$ rpki-client -vvf rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/AEE053558C2B180DC12DAFF1D4AA19D44F354D88.mft File: AEE053558C2B180DC12DAFF1D4AA19D44F354D88.mft (raw, json) Hash identifier: hu/Hwbuuh46jRShFGU6ZeV2AdsnRW5NXUGrCmW1cln8= Subject key identifier: 97:64:68:62:DB:5C:BC:CA:5A:E6:00:22:D1:44:AF:EA:38:B8:4E:04 Authority key identifier: AE:E0:53:55:8C:2B:18:0D:C1:2D:AF:F1:D4:AA:19:D4:4F:35:4D:88 Certificate issuer: /CN=AEE053558C2B180DC12DAFF1D4AA19D44F354D88 Certificate serial: 235A7E50A66A34BCBBE197A373E8A07A190B1EEE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE053558C2B180DC12DAFF1D4AA19D44F354D88.cer Subject info access: rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/AEE053558C2B180DC12DAFF1D4AA19D44F354D88.mft Manifest number: 3A Signing time: Mon 16 Jun 2025 17:35:39 +0000 Manifest this update: Mon 16 Jun 2025 17:30:39 +0000 Manifest next update: Tue 17 Jun 2025 20:44:39 +0000 Files and hashes: 1: 3134332e3133372e3133362e302f32322d3332203d3e20323634303738.roa (hash: jgpCeiVl5VcAxrlh5lsh3HgP60adidMsy6nP7U3SIB4=) 2: 323830343a326138633a3a2f33322d313238203d3e20323634303738.roa (hash: 1DMEkks6LDTf+mDKDglazFMK1PkTcyxeg/6qFsuHqVw=) 3: AEE053558C2B180DC12DAFF1D4AA19D44F354D88.crl (hash: MpeK2ZVu/nsDnP3RADP8dKNa2Pouf3yfnZ1Zi7sW03M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/AEE053558C2B180DC12DAFF1D4AA19D44F354D88.crl rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/AEE053558C2B180DC12DAFF1D4AA19D44F354D88.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE053558C2B180DC12DAFF1D4AA19D44F354D88.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 20:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:5a:7e:50:a6:6a:34:bc:bb:e1:97:a3:73:e8:a0:7a:19:0b:1e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEE053558C2B180DC12DAFF1D4AA19D44F354D88 Validity Not Before: Jun 16 17:30:39 2025 GMT Not After : Jun 17 20:44:39 2025 GMT Subject: CN=97646862DB5CBCCA5AE60022D144AFEA38B84E04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:eb:70:fb:e7:94:36:b9:16:f5:87:37:c8:ee: f7:8d:e4:c6:2f:75:e9:9c:76:b0:e3:60:df:47:b8: 5f:82:a4:c0:a5:ff:c1:56:9c:99:66:9e:50:dd:4d: 4b:85:2b:90:e6:a1:67:63:56:37:86:52:e3:a9:d7: a0:5a:56:5a:79:3a:a5:70:1a:dc:62:21:4a:88:c8: 08:00:3f:07:5c:e0:0f:2a:d3:f8:a1:6d:cd:20:1e: 19:c5:8a:d4:b7:fa:38:29:8f:dd:8a:1a:24:c4:b3: 4d:cb:94:84:01:6a:b5:57:0d:3d:dc:9b:a4:c1:96: d2:96:47:8a:17:e9:f4:3c:14:58:82:76:56:d8:e0: ad:40:11:5c:d9:43:ca:91:e0:8a:f8:65:79:e3:cb: 07:07:8e:65:78:6c:8c:90:e6:a3:17:a8:a8:5a:54: a5:58:3f:ce:d3:5f:64:b0:24:33:41:f3:c2:6a:1a: d6:6c:43:55:9e:b7:10:42:72:f0:b0:d8:db:4d:2c: d8:db:bb:30:6c:6e:65:b0:54:86:78:c6:87:2f:f1: 8d:bb:2c:89:75:61:44:ae:37:4d:80:a9:b2:f3:7b: 38:fa:2b:3f:ac:a7:7f:59:10:c9:e4:08:63:5d:63: c0:b1:54:01:fe:9c:40:0f:fb:a4:7f:34:ae:eb:fa: ef:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:64:68:62:DB:5C:BC:CA:5A:E6:00:22:D1:44:AF:EA:38:B8:4E:04 X509v3 Authority Key Identifier: keyid:AE:E0:53:55:8C:2B:18:0D:C1:2D:AF:F1:D4:AA:19:D4:4F:35:4D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/AEE053558C2B180DC12DAFF1D4AA19D44F354D88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE053558C2B180DC12DAFF1D4AA19D44F354D88.