$ rpki-client -vvf rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft File: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft (raw, json) Hash identifier: 6V/Dg9QO1QZpLjuBRincdSVuN6TzvL3KTPNPFMn94NU= Subject key identifier: A2:D5:0D:33:26:A4:DA:8B:86:C1:F0:5F:3D:06:82:53:43:F3:75:AE Authority key identifier: AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4 Certificate issuer: /CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4 Certificate serial: 5DF6A0864ECD1C099E5B669015EA0380215C3934 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer Subject info access: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft Manifest number: 01D3 Signing time: Thu 19 Jun 2025 15:30:34 +0000 Manifest this update: Thu 19 Jun 2025 15:25:34 +0000 Manifest next update: Fri 20 Jun 2025 15:49:34 +0000 Files and hashes: 1: 3138312e3139312e39362e302f32322d3332203d3e20323636303033.roa (hash: d8gu9ptBCMqS7eW9x/zK+JYDxuuJS0KDEGnCGJEMVwg=) 2: 34352e3137332e36342e302f32322d3330203d3e20323636303033.roa (hash: UvOi/ZT1aicBgWtPWrJpXA3ochSvMg4rQ0JcREvXNQU=) 3: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl (hash: Cctq5kzIjz2e/XCwJfi7etSyimYgBmuj0ijXDyOE2Rk=) 4: 323830343a343131383a3a2f33322d3634203d3e20323636303033.roa (hash: 77PgPUhXMiY+0pD6ukxK9PeS+HQTTgL9ZfKKPVRrA3Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 15:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f6:a0:86:4e:cd:1c:09:9e:5b:66:90:15:ea:03:80:21:5c:39:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4 Validity Not Before: Jun 19 15:25:34 2025 GMT Not After : Jun 20 15:49:34 2025 GMT Subject: CN=A2D50D3326A4DA8B86C1F05F3D06825343F375AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:93:31:64:76:d8:36:69:dd:a2:56:88:6b:18: f8:b1:2c:e0:2f:06:57:dc:34:98:53:ed:83:d0:15: 87:f6:7e:d1:af:62:32:c8:54:90:bc:f9:a3:4c:a9: 2f:5d:62:1d:76:b4:d2:3c:ee:fe:b5:b1:91:ad:03: 4c:a0:41:5d:37:ea:3c:3d:56:86:62:22:01:53:1c: 61:ab:5f:9b:ab:05:c6:9c:5f:25:05:1d:18:16:37: cf:6f:72:6f:0f:57:7a:74:ff:73:4f:3a:dc:cb:c6: ba:8c:e7:06:8e:90:e2:83:03:b7:ea:4c:0e:94:6f: 0d:8b:98:97:92:0d:21:85:68:34:32:d9:4a:7e:bf: b4:e6:90:42:a2:e6:d8:b7:e2:74:b1:f0:38:76:7f: e1:24:17:40:95:f6:00:11:8a:78:a5:f2:cc:05:e6: 79:43:64:f9:d6:0d:6b:48:93:a6:d0:fa:d0:b2:aa: c2:ca:63:76:61:40:86:7f:af:ed:c3:f6:af:b5:bd: 61:d4:cd:51:47:39:54:ef:6a:d2:e7:2c:e0:47:35: 17:fe:c1:4f:71:3a:c1:5c:2b:4a:1e:79:01:b6:2d: b5:9d:46:fd:c5:a3:8e:cb:0a:53:f6:eb:e5:ba:31: 13:7d:7d:59:7c:31:19:e7:c6:55:5e:73:3a:4a:34: 2d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D5:0D:33:26:A4:DA:8B:86:C1:F0:5F:3D:06:82:53:43:F3:75:AE X509v3 Authority