$ rpki-client -vvf rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft File: 1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft (raw, json) Hash identifier: XHmNFb2WZ2jsaq006CEVOFAXLsKKhCczNNbiaYvrdQw= Subject key identifier: 44:A4:D5:BF:D2:C9:F9:59:D5:17:21:1B:6E:F3:CC:6B:0A:67:FF:8B Authority key identifier: 1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD Certificate issuer: /CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD Certificate serial: 29A0A08052192DD6D32BDB22044CB4B2460D333B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer Subject info access: rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft Manifest number: 01AA Signing time: Mon 16 Jun 2025 16:25:33 +0000 Manifest this update: Mon 16 Jun 2025 16:20:33 +0000 Manifest next update: Tue 17 Jun 2025 19:06:33 +0000 Files and hashes: 1: 3137372e37342e3136342e302f32322d3234203d3e20323731303533.roa (hash: 1ew1bHxThQo4THso1qqJCsLamw7MZPbnuhFWOIDRY9s=) 2: 323830343a373538383a3a2f33322d3334203d3e20323731303533.roa (hash: nnZxddMxtPYXvLGrokRo727KDyxmpu+gR99v39ppU0Y=) 3: 1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl (hash: T6daIJ8BndYRrmlQVx/yEdokrifrZl83qWKchmO0+b4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 19:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a0:a0:80:52:19:2d:d6:d3:2b:db:22:04:4c:b4:b2:46:0d:33:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD Validity Not Before: Jun 16 16:20:33 2025 GMT Not After : Jun 17 19:06:33 2025 GMT Subject: CN=44A4D5BFD2C9F959D517211B6EF3CC6B0A67FF8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:72:52:26:5e:16:dc:ae:85:13:e6:3f:de:f4: 05:71:23:67:13:43:b7:a8:2c:26:a2:38:94:2d:3d: 6e:a7:86:0b:c9:f9:a5:f3:0c:7d:c2:7c:d8:19:43: 2b:71:e2:6d:1d:b5:72:c4:e1:4e:66:94:04:1e:66: e6:4d:7a:fa:a7:8e:85:a9:c4:5e:83:31:1c:0f:1e: 2a:28:61:f1:04:13:63:af:74:e2:dc:27:ac:eb:d4: 10:31:70:18:ea:c0:39:41:6c:d9:6c:74:c6:95:c9: e7:2b:d9:b4:4d:68:e6:7b:e7:ec:f3:37:71:31:cc: 01:24:8f:e6:87:2d:19:b1:7c:95:30:c6:f5:e0:a3: a7:89:f3:0c:28:a1:b6:29:10:1c:ca:41:59:0f:68: 9c:15:83:a4:61:8d:0b:dc:81:75:34:47:61:94:42: 1d:28:64:17:a1:a1:4c:d5:b9:f7:ca:fd:4e:7b:51: db:a7:eb:47:ac:b7:fd:64:35:13:50:47:62:fe:f9: 6f:4d:fc:81:71:20:41:25:9d:0c:74:66:db:b5:1e: 30:db:30:10:7c:0d:59:ea:14:86:7d:1b:43:24:73: af:95:67:d9:a5:72:1f:af:68:b1:d6:43:2a:96:54: e8:52:e6:d8:3f:86:99:c5:ea:ba:11:d7:0c:6c:34: ca:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A4:D5:BF:D2:C9:F9:59:D5:17:21:1B:6E:F3:CC:6B:0A:67:FF:8B X509v3 Authority Key Identifier: