$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft File: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft (raw, json) Hash identifier: 3zm3TnTBKWVlXb2O3BGIHpEc2wlZZzOTzuwVbEx9JVk= Subject key identifier: 84:4A:28:F7:7B:51:5F:5D:E8:C5:D7:A6:51:87:8A:8D:B9:6C:32:25 Authority key identifier: D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA Certificate issuer: /CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Certificate serial: 0F88BC2EB6CB495C521D389F35D76C3FCA5F20D1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft Manifest number: 0243 Signing time: Sun 22 Jun 2025 17:36:19 +0000 Manifest this update: Sun 22 Jun 2025 17:31:17 +0000 Manifest next update: Mon 23 Jun 2025 19:04:17 +0000 Files and hashes: 1: 323830343a333164343a3a2f33322d3438203d3e203533313339.roa (hash: Tny32eTDORgq/MtVMRE6pvmeZrpwE0nT6BNCMfyIuNM=) 2: 3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa (hash: sPenw571n896sllNaEQg92EoBX7mLS0ivDvfDaPaky8=) 3: 3138372e3130392e38302e302f32302d3234203d3e203533313339.roa (hash: IQvjHctOgbHfUkTO0U34ErrEutSrCbjo/UK2hA9NLGA=) 4: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl (hash: Kt23KozQxlkfUbrwPJ1biYFTq4nRwjXlPC7+4u76hZQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Jun 2025 19:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:88:bc:2e:b6:cb:49:5c:52:1d:38:9f:35:d7:6c:3f:ca:5f:20:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Validity Not Before: Jun 22 17:31:17 2025 GMT Not After : Jun 23 19:04:17 2025 GMT Subject: CN=844A28F77B515F5DE8C5D7A651878A8DB96C3225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:91:bc:5f:c0:0c:20:55:1e:eb:60:57:97:9e: 1a:7c:bd:59:50:26:82:e6:50:68:ea:82:37:f9:69: e4:5f:0b:20:70:96:0a:37:4e:9e:74:c3:d5:3b:18: 95:b5:0b:6e:c6:9d:d7:07:7c:8a:9f:09:71:05:c7: f9:15:96:c1:5d:9c:01:99:81:f5:92:e1:ae:69:cf: 74:44:80:61:31:f7:e6:06:8c:9b:fc:35:26:85:72: e2:c1:69:df:18:41:11:94:81:d5:29:fb:37:52:16: 56:5b:7b:8d:dc:62:0d:71:58:cb:f5:aa:1c:4a:f9: 01:20:c5:0c:75:41:62:39:ba:d2:5a:63:3c:18:de: 0b:f9:84:d7:8f:4b:b9:39:72:fb:52:f1:42:ab:cc: 57:dc:af:cf:0a:2d:13:f0:fc:18:44:c3:e1:d4:22: 17:da:7a:45:3e:cc:5c:98:08:c5:ae:02:45:ff:26: 36:ba:e4:b2:9c:b9:73:90:3e:db:b4:75:84:85:9f: ce:89:56:6b:e7:a4:76:d4:c7:8c:3d:bd:e2:1f:8d: f7:04:fa:6b:44:79:28:26:87:a5:da:83:49:17:3c: 44:a0:96:7c:44:20:13:c4:0b:00:39:7f:ad:a3:eb: 12:0d:ab:6a:d2:90:cd:1f:e7:49:9e:cc:4d:ae:07: aa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4A:28:F7:7B:51:5F:5D:E8:C5:D7:A6:51:87:8A:8D:B9:6C:32:25 