$ rpki-client -vvf rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft File: E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft (raw, json) Hash identifier: P1niszJscpnm9luKMKMw+WuEVM4GrcE9fltvdn5qEtg= Subject key identifier: 5C:8D:99:B7:92:25:9B:A7:5C:D5:29:DC:63:6E:23:AB:CF:FC:06:6A Authority key identifier: E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4 Certificate issuer: /CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4 Certificate serial: 7EAD1FAB921FD8C8BAE922AE76A365370F1D8C11 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer Subject info access: rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft Manifest number: 0247 Signing time: Sun 15 Jun 2025 07:08:48 +0000 Manifest this update: Sun 15 Jun 2025 07:03:48 +0000 Manifest next update: Mon 16 Jun 2025 07:36:48 +0000 Files and hashes: 1: 34352e3138332e3138302e302f32322d3234203d3e20323639333337.roa (hash: ht/LU548z0DQ9qyd/CXKzpoxrH9NqeBOqRLrPd+T36Y=) 2: E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl (hash: QaFJJYYvjTP+ogziuS4C/fzZZdEoUm9v0/5xoVGeKfg=) 3: 323830343a363331343a3a2f33322d3438203d3e20323639333337.roa (hash: 8rIADCc1IMBXHDjsfVNZY3xX+m3yox+H7e16XbvP0l4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 07:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ad:1f:ab:92:1f:d8:c8:ba:e9:22:ae:76:a3:65:37:0f:1d:8c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4 Validity Not Before: Jun 15 07:03:48 2025 GMT Not After : Jun 16 07:36:48 2025 GMT Subject: CN=5C8D99B792259BA75CD529DC636E23ABCFFC066A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:72:d1:b3:a2:de:81:b7:49:6e:ea:1d:09:6f: ca:2b:f7:d7:9b:66:ce:7e:c6:4f:58:2d:51:32:ea: 5b:48:d7:df:7a:dc:60:f6:b3:e8:58:ed:91:fa:e0: 7a:29:46:35:44:7d:46:92:9b:93:69:30:a8:d8:20: 29:9b:16:75:d7:ca:dc:ed:70:0a:ed:19:7c:a3:51: 65:e3:1d:95:9e:e8:fb:d4:30:e9:7c:53:57:19:ab: a7:12:c1:13:7b:7b:2f:94:c8:64:7d:3c:29:aa:ee: 4b:fe:ac:d3:a5:ae:94:9b:5e:ca:7c:7d:25:9d:e5: fd:18:83:34:ce:e9:0d:37:08:f7:dc:eb:73:a8:21: 58:2d:dd:13:2c:33:2d:2a:bd:a4:c8:91:f9:f3:6b: 79:38:40:49:37:3d:b7:72:c3:8b:de:e5:46:7f:c6: db:76:96:e7:78:fd:cc:34:c9:48:9f:49:b4:69:d5: f8:84:7b:60:42:bd:31:7e:39:58:4d:e4:ba:40:27: cc:32:62:bb:75:0b:6b:df:41:02:8e:17:b9:00:3a: d7:3e:50:c0:aa:9e:64:6c:b6:1c:bf:42:77:ac:8b: d7:d3:a1:bc:fc:ba:4c:65:07:24:12:00:75:01:e6: 44:af:8f:9d:2c:9f:05:bf:f4:66:3f:8f:f8:62:4f: 8f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8D:99:B7:92:25:9B:A7:5C:D5:29:DC:63:6E:23:AB:CF:FC:06:6A X509v3 Authority Key Identifier: