$ rpki-client -vvf rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft File: 1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft (raw, json) Hash identifier: TQFAaLOI2Pk+gAQSkDUsTVo7v96Xl2wqXhjFLe/uDjA= Subject key identifier: 93:C2:59:A1:E4:D9:60:6A:F7:B3:3E:34:CA:94:C8:31:81:F5:DC:7C Authority key identifier: 1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55 Certificate issuer: /CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555 Certificate serial: 022764EFB2D9899A7717B0511C79682F5D4FA1A4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft Manifest number: 024B Signing time: Mon 16 Jun 2025 14:33:57 +0000 Manifest this update: Mon 16 Jun 2025 14:28:57 +0000 Manifest next update: Tue 17 Jun 2025 14:58:57 +0000 Files and hashes: 1: 3137372e33382e3136302e302f32312d3234203d3e20323632343038.roa (hash: WWQDaPRjLqL6gxa8oKBNJP8aA85LM8dmmWOF68n+4eM=) 2: 323830343a326430633a3a2f33322d3332203d3e20323632343038.roa (hash: I/xjLRtE0sns2aDZvy2RT2f40WrXsCM4pXsxx+HtLKQ=) 3: 1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl (hash: aeMHvk48YhiHfvOpPVbLI/KoYbcVqVYaHXlTpABAUEQ=) 4: 3136382e302e3234302e302f32322d3234203d3e20323632343038.roa (hash: nc1KYLiIl6MQ2cB8LAaJ1Ei9pNJhoTR2e/w7ESX0VCI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 14:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:27:64:ef:b2:d9:89:9a:77:17:b0:51:1c:79:68:2f:5d:4f:a1:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AFFFF1E33EABF298E9B05F177166C96F2C3B555 Validity Not Before: Jun 16 14:28:57 2025 GMT Not After : Jun 17 14:58:57 2025 GMT Subject: CN=93C259A1E4D9606AF7B33E34CA94C83181F5DC7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:95:b7:f5:c1:49:f8:9d:cb:79:32:18:bf:6c: f2:b1:e2:ee:43:01:1e:ee:08:48:9f:51:cf:d8:29: 9f:d8:51:96:b6:37:a1:19:46:4c:db:85:dc:0e:85: f1:06:e1:a9:e0:13:01:c4:49:77:e5:73:9a:e7:0d: 2c:d4:fb:c8:14:60:7e:0c:c7:51:e4:d0:63:48:97: 6d:f7:67:9d:2f:fd:f2:51:ee:74:e0:2c:6c:0d:14: 06:02:32:21:6b:58:34:6c:3a:a9:c7:79:99:0c:c9: 8d:c3:b5:40:97:f1:5a:2b:5e:69:4d:ac:4e:91:dd: 76:9c:47:ba:b4:3e:d7:4d:ef:2c:40:41:76:cb:08: c4:b7:01:96:e1:fd:e9:ba:8b:77:63:64:21:56:fc: 31:41:28:6e:a8:3e:be:c9:0a:34:52:56:49:26:03: c2:68:07:7a:f3:de:17:76:ab:7c:38:d3:fe:79:17: be:90:67:7b:07:34:6c:63:7a:e8:f7:2f:d9:18:cf: 38:3e:65:17:52:97:5e:81:fa:b8:b4:2c:61:c9:7b: e4:da:99:02:f9:f7:bb:c8:9e:69:b7:4f:0d:ed:22: de:1e:df:fb:43:8e:dc:9a:70:ca:fc:aa:4a:8f:b1: 9e:23:f4:48:98:60:10:bb:b1:5d:88:50:cf:c7:5b: a8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C2:59:A1:E4:D9:60:6A:F7:B3:3E:34:CA:94:C8:31:81:F5:DC:7C X509v3 Authority Key Identifier: keyid:1A:FF:FF:1E:33:EA:BF:29:8E:9B:05:F1:77:16:6C:96:F2:C3:B5:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bd3SZyqxesjLMD5A7yGwXfP4Xpb48tBjQpFpkcbEd1sC/1/1AFFFF1E33EABF298E9B05F177166C96F2C3B555.