$ rpki-client -vvf rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft File: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft (raw, json) Hash identifier: gJ27MrR0V9xhyHZ/pzPhm6/uq35pbRCzubzm9IRbuuY= Subject key identifier: 7B:13:90:15:21:AA:05:58:70:34:E7:98:B8:D2:E3:1A:A4:90:24:DF Authority key identifier: AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E Certificate issuer: /CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Certificate serial: 554D7E1001CA8DD348F004042D95E79D67E35F59 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject info access: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft Manifest number: 0242 Signing time: Mon 16 Jun 2025 16:31:29 +0000 Manifest this update: Mon 16 Jun 2025 16:26:29 +0000 Manifest next update: Tue 17 Jun 2025 17:02:29 +0000 Files and hashes: 1: 34352e3138302e38342e302f32322d3234203d3e20323639313339.roa (hash: IHT+RS/iweARypGzyOff6XPhF2jKh7RDE/V2Q1hN5a8=) 2: 323830343a363030303a3a2f33322d3438203d3e20323639313339.roa (hash: Xe55nUyv1G9rTdN4F9JJyZ5S73rOm7YPFxNpYGBVW3I=) 3: AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl (hash: BJHOwFcnL7jjhEjs3EDvja87XEMW1YpF0RyfF6fmH1w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 17:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:4d:7e:10:01:ca:8d:d3:48:f0:04:04:2d:95:e7:9d:67:e3:5f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E Validity Not Before: Jun 16 16:26:29 2025 GMT Not After : Jun 17 17:02:29 2025 GMT Subject: CN=7B13901521AA05587034E798B8D2E31AA49024DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ba:1e:5c:42:df:1f:a9:fe:e1:84:9b:f9:f4: de:d1:9f:5f:38:30:6f:e4:98:76:c8:ab:b2:4b:41: 60:5a:4a:5f:69:fd:40:bc:97:21:aa:68:78:9d:31: d1:c9:9e:08:6d:7b:26:82:f9:84:fa:51:22:25:6c: 9b:39:bd:70:a8:fd:a0:7f:8e:0f:66:54:69:4e:cd: 73:2a:33:1e:8d:59:f1:6a:cd:6e:8f:74:d5:52:3a: 82:59:ec:f2:4b:bb:f7:b5:4b:94:8b:3c:05:bf:3b: 8f:16:93:b5:d6:46:6b:de:df:a7:ef:08:f9:a0:23: 66:9c:54:ce:03:a4:01:0e:f3:18:a9:f2:49:5e:80: 9c:b2:67:94:84:70:15:64:00:c3:21:5e:9a:c7:cd: 82:41:03:66:04:d0:cf:7f:42:c0:65:45:73:b2:8f: e5:9a:f8:3a:ba:1c:3b:23:ca:5c:e1:49:e2:ef:1c: a4:70:b8:78:5f:65:20:7f:cf:3c:1f:d0:6e:c5:e6: 70:f8:1c:e5:b8:12:0e:c0:e5:41:ec:3d:b5:68:3d: 53:a9:d7:74:6e:1e:e7:a9:cd:32:42:8f:88:4f:ad: 9b:5c:a0:62:3b:10:35:9e:0f:59:6c:de:d8:0a:55: 35:f0:4a:7e:56:4b:14:ec:3a:ef:c3:f9:b6:29:c9: f9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:13:90:15:21:AA:05:58:70:34:E7:98:B8:D2:E3:1A:A4:90:24:DF X509v3 Authority Key Identifier: