$ rpki-client -vvf rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/91A9CE422C010D9E7886B57603291103F2C9DB57.mft File: 91A9CE422C010D9E7886B57603291103F2C9DB57.mft (raw, json) Hash identifier: tZ635b5EvfzX0PzIYWv5hgsNIlhWmH8OCR3oDozu7CE= Subject key identifier: 25:87:1C:C2:55:47:DE:90:C3:12:39:44:71:AC:D7:DF:E1:B3:DB:E9 Authority key identifier: 91:A9:CE:42:2C:01:0D:9E:78:86:B5:76:03:29:11:03:F2:C9:DB:57 Certificate issuer: /CN=91A9CE422C010D9E7886B57603291103F2C9DB57 Certificate serial: 6076E1F1EF799F78985EA4857209CB41D07CBB3D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91A9CE422C010D9E7886B57603291103F2C9DB57.cer Subject info access: rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/91A9CE422C010D9E7886B57603291103F2C9DB57.mft Manifest number: 21 Signing time: Fri 20 Jun 2025 11:37:08 +0000 Manifest this update: Fri 20 Jun 2025 11:32:08 +0000 Manifest next update: Sat 21 Jun 2025 15:29:08 +0000 Files and hashes: 1: 323830343a373934303a3a2f33322d3334203d3e20323731323934.roa (hash: 2XPfQPAiuhi39VUU42ChmZ3ZMunOKIzsepamcsvpKEM=) 2: 91A9CE422C010D9E7886B57603291103F2C9DB57.crl (hash: EWhvI8emvGDxCtQVwEPCLpoMXqKGW9TM49WYBdrAXSw=) 3: 3230312e3232312e3131362e302f32322d3234203d3e20323731323934.roa (hash: /0PxdDvkAoM1jNWfhg3qAj8lZ4LVMSrrIq9x0bWWwLk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/91A9CE422C010D9E7886B57603291103F2C9DB57.crl rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/91A9CE422C010D9E7886B57603291103F2C9DB57.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91A9CE422C010D9E7886B57603291103F2C9DB57.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 15:29:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:76:e1:f1:ef:79:9f:78:98:5e:a4:85:72:09:cb:41:d0:7c:bb:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91A9CE422C010D9E7886B57603291103F2C9DB57 Validity Not Before: Jun 20 11:32:08 2025 GMT Not After : Jun 21 15:29:08 2025 GMT Subject: CN=25871CC25547DE90C312394471ACD7DFE1B3DBE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:36:25:5a:f4:ea:12:f8:92:dc:27:74:3f:cb: 30:bb:d1:0e:7e:52:e4:cd:8d:58:9b:7d:53:35:eb: 13:63:0f:c9:7d:0b:7a:d9:bd:2a:99:3a:61:23:a2: 2e:40:f9:f4:7c:44:ba:60:bf:42:35:aa:c2:d2:71: 53:32:85:00:15:eb:87:88:80:b3:08:7c:9c:dc:3b: 56:b3:5a:13:c7:4e:08:b6:30:aa:fe:51:83:c4:37: 2d:57:8a:a6:a2:14:e7:f9:a6:15:15:d8:c1:71:5e: 18:f9:b7:86:db:4e:74:ab:93:19:e4:f5:89:c6:63: ef:9d:bf:e4:f1:0d:8c:5a:21:54:7a:8c:3a:eb:e5: e5:3f:db:80:ca:9d:3b:61:33:4d:78:38:40:de:a1: 89:65:61:98:dc:1b:d0:31:5d:af:4b:09:3a:7e:66: 1e:a2:88:80:1f:a2:85:22:9f:76:5c:41:01:9a:2b: 32:bc:70:3e:3c:47:1f:8d:23:01:b0:0b:38:43:49: f9:8d:66:97:d3:6a:7b:3e:fd:c7:77:7f:37:c1:c8: c3:5f:94:19:10:b7:a7:6f:67:84:3d:0d:99:a2:ad: 42:81:c4:9c:5b:0d:b7:3c:1b:0d:15:ef:3f:db:63: a6:c8:b7:5c:96:ba:03:13:93:75:6d:72:11:42:b1: a4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:87:1C:C2:55:47:DE:90:C3:12:39:44:71:AC:D7:DF:E1:B3:DB:E9 X509v3 Authority Key Identifier: keyid:91:A9:CE:42:2C:01:0D:9E:78:86:B5:76:03:29:11:03:F2:C9:DB:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/91A9CE422C010D9E7886B57603291103F2C9DB57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91A9CE422C010D9E7886B57603291103F2C9DB57.