keyid:E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:63:67:22:50:3a:78:61:25:c5:b1:a7:99:a2:76:57:37:c0: 3a:0c:01:17:85:35:03:6f:c0:08:f5:87:79:4a:5b:b1:f3:19: b9:83:1f:92:9d:33:e8:aa:49:62:79:13:6e:28:10:29:7f:a4: 9a:c0:9d:88:d8:4a:33:16:5b:43:a5:a3:a5:72:90:4f:ae:83: d1:04:20:2c:f4:3d:f6:e8:2f:e4:f8:8e:37:30:d8:f0:19:e0: 55:73:40:23:0a:c8:a6:e3:50:29:07:d1:7e:a3:ba:09:88:64: c1:b8:65:b4:f6:2e:8f:97:f1:65:05:96:e7:86:fe:14:a6:7c: dd:03:91:93:32:61:24:2b:b6:95:64:f9:5c:98:5e:c4:c8:4f: 33:32:7a:1f:44:fc:3b:78:8b:ac:d3:26:3e:a4:e0:38:0d:bd: 02:b1:7f:bf:5e:2c:00:ec:ed:a4:fc:a3:6b:2a:be:78:64:00: 87:bb:6b:12:9b:df:a3:08:09:7c:2e:38:8f:e7:d1:40:b6:a6: 85:57:f1:1e:2e:ca:22:62:43:01:25:58:7e:1a:c9:74:c7:51: 4e:b5:4c:f3:6b:40:30:d8:02:ab:ca:22:14:68:b8:f1:b1:a3: 9e:0a:7b:66:57:43:ed:42:60:9a:bf:bd:ec:48:48:b1:e0:42: 1c:e3:f6:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfq0fq5If2Mi66SKudqNlNw8djBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEFCRjAzOUIxRkYyMEY5REU1RkY2Q0UxREUzRENC QkFGRDZCNDAeFw0yNTA2MTUwNzAzNDhaFw0yNTA2MTYwNzM2NDhaMDMxMTAvBgNV BAMTKDVDOEQ5OUI3OTIyNTlCQTc1Q0Q1MjlEQzYzNkUyM0FCQ0ZGQzA2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ctGzot6Bt0lu6h0Jb8or99eb Zs5+xk9YLVEy6ltI19963GD2s+hY7ZH64HopRjVEfUaSm5NpMKjYICmbFnXXytzt cArtGXyjUWXjHZWe6PvUMOl8U1cZq6cSwRN7ey+UyGR9PCmq7kv+rNOlrpSbXsp8 fSWd5f0YgzTO6Q03CPfc63OoIVgt3RMsMy0qvaTIkfnza3k4QEk3Pbdyw4ve5UZ/ xtt2lud4/cw0yUifSbRp1fiEe2BCvTF+OVhN5LpAJ8wyYrt1C2vfQQKOF7kAOtc+ UMCqnmRsthy/Qnesi9fTobz8ukxlByQSAHUB5kSvj50snwW/9GY/j/hiT48lAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXI2Zt5Ilm6dc1SncY24jq8/8BmowHwYDVR0j BBgwFoAU5wir8Dmx/yD53l/2zh3j3Luv1rQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0g0NmE5dFJGdFZSNWJaRkthalZlZTlZNzV2cDQ0QzZhMzRMMVlzblVq SEUvMS9FNzA4QUJGMDM5QjFGRjIwRjlERTVGRjZDRTFERTNEQ0JCQUZENkI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3MDhBQkYwMzlCMUZGMjBG OURFNUZGNkNFMURFM0RDQkJBRkQ2QjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0g0NmE5dFJGdFZSNWJaRkthalZlZTlZNzV2cDQ0QzZhMzRMMVlzblVqSEUvMS9F NzA4QUJGMDM5QjFGRjIwRjlERTVGRjZDRTFERTNEQ0JCQUZENkI0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZWNnIlA6eGElxbGnmaJ2VzfAOgwBF4U1A2/ACPWHeUpbsfMZuYMfkp0z6KpJ YnkTbigQKX+kmsCdiNhKMxZbQ6WjpXKQT66D0QQgLPQ99ugv5PiONzDY8BngVXNA IwrIpuNQKQfRfqO6CYhkwbhltPYuj5fxZQWW54b+FKZ83QORkzJhJCu2lWT5XJhe xMhPMzJ6H0T8O3iLrNMmPqTgOA29ArF/v14sAOztpPyjayq+eGQAh7trEpvfowgJ fC44j+fRQLamhVfxHi7KImJDASVYfhrJdMdRTrVM82tAMNgCq8oiFGi48bGjngp7 ZldD7UJgmr+97EhIseBCHOP2hA== -----END CERTIFICATE-----Generated at Sun Jun 15 23:06:04 2025 by rpki-client