keyid:AF:F2:DE:84:A1:6A:AF:6B:11:BE:71:E4:16:5A:53:F8:A3:AC:19:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeVfxV1hAn3FurdeY9HhL1oFPfdKYdXcQYnjYC6cm6X3/1/AFF2DE84A16AAF6B11BE71E4165A53F8A3AC197E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f4:9e:26:5a:09:c2:04:c5:28:69:7a:7d:5a:65:ec:28:50: 40:54:00:f0:eb:a4:1b:81:f2:94:b9:02:a4:3e:a2:1f:13:73: 71:5c:8d:ad:99:b0:da:21:ed:cd:26:69:11:3f:ed:fd:09:a1: 6f:46:2b:3e:70:63:e1:cf:a3:25:cb:00:0d:bb:2d:32:f6:27: bf:c4:cb:a2:1b:cc:aa:9d:e4:d9:78:3f:90:d6:1e:1b:84:0b: 72:7e:2c:33:5d:33:c1:5f:51:87:41:90:03:5d:92:0f:a7:fa: fa:82:f7:b1:31:42:9c:0f:f4:b7:cc:43:ff:f6:7b:f6:15:29: 33:47:75:ec:04:05:5c:27:ea:d4:c4:1b:d0:62:6c:79:c6:41: 58:b2:18:5a:ec:a5:e9:13:80:6e:c4:ef:f1:05:32:d8:fe:43: 3c:bd:a9:5f:36:1d:d7:3a:9b:31:61:e9:12:24:4a:40:d0:ee: f7:cb:ed:db:61:be:ec:f1:fe:be:a1:1d:6b:1f:81:25:41:d1: fb:2e:de:b4:72:21:91:49:fd:33:61:9e:21:e0:5c:f1:1e:b6: f3:4a:5b:fb:41:14:e3:46:08:4d:2c:23:5f:56:ac:e8:7d:53: fc:7c:29:b2:64:f7:75:91:01:8d:0a:07:14:32:89:34:e3:37: 7b:ef:f4:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVU1+EAHKjdNI8AQELZXnnWfjX1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGMkRFODRBMTZBQUY2QjExQkU3MUU0MTY1QTUzRjhB M0FDMTk3RTAeFw0yNTA2MTYxNjI2MjlaFw0yNTA2MTcxNzAyMjlaMDMxMTAvBgNV BAMTKDdCMTM5MDE1MjFBQTA1NTg3MDM0RTc5OEI4RDJFMzFBQTQ5MDI0REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcuh5cQt8fqf7hhJv59N7Rn184 MG/kmHbIq7JLQWBaSl9p/UC8lyGqaHidMdHJnghteyaC+YT6USIlbJs5vXCo/aB/ jg9mVGlOzXMqMx6NWfFqzW6PdNVSOoJZ7PJLu/e1S5SLPAW/O48Wk7XWRmve36fv CPmgI2acVM4DpAEO8xip8klegJyyZ5SEcBVkAMMhXprHzYJBA2YE0M9/QsBlRXOy j+Wa+Dq6HDsjylzhSeLvHKRwuHhfZSB/zzwf0G7F5nD4HOW4Eg7A5UHsPbVoPVOp 13RuHuepzTJCj4hPrZtcoGI7EDWeD1ls3tgKVTXwSn5WSxTsOu/D+bYpyfm5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUexOQFSGqBVhwNOeYuNLjGqSQJN8wHwYDVR0j BBgwFoAUr/LehKFqr2sRvnHkFlpT+KOsGX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202 WDMvMS9BRkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjJERTg0QTE2QUFGNkIx MUJFNzFFNDE2NUE1M0Y4QTNBQzE5N0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmVWZnhWMWhBbjNGdXJkZVk5SGhMMW9GUGZkS1lkWGNRWW5qWUM2Y202WDMvMS9B RkYyREU4NEExNkFBRjZCMTFCRTcxRTQxNjVBNTNGOEEzQUMxOTdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApvSeJloJwgTFKGl6fVpl7ChQQFQA8OukG4HylLkCpD6iHxNzcVyNrZmw2iHt zSZpET/t/Qmhb0YrPnBj4c+jJcsADbstMvYnv8TLohvMqp3k2Xg/kNYeG4QLcn4s M10zwV9Rh0GQA12SD6f6+oL3sTFCnA/0t8xD//Z79hUpM0d17AQFXCfq1MQb0GJs ecZBWLIYWuyl6ROAbsTv8QUy2P5DPL2pXzYd1zqbMWHpEiRKQNDu98vt22G+7PH+ vqEdax+BJUHR+y7etHIhkUn9M2GeIeBc8R6280pb+0EU40YITSwjX1as6H1T/Hwp smT3dZEBjQoHFDKJNOM3e+/0Kw== -----END CERTIFICATE-----Generated at Mon Jun 16 19:30:48 2025 by rpki-client