:43:55:a5:e7:00:cf:f7:03:c8:3d:3b:d1: 96:60:5f:3e:3f:31:32:5d:35:11:3b:e3:84:69:fb: b7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:11:35:AC:2F:2B:8A:77:0F:8A:43:0B:41:32:26:2A:0E:3D:72:8E X509v3 Authority Key Identifier: keyid:EE:82:33:F1:CB:1F:21:F3:0C:90:96:8B:CE:1B:44:9A:47:76:B7:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/EE8233F1CB1F21F30C90968BCE1B449A4776B768.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8233F1CB1F21F30C90968BCE1B449A4776B768.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/EE8233F1CB1F21F30C90968BCE1B449A4776B768.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e2:0e:5d:6a:6e:a4:b3:53:6f:41:ef:75:dd:dc:e2:b5:bf: b1:cf:67:4b:7e:6c:87:45:0a:bf:e8:a6:40:9b:a8:5e:61:91: d5:5b:0c:6a:f5:d2:89:78:d8:26:22:38:6e:63:f9:08:18:2a: 57:9e:c4:07:5a:6e:70:2c:90:f9:59:21:bb:9d:d9:37:70:bd: 71:a4:20:37:00:d8:93:28:9c:c5:bf:e4:57:2a:95:f5:6c:b1: 43:72:1a:9b:aa:84:8a:98:4a:64:e6:f6:12:9c:fc:be:71:9b: 2a:37:92:90:e0:d3:0d:26:74:f8:93:03:28:8b:73:b4:85:93: f8:8c:1b:7f:51:36:d3:57:cc:14:aa:c7:9f:2d:2b:1c:d6:61: 6e:92:a7:ab:fe:4d:69:46:06:bd:81:6d:9f:7f:3d:90:46:45: 90:ba:95:e3:8b:aa:03:d7:0f:72:0e:29:ab:ac:9a:0c:c7:51: c2:fc:33:60:7b:81:83:8e:65:3e:2a:f6:07:22:80:b0:d9:a9: cf:c5:58:1b:24:f8:c9:18:0a:21:94:94:e6:ea:6f:05:f7:f1: dc:5f:e0:b8:4b:f4:8e:bf:b1:13:37:ca:a8:0c:0e:41:e4:30: 4a:60:f4:1d:98:3c:4e:66:56:60:6b:07:67:f6:07:99:80:d3: 80:38:f5:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKkqvJ76hSpJXxVr5vZ79L5SS7kYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU4MjMzRjFDQjFGMjFGMzBDOTA5NjhCQ0UxQjQ0OUE0 Nzc2Qjc2ODAeFw0yNTA2MTcwODExMzdaFw0yNTA2MTgxMDM3MzdaMDMxMTAvBgNV BAMTKEE2MTEzNUFDMkYyQjhBNzcwRjhBNDMwQjQxMzIyNjJBMEUzRDcyOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYmrXiuckSzq6b1sRdDtlsG9lY DzVqfva2L1HHbWzuTKloxJm/PytbQQ4Q2frxFaFTQRBARRrGdSE37q2x7LaxzSVb 9K5O2hxpxpanYnH4utO9DnhIQHO/JS6hF9RsVilXLICR15+LSnOBFLyyS8b+ot4W xWI3etwtfM6/ALMWgziTiqQLH0qNwIcHAbt3uGT0I/lMnnhj/0lwWel0ILgBhj3n 3amSRStykOF67NI67Cp6JX5kQCiFcHIJCrEJMNRi1yA03pDrzfVeGm/xyTqH9Q35 MmqeCe8dOKqBXf/PWMR1g0NVpecAz/cDyD070ZZgXz4/MTJdNRE744Rp+7cfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUphE1rC8rincPikMLQTImKg49co4wHwYDVR0j BBgwFoAU7oIz8csfIfMMkJaLzhtEmkd2t2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOW40amNBOW5nOWJuekFERXlnUkpEdDV2eGpiN3ltenBESDE4ZWkxYnUy S0IvMC9FRTgyMzNGMUNCMUYyMUYzMEM5MDk2OEJDRTFCNDQ5QTQ3NzZCNzY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFODIzM0YxQ0IxRjIxRjMw QzkwOTY4QkNFMUI0NDlBNDc3NkI3NjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OW40amNBOW5nOWJuekFERXlnUkpEdDV2eGpiN3ltenBESDE4ZWkxYnUyS0IvMC9F RTgyMzNGMUNCMUYyMUYzMEM5MDk2OEJDRTFCNDQ5QTQ3NzZCNzY4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbeIOXWpupLNTb0Hvdd3c4rW/sc9nS35sh0UKv+imQJuoXmGR1VsMavXSiXjY JiI4bmP5CBgqV57EB1pucCyQ+Vkhu53ZN3C9caQgNwDYkyicxb/kVyqV9WyxQ3Ia m6qEiphKZOb2Epz8vnGbKjeSkODTDSZ0+JMDKItztIWT+Iwbf1E201fMFKrHny0r HNZhbpKnq/5NaUYGvYFtn389kEZFkLqV44uqA9cPcg4pq6yaDMdRwvwzYHuBg45l Pir2ByKAsNmpz8VYGyT4yRgKIZSU5upvBffx3F/guEv0jr+xEzfKqAwOQeQwSmD0 HZg8TmZWYGsHZ/YHmYDTgDj1pA== -----END CERTIFICATE-----Generated at Tue Jun 17 10:37:35 2025 by rpki-client