$ rpki-client -vvf rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.mft File: 12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.mft (raw, json) Hash identifier: PkPI2D8k8+6ndtoHZ8Ff/k6gF0ZBIPUaOItCuQQOxyo= Subject key identifier: BC:AE:D4:A0:B4:E2:E3:17:7C:81:3D:E2:A7:EC:00:46:46:73:9B:18 Authority key identifier: 12:C3:FE:B9:DE:C6:17:6E:E5:95:2F:85:CA:F7:A4:4B:3F:63:F3:CA Certificate issuer: /CN=12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA Certificate serial: 725E0A674EA8BBA593BBA25A1D47AD75DA96F291 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer Subject info access: rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.mft Manifest number: 024A Signing time: Mon 16 Jun 2025 21:51:01 +0000 Manifest this update: Mon 16 Jun 2025 21:46:01 +0000 Manifest next update: Wed 18 Jun 2025 00:31:01 +0000 Files and hashes: 1: 3137302e37392e3139322e302f32322d3234203d3e20323632333738.roa (hash: dj+Gjw4clyH7YfnjCZjhYGOBmTbkYG5kv0JBrYPCZWY=) 2: 3137372e3133312e31362e302f32302d3234203d3e20323632333738.roa (hash: PXQTmLulGaAerdMBIJ4tCjTk1fRvsLCu2/6TDmXiy7U=) 3: 12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.crl (hash: T/xJeSgGoUBG7JdjDOfT7brG2pedigJ6yO3fVku3YKY=) 4: 323830343a326438303a3a2f33322d3438203d3e20323632333738.roa (hash: dA6Vai2Ay51ihnh9aF4He2B33POVvAOdYfL9/2xS2S8=) 5: 3137372e3133312e32312e3132382f32372d3237203d3e20323632333738.roa (hash: psSurts7EOnRryQmBLMm6lT3jWWoqp/nNcDlBWPfjrY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.crl rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 00:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:5e:0a:67:4e:a8:bb:a5:93:bb:a2:5a:1d:47:ad:75:da:96:f2:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA Validity Not Before: Jun 16 21:46:01 2025 GMT Not After : Jun 18 00:31:01 2025 GMT Subject: CN=BCAED4A0B4E2E3177C813DE2A7EC004646739B18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a2:da:5d:6d:df:ca:6f:46:c8:be:6f:5a:6e: 16:7a:96:15:0a:e5:e9:ca:0f:49:30:3e:19:f6:58: 1f:82:d7:4f:f1:9e:42:12:a4:05:28:a3:35:75:c1: 78:48:e8:6c:4f:b2:0c:68:e4:84:31:94:c3:f6:06: c5:1c:7a:86:ca:7d:ce:76:b7:d8:43:eb:95:2b:06: 5a:30:a0:9e:a1:24:e4:db:79:e2:e4:8b:ec:43:3d: b2:61:67:b0:43:db:dc:90:ad:fc:bf:d0:2e:b7:1f: f7:45:5b:17:eb:f0:f1:0a:97:c5:d1:68:e1:91:eb: 23:aa:7a:fc:4e:94:38:41:4d:a9:19:ae:8a:05:94: 79:be:f8:a0:48:ca:b0:4b:4f:ae:15:1e:d2:d4:fd: 0c:0b:ac:e5:4b:b2:69:e7:fc:f0:35:92:6f:51:3f: ce:2f:8d:8c:4c:94:48:8b:4f:fd:19:3c:61:93:56: 5c:77:1a:07:5e:fc:ac:73:a7:79:e6:d9:91:a8:10: 61:23:07:e1:7e:83:93:84:4f:42:aa:5f:be:c2:3e: b3:4f:3a:4d:a2:33:7b:b8:a2:84:07:e7:66:be:b1: 1d:fa:28:5c:17:14:ca:f6:3d:0f:2e:0e:08:c8:7e: dc:1f:b6:31:5f:9c:d0:9e:47:f1:b3:79:8e:57:a3: b0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AE:D4:A0:B4:E2:E3:17:7C:81:3D:E2:A7:EC:00:46:46:73:9B:18 X509v3 