$ rpki-client -vvf rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft File: 5019A6C324130601793432FC2FAFF3DE1F1210C0.mft (raw, json) Hash identifier: fz8Ag5TR7rXo9pUVDVbgmhqfNegBneH8z07cs/hLHUA= Subject key identifier: 0A:5E:F2:9F:10:F0:AD:26:C0:14:F5:D6:1B:53:51:FA:E0:DB:7A:7A Authority key identifier: 50:19:A6:C3:24:13:06:01:79:34:32:FC:2F:AF:F3:DE:1F:12:10:C0 Certificate issuer: /CN=5019A6C324130601793432FC2FAFF3DE1F1210C0 Certificate serial: 7F896FEAA89595CD5709768A6B0B35125B6A65F2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer Subject info access: rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft Manifest number: 0249 Signing time: Tue 17 Jun 2025 18:33:48 +0000 Manifest this update: Tue 17 Jun 2025 18:28:48 +0000 Manifest next update: Wed 18 Jun 2025 18:39:48 +0000 Files and hashes: 1: 3137372e38342e32302e302f32322d3234203d3e203532373135.roa (hash: RL7RwQcjTKKA++BoYWaVFvGSkS1OFAP/DO2yENM0jCo=) 2: 5019A6C324130601793432FC2FAFF3DE1F1210C0.crl (hash: j184cJHwwKY/YAuqsyWjIkK18ZfH7VAX+b5Lqlq3tFI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.crl rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 18:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:89:6f:ea:a8:95:95:cd:57:09:76:8a:6b:0b:35:12:5b:6a:65:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5019A6C324130601793432FC2FAFF3DE1F1210C0 Validity Not Before: Jun 17 18:28:48 2025 GMT Not After : Jun 18 18:39:48 2025 GMT Subject: CN=0A5EF29F10F0AD26C014F5D61B5351FAE0DB7A7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:73:3c:9f:87:62:51:e9:89:59:da:31:68:79: 4e:14:66:f7:4b:62:cc:7e:0d:c8:6a:12:d8:8c:da: d6:aa:fc:24:c7:28:18:c8:00:13:af:ac:1d:35:d1: 41:c8:93:b8:99:44:1a:e7:29:a4:38:ac:6f:29:11: 4b:19:f3:d3:e2:2b:f2:f7:fc:15:68:91:32:22:fb: e3:ca:ed:c1:b7:bc:ca:a6:6f:91:96:83:52:70:6d: f8:af:55:df:da:ca:08:a2:3f:b5:15:a7:23:8c:18: 76:a4:9a:41:7f:b8:c7:fb:4e:26:0b:00:4c:12:3b: 26:12:e8:b3:fc:a8:86:9f:61:ef:e5:4b:e9:72:7a: 87:4e:1e:0c:d3:28:85:e1:10:1d:1c:7d:26:1e:77: 35:1a:51:af:2d:bd:bf:bc:3d:5d:71:48:5c:51:5e: ad:c7:67:43:0c:36:c9:66:6d:3a:3c:6e:84:b7:ff: c9:c3:e2:6a:6e:0a:0e:e1:2b:8c:c6:c5:5f:37:d5: fb:df:ca:e2:b6:f7:f2:eb:c2:df:11:2e:65:f3:36: e3:65:91:44:80:79:c9:b1:15:ee:fe:31:5d:4f:7e: 9f:9c:24:52:39:59:87:f2:4d:9c:bb:15:98:0c:a2: 61:db:5c:d3:94:08:4b:6e:e8:fd:c3:d8:b9:7f:75: 68:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5E:F2:9F:10:F0:AD:26:C0:14:F5:D6:1B:53:51:FA:E0:DB:7A:7A X509v3 Authority Key Identifier: keyid:50:19:A6:C3:24:13:06:01:79:34:32:FC:2F:AF:F3:DE:1F:12:10:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b2:4e:fd:c3:87:ca:be:98:12:76:51:c8:49:2b:69:2a:55: 