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CanptWuwGq58XnR4ZqXEVoSgDzWmkikjjTrfJgfNNvpN/0/AEE053558C2B180DC12DAFF1D4AA19D44F354D88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:20:d1:fb:bc:df:98:ad:ac:b2:e2:fb:e8:4e:d1:27:71:8a: b2:b9:5c:1a:dd:10:25:f1:49:42:c2:92:84:c6:88:c0:fb:66: 7f:07:44:39:25:bf:a6:f4:fb:9a:d4:45:fc:87:2c:ad:b7:0b: c6:f8:fd:e7:66:94:f9:19:c0:95:7e:31:f4:40:29:66:98:16: 38:2a:be:41:d5:be:1a:0b:b2:26:ec:9d:b0:84:c9:98:f4:73: ae:cd:79:18:d1:41:9e:4f:c0:07:bf:5d:41:44:c6:0a:d0:70: a1:b4:c3:6e:34:e4:a5:e2:aa:ad:72:c9:c7:6a:fd:25:cf:e9: c9:0a:fe:73:8a:91:4c:c0:37:c0:a8:0d:16:3c:e4:06:b5:bc: 2b:22:fb:88:73:09:24:b2:fd:2f:9f:8f:8b:ca:d4:5d:05:89: 14:80:b2:8a:5e:b4:f4:8c:0f:80:69:00:8c:63:f0:c1:d9:a4: af:7b:3d:93:78:8e:c9:8c:4c:f6:0b:ab:8c:2c:27:4a:f4:5e: 05:4b:a3:1c:9f:20:f3:04:04:71:36:af:81:af:0f:be:01:ea: e9:f1:36:4d:78:95:3a:48:c6:19:8b:64:a7:fe:5f:a2:9b:26: b5:27:f4:e3:e8:70:98:a7:24:e9:97:76:9f:6f:5b:37:8c:e1: d0:b2:99:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI1p+UKZqNLy74Zejc+igehkLHu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVFMDUzNTU4QzJCMTgwREMxMkRBRkYxRDRBQTE5RDQ0 RjM1NEQ4ODAeFw0yNTA2MTYxNzMwMzlaFw0yNTA2MTcyMDQ0MzlaMDMxMTAvBgNV BAMTKDk3NjQ2ODYyREI1Q0JDQ0E1QUU2MDAyMkQxNDRBRkVBMzhCODRFMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe63D755Q2uRb1hzfI7veN5MYv demcdrDjYN9HuF+CpMCl/8FWnJlmnlDdTUuFK5DmoWdjVjeGUuOp16BaVlp5OqVw GtxiIUqIyAgAPwdc4A8q0/ihbc0gHhnFitS3+jgpj92KGiTEs03LlIQBarVXDT3c m6TBltKWR4oX6fQ8FFiCdlbY4K1AEVzZQ8qR4Ir4ZXnjywcHjmV4bIyQ5qMXqKha VKVYP87TX2SwJDNB88JqGtZsQ1WetxBCcvCw2NtNLNjbuzBsbmWwVIZ4xocv8Y27 LIl1YUSuN02AqbLzezj6Kz+sp39ZEMnkCGNdY8CxVAH+nEAP+6R/NK7r+u8lAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUl2RoYttcvMpa5gAi0USv6ji4TgQwHwYDVR0j BBgwFoAUruBTVYwrGA3BLa/x1KoZ1E81TYgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2FucHRXdXdHcTU4WG5SNFpxWEVWb1NnRHpXbWtpa2pqVHJmSmdmTk52 cE4vMC9BRUUwNTM1NThDMkIxODBEQzEyREFGRjFENEFBMTlENDRGMzU0RDg4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFRTA1MzU1OEMyQjE4MERD MTJEQUZGMUQ0QUExOUQ0NEYzNTREODguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2FucHRXdXdHcTU4WG5SNFpxWEVWb1NnRHpXbWtpa2pqVHJmSmdmTk52cE4vMC9B RUUwNTM1NThDMkIxODBEQzEyREFGRjFENEFBMTlENDRGMzU0RDg4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbCDR+7zfmK2ssuL76E7RJ3GKsrlcGt0QJfFJQsKShMaIwPtmfwdEOSW/pvT7 mtRF/IcsrbcLxvj952aU+RnAlX4x9EApZpgWOCq+QdW+GguyJuydsITJmPRzrs15 GNFBnk/AB79dQUTGCtBwobTDbjTkpeKqrXLJx2r9Jc/pyQr+c4qRTMA3wKgNFjzk BrW8KyL7iHMJJLL9L5+Pi8rUXQWJFICyil609IwPgGkAjGPwwdmkr3s9k3iOyYxM 9gurjCwnSvReBUujHJ8g8wQEcTavga8PvgHq6fE2TXiVOkjGGYtkp/5fopsmtSf0 4+hwmKck6Zd2n29bN4zh0LKZgQ== -----END CERTIFICATE-----Generated at Tue Jun 17 01:28:33 2025 by rpki-client