$ rpki-client -vvf rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft File: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft (raw, json) Hash identifier: YEVB9cHQJNrfESSlSiI3e4PTLH5/OyyhRGiFsZ6n2kM= Subject key identifier: 3F:5A:59:70:11:21:00:19:98:E4:A7:F0:CD:F4:AF:88:FB:6C:3E:5D Authority key identifier: D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB Certificate issuer: /CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB Certificate serial: 73922BDE4AF86AD1CA1B33A52943B8C6B3EFD038 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer Subject info access: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft Manifest number: 16 Signing time: Thu 19 Jun 2025 00:45:21 +0000 Manifest this update: Thu 19 Jun 2025 00:40:21 +0000 Manifest next update: Fri 20 Jun 2025 02:16:21 +0000 Files and hashes: 1: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl (hash: dBYxFroBi6Xqqa9uEjW7O1xfLj7NKf3K0QJsUwt7qsQ=) 2: 323830343a343461303a3a2f33322d3438203d3e20323637363433.roa (hash: OhP4AfZLm8wKcC8NRb3lR5wasqSW+ZFcBQBWlmtzm+0=) 3: 34352e37312e3232302e302f32322d3234203d3e20323637363433.roa (hash: DphYCMXiIhOunJYgpxuGmI/F5WVwTY6x8muqbHvOLD0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 02:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:92:2b:de:4a:f8:6a:d1:ca:1b:33:a5:29:43:b8:c6:b3:ef:d0:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB Validity Not Before: Jun 19 00:40:21 2025 GMT Not After : Jun 20 02:16:21 2025 GMT Subject: CN=3F5A59701121001998E4A7F0CDF4AF88FB6C3E5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3e:69:88:92:c2:a5:bc:00:84:fd:b2:6e:27: 5e:b1:0b:2f:d4:ee:ec:7b:d0:73:04:0a:d8:d7:1e: 81:b2:48:15:d6:5e:a4:1e:d6:20:e3:e5:ae:4d:df: 95:b6:7f:43:ab:61:7f:5f:7a:39:14:f6:b8:88:08: 65:3e:56:01:d7:d4:02:d8:df:3d:92:1c:01:6e:d6: bb:92:fc:4d:5b:1a:72:57:08:6c:95:0a:26:b0:4b: 2f:50:cc:51:05:40:32:6a:30:b5:96:dc:d8:2f:98: 01:7e:4f:ca:fe:f9:36:d4:eb:1e:f4:60:d3:44:df: 82:7e:e2:b9:10:d1:73:38:76:43:c9:e5:f5:76:09: da:73:03:df:13:ae:53:a1:4b:fe:0e:8c:c8:16:fe: 7b:8d:80:50:13:5f:fb:ee:f1:b4:be:ad:93:58:15: 80:a5:11:0e:df:01:53:39:6e:6d:eb:08:c3:1e:56: 01:f3:e5:30:25:aa:d5:2e:52:0d:ae:e6:44:17:9d: 21:a9:4a:2e:1b:fd:10:8d:b2:ec:19:70:86:a6:f1: 81:66:63:f2:d1:16:03:83:41:94:12:bc:17:98:b5: 00:96:89:70:8c:6e:3a:6d:13:be:6b:f9:6b:c0:27: 45:fc:0b:82:8d:2e:11:69:26:0f:61:6e:df:65:af: 1f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5A:59:70:11:21:00:19:98:E4:A7:F0:CD:F4:AF:88:FB:6C:3E:5D