$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft File: D539CF929B6A6A2B9596B922F417FAD917799ED7.mft (raw, json) Hash identifier: iqu6lJlzIEVTGtNaiv4xoMp47LmknfwVsKmjjxxi75M= Subject key identifier: D2:68:00:F5:A9:FA:46:45:EA:C9:2A:21:3B:DC:96:11:F9:F4:3F:AB Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 Certificate issuer: /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Certificate serial: 7467AD55EF069367ABF6C345C4AD650CBD561FC9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft Manifest number: 0253 Signing time: Fri 20 Jun 2025 11:52:18 +0000 Manifest this update: Fri 20 Jun 2025 11:47:18 +0000 Manifest next update: Sat 21 Jun 2025 12:57:18 +0000 Files and hashes: 1: D539CF929B6A6A2B9596B922F417FAD917799ED7.crl (hash: Ht7AdRdxlESJsL7VhC76aTbmYSGWp1yy76dAw1FJypc=) 2: 34352e3232382e3134302e302f32322d3234203d3e20323637313032.roa (hash: FE+7zbwcRwFNCNZQz6JTL4PFhynEDJA2jUUaWQGOwlw=) 3: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (hash: 01pAW4QCHBpNqYLYxhHBFF+Hirycj7LT0087UnT0sog=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 12:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:67:ad:55:ef:06:93:67:ab:f6:c3:45:c4:ad:65:0c:bd:56:1f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7 Validity Not Before: Jun 20 11:47:18 2025 GMT Not After : Jun 21 12:57:18 2025 GMT Subject: CN=D26800F5A9FA4645EAC92A213BDC9611F9F43FAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:75:ad:26:d5:80:9c:54:c5:a1:4f:a9:b7:8d: ec:f4:ac:8a:d9:08:ff:a0:7b:dd:e9:19:7f:cb:3e: f3:94:ba:d3:84:d8:98:4c:63:5c:ba:f8:fb:98:7d: 0d:e4:e7:67:46:2e:ea:85:5b:df:4f:14:c6:5f:3a: 2f:4e:1e:b2:4f:0c:ea:b1:fc:b2:75:f6:2f:b0:ea: d2:32:23:c3:72:f2:9e:fb:88:cd:28:fa:48:1a:0c: 1b:11:c7:62:81:0b:f6:69:f8:a8:80:f4:b1:6d:b1: cd:b2:d3:d8:bf:d4:09:15:2d:34:51:5b:a6:69:e3: 82:4a:a9:33:67:a7:b0:4c:59:2c:68:2f:c7:63:4e: 5e:48:63:8a:ae:a9:e4:5e:c8:65:c4:e0:5a:eb:a8: 59:8a:23:f7:b4:ee:ef:9f:49:ba:6f:cd:ac:78:64: b7:ff:5c:66:72:da:a9:47:f4:55:54:68:42:b7:b5: 05:6f:90:0f:aa:f2:cd:66:49:39:c3:6c:e8:cc:e1: aa:69:f4:8d:d6:18:3c:88:fa:ef:fe:ea:e6:ed:46: a5:80:94:5a:58:01:33:b4:35:30:fc:45:3b:d2:a7: 9b:d0:d4:97:c8:8a:fd:5c:47:f3:26:f2:f7:da:31: 3e:0d:a4:79:a8:ed:81:0c:bd:3f:8f:dc:7b:12:9b: c0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:68:00:F5:A9:FA:46:45:EA:C9:2A:21:3B:DC:96:11:F9:F4:3F:AB X509v3 Authority Key Identifier: keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:21:34:88:08:33:5d:89:e2:51:ce:c9:3a:39:67:e1:94:5f: