$ rpki-client -vvf rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft File: 9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft (raw, json) Hash identifier: f3CuOltF2sLLQ56rupDRAeXe3eeqYpYazdRmUF0+NRk= Subject key identifier: 67:53:44:5B:9E:DB:0E:AC:53:98:13:08:E2:1A:6C:87:4E:36:2F:11 Authority key identifier: 9A:FB:58:CB:77:96:0F:3E:EF:AF:73:FA:07:38:0F:CE:DD:3F:4B:C7 Certificate issuer: /CN=9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7 Certificate serial: 38B7D4FEB79191B2229B46D4CEDA1ED69C4A7F61 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer Subject info access: rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft Manifest number: 1D Signing time: Thu 19 Jun 2025 07:05:49 +0000 Manifest this update: Thu 19 Jun 2025 07:00:49 +0000 Manifest next update: Fri 20 Jun 2025 07:30:49 +0000 Files and hashes: 1: 34352e3233322e38342e302f32322d3232203d3e20323731323534.roa (hash: 4llxrZQMqb9Kf3CZxYAurGfSgLAZxRbGkZ3i34Y0i8c=) 2: 323830343a373839633a3a2f33322d3332203d3e20323731323534.roa (hash: mbiljivRQx8iMNNvSKPbVGsfe/yI75cxkBJOMpgTbsk=) 3: 34352e3233322e38342e302f32342d3234203d3e20323731323534.roa (hash: Ox3gkWdk5DFjWVNeLugWW5jte/MOdiHqIifU9RFpraE=) 4: 34352e3233322e38352e302f32342d3234203d3e20323731323534.roa (hash: KWtyN99uRkdP5QmZxLBrmQICjrve0tAd8gA6/GzFIzg=) 5: 34352e3233322e38362e302f32332d3233203d3e20323731323534.roa (hash: BCpTeNeXQT1EfTeFL+azl+e6UrL6wbW9CppwvvbgnPc=) 6: 34352e3233322e38342e302f32332d3233203d3e20323731323534.roa (hash: UKx35fmxi9JfkNyS1Z7JJ73s8up2qsRMi86ZPKe0r8o=) 7: 9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.crl (hash: C3fG7cn4M4CJkweu7R1ckFzPyZBlcYaOY1VY2vz2vtA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.crl rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 07:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b7:d4:fe:b7:91:91:b2:22:9b:46:d4:ce:da:1e:d6:9c:4a:7f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7 Validity Not Before: Jun 19 07:00:49 2025 GMT Not After : Jun 20 07:30:49 2025 GMT Subject: CN=6753445B9EDB0EAC53981308E21A6C874E362F11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:24:95:ba:1c:c7:42:71:8f:7d:f6:fe:ce: be:c1:6f:2f:bd:22:71:cc:b1:56:9b:6d:c8:e2:8f: 0f:72:43:91:a3:ed:ba:39:f5:72:71:87:49:77:45: 2f:8d:b4:b1:5f:69:19:13:76:a6:a4:7f:d0:75:0a: 60:1e:86:9e:c8:0d:78:40:09:f3:d0:d1:9f:ed:67: 60:28:60:5f:2b:7b:13:4b:c7:e5:86:b2:a3:f7:9f: 4f:34:67:ac:18:0a:a8:3d:71:a7:1a:26:d0:e1:c4: 63:d0:96:e1:38:41:7b:46:a9:bc:cb:6a:bc:ca:cc: 89:d6:86:71:9b:51:ca:c0:19:d9:c9:9e:6a:32:59: d0:7e:98:31:52:7d:56:71:6d:3f:40:5e:b9:5a:a8: bf:ca:ab:fa:f6:b9:bf:e2:aa:cf:66:bc:31:9d:40: 4a:17:77:b9:40:d2:fd:4a:d2:36:31:72:6c:ae:79: 58:0f:19:42:06:dc:37:cb:55:83:75:a5:b3:ed:ff: fd:2b:0f:df:87:c4:ba:45:b2:15:ad:30:46:7d:fc: 42:e3:6d:e7:99:2d:da:98:9e:0d:ba:d6:04:af:c4: 42:f1:2a:89:4c:e0:c9:4e:4a:e1:5e:c3:03:3f:2d: 