Key Identifier: keyid:AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:a0:88:4d:cb:d0:60:21:d9:6b:f8:62:4f:23:18:69:db:38: 39:7f:cc:78:27:45:0d:dd:4e:f1:59:12:0c:ee:ba:11:28:19: d6:73:ed:fa:6a:56:34:5b:60:80:da:ea:80:03:f9:80:2c:28: ec:71:80:b3:44:b6:da:26:00:ae:6c:b5:d0:24:ff:59:c4:ef: 08:c2:a2:ff:2e:52:e4:dd:9b:5a:51:45:c7:d7:37:84:d3:ef: 4a:f9:ae:19:7c:f8:cd:4a:6e:d2:33:65:40:4e:ae:ce:12:5d: 79:5d:41:ac:4d:67:4c:98:a0:b3:9a:f0:f8:7a:cc:11:e8:25: 1a:86:e4:44:1d:54:07:e6:17:1c:35:01:11:25:4d:ed:75:48: 4a:10:b3:a6:61:28:d4:06:2b:66:7f:9c:44:d5:2b:94:98:fb: 9a:ce:54:9d:45:eb:54:5a:ed:10:b1:c8:cb:17:f5:89:3a:a6: 1b:e8:b2:90:ae:00:5e:af:46:2f:83:5a:5d:b8:ef:c0:04:bb: 45:15:5d:0f:e3:c9:05:f4:fa:1e:10:e7:1b:1b:39:4b:4d:e0: be:ff:38:01:96:59:95:bb:43:14:50:30:26:22:0d:81:11:7e: 40:e5:bc:8b:3b:7e:3e:f7:fe:bc:8a:4a:04:88:f6:45:23:b9: 9d:88:18:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXfaghk7NHAmeW2aQFeoDgCFcOTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEwNzhFOEY1RUE0RUZFRjhFNzAwM0UwQTlCMjExNjVC NUFCODFENDAeFw0yNTA2MTkxNTI1MzRaFw0yNTA2MjAxNTQ5MzRaMDMxMTAvBgNV BAMTKEEyRDUwRDMzMjZBNERBOEI4NkMxRjA1RjNEMDY4MjUzNDNGMzc1QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJkzFkdtg2ad2iVohrGPixLOAv BlfcNJhT7YPQFYf2ftGvYjLIVJC8+aNMqS9dYh12tNI87v61sZGtA0ygQV036jw9 VoZiIgFTHGGrX5urBcacXyUFHRgWN89vcm8PV3p0/3NPOtzLxrqM5waOkOKDA7fq TA6Ubw2LmJeSDSGFaDQy2Up+v7TmkEKi5ti34nSx8Dh2f+EkF0CV9gARinil8swF 5nlDZPnWDWtIk6bQ+tCyqsLKY3ZhQIZ/r+3D9q+1vWHUzVFHOVTvatLnLOBHNRf+ wU9xOsFcK0oeeQG2LbWdRv3Fo47LClP26+W6MRN9fVl8MRnnxlVeczpKNC1vAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUotUNMyak2ouGwfBfPQaCU0Pzda4wHwYDVR0j BBgwFoAUqgeOj16k7++OcAPgqbIRZbWrgdQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDFkdUV1RjhlTEJ0aVdxZUI2ekZudkdqSnM3TnZ0Qm51Mzdib3JLVnpq ZEgvMC9BQTA3OEU4RjVFQTRFRkVGOEU3MDAzRTBBOUIyMTE2NUI1QUI4MUQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMDc4RThGNUVBNEVGRUY4 RTcwMDNFMEE5QjIxMTY1QjVBQjgxRDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDFkdUV1RjhlTEJ0aVdxZUI2ekZudkdqSnM3TnZ0Qm51Mzdib3JLVnpqZEgvMC9B QTA3OEU4RjVFQTRFRkVGOEU3MDAzRTBBOUIyMTE2NUI1QUI4MUQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABqCITcvQYCHZa/hiTyMYads4OX/MeCdFDd1O8VkSDO66ESgZ1nPt+mpWNFtg gNrqgAP5gCwo7HGAs0S22iYArmy10CT/WcTvCMKi/y5S5N2bWlFFx9c3hNPvSvmu GXz4zUpu0jNlQE6uzhJdeV1BrE1nTJigs5rw+HrMEeglGobkRB1UB+YXHDUBESVN 7XVIShCzpmEo1AYrZn+cRNUrlJj7ms5UnUXrVFrtELHIyxf1iTqmG+iykK4AXq9G L4NaXbjvwAS7RRVdD+PJBfT6HhDnGxs5S03gvv84AZZZlbtDFFAwJiINgRF+QOW8 izt+Pvf+vIpKBIj2RSO5nYgYCw== -----END CERTIFICATE-----Generated at Fri Jun 20 08:29:38 2025 by rpki-client