db:c4:cf:e3:05:d5:19:eb:0d:d5:7c:ad:92:08:38:5f:74:b3: 5f:5c:a9:fb:22:0e:03:8a:22:78:10:2f:ca:b8:80:8d:1c:55: a9:7f:a1:49:da:19:84:2e:9d:ff:02:36:22:47:ca:e5:c9:97: 83:be:41:14:e3:df:ad:b5:13:82:3b:ac:bd:4a:6f:b6:f0:33: 41:20:c9:de:9b:3b:f2:98:07:6e:79:51:11:b5:62:a5:08:82: f7:6c:5c:b5:7d:dd:e2:52:26:10:0f:c5:32:bd:1c:25:9b:c3: 1d:c9:06:8f:40:09:d3:d0:eb:83:96:7e:10:4d:30:79:7e:24: b9:28:7c:09:3c:76:82:96:dc:ce:c2:ef:79:f3:33:c9:ed:1d: bd:12:e6:57:f4:98:58:8c:27:77:19:71:a2:dd:9d:9d:6e:49: cf:fe:d9:a6:0e:19:d8:51:4b:2a:25:bd:c5:01:3c:0c:7f:44: a6:20:81:88:5b:c7:83:9a:36:f5:2b:df:3c:ee:dd:2d:ce:b4: dc:14:a0:c8:8f:0d:0a:af:11:b3:91:60:6b:32:a5:2d:0a:dc: f3:21:6e:49:07:13:91:8e:e7:fc:cd:be:e3:4b:74:38:3f:f4: 64:ed:2e:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdGetVe8Gk2er9sNFxK1lDL1WH8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUzOUNGOTI5QjZBNkEyQjk1OTZCOTIyRjQxN0ZBRDkx Nzc5OUVENzAeFw0yNTA2MjAxMTQ3MThaFw0yNTA2MjExMjU3MThaMDMxMTAvBgNV BAMTKEQyNjgwMEY1QTlGQTQ2NDVFQUM5MkEyMTNCREM5NjExRjlGNDNGQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrda0m1YCcVMWhT6m3jez0rIrZ CP+ge93pGX/LPvOUutOE2JhMY1y6+PuYfQ3k52dGLuqFW99PFMZfOi9OHrJPDOqx /LJ19i+w6tIyI8Ny8p77iM0o+kgaDBsRx2KBC/Zp+KiA9LFtsc2y09i/1AkVLTRR W6Zp44JKqTNnp7BMWSxoL8djTl5IY4quqeReyGXE4FrrqFmKI/e07u+fSbpvzax4 ZLf/XGZy2qlH9FVUaEK3tQVvkA+q8s1mSTnDbOjM4app9I3WGDyI+u/+6ubtRqWA lFpYATO0NTD8RTvSp5vQ1JfIiv1cR/Mm8vfaMT4NpHmo7YEMvT+P3HsSm8D5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0mgA9an6RkXqySohO9yWEfn0P6swHwYDVR0j BBgwFoAU1TnPkptqaiuVlrki9Bf62Rd5ntcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNT M1QvMS9ENTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MzlDRjkyOUI2QTZBMkI5 NTk2QjkyMkY0MTdGQUQ5MTc3OTlFRDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHRhM1dIWDVjd3E4OGdmTEVjclBlYWp0Ulh2QVB1UFhYTHoxc3NONzNTM1QvMS9E NTM5Q0Y5MjlCNkE2QTJCOTU5NkI5MjJGNDE3RkFEOTE3Nzk5RUQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAciE0iAgzXYniUc7JOjln4ZRf28TP4wXVGesN1Xytkgg4X3SzX1yp+yIOA4oi eBAvyriAjRxVqX+hSdoZhC6d/wI2IkfK5cmXg75BFOPfrbUTgjusvUpvtvAzQSDJ 3ps78pgHbnlREbVipQiC92xctX3d4lImEA/FMr0cJZvDHckGj0AJ09Drg5Z+EE0w eX4kuSh8CTx2gpbczsLvefMzye0dvRLmV/SYWIwndxlxot2dnW5Jz/7Zpg4Z2FFL KiW9xQE8DH9EpiCBiFvHg5o29SvfPO7dLc603BSgyI8NCq8Rs5FgazKlLQrc8yFu SQcTkY7n/M2+40t0OD/0ZO0ulQ== -----END CERTIFICATE-----Generated at Fri Jun 20 17:01:50 2025 by rpki-client