$ rpki-client -vvf rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft File: B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft (raw, json) Hash identifier: 2v5OTnoXGgqX7kvT55aPRtMSUnptyk8Xe1LqUiSNyc0= Subject key identifier: DA:96:56:0E:EE:BC:FE:50:DB:03:8E:2F:17:EF:02:C6:37:A2:B7:99 Authority key identifier: B6:52:7C:B6:A3:B1:2B:9F:9A:B2:1D:CC:B0:50:B5:90:A8:DF:5B:FE Certificate issuer: /CN=B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE Certificate serial: 101F92BB7B50370BA0839ECCAED449AB4F81AEA7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer Subject info access: rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft Manifest number: 0219 Signing time: Tue 17 Jun 2025 04:12:20 +0000 Manifest this update: Tue 17 Jun 2025 04:07:20 +0000 Manifest next update: Wed 18 Jun 2025 07:30:20 +0000 Files and hashes: 1: 323830343a323639343a3a2f33322d3336203d3e20323633383430.roa (hash: Suyd1BGQfCVfrKz7eXe3gTSFcsCn18+rgyvtqMeiLXU=) 2: 3133382e3138352e3132342e302f32322d3234203d3e20323633383430.roa (hash: nTHnk58+NlGCzA2boJphxaatQL1TrBKE4lQslsXvu7o=) 3: B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.crl (hash: kMUcnF51t0WkA0kgolyl7EWwDOck++V7eO30rfVGKxw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.crl rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 07:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:1f:92:bb:7b:50:37:0b:a0:83:9e:cc:ae:d4:49:ab:4f:81:ae:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE Validity Not Before: Jun 17 04:07:20 2025 GMT Not After : Jun 18 07:30:20 2025 GMT Subject: CN=DA96560EEEBCFE50DB038E2F17EF02C637A2B799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:45:51:98:a2:ba:0e:18:6a:b4:07:33:15:e3: 32:10:e7:70:aa:74:d6:a8:6f:85:ae:3f:6c:d9:30: 9f:b1:64:d7:87:97:3c:a5:16:5e:00:12:1f:f2:5f: e2:cc:ee:98:0a:5a:f7:a0:7f:6c:2d:d3:84:17:d3: 4a:94:62:36:43:e3:f1:68:b6:8b:8a:ff:13:03:d8: 24:98:41:16:b3:da:2b:ef:e8:bb:c3:8f:80:f9:d2: f1:3d:75:bc:1d:86:27:df:5b:03:25:3b:53:e1:b8: 2d:51:7f:5e:1c:0e:1a:c5:0f:cf:b0:b1:f3:65:4c: f6:f5:df:10:bf:37:af:99:08:61:d4:c5:88:59:c1: d2:6e:e5:8d:1f:8d:d9:ab:a0:f2:3f:57:d6:b4:72: 29:ac:0b:62:06:a9:54:26:ac:12:d2:70:89:5c:35: e5:d0:14:87:0e:ca:34:45:c6:73:b9:17:01:9b:e0: d1:38:4a:92:33:0a:50:92:8f:fb:d6:27:49:d4:a0: 6d:d5:d7:1a:ee:b4:69:18:17:9d:f2:ad:c0:99:ad: c4:de:64:6c:ac:0d:0c:0a:cf:83:5d:11:c2:ca:81: 5f:74:f6:08:0c:58:c8:8c:4c:4c:37:5d:ff:05:3d: 3c:11:fe:6a:4d:12:17:24:d6:d4:03:a7:6b:3c:81: 5b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:96:56:0E:EE:BC:FE:50:DB:03:8E:2F:17:EF:02:C6:37:A2:B7:99 X509v3 Authority Key Identifier: keyid:B6:52:7C:B6:A3:B1:2B:9F:9A:B2:1D:CC:B0:50:B5:90:A8:DF:5B:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:64:7d:30:58:67:ae:a7:fe:bb:b9:6c:1b:27:a1:f4:93:54: 11:28:9e:fe:92:38:1e:a3:8b:45:2a:7c:ad:5d:7a:36:cc:76: 63:a6:5e:70:d2:e1:e7:2e:34:63:09:83:94:15:60:22:60:c4: 6c:0c:ae:35:9e:22:ef:51:23:fd:67:98:09:fc:06:06:a1:82: 9b:75:a0:94:5f:de:e4:20:14:42:d2:3a:50:b2:11:f2:a9:fa: f0:10:53:25:93:0f:78:7c:64:ff:5d:98:07:0f:f2:a0:01:23: 98:e3:9b:20:60:78:e1:24:3d:44:b9:5c:4a:bc:cf:12:01:06: 4b:5b:ac:bc:34:cc:6e:a7:4d:1d:bf:e5:46:8c:fa:44:49:d2: 90:01:99:a6:e8:a0:07:5f:ef:94:a4:82:f1:b5:d5:05:18:fd: f0:bc:af:dd:23:35:0b:65:c2:84:4c:58:d3:3b:a1:f5:10:d8: a7:67:1f:15:16:11:95:69:27:64:f3:b7:3f:4e:3c:a6:bb:4c: ed:c1:fd:91:f9:fe:b6:ef:76:ec:1f:dc:51:8e:0e:38:49:bd: 42:cb:65:56:c4:7b:8e:e5:3e:80:c7:7e:27:b4:97:5f:d3:06: 14:46:8f:97:cd:19:88:ca:b2:37:2f:ed:cd:61:12:49:2c:d7: f8:d5:5e:10 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUEB+Su3tQNwugg57MrtRJq0+BrqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY1MjdDQjZBM0IxMkI5RjlBQjIxRENDQjA1MEI1OTBB OERGNUJGRTAeFw0yNTA2MTcwNDA3MjBaFw0yNTA2MTgwNzMwMjBaMDMxMTAvBgNV BAMTKERBOTY1NjBFRUVCQ0ZFNTBEQjAzOEUyRjE3RUYwMkM2MzdBMkI3OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaRVGYoroOGGq0BzMV4zIQ53Cq dNaob4WuP2zZMJ+xZNeHlzylFl4AEh/yX+LM7pgKWvegf2wt04QX00qUYjZD4/Fo touK/xMD2CSYQRaz2ivv6LvDj4D50vE9dbwdhiffWwMlO1PhuC1Rf14cDhrFD8+w sfNlTPb13xC/N6+ZCGHUxYhZwdJu5Y0fjdmroPI/V9a0cimsC2IGqVQmrBLScIlc NeXQFIcOyjRFxnO5FwGb4NE4SpIzClCSj/vWJ0nUoG3V1xrutGkYF53yrcCZrcTe ZGysDQwKz4NdEcLKgV909ggMWMiMTEw3Xf8FPTwR/mpNEhck1tQDp2s8gVv1AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU2pZWDu68/lDbA44vF+8Cxjeit5kwHwYDVR0j BBgwFoAUtlJ8tqOxK5+ash3MsFC1kKjfW/4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9Bb0NEeHQxdEFLWkQ2cVBVZ2NZNHQ2a3VUNVA0b05ZdU1CYmg5WkhtNERW LzAvQjY1MjdDQjZBM0IxMkI5RjlBQjIxRENDQjA1MEI1OTBBOERGNUJGRS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CNjUyN0NCNkEzQjEyQjlGOUFC MjFEQ0NCMDUwQjU5MEE4REY1QkZFLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fv Q0R4dDF0QUtaRDZxUFVnY1k0dDZrdVQ1UDRvTll1TUJiaDlaSG00RFYvMC9CNjUy N0NCNkEzQjEyQjlGOUFCMjFEQ0NCMDUwQjU5MEE4REY1QkZFLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA gWR9MFhnrqf+u7lsGyeh9JNUESie/pI4HqOLRSp8rV16Nsx2Y6ZecNLh5y40YwmD lBVgImDEbAyuNZ4i71Ej/WeYCfwGBqGCm3WglF/e5CAUQtI6ULIR8qn68BBTJZMP eHxk/12YBw/yoAEjmOObIGB44SQ9RLlcSrzPEgEGS1usvDTMbqdNHb/lRoz6REnS kAGZpuigB1/vlKSC8bXVBRj98Lyv3SM1C2XChExY0zuh9RDYp2cfFRYRlWknZPO3 P048prtM7cH9kfn+tu927B/cUY4OOEm9QstlVsR7juU+gMd+J7SXX9MGFEaPl80Z iMqyNy/tzWESSSzX+NVeEA== -----END CERTIFICATE-----Generated at Tue Jun 17 16:15:34 2025 by rpki-client