$ rpki-client -vvf rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft File: D296B69B93C13271557656EE54E2511823349A12.mft (raw, json) Hash identifier: E9gXFcKSXI46EzTrPMZTyM0V1uXEpSC262OxeCK9E7c= Subject key identifier: FC:BE:82:87:C6:89:42:C9:E6:1A:B1:48:7A:A8:2A:FC:F5:D5:F3:6D Authority key identifier: D2:96:B6:9B:93:C1:32:71:55:76:56:EE:54:E2:51:18:23:34:9A:12 Certificate issuer: /CN=D296B69B93C13271557656EE54E2511823349A12 Certificate serial: 54809AD4ED3E59C4DD0549BE3D478EF5F324C5B9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer Subject info access: rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft Manifest number: 029A Signing time: Sat 21 Jun 2025 14:12:00 +0000 Manifest this update: Sat 21 Jun 2025 14:07:00 +0000 Manifest next update: Sun 22 Jun 2025 14:12:00 +0000 Files and hashes: 1: D296B69B93C13271557656EE54E2511823349A12.crl (hash: WesZrHB2DsdYwjhQo1bP5uqwNxs4S/s1noNPQWNGN+g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.crl rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Jun 2025 14:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:80:9a:d4:ed:3e:59:c4:dd:05:49:be:3d:47:8e:f5:f3:24:c5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D296B69B93C13271557656EE54E2511823349A12 Validity Not Before: Jun 21 14:07:00 2025 GMT Not After : Jun 28 14:12:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:85:a5:d3:4a:d9:b3:41:5a:11:b1:3d:cf:d4: da:3f:d6:cb:5a:1d:c4:00:50:29:5a:32:0f:50:81: d3:07:f8:1b:6b:fd:1d:f5:da:23:b9:e2:58:14:cf: a6:7d:80:f2:7b:43:8b:9f:64:7c:1d:cb:51:d1:e8: c3:b1:d8:1f:79:6a:5e:df:1a:6f:50:83:47:b2:63: 02:43:6b:7f:9a:f4:90:f9:ba:fc:24:7c:d1:c5:1d: 97:5a:ab:08:ab:b1:2e:42:c4:42:e3:3a:fa:8d:65: 65:cb:b7:bb:6d:3a:58:fe:02:52:b0:00:00:11:73: 0b:56:29:e3:8d:82:0a:9b:aa:1c:7a:ec:81:04:56: 11:d0:df:6b:92:0d:28:25:5d:c6:00:9c:b8:da:f5: 04:2c:68:3a:42:05:6b:f6:e9:e5:84:b9:e1:68:cd: e4:19:cb:d0:c2:0e:e8:79:60:81:6a:32:6d:43:18: 62:b6:d6:53:84:eb:1b:ae:86:ec:02:d3:ec:70:54: 53:2a:2b:a6:82:bc:f4:fb:27:71:c3:f4:69:7e:da: f5:8d:12:aa:b4:f4:bd:37:fc:53:ca:34:35:18:d6: 66:4f:32:8b:75:81:ef:15:a1:87:b0:29:5d:ec:51: cb:c8:76:61:fa:c0:b7:1a:8a:29:a9:a4:1f:6a:8d: 35:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BE:82:87:C6:89:42:C9:E6:1A:B1:48:7A:A8:2A:FC:F5:D5:F3:6D X509v3 Authority Key Identifier: keyid:D2:96:B6:9B:93:C1:32:71:55:76:56:EE:54:E2:51:18:23:34:9A:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296B69B93C13271557656EE54E2511823349A12.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqeXKhxtkukxzNWytNHc3KxiuUy8rhEkZkD3nBPgCGTh/1/D296B69B93C13271557656EE54E2511823349A12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f2:a5:a3:09:1b:3a:b5:06:de:0b:3e:cd:89:b8:52:07:d4: 8c:48:fd:f5:fd:46:de:aa:ad:b8:2f:2f:b7:4b:49:a2:d5:28: 43:7a:fc:4d:32:41:fd:bd:0b:04:40:32:63:cc:73:cc:ae:45: 9c:7a:0d:25:87:18:e2:09:62:0f:1a:c8:10:d8:47:c6:43:7b: ad:ae:12:98:73:d1:f4:ce:9f:f9:50:c4:f8:72:42:94:1b:53: 