$ rpki-client -vvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft File: D2991FF0EF094685597EA5146C4730F0270A9201.mft (raw, json) Hash identifier: 9W5sVXCqFKbAHZEW/tyOZQFMHB0eHDi9DcrAqu24rqw= Subject key identifier: BE:16:F2:77:4F:01:54:72:3F:76:08:27:0F:22:65:DA:DE:8B:DA:F6 Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 Certificate issuer: /CN=D2991FF0EF094685597EA5146C4730F0270A9201 Certificate serial: 7B8C29D6663E96924ED501F8B03A16FB53067970 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject info access: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft Manifest number: 0123 Signing time: Thu 19 Jun 2025 16:45:59 +0000 Manifest this update: Thu 19 Jun 2025 16:40:59 +0000 Manifest next update: Fri 20 Jun 2025 19:50:59 +0000 Files and hashes: 1: D2991FF0EF094685597EA5146C4730F0270A9201.crl (hash: IVxu3XPEy4P6QxUJtAxc23XbTXhKqbr8AlUrKiEY+Qw=) 2: 3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (hash: KTNEcC6Y2VHqLL+qb3kt3ywe3wmftinMc6r4trZIlnw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 19:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:8c:29:d6:66:3e:96:92:4e:d5:01:f8:b0:3a:16:fb:53:06:79:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201 Validity Not Before: Jun 19 16:40:59 2025 GMT Not After : Jun 20 19:50:59 2025 GMT Subject: CN=BE16F2774F0154723F7608270F2265DADE8BDAF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:84:f2:7c:4f:23:f5:61:ea:e4:98:1f:92:57: 2c:5d:7c:0e:10:3d:42:e7:34:bf:0c:86:a1:4c:0d: ce:7c:0d:af:e4:b8:bc:60:89:38:21:5e:05:c6:4c: d6:8e:78:45:84:32:3e:6a:aa:d2:5f:a4:9a:0e:2e: c7:30:81:93:dc:b5:00:d1:b9:60:4a:90:ac:7b:91: 0a:53:3a:ac:0a:9e:bb:a6:96:84:59:55:ec:20:81: 21:d1:3d:d2:32:01:8b:12:6f:c6:86:16:fc:78:3e: 0c:33:20:14:6b:d2:f5:20:aa:e2:3a:70:3a:5b:fe: d8:51:be:df:4d:96:ce:ef:e7:de:10:d2:aa:62:48: c2:1b:ef:6b:83:cd:5e:74:42:33:20:a4:61:ef:70: 7a:9d:31:70:c4:3b:64:2d:ff:4f:49:02:73:4d:90: be:7e:16:a7:b4:8d:2d:e9:96:0a:d1:dd:e8:1e:a6: 47:e3:b1:f7:7a:a7:a1:0c:6e:af:fa:76:06:2f:82: 8d:7e:f1:30:a8:1b:db:61:71:76:44:37:c6:7e:5b: bd:ac:7c:bc:db:f8:54:76:9e:22:80:09:c6:ed:5a: fa:0a:2e:ab:72:36:aa:38:c0:16:62:62:45:ae:48: ea:5f:c5:72:99:5c:cd:87:10:43:83:4d:66:fb:5a: ba:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:16:F2:77:4F:01:54:72:3F:76:08:27:0F:22:65:DA:DE:8B:DA:F6 X509v3 Authority Key Identifier: keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:5b:89:e2:45:e9:85:39:76:ff:41:9b:e2:90:8d:d7:5f:59: 59:c6:aa:fe:dc:6e:7f:07:0b:2b:98:a9:66:b3:f3:45:a0:26: 51:4f:5b:fb:e9:47:1b:37:88:da:e2:d8:4e:64:91:37:f5:31: e5:dc:9a:62:b2:44:20:8b:2d:e1:3e:e3:a3:0f:22:bf:81:9d: 03:0d:e1:78:36:4c:2e:34:5b:fc:38:c7:78:bf:aa:15:fc:8e: 40:89:3e:f2:d2:e8:51:f8:58:09:a6:26:23:87:bd:46:fc:18: e3:4e:62:3c:72:3e:04:1a:92:63:63:6a:41:7f:2c:c3:57:9a: b8:d0:4a:7a:db:bc:7a:4f:f7:42:8c:ab:f6:bb:ed:b7:13:54: 86:c6:ad:4b:44:c5:3c:ea:19:5b:07:43:88:55:9d:98:79:32: 86:c6:9f:5b:58:47:a8:c6:04:34:77:9e:63:b8:99:f0:da:95: 81:f6:91:38:4a:89:f0:ec:aa:e7:bb:0c:49:3a:c7:03:ed:26: a0:6a:45:59:f3:5c:ea:b1:b0:04:45:46:39:a0:21:9f:f7:8a: 9f:48:08:69:e4:8b:de:06:d0:61:57:97:c8:08:14:bc:0e:3f: cc:d0:e1:2d:19:af:ff:33:56:c2:89:16:b4:fa:f6:14:e0:e2: 16:67:3b:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUe4wp1mY+lpJO1QH4sDoW+1MGeXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy NzBBOTIwMTAeFw0yNTA2MTkxNjQwNTlaFw0yNTA2MjAxOTUwNTlaMDMxMTAvBgNV BAMTKEJFMTZGMjc3NEYwMTU0NzIzRjc2MDgyNzBGMjI2NURBREU4QkRBRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvhPJ8TyP1YerkmB+SVyxdfA4Q PULnNL8MhqFMDc58Da/kuLxgiTghXgXGTNaOeEWEMj5qqtJfpJoOLscwgZPctQDR uWBKkKx7kQpTOqwKnrumloRZVewggSHRPdIyAYsSb8aGFvx4PgwzIBRr0vUgquI6 cDpb/thRvt9Nls7v594Q0qpiSMIb72uDzV50QjMgpGHvcHqdMXDEO2Qt/09JAnNN kL5+Fqe0jS3plgrR3egepkfjsfd6p6EMbq/6dgYvgo1+8TCoG9thcXZEN8Z+W72s fLzb+FR2niKACcbtWvoKLqtyNqo4wBZiYkWuSOpfxXKZXM2HEEODTWb7WronAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvhbyd08BVHI/dggnDyJl2t6L2vYwHwYDVR0j BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1 OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRWRnovMC9E Mjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFVuJ4kXphTl2/0Gb4pCN119ZWcaq/txufwcLK5ipZrPzRaAmUU9b++lHGzeI 2uLYTmSRN/Ux5dyaYrJEIIst4T7jow8iv4GdAw3heDZMLjRb/DjHeL+qFfyOQIk+ 8tLoUfhYCaYmI4e9RvwY405iPHI+BBqSY2NqQX8sw1eauNBKetu8ek/3Qoyr9rvt txNUhsatS0TFPOoZWwdDiFWdmHkyhsafW1hHqMYENHeeY7iZ8NqVgfaROEqJ8Oyq 57sMSTrHA+0moGpFWfNc6rGwBEVGOaAhn/eKn0gIaeSL3gbQYVeXyAgUvA4/zNDh LRmv/zNWwokWtPr2FODiFmc7NA== -----END CERTIFICATE-----Generated at Fri Jun 20 11:58:00 2025 by rpki-client