keyid:1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:fb:11:40:16:42:98:80:1b:6f:ed:30:32:9a:02:9c:90:df: c2:48:bc:40:0c:8d:ca:14:1e:8f:68:41:2b:70:f9:bb:a1:01: 70:c5:3e:a2:7a:1a:ac:69:9e:76:d2:83:21:b6:68:8e:3e:da: e0:fe:72:3f:60:14:ac:5f:ad:f4:2a:77:a0:a9:72:38:d8:d9: 37:98:a5:cd:b7:f9:b2:12:db:67:d5:30:a0:5d:0d:09:ad:07: e4:92:ba:75:8f:18:72:20:0f:65:96:8d:d4:f2:fc:2e:ca:ef: 12:a3:cd:21:51:52:c5:b3:3f:27:ac:22:e8:b4:1c:5b:94:20: 53:51:e6:9a:2e:21:a5:fd:7b:59:c4:f0:4d:02:75:8b:c7:ca: 2b:b8:4c:0e:e9:1a:9d:f2:95:9f:e3:37:17:32:70:f3:f8:41: 81:e5:df:6b:91:0d:c9:8c:99:e5:64:3d:49:a1:99:05:12:2d: 59:93:84:a3:78:18:32:37:e9:b5:5f:a2:dc:fb:0e:29:f4:b6: 5a:27:48:e8:7d:7c:38:c5:8c:96:be:40:54:18:56:a5:3f:1f: d9:e5:b6:45:b0:92:ea:1e:54:11:ed:3e:8b:70:01:71:01:58: 90:3b:16:65:c4:59:30:32:d7:04:78:c2:c9:f6:6a:34:f3:15: 83:5a:a9:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKaCggFIZLdbTK9siBEy0skYNMzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGQTUzRkQ3OTI4QzE3NUM3NDMyRTczREQxNDcyOTU1 RTVBMzVGRDAeFw0yNTA2MTYxNjIwMzNaFw0yNTA2MTcxOTA2MzNaMDMxMTAvBgNV BAMTKDQ0QTRENUJGRDJDOUY5NTlENTE3MjExQjZFRjNDQzZCMEE2N0ZGOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNclImXhbcroUT5j/e9AVxI2cT Q7eoLCaiOJQtPW6nhgvJ+aXzDH3CfNgZQytx4m0dtXLE4U5mlAQeZuZNevqnjoWp xF6DMRwPHiooYfEEE2OvdOLcJ6zr1BAxcBjqwDlBbNlsdMaVyecr2bRNaOZ75+zz N3ExzAEkj+aHLRmxfJUwxvXgo6eJ8wwoobYpEBzKQVkPaJwVg6RhjQvcgXU0R2GU Qh0oZBehoUzVuffK/U57Udun60est/1kNRNQR2L++W9N/IFxIEElnQx0Ztu1HjDb MBB8DVnqFIZ9G0Mkc6+VZ9mlch+vaLHWQyqWVOhS5tg/hpnF6roR1wxsNMobAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURKTVv9LJ+VnVFyEbbvPMawpn/4swHwYDVR0j BBgwFoAUHPpT/XkowXXHQy5z3RRylV5aNf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmhnU2pLelRQUDN6eW16WWpEZzc0QXR0M2sxUzZpTUpia25zZHdDTnAx bVEvMC8xQ0ZBNTNGRDc5MjhDMTc1Qzc0MzJFNzNERDE0NzI5NTVFNUEzNUZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDRkE1M0ZENzkyOEMxNzVD NzQzMkU3M0REMTQ3Mjk1NUU1QTM1RkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RmhnU2pLelRQUDN6eW16WWpEZzc0QXR0M2sxUzZpTUpia25zZHdDTnAxbVEvMC8x Q0ZBNTNGRDc5MjhDMTc1Qzc0MzJFNzNERDE0NzI5NTVFNUEzNUZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYvsRQBZCmIAbb+0wMpoCnJDfwki8QAyNyhQej2hBK3D5u6EBcMU+onoarGme dtKDIbZojj7a4P5yP2AUrF+t9Cp3oKlyONjZN5ilzbf5shLbZ9UwoF0NCa0H5JK6 dY8YciAPZZaN1PL8LsrvEqPNIVFSxbM/J6wi6LQcW5QgU1Hmmi4hpf17WcTwTQJ1 i8fKK7hMDukanfKVn+M3FzJw8/hBgeXfa5ENyYyZ5WQ9SaGZBRItWZOEo3gYMjfp tV+i3PsOKfS2WidI6H18OMWMlr5AVBhWpT8f2eW2RbCS6h5UEe0+i3ABcQFYkDsW ZcRZMDLXBHjCyfZqNPMVg1qpmA== -----END CERTIFICATE-----Generated at Mon Jun 16 23:59:07 2025 by rpki-client