50:86:dd:f2:4d:07:a9:3e:93:ed:7d:e0:00:9f:3b:af:08:91: db:c1:cd:30:3b:04:b9:5a:91:35:d1:35:36:cf:b7:34:b5:52: e1:87:f3:fa:df:93:c9:86:56:60:58:23:bc:1a:bd:50:d2:d6: 18:f8:d7:cd:04:e9:4f:fe:6d:e8:f8:f2:e0:fd:a6:81:f1:b1: 09:b3:a7:ca:3e:20:fc:9a:09:8d:fb:7f:04:1e:8f:65:55:88: 53:16:1a:73:9e:ab:3b:e9:6a:0b:36:57:dd:84:03:a5:bb:98: 76:ab:f2:61:53:96:42:d6:a6:03:80:4f:55:11:0a:d9:cd:82: 33:a1:52:13:1c:c7:b1:bb:20:6b:5f:55:d0:08:98:7f:32:c8: a9:dc:35:9e:94:d6:a0:f4:59:50:b7:56:69:b0:07:ec:e0:86: df:4c:23:e2 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUVICa1O0+WcTdBUm+PUeO9fMkxbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5NkI2OUI5M0MxMzI3MTU1NzY1NkVFNTRFMjUxMTgy MzM0OUExMjAeFw0yNTA2MjExNDA3MDBaFw0yNTA2MjgxNDEyMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0E4NUE1RDM0QUQ5QjM0MTVB MTFCMTNEQ0ZENERBM0ZENkNCNUExREM0MDA1MDI5NUEzMjBGNTA4MUQzMDdGODFC NkJGRDFERjVEQTIzQjlFMjU4MTRDRkE2N0Q4MEYyN0I0MzhCOUY2NDdDMURDQjUx RDFFOEMzQjFEODFGNzk2QTVFREYxQTZGNTA4MzQ3QjI2MzAyNDM2QjdGOUFGNDkw RjlCQUZDMjQ3Q0QxQzUxRDk3NUFBQjA4QUJCMTJFNDJDNDQyRTMzQUZBOEQ2NTY1 Q0JCN0JCNkQzQTU4RkUwMjUyQjAwMDAwMTE3MzBCNTYyOUUzOEQ4MjBBOUJBQTFD N0FFQzgxMDQ1NjExRDBERjZCOTIwRDI4MjU1REM2MDA5Q0I4REFGNTA0MkM2ODNB NDIwNTZCRjZFOUU1ODRCOUUxNjhDREU0MTlDQkQwQzIwRUU4Nzk2MDgxNkEzMjZE NDMxODYyQjZENjUzODRFQjFCQUU4NkVDMDJEM0VDNzA1NDUzMkEyQkE2ODJCQ0Y0 RkIyNzcxQzNGNDY5N0VEQUY1OEQxMkFBQjRGNEJEMzdGQzUzQ0EzNDM1MThENjY2 NEYzMjhCNzU4MUVGMTVBMTg3QjAyOTVERUM1MUNCQzg3NjYxRkFDMEI3MUE4QTI5 QTlBNDFGNkE4RDM1RkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAyoWl00rZs0FaEbE9z9TaP9bLWh3EAFApWjIPUIHTB/gba/0d9doj ueJYFM+mfYDye0OLn2R8HctR0ejDsdgfeWpe3xpvUINHsmMCQ2t/mvSQ+br8JHzR xR2XWqsIq7EuQsRC4zr6jWVly7e7bTpY/gJSsAAAEXMLVinjjYIKm6oceuyBBFYR 0N9rkg0oJV3GAJy42vUELGg6QgVr9unlhLnhaM3kGcvQwg7oeWCBajJtQxhittZT hOsbrobsAtPscFRTKiumgrz0+ydxw/Rpftr1jRKqtPS9N/xTyjQ1GNZmTzKLdYHv FaGHsCld7FHLyHZh+sC3GoopqaQfao01/QIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FPy+gofGiULJ5hqxSHqoKvz11fNtMB8GA1UdIwQYMBaAFNKWtpuTwTJxVXZW7lTi URgjNJoSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FxZVhLaHh0a3VreHpO V3l0TkhjM0t4aXVVeThyaEVrWmtEM25CUGdDR1RoLzEvRDI5NkI2OUI5M0MxMzI3 MTU1NzY1NkVFNTRFMjUxMTgyMzM0OUExMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS9EMjk2QjY5QjkzQzEzMjcxNTU3NjU2RUU1NEUyNTExODIzMzQ5 QTEyLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FxZVhLaHh0a3VreHpOV3l0Tkhj M0t4aXVVeThyaEVrWmtEM25CUGdDR1RoLzEvRDI5NkI2OUI5M0MxMzI3MTU1NzY1 NkVFNTRFMjUxMTgyMzM0OUExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABTypaMJGzq1Bt4LPs2JuFIH 1IxI/fX9Rt6qrbgvL7dLSaLVKEN6/E0yQf29CwRAMmPMc8yuRZx6DSWHGOIJYg8a yBDYR8ZDe62uEphz0fTOn/lQxPhyQpQbU1CG3fJNB6k+k+194ACfO68IkdvBzTA7 BLlakTXRNTbPtzS1UuGH8/rfk8mGVmBYI7wavVDS1hj4180E6U/+bej48uD9poHx sQmzp8o+IPyaCY37fwQej2VViFMWGnOeqzvpags2V92EA6W7mHar8mFTlkLWpgOA T1URCtnNgjOhUhMcx7G7IGtfVdAImH8yyKncNZ6U1qD0WVC3VmmwB+zght9MI+I= -----END CERTIFICATE-----Generated at Sat Jun 21 16:51:34 2025 by rpki-client