X509v3 Authority Key Identifier: keyid:D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:74:17:76:30:d1:31:c3:c6:b2:c7:67:1f:a6:d1:5e:ca:e1: 46:42:fa:68:da:ef:62:45:ea:63:5b:40:4d:46:cd:dd:f0:61: e3:21:ae:e3:10:7b:f1:d4:20:88:67:cb:9c:78:98:a9:8c:0a: 38:38:0a:1c:db:4d:be:e0:3b:61:84:b8:1d:cc:8b:cc:ad:71: a5:fe:56:81:ac:85:4f:30:82:09:62:07:c4:98:cf:93:c6:fb: 1b:5c:eb:cd:3d:a9:d6:59:63:e0:24:7c:4a:be:fd:9f:d5:55: d1:01:6e:3c:62:36:df:2a:f3:79:e5:03:8f:42:48:a8:24:3c: 67:0d:6b:c9:ac:59:20:66:cb:42:d7:ba:fb:8f:76:19:b3:a5: 8d:04:96:3e:24:07:81:92:2e:5d:b1:f1:aa:57:20:fd:b0:a7: 96:78:ab:be:f7:56:e8:e6:22:18:cb:33:61:ce:7b:73:fb:36: 97:0b:80:ef:7d:d0:04:75:bd:e7:e9:8f:40:e6:b2:66:f8:55: c5:75:13:9d:db:8e:cf:58:c2:ca:4d:01:27:35:47:db:38:28: a1:ef:a5:8e:a3:85:3b:8c:5d:79:63:01:b9:b6:ea:ca:65:9f: f4:17:e8:4e:66:31:5d:df:79:ed:9f:81:74:d4:d9:c3:ce:ee: 93:4a:44:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUc5Ir3kr4atHKGzOlKUO4xrPv0DgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk3MEYxN0M4NkQ0RDVBOUM2Mzk1RTlFMkQxNjAxQkJE OUZBOEJEQjAeFw0yNTA2MTkwMDQwMjFaFw0yNTA2MjAwMjE2MjFaMDMxMTAvBgNV BAMTKDNGNUE1OTcwMTEyMTAwMTk5OEU0QTdGMENERjRBRjg4RkI2QzNFNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSPmmIksKlvACE/bJuJ16xCy/U 7ux70HMECtjXHoGySBXWXqQe1iDj5a5N35W2f0OrYX9fejkU9riICGU+VgHX1ALY 3z2SHAFu1ruS/E1bGnJXCGyVCiawSy9QzFEFQDJqMLWW3NgvmAF+T8r++TbU6x70 YNNE34J+4rkQ0XM4dkPJ5fV2CdpzA98TrlOhS/4OjMgW/nuNgFATX/vu8bS+rZNY FYClEQ7fAVM5bm3rCMMeVgHz5TAlqtUuUg2u5kQXnSGpSi4b/RCNsuwZcIam8YFm Y/LRFgODQZQSvBeYtQCWiXCMbjptE75r+WvAJ0X8C4KNLhFpJg9hbt9lrx+/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUP1pZcBEhABmY5KfwzfSviPtsPl0wHwYDVR0j BBgwFoAU2XDxfIbU1anGOV6eLRYBu9n6i9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhv dmIvMS9EOTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NzBGMTdDODZENEQ1QTlD NjM5NUU5RTJEMTYwMUJCRDlGQThCREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhvdmIvMS9E OTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA5HQXdjDRMcPGssdnH6bRXsrhRkL6aNrvYkXqY1tATUbN3fBh4yGu4xB78dQg iGfLnHiYqYwKODgKHNtNvuA7YYS4HcyLzK1xpf5WgayFTzCCCWIHxJjPk8b7G1zr zT2p1llj4CR8Sr79n9VV0QFuPGI23yrzeeUDj0JIqCQ8Zw1ryaxZIGbLQte6+492 GbOljQSWPiQHgZIuXbHxqlcg/bCnlnirvvdW6OYiGMszYc57c/s2lwuA733QBHW9 5+mPQOayZvhVxXUTnduOz1jCyk0BJzVH2zgooe+ljqOFO4xdeWMBubbqymWf9Bfo TmYxXd957Z+BdNTZw87uk0pEPg== -----END CERTIFICATE-----Generated at Thu Jun 19 05:53:14 2025 by rpki-client