$ rpki-client -vvf rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft File: 2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft (raw, json) Hash identifier: BJxq7N0jRDw5G/Dng/9IerhWjHH8Xb/2tyfG5ToYI/o= Subject key identifier: 07:40:A3:2B:89:07:17:E8:10:C7:EC:B4:1F:A8:DF:82:FC:31:BC:94 Authority key identifier: 2A:A9:C0:C8:79:5C:1A:DD:1B:EE:9A:6C:17:22:3F:C7:CC:D4:C3:E3 Certificate issuer: /CN=2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3 Certificate serial: 0B2087521DF42E012607BA64CA37C0F2ED6E0C8C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.cer Subject info access: rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft Manifest number: CF Signing time: Tue 17 Jun 2025 17:04:37 +0000 Manifest this update: Tue 17 Jun 2025 16:59:37 +0000 Manifest next update: Wed 18 Jun 2025 17:42:37 +0000 Files and hashes: 1: 323830313a38303a323436303a3a2f34342d313238203d3e20323638343431.roa (hash: ZPSfVx1LgqAUvWD4JVlPK1AKbkJ6+EyPJ3Dbf/KroU0=) 2: 34352e3136302e37362e302f32332d3332203d3e20323638343431.roa (hash: op6z5zv5bXYx/GC1V945At+HHF1/DnboG7Nwmgwomqc=) 3: 2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.crl (hash: 8uSE1BvcPZ12598YKw4xsbsC7gJURUXaGur0kS8GpcY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.crl rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 17:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:20:87:52:1d:f4:2e:01:26:07:ba:64:ca:37:c0:f2:ed:6e:0c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3 Validity Not Before: Jun 17 16:59:37 2025 GMT Not After : Jun 18 17:42:37 2025 GMT Subject: CN=0740A32B890717E810C7ECB41FA8DF82FC31BC94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a2:6a:ec:56:88:40:57:7c:c7:14:b9:df:83: 3d:a3:3b:00:6c:55:3d:91:28:5c:b5:dd:1c:c1:9a: 9b:6d:31:a0:d5:5d:52:5a:8b:e0:76:73:9b:8f:ce: 96:46:15:48:40:c4:b6:d3:b0:bd:4a:c5:df:42:fe: 11:f6:bc:bc:70:d2:be:e1:9e:37:64:24:18:9a:26: 5f:46:87:32:3d:1b:ea:ab:7c:04:52:72:7d:b4:c9: 39:99:e7:96:29:ac:20:db:28:91:43:4b:db:92:aa: bf:b5:c0:6e:e5:6c:91:98:ca:97:5c:78:5d:6b:9f: 07:d0:64:ab:ab:a3:63:2a:f3:b8:91:5c:9b:71:ec: 97:71:e8:e4:6a:b0:cd:1c:99:57:96:0e:bb:5c:6e: a3:b0:ca:b7:dc:e1:b8:64:a9:e4:91:4b:14:9e:34: 6b:88:2c:eb:31:a8:22:67:80:76:95:4e:a2:4c:33: 4b:7d:99:06:e8:d1:fc:1a:ae:59:d7:c2:14:23:f3: 35:47:dd:6c:a8:f5:5c:e1:b7:5f:ed:67:2a:7b:49: f8:28:f9:30:bc:3f:87:23:85:dc:7b:d6:5b:21:2a: 9b:90:62:f1:97:c7:92:26:d4:f1:15:3f:c0:3c:4d: ee:ea:c8:e0:a4:5e:21:ae:6a:5e:84:d4:3c:bb:48: 55:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:40:A3:2B:89:07:17:E8:10:C7:EC:B4:1F:A8:DF:82:FC:31:BC:94 X509v3 Authority Key Identifier: keyid:2A:A9:C0:C8:79:5C:1A:DD:1B:EE:9A:6C:17:22:3F:C7:CC:D4:C3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:07:d7:67:d5:70:e0:42:24:90:8d:7b:59:f0:b8:86:f9:7c: 02:15:9a:f7:45:3c:c4:de:2e:81:19:40:15:97:cb:89:15:62: 73:05:04:9d:ac:bb:1c:57:80:5d:33:31:4a:91:6b:4c:43:2c: 76:75:63:31:7e:4c:f1:27:22:db:69:1b:a5:f0:78:3b:bd:bd: 33:46:97:3c:0d:5e:e4:f9:aa:05:00:1e:81:d6:50:d7:1a:a9: 0c:08:39:13:be:60:4a:ab:dd:28:6d:e5:8b:97:78:7f:e9:64: 41:44:b2:40:01:14:10:e6:6a:4c:93:e2:71:88:69:a2:bc:a6: 5f:e5:b7:49:a8:32:3a:86:55:cd:da:2b:71:cd:97:4a:73:f8: a0:a8:f9:ef:9a:5b:98:0c:7a:0a:86:dc:82:ca:6e:32:d6:88: bf:ba:a8:39:50:25:ce:d7:f3:f6:54:19:eb:f1:95:69:3d:22: 0c:92:3c:ac:87:be:97:d4:27:2b:8b:9e:43:da:67:f5:02:7e: 70:32:95:89:48:93:60:0a:0b:fa:ea:d8:9c:7b:26:e2:71:04: e3:1d:61:c4:31:82:46:40:94:1d:de:08:b5:dd:8d:e8:fe:62: 9f:bf:3a:68:3d:8e:f4:ee:5b:5e:19:45:50:18:fe:c1:4b:bd: 43:c5:1e:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCyCHUh30LgEmB7pkyjfA8u1uDIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBOUMwQzg3OTVDMUFERDFCRUU5QTZDMTcyMjNGQzdD Q0Q0QzNFMzAeFw0yNTA2MTcxNjU5MzdaFw0yNTA2MTgxNzQyMzdaMDMxMTAvBgNV BAMTKDA3NDBBMzJCODkwNzE3RTgxMEM3RUNCNDFGQThERjgyRkMzMUJDOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmomrsVohAV3zHFLnfgz2jOwBs VT2RKFy13RzBmpttMaDVXVJai+B2c5uPzpZGFUhAxLbTsL1Kxd9C/hH2vLxw0r7h njdkJBiaJl9GhzI9G+qrfARScn20yTmZ55YprCDbKJFDS9uSqr+1wG7lbJGYypdc eF1rnwfQZKuro2Mq87iRXJtx7Jdx6ORqsM0cmVeWDrtcbqOwyrfc4bhkqeSRSxSe NGuILOsxqCJngHaVTqJMM0t9mQbo0fwarlnXwhQj8zVH3Wyo9Vzht1/tZyp7Sfgo +TC8P4cjhdx71lshKpuQYvGXx5Im1PEVP8A8Te7qyOCkXiGual6E1Dy7SFVJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUB0CjK4kHF+gQx+y0H6jfgvwxvJQwHwYDVR0j BBgwFoAUKqnAyHlcGt0b7ppsFyI/x8zUw+MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0pDdXNtMUxUamRlN3Q3dnVSOUE1UkJRS0o0S0RkZTZtWVlVdTl6aGJ0 VWkvMC8yQUE5QzBDODc5NUMxQUREMUJFRTlBNkMxNzIyM0ZDN0NDRDRDM0UzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQTlDMEM4Nzk1QzFBREQx QkVFOUE2QzE3MjIzRkM3Q0NENEMzRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0pDdXNtMUxUamRlN3Q3dnVSOUE1UkJRS0o0S0RkZTZtWVlVdTl6aGJ0VWkvMC8y QUE5QzBDODc5NUMxQUREMUJFRTlBNkMxNzIyM0ZDN0NDRDRDM0UzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsgfXZ9Vw4EIkkI17WfC4hvl8AhWa90U8xN4ugRlAFZfLiRVicwUEnay7HFeA XTMxSpFrTEMsdnVjMX5M8Sci22kbpfB4O729M0aXPA1e5PmqBQAegdZQ1xqpDAg5 E75gSqvdKG3li5d4f+lkQUSyQAEUEOZqTJPicYhporymX+W3SagyOoZVzdorcc2X SnP4oKj575pbmAx6CobcgspuMtaIv7qoOVAlztfz9lQZ6/GVaT0iDJI8rIe+l9Qn K4ueQ9pn9QJ+cDKViUiTYAoL+urYnHsm4nEE4x1hxDGCRkCUHd4Itd2N6P5in786 aD2O9O5bXhlFUBj+wUu9Q8UeyA== -----END CERTIFICATE-----Generated at Wed Jun 18 02:14:55 2025 by rpki-client