Authority Key Identifier: keyid:12:C3:FE:B9:DE:C6:17:6E:E5:95:2F:85:CA:F7:A4:4B:3F:63:F3:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EiQunpdw1DDUQ5HVJVLbGFnxusZ8ThJaFSGvP6sp2J99/1/12C3FEB9DEC6176EE5952F85CAF7A44B3F63F3CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e3:4b:2b:f3:3a:58:82:7f:d6:48:31:66:08:08:4e:8a:08: 00:f4:6e:cd:b7:96:50:73:15:82:24:5b:ca:a2:95:69:b2:57: a3:70:b8:5f:eb:8b:05:b6:07:2f:e0:8b:69:24:ef:48:01:b9: 8c:5f:08:97:8b:c0:0f:6b:e3:b8:92:1c:99:64:2d:71:c9:6f: e0:10:7c:df:3a:4f:0d:91:26:65:70:22:80:46:11:0a:7f:ce: 9b:06:f8:bb:9d:87:43:e9:5e:a0:fc:25:a2:76:63:0e:12:f1: c0:6a:41:8f:e4:84:43:4e:44:a3:1c:3d:6b:dd:fa:89:94:ac: d6:5e:83:7c:62:e8:4a:5e:ea:56:63:d6:19:db:6c:c8:c8:da: af:ee:b0:19:26:f9:62:68:1e:a8:27:02:f3:2b:cb:02:ee:c8: b9:36:fa:66:00:d3:49:8c:38:d3:77:84:3f:61:59:91:f3:c2: 4b:53:69:54:99:e0:23:ff:4e:0f:a6:42:14:b0:e1:1c:a2:4a: ba:00:37:9c:8b:3a:30:99:30:d9:50:c3:d8:b4:1e:bf:08:ec: a3:8d:7e:83:1c:19:35:28:53:90:e3:fa:8e:54:8d:28:28:37: 56:da:65:07:a5:08:75:ed:fe:79:db:fa:28:71:e7:2c:9d:8f: 6f:79:33:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcl4KZ06ou6WTu6JaHUetddqW8pEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJDM0ZFQjlERUM2MTc2RUU1OTUyRjg1Q0FGN0E0NEIz RjYzRjNDQTAeFw0yNTA2MTYyMTQ2MDFaFw0yNTA2MTgwMDMxMDFaMDMxMTAvBgNV BAMTKEJDQUVENEEwQjRFMkUzMTc3QzgxM0RFMkE3RUMwMDQ2NDY3MzlCMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlotpdbd/Kb0bIvm9abhZ6lhUK 5enKD0kwPhn2WB+C10/xnkISpAUoozV1wXhI6GxPsgxo5IQxlMP2BsUceobKfc52 t9hD65UrBlowoJ6hJOTbeeLki+xDPbJhZ7BD29yQrfy/0C63H/dFWxfr8PEKl8XR aOGR6yOqevxOlDhBTakZrooFlHm++KBIyrBLT64VHtLU/QwLrOVLsmnn/PA1km9R P84vjYxMlEiLT/0ZPGGTVlx3Ggde/Kxzp3nm2ZGoEGEjB+F+g5OET0KqX77CPrNP Ok2iM3u4ooQH52a+sR36KFwXFMr2PQ8uDgjIftwftjFfnNCeR/GzeY5Xo7CJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvK7UoLTi4xd8gT3ip+wARkZzmxgwHwYDVR0j BBgwFoAUEsP+ud7GF27llS+FyvekSz9j88owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWlRdW5wZHcxRERVUTVIVkpWTGJHRm54dXNaOFRoSmFGU0d2UDZzcDJK OTkvMS8xMkMzRkVCOURFQzYxNzZFRTU5NTJGODVDQUY3QTQ0QjNGNjNGM0NBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyQzNGRUI5REVDNjE3NkVF NTk1MkY4NUNBRjdBNDRCM0Y2M0YzQ0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RWlRdW5wZHcxRERVUTVIVkpWTGJHRm54dXNaOFRoSmFGU0d2UDZzcDJKOTkvMS8x MkMzRkVCOURFQzYxNzZFRTU5NTJGODVDQUY3QTQ0QjNGNjNGM0NBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhuNLK/M6WIJ/1kgxZggITooIAPRuzbeWUHMVgiRbyqKVabJXo3C4X+uLBbYH L+CLaSTvSAG5jF8Il4vAD2vjuJIcmWQtcclv4BB83zpPDZEmZXAigEYRCn/Omwb4 u52HQ+leoPwlonZjDhLxwGpBj+SEQ05Eoxw9a936iZSs1l6DfGLoSl7qVmPWGdts yMjar+6wGSb5YmgeqCcC8yvLAu7IuTb6ZgDTSYw403eEP2FZkfPCS1NpVJngI/9O D6ZCFLDhHKJKugA3nIs6MJkw2VDD2LQevwjso41+gxwZNShTkOP6jlSNKCg3Vtpl B6UIde3+edv6KHHnLJ2Pb3kzTQ== -----END CERTIFICATE-----Generated at Tue Jun 17 16:55:21 2025 by rpki-client