62:36:d8:5a:73:27:be:c2:82:42:10:29:4f:53:7c: 70:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:53:44:5B:9E:DB:0E:AC:53:98:13:08:E2:1A:6C:87:4E:36:2F:11 X509v3 Authority Key Identifier: keyid:9A:FB:58:CB:77:96:0F:3E:EF:AF:73:FA:07:38:0F:CE:DD:3F:4B:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:6a:9f:86:ce:0a:43:48:3a:e2:d2:33:ef:72:70:cd:56:d9: a3:9b:a5:0c:05:ad:dc:8b:41:1e:cc:9a:50:46:d6:ae:00:32: ce:49:9a:a2:35:90:d8:47:5f:55:2b:03:69:fa:29:e5:cd:13: df:c1:b0:b8:61:75:1d:77:f9:39:01:9b:14:c8:45:6d:8b:11: ce:a5:83:3b:15:ca:79:85:7e:1c:c9:b5:2b:fe:3e:e0:bf:81: 4f:9c:1f:e2:2b:66:0d:95:d1:9f:91:3c:71:b8:a2:c4:0b:5c: 21:61:e1:a7:2e:88:a5:64:c0:f0:a4:4d:50:90:07:8e:48:9f: 46:6d:1b:ea:9f:46:73:af:6c:bd:31:93:b5:b6:3f:ec:46:d3: d2:7e:e5:b6:66:2b:7e:73:fd:63:c7:56:be:f5:22:9a:a3:8d: 98:5b:83:5d:5b:8c:a2:fd:37:a9:19:1c:9f:ae:37:8e:96:fd: 41:de:42:56:3a:ab:6f:28:34:31:ba:40:c0:62:35:7e:88:60: dd:63:b4:67:08:af:a7:04:28:f6:94:3c:5f:08:f1:90:99:38: e2:11:59:cc:89:c5:7e:94:b7:f6:1e:fb:6f:cd:69:4f:f1:70: b6:23:11:79:ff:f0:81:24:81:4e:21:e9:ff:e6:b6:d7:82:71: bc:79:f8:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOLfU/reRkbIim0bUztoe1pxKf2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGQjU4Q0I3Nzk2MEYzRUVGQUY3M0ZBMDczODBGQ0VE RDNGNEJDNzAeFw0yNTA2MTkwNzAwNDlaFw0yNTA2MjAwNzMwNDlaMDMxMTAvBgNV BAMTKDY3NTM0NDVCOUVEQjBFQUM1Mzk4MTMwOEUyMUE2Qzg3NEUzNjJGMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOTySVuhzHQnGPffb+zr7Bby+9 InHMsVabbcjijw9yQ5Gj7bo59XJxh0l3RS+NtLFfaRkTdqakf9B1CmAehp7IDXhA CfPQ0Z/tZ2AoYF8rexNLx+WGsqP3n080Z6wYCqg9cacaJtDhxGPQluE4QXtGqbzL arzKzInWhnGbUcrAGdnJnmoyWdB+mDFSfVZxbT9AXrlaqL/Kq/r2ub/iqs9mvDGd QEoXd7lA0v1K0jYxcmyueVgPGUIG3DfLVYN1pbPt//0rD9+HxLpFshWtMEZ9/ELj beeZLdqYng261gSvxELxKolM4MlOSuFewwM/LWI22FpzJ77CgkIQKU9TfHCrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZ1NEW57bDqxTmBMI4hpsh042LxEwHwYDVR0j BBgwFoAUmvtYy3eWDz7vr3P6BzgPzt0/S8cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRVRFc0F6RWZYMXJMZ1JoeUU4RGlIbmJxa1JBREdIY04yWmFtNEhqZWVN ZHQvMC85QUZCNThDQjc3OTYwRjNFRUZBRjczRkEwNzM4MEZDRUREM0Y0QkM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBRkI1OENCNzc5NjBGM0VF RkFGNzNGQTA3MzgwRkNFREQzRjRCQzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RVRFc0F6RWZYMXJMZ1JoeUU4RGlIbmJxa1JBREdIY04yWmFtNEhqZWVNZHQvMC85 QUZCNThDQjc3OTYwRjNFRUZBRjczRkEwNzM4MEZDRUREM0Y0QkM3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdmqfhs4KQ0g64tIz73JwzVbZo5ulDAWt3ItBHsyaUEbWrgAyzkmaojWQ2Edf VSsDafop5c0T38GwuGF1HXf5OQGbFMhFbYsRzqWDOxXKeYV+HMm1K/4+4L+BT5wf 4itmDZXRn5E8cbiixAtcIWHhpy6IpWTA8KRNUJAHjkifRm0b6p9Gc69svTGTtbY/ 7EbT0n7ltmYrfnP9Y8dWvvUimqONmFuDXVuMov03qRkcn643jpb9Qd5CVjqrbyg0 MbpAwGI1fohg3WO0ZwivpwQo9pQ8XwjxkJk44hFZzInFfpS39h77b81pT/FwtiMR ef/wgSSBTiHp/+a214JxvHn4Cw== -----END CERTIFICATE-----Generated at Thu Jun 19 16:10:27 2025 by rpki-client