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/91A9CE422C010D9E7886B57603291103F2C9DB57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:fa:9d:0d:49:c7:0a:9b:08:cc:76:8e:81:1b:45:20:91:aa: b8:e7:44:3a:ed:ae:5b:e8:a2:d4:ce:1e:37:9a:25:b0:eb:98: a2:26:6b:17:ba:b0:56:f5:27:e9:f2:8f:1a:32:ef:be:6d:b4: 7a:79:0a:4e:a5:6f:fe:1e:c8:52:b8:8a:77:7c:df:7c:4b:e0: 42:77:66:aa:64:28:a5:7a:44:9d:e9:67:46:a7:0a:a0:9d:96: 94:1c:65:ca:ba:f9:0d:e2:e3:dd:e5:d3:ea:b5:09:9c:35:0f: ca:09:f2:83:1c:47:47:45:4d:43:66:95:41:98:3f:db:ea:ac: 3a:a1:fc:18:fe:54:c7:0a:37:a6:3f:f3:e0:d3:9b:6f:d9:d6: c7:61:e0:58:0e:ee:d9:8d:33:48:92:c0:14:12:8b:1e:67:f8: b7:30:67:6d:b2:a6:dc:1c:25:70:78:df:52:a2:7e:0e:49:3e: 9c:e0:7d:6a:91:4d:ad:df:2c:c3:2b:88:64:7d:bf:26:1c:93: e4:e2:87:3d:74:3d:a5:c5:ae:66:24:1c:ba:c9:aa:4b:60:15: 27:19:90:59:57:7b:7e:f0:45:72:94:6e:f5:ea:f0:d7:dd:09: df:1d:8a:da:61:6b:73:cb:e8:38:0a:35:a1:52:d3:73:22:d4: b5:dc:e4:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYHbh8e95n3iYXqSFcgnLQdB8uz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFBOUNFNDIyQzAxMEQ5RTc4ODZCNTc2MDMyOTExMDNG MkM5REI1NzAeFw0yNTA2MjAxMTMyMDhaFw0yNTA2MjExNTI5MDhaMDMxMTAvBgNV BAMTKDI1ODcxQ0MyNTU0N0RFOTBDMzEyMzk0NDcxQUNEN0RGRTFCM0RCRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYNiVa9OoS+JLcJ3Q/yzC70Q5+ UuTNjVibfVM16xNjD8l9C3rZvSqZOmEjoi5A+fR8RLpgv0I1qsLScVMyhQAV64eI gLMIfJzcO1azWhPHTgi2MKr+UYPENy1XiqaiFOf5phUV2MFxXhj5t4bbTnSrkxnk 9YnGY++dv+TxDYxaIVR6jDrr5eU/24DKnTthM014OEDeoYllYZjcG9AxXa9LCTp+ Zh6iiIAfooUin3ZcQQGaKzK8cD48Rx+NIwGwCzhDSfmNZpfTans+/cd3fzfByMNf lBkQt6dvZ4Q9DZmirUKBxJxbDbc8Gw0V7z/bY6bIt1yWugMTk3VtchFCsaStAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJYccwlVH3pDDEjlEcazX3+Gz2+kwHwYDVR0j BBgwFoAUkanOQiwBDZ54hrV2AykRA/LJ21cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2JGU3RlRjRGRmZkVHViU3ZONWZFN3RNMUplVk5qODMxb0EydEEzYmt3 TmovMC85MUE5Q0U0MjJDMDEwRDlFNzg4NkI1NzYwMzI5MTEwM0YyQzlEQjU3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxQTlDRTQyMkMwMTBEOUU3 ODg2QjU3NjAzMjkxMTAzRjJDOURCNTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2JGU3RlRjRGRmZkVHViU3ZONWZFN3RNMUplVk5qODMxb0EydEEzYmt3TmovMC85 MUE5Q0U0MjJDMDEwRDlFNzg4NkI1NzYwMzI5MTEwM0YyQzlEQjU3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzfqdDUnHCpsIzHaOgRtFIJGquOdEOu2uW+ii1M4eN5olsOuYoiZrF7qwVvUn 6fKPGjLvvm20enkKTqVv/h7IUriKd3zffEvgQndmqmQopXpEnelnRqcKoJ2WlBxl yrr5DeLj3eXT6rUJnDUPygnygxxHR0VNQ2aVQZg/2+qsOqH8GP5Uxwo3pj/z4NOb b9nWx2HgWA7u2Y0zSJLAFBKLHmf4tzBnbbKm3BwlcHjfUqJ+Dkk+nOB9apFNrd8s wyuIZH2/JhyT5OKHPXQ9pcWuZiQcusmqS2AVJxmQWVd7fvBFcpRu9erw190J3x2K 2mFrc8voOAo1oVLTcyLUtdzk2A== -----END CERTIFICATE-----Generated at Fri Jun 20 20:49:19 2025 by rpki-client