21:b7:8f:92:0c:9e:1b:22:4f:7b:f5:b6:11:c9:01:3f:12:b3: 95:a9:18:a4:b2:3d:88:45:d8:72:67:3e:fa:74:04:dd:f5:42: 01:dc:d5:2c:48:e1:a3:1e:af:63:66:31:46:56:be:42:d8:13: 15:09:44:bb:a6:96:d0:02:f3:da:5e:84:3d:dc:b3:e5:ed:02: 46:b7:b8:26:73:79:84:1b:af:45:d1:9c:99:18:c6:76:5b:f1: 4b:10:f4:ed:17:3d:30:c1:2b:26:a7:6a:8e:1c:67:91:5e:6a: 1e:cc:66:11:4b:8c:e7:ce:92:a4:ca:76:87:3c:11:65:af:77: bf:a2:24:97:62:9e:05:77:c2:f1:05:6b:86:f4:79:8d:bf:6c: 44:ac:d3:6a:1b:fe:16:31:11:56:35:d8:3d:15:f8:61:56:a4: 8c:b4:55:7a:47:46:b3:07:bd:d4:54:ad:49:fd:7c:4b:3d:ef: fd:53:6a:5c:42:54:5c:d2:f7:ca:34:f5:36:a5:9c:4a:fe:89: fe:9f:39:68:83:5a:57:f8:43:dd:4c:21:cc:76:96:d4:bc:50: 86:e7:b7:eb:37:64:e6:b2:a1:64:8a:62:76:3a:b1:d2:c3:d2: 29:b8:35:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUf4lv6qiVlc1XCXaKaws1EltqZfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTAxOUE2QzMyNDEzMDYwMTc5MzQzMkZDMkZBRkYzREUx RjEyMTBDMDAeFw0yNTA2MTcxODI4NDhaFw0yNTA2MTgxODM5NDhaMDMxMTAvBgNV BAMTKDBBNUVGMjlGMTBGMEFEMjZDMDE0RjVENjFCNTM1MUZBRTBEQjdBN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSczyfh2JR6YlZ2jFoeU4UZvdL Ysx+DchqEtiM2taq/CTHKBjIABOvrB010UHIk7iZRBrnKaQ4rG8pEUsZ89PiK/L3 /BVokTIi++PK7cG3vMqmb5GWg1JwbfivVd/aygiiP7UVpyOMGHakmkF/uMf7TiYL AEwSOyYS6LP8qIafYe/lS+lyeodOHgzTKIXhEB0cfSYedzUaUa8tvb+8PV1xSFxR Xq3HZ0MMNslmbTo8boS3/8nD4mpuCg7hK4zGxV831fvfyuK29/Lrwt8RLmXzNuNl kUSAecmxFe7+MV1Pfp+cJFI5WYfyTZy7FZgMomHbXNOUCEtu6P3D2Ll/dWgpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCl7ynxDwrSbAFPXWG1NR+uDbenowHwYDVR0j BBgwFoAUUBmmwyQTBgF5NDL8L6/z3h8SEMAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ25QS2MyOXdQWmdWeHY4UE1iQ3Z1M1lQQVhNTmVSUVlOZEZGWnZkU3lK a04vMS81MDE5QTZDMzI0MTMwNjAxNzkzNDMyRkMyRkFGRjNERTFGMTIxMEMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwMTlBNkMzMjQxMzA2MDE3 OTM0MzJGQzJGQUZGM0RFMUYxMjEwQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q25QS2MyOXdQWmdWeHY4UE1iQ3Z1M1lQQVhNTmVSUVlOZEZGWnZkU3lKa04vMS81 MDE5QTZDMzI0MTMwNjAxNzkzNDMyRkMyRkFGRjNERTFGMTIxMEMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfbJO/cOHyr6YEnZRyEkraSpVIbePkgyeGyJPe/W2EckBPxKzlakYpLI9iEXY cmc++nQE3fVCAdzVLEjhox6vY2YxRla+QtgTFQlEu6aW0ALz2l6EPdyz5e0CRre4 JnN5hBuvRdGcmRjGdlvxSxD07Rc9MMErJqdqjhxnkV5qHsxmEUuM586SpMp2hzwR Za93v6Ikl2KeBXfC8QVrhvR5jb9sRKzTahv+FjERVjXYPRX4YVakjLRVekdGswe9 1FStSf18Sz3v/VNqXEJUXNL3yjT1NqWcSv6J/p85aINaV/hD3UwhzHaW1LxQhue3 6zdk5rKhZIpidjqx0sPSKbg1Hg== -----END CERTIFICATE-----Generated at Wed Jun 18 05:24:47 2025 by rpki-client