X509v3 Authority Key Identifier: keyid:D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:0f:30:c9:17:6e:83:a9:55:36:6a:ce:d3:2d:33:5a:1a:da: 60:ce:70:85:38:6a:75:1e:0a:76:9f:e8:0f:6e:94:6b:d5:c3: a0:07:ac:f0:96:0a:14:34:9a:ce:eb:40:dd:39:b7:e8:5c:d1: 2b:b5:88:92:0e:d0:ab:c6:8d:d1:b7:59:62:4a:ee:04:5e:53: 76:03:18:ac:6c:29:7d:86:84:45:dd:2c:4d:8b:39:fc:74:29: de:e0:af:27:3b:3b:83:e3:ab:22:3f:d2:bb:42:3b:dd:e4:8f: 31:cc:c1:69:c7:51:96:15:d4:a6:90:07:53:ff:2e:5e:70:33: c6:6d:0e:cb:1c:92:4a:8c:71:3d:74:6c:e1:4c:d9:f0:0f:56: bd:cd:3a:6b:de:71:12:2d:c6:a6:2b:24:11:f1:4e:32:08:58: 72:33:6f:ec:fb:02:e9:f4:ac:9d:98:2c:d2:ce:2d:d1:d0:65: f0:ef:8b:ee:84:62:8e:df:9d:e1:67:75:d9:ee:17:35:e1:97: 97:53:b0:2b:38:75:23:74:7e:d7:83:49:01:12:72:26:31:3b: 17:16:94:bc:18:2a:48:9d:1e:1b:32:ba:cf:4f:ac:5c:d9:2b: c6:c2:f1:fb:c8:60:69:8d:56:22:b9:44:39:b9:25:50:67:c8: d0:bb:60:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD4i8LrbLSVxSHTifNddsP8pfINEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNERGRjE5ODIyQzVCMjdDN0JDQzE2QkZEOEJFMkEz ODRGODlBQTAeFw0yNTA2MjIxNzMxMTdaFw0yNTA2MjMxOTA0MTdaMDMxMTAvBgNV BAMTKDg0NEEyOEY3N0I1MTVGNURFOEM1RDdBNjUxODc4QThEQjk2QzMyMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJkbxfwAwgVR7rYFeXnhp8vVlQ JoLmUGjqgjf5aeRfCyBwlgo3Tp50w9U7GJW1C27GndcHfIqfCXEFx/kVlsFdnAGZ gfWS4a5pz3REgGEx9+YGjJv8NSaFcuLBad8YQRGUgdUp+zdSFlZbe43cYg1xWMv1 qhxK+QEgxQx1QWI5utJaYzwY3gv5hNePS7k5cvtS8UKrzFfcr88KLRPw/BhEw+HU IhfaekU+zFyYCMWuAkX/Jja65LKcuXOQPtu0dYSFn86JVmvnpHbUx4w9veIfjfcE +mtEeSgmh6Xag0kXPESglnxEIBPECwA5f62j6xINq2rSkM0f50mezE2uB6qPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhEoo93tRX13oxdemUYeKjblsMiUwHwYDVR0j BBgwFoAU0iTf8ZgixbJ8e8wWv9i+KjhPiaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlW QXYvMS9EMjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyMjRERkYxOTgyMkM1QjI3 QzdCQ0MxNkJGRDhCRTJBMzg0Rjg5QUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlWQXYvMS9E MjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiQ8wyRdug6lVNmrO0y0zWhraYM5whThqdR4Kdp/oD26Ua9XDoAes8JYKFDSa zutA3Tm36FzRK7WIkg7Qq8aN0bdZYkruBF5TdgMYrGwpfYaERd0sTYs5/HQp3uCv Jzs7g+OrIj/Su0I73eSPMczBacdRlhXUppAHU/8uXnAzxm0OyxySSoxxPXRs4UzZ 8A9Wvc06a95xEi3GpiskEfFOMghYcjNv7PsC6fSsnZgs0s4t0dBl8O+L7oRijt+d 4Wd12e4XNeGXl1OwKzh1I3R+14NJARJyJjE7FxaUvBgqSJ0eGzK6z0+sXNkrxsLx +8hgaY1WIrlEObklUGfI0LtglA== -----END CERTIFICATE-----Generated at Sun Jun 22 23:15:23 2025 by rpki-client