$ rpki-client -vvf rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft File: FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft (raw, json) Hash identifier: Fs/kMloNn3Wt3A7amQuQSthloj6g2f6Z1AWhcdKL/Ak= Subject key identifier: C4:FE:39:67:9A:CE:6D:C4:C7:23:10:95:79:89:77:B3:4D:09:6F:54 Authority key identifier: FA:ED:B0:9B:70:5F:EF:6A:6E:14:D8:F6:8D:6E:E4:4B:C2:F1:28:94 Certificate issuer: /CN=FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894 Certificate serial: 2D7F551D4C6C44A50D8200136CBC241DD86E9FBE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer Subject info access: rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft Manifest number: 01D5 Signing time: Sun 22 Jun 2025 15:00:53 +0000 Manifest this update: Sun 22 Jun 2025 14:55:53 +0000 Manifest next update: Mon 23 Jun 2025 18:17:53 +0000 Files and hashes: 1: 3138362e3235312e33382e302f32342d3234203d3e203532393130.roa (hash: LJ3GvetHQ0kN2c975azp4zzCkBxk+LMzyWa6evxQVAw=) 2: 323830343a316633633a3a2f33362d3336203d3e203532393130.roa (hash: lfqZkpYjQtoRCrlJD+BBcFVCp7Q4ArEgJm8EQlnhS+8=) 3: FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.crl (hash: tVlWgYvmKzX2kiWtw219n4wuwqHTeqnuYODyjs3D+Gc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.crl rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Jun 2025 18:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:7f:55:1d:4c:6c:44:a5:0d:82:00:13:6c:bc:24:1d:d8:6e:9f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894 Validity Not Before: Jun 22 14:55:53 2025 GMT Not After : Jun 23 18:17:53 2025 GMT Subject: CN=C4FE39679ACE6DC4C7231095798977B34D096F54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:42:b9:fe:c0:66:0d:64:6f:cb:c3:ef:da:64: 80:3d:fc:09:da:88:70:81:db:8d:eb:97:90:d6:76: c2:45:15:12:f6:9c:5f:84:98:b5:37:d5:4a:5d:ea: 1a:38:ad:c4:07:3c:6f:54:ea:d7:ea:0f:5a:7f:ee: a0:20:f0:14:ec:66:26:3f:11:9a:69:b9:a5:c0:fc: ff:b6:3d:59:7d:80:55:77:e4:fe:b6:50:b2:af:7b: 8e:c6:0f:f8:a9:05:0b:32:31:9b:54:24:36:12:c7: a5:ca:c1:61:50:df:e8:55:a3:25:04:4a:de:b0:39: c5:8f:2d:47:26:81:bc:94:e2:fc:c4:ce:c0:7d:3c: 56:2f:bd:3c:2a:3e:07:57:03:7b:53:fb:07:02:65: 0c:91:36:d4:04:e3:3e:b3:fa:ab:53:7a:78:64:41: 89:19:ca:6d:c4:3a:58:fb:4d:af:9b:41:da:af:24: 06:7d:17:e9:e2:bd:1d:f0:a9:d9:24:c0:35:65:bd: 60:81:53:d0:8f:2b:e0:b5:a5:7c:be:8c:12:c7:0f: 49:ef:36:33:71:a8:a4:24:35:89:81:2a:4d:44:b0: 30:4e:47:14:ec:a7:c3:d2:85:8a:da:d4:f0:24:f9: 05:02:fb:92:6c:44:a8:37:eb:b0:90:79:dc:4b:17: f0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FE:39:67:9A:CE:6D:C4:C7:23:10:95:79:89:77:B3:4D:09:6F:54 X509v3 Authority Key Identifier: keyid:FA:ED:B0:9B:70:5F:EF:6A:6E:14:D8:F6:8D:6E:E4:4B:C2:F1:28:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:41:27:2b:b7:cd:bc:e2:37:6c:ac:e3:4b:ff:97:6f:65:8a: 2b:13:53:10:99:f7:cd:9c:47:c6:72:fb:82:59:34:aa:f8:55: 31:61:b1:6a:d9:5d:63:d7:49:01:6b:9e:f2:00:58:5f:0d:33: 81:44:8a:84:60:c3:db:25:8e:d6:7f:10:5a:78:cf:9c:5b:92: 89:ff:8f:62:f2:8c:c8:84:41:16:96:76:18:6d:82:fa:05:56: e7:8f:b8:be:ac:d0:58:68:41:db:b2:23:b0:69:60:5e:1c:45: 98:6a:a8:c3:f7:e4:2b:6f:d5:31:9c:6e:ec:a0:11:45:fb:71: bd:6f:7a:12:02:d0:79:db:40:bf:ce:8b:31:fb:1f:e0:aa:95: b0:27:1f:35:f3:89:55:61:21:68:9c:c8:59:d5:1d:2f:fe:19: 57:e1:17:44:d3:45:83:2e:bd:0c:2c:72:e1:67:d8:7a:b5:92: 72:71:04:18:b6:03:db:c5:35:98:13:76:82:a9:cf:82:16:fe: 06:9d:97:68:ad:c3:34:96:fd:89:45:ff:05:ec:79:ce:11:9f: 1c:44:27:a6:dd:4f:d4:cb:e4:ba:18:83:db:33:2f:64:61:15: f9:05:dd:76:6c:c7:c7:50:8d:ef:a8:47:a2:fe:9d:e0:b7:b3: 35:a4:31:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULX9VHUxsRKUNggATbLwkHdhun74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFFREIwOUI3MDVGRUY2QTZFMTREOEY2OEQ2RUU0NEJD MkYxMjg5NDAeFw0yNTA2MjIxNDU1NTNaFw0yNTA2MjMxODE3NTNaMDMxMTAvBgNV BAMTKEM0RkUzOTY3OUFDRTZEQzRDNzIzMTA5NTc5ODk3N0IzNEQwOTZGNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPQrn+wGYNZG/Lw+/aZIA9/Ana iHCB243rl5DWdsJFFRL2nF+EmLU31Upd6ho4rcQHPG9U6tfqD1p/7qAg8BTsZiY/ EZppuaXA/P+2PVl9gFV35P62ULKve47GD/ipBQsyMZtUJDYSx6XKwWFQ3+hVoyUE St6wOcWPLUcmgbyU4vzEzsB9PFYvvTwqPgdXA3tT+wcCZQyRNtQE4z6z+qtTenhk QYkZym3EOlj7Ta+bQdqvJAZ9F+nivR3wqdkkwDVlvWCBU9CPK+C1pXy+jBLHD0nv NjNxqKQkNYmBKk1EsDBORxTsp8PShYra1PAk+QUC+5JsRKg367CQedxLF/CxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxP45Z5rObcTHIxCVeYl3s00Jb1QwHwYDVR0j BBgwFoAU+u2wm3Bf72puFNj2jW7kS8LxKJQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vREJuRm1zRW5WcGhmSm1pYUNiYko2ZktSVEs3TFBCRmtCcEFSTE51OVhL TVAvMC9GQUVEQjA5QjcwNUZFRjZBNkUxNEQ4RjY4RDZFRTQ0QkMyRjEyODk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBRURCMDlCNzA1RkVGNkE2 RTE0RDhGNjhENkVFNDRCQzJGMTI4OTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v REJuRm1zRW5WcGhmSm1pYUNiYko2ZktSVEs3TFBCRmtCcEFSTE51OVhLTVAvMC9G QUVEQjA5QjcwNUZFRjZBNkUxNEQ4RjY4RDZFRTQ0QkMyRjEyODk0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwUEnK7fNvOI3bKzjS/+Xb2WKKxNTEJn3zZxHxnL7glk0qvhVMWGxatldY9dJ AWue8gBYXw0zgUSKhGDD2yWO1n8QWnjPnFuSif+PYvKMyIRBFpZ2GG2C+gVW54+4 vqzQWGhB27IjsGlgXhxFmGqow/fkK2/VMZxu7KARRftxvW96EgLQedtAv86LMfsf 4KqVsCcfNfOJVWEhaJzIWdUdL/4ZV+EXRNNFgy69DCxy4WfYerWScnEEGLYD28U1 mBN2gqnPghb+Bp2XaK3DNJb9iUX/Bex5zhGfHEQnpt1P1MvkuhiD2zMvZGEV+QXd dmzHx1CN76hHov6d4LezNaQxFA== -----END CERTIFICATE-----Generated at Sun Jun 22 21:29:17 2025 by rpki-client