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:31:bc:39:c9:68:84:ef:35:e0:ac:f3:23:f8:cf:ac:9f:7e: a7:76:b9:7a:af:04:52:0d:de:0f:59:99:8b:cc:b4:a8:6d:5f: d4:28:dc:ea:1c:0d:6b:e5:fd:c1:cd:f6:c2:1a:89:43:9f:85: f4:34:6b:0b:48:76:63:d1:f7:ac:7f:74:42:48:d9:f6:c9:c2: 9f:a9:aa:7d:4e:9b:8d:14:3b:c8:63:25:cf:bb:5b:0a:52:6b: a0:31:12:f8:64:19:50:db:a2:d2:9d:63:28:4c:20:19:b5:0e: 7d:9c:65:7c:78:ab:8e:ea:fc:ea:49:10:08:be:52:87:62:ac: 24:28:2a:8c:b1:3d:b3:99:e9:f8:2e:ac:e5:ab:99:7d:45:7b: d2:91:e0:94:fc:2f:b2:67:85:5c:98:f6:1a:9c:44:89:1b:67: 41:b0:6e:89:6c:32:5a:c9:aa:5d:87:f9:c1:15:b8:26:ac:b8: 13:d2:c7:04:f7:aa:9e:8d:a5:57:8d:c1:24:15:54:6b:b8:49: f1:3f:11:77:51:c4:52:55:d2:35:2f:03:e0:a8:04:fc:6f:29: d0:2d:75:5b:2b:54:cf:70:fb:86:3f:7f:50:cd:fc:1f:8f:3d: 60:14:09:c2:92:77:58:24:54:0e:10:2f:a5:c3:d8:81:da:91: f7:95:1d:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAidk77LZiZp3F7BRHHloL11PoaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFGRkZGMUUzM0VBQkYyOThFOUIwNUYxNzcxNjZDOTZG MkMzQjU1NTAeFw0yNTA2MTYxNDI4NTdaFw0yNTA2MTcxNDU4NTdaMDMxMTAvBgNV BAMTKDkzQzI1OUExRTREOTYwNkFGN0IzM0UzNENBOTRDODMxODFGNURDN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWlbf1wUn4nct5Mhi/bPKx4u5D AR7uCEifUc/YKZ/YUZa2N6EZRkzbhdwOhfEG4angEwHESXflc5rnDSzU+8gUYH4M x1Hk0GNIl233Z50v/fJR7nTgLGwNFAYCMiFrWDRsOqnHeZkMyY3DtUCX8VorXmlN rE6R3XacR7q0PtdN7yxAQXbLCMS3AZbh/em6i3djZCFW/DFBKG6oPr7JCjRSVkkm A8JoB3rz3hd2q3w40/55F76QZ3sHNGxjeuj3L9kYzzg+ZRdSl16B+ri0LGHJe+Ta mQL597vInmm3Tw3tIt4e3/tDjtyacMr8qkqPsZ4j9EiYYBC7sV2IUM/HW6g/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUk8JZoeTZYGr3sz40ypTIMYH13HwwHwYDVR0j BBgwFoAUGv//HjPqvymOmwXxdxZslvLDtVUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmQzU1p5cXhlc2pMTUQ1QTd5R3dYZlA0WHBiNDh0QmpRcEZwa2NiRWQx c0MvMS8xQUZGRkYxRTMzRUFCRjI5OEU5QjA1RjE3NzE2NkM5NkYyQzNCNTU1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBRkZGRjFFMzNFQUJGMjk4 RTlCMDVGMTc3MTY2Qzk2RjJDM0I1NTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmQzU1p5cXhlc2pMTUQ1QTd5R3dYZlA0WHBiNDh0QmpRcEZwa2NiRWQxc0MvMS8x QUZGRkYxRTMzRUFCRjI5OEU5QjA1RjE3NzE2NkM5NkYyQzNCNTU1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAazG8OclohO814KzzI/jPrJ9+p3a5eq8EUg3eD1mZi8y0qG1f1Cjc6hwNa+X9 wc32whqJQ5+F9DRrC0h2Y9H3rH90QkjZ9snCn6mqfU6bjRQ7yGMlz7tbClJroDES +GQZUNui0p1jKEwgGbUOfZxlfHirjur86kkQCL5Sh2KsJCgqjLE9s5np+C6s5auZ fUV70pHglPwvsmeFXJj2GpxEiRtnQbBuiWwyWsmqXYf5wRW4Jqy4E9LHBPeqno2l V43BJBVUa7hJ8T8Rd1HEUlXSNS8D4KgE/G8p0C11WytUz3D7hj9/UM38H489YBQJ wpJ3WCRUDhAvpcPYgdqR95UdEA== -----END CERTIFICATE-----Generated at Tue Jun 17 04:32:48 2025 by rpki-client