$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft File: CD119443A2689BA4FC616BCD6929E636B5032FC0.mft (raw, json) Hash identifier: uIHqoxnU4pHW51WPl2Dv8DovCA05dU49RqkrWrym7/I= Subject key identifier: D8:05:C1:BE:75:64:72:13:D0:6B:0A:BE:E3:EF:A8:2D:A1:80:35:22 Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0 Certificate issuer: /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0 Certificate serial: 35258A548BC0DB38F6A2224D21F8C2A13B0DA184 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer Subject info access: rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft Manifest number: 024A Signing time: Mon 16 Jun 2025 10:34:54 +0000 Manifest this update: Mon 16 Jun 2025 10:29:54 +0000 Manifest next update: Tue 17 Jun 2025 13:48:54 +0000 Files and hashes: 1: 3136382e3138312e34302e302f32322d3332203d3e203533303239.roa (hash: DigxLgwOCkJqaxHXJWceoasL0PEbNpzDZ+ACjp/5uT8=) 2: 3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa (hash: 0yz5B0vFU4y+5bFNlnsgvOAMOkwGTpRZj0IDhhUzrRA=) 3: 323830343a3632383a3a2f33322d313238203d3e203533303239.roa (hash: wXzHyexM8HZC0ahdh68QW2mTL8oWKucBoRBb4ywNBSU=) 4: 3137372e37332e38302e302f32322d3332203d3e203533303239.roa (hash: Qek/xs/EKmEb9IFoScEonrCyzkJUGy3pixZFP0HNsFI=) 5: CD119443A2689BA4FC616BCD6929E636B5032FC0.crl (hash: o5wtbohvMXIc9FZGeU+9ycUbSQbHN4SlIaeVW+ehcnQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 13:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:25:8a:54:8b:c0:db:38:f6:a2:22:4d:21:f8:c2:a1:3b:0d:a1:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0 Validity Not Before: Jun 16 10:29:54 2025 GMT Not After : Jun 17 13:48:54 2025 GMT Subject: CN=D805C1BE75647213D06B0ABEE3EFA82DA1803522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c3:29:bc:f6:55:ca:41:45:30:11:6e:41:8d: 13:7f:12:58:98:f2:ae:5a:72:6e:29:c2:d5:66:59: f0:5f:36:0b:5b:28:5e:da:e1:57:ca:0d:0e:ad:da: db:de:41:cc:78:1d:d9:2a:db:cc:b3:da:a3:cb:db: f5:3c:9a:8c:e2:da:c6:ba:d1:c2:0e:d5:43:b1:2e: 05:db:eb:31:30:28:d1:44:cf:16:63:33:27:41:32: 27:d7:dc:df:ae:b4:ae:f0:b3:5d:55:10:63:fe:f7: 95:9f:3e:03:45:3e:ac:29:a9:f4:73:02:f0:12:9e: a1:be:35:88:1f:e5:b0:65:9e:e6:db:3d:82:f0:ea: 27:e5:ad:c8:54:cd:58:96:64:a6:30:cf:b1:1a:af: d0:56:01:d2:1e:63:f5:d5:a1:70:3e:e7:98:b9:17: bb:db:40:2b:75:20:9a:7f:ad:d2:5d:73:1a:23:11: ae:73:68:ae:f8:40:e2:da:c5:5a:71:be:aa:6d:f9: c0:2e:18:f8:48:b7:c9:7a:1f:b2:73:5d:60:af:85: fb:ec:49:b9:da:38:85:14:58:57:52:53:4c:5a:03: 75:20:40:8b:a1:cf:ef:dc:4a:f0:57:e4:3a:55:15: 05:24:ad:23:ac:1f:4d:cf:aa:bc:04:14:ff:42:24: 57:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:05:C1:BE:75:64:72:13:D0:6B:0A:BE:E3:EF:A8:2D:A1:80:35:22 X509v3 Authority Key Identifier: keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:aa:f1:7a:5c:7d:b7:12:40:15:b7:57:e0:48:7a:3d:94:bf: 8e:57:a1:b9:55:80:c5:78:33:e3:0d:03:89:8d:7c:99:17:d5: 21:89:8b:91:c6:47:52:66:eb:80:87:c6:52:34:b2:28:31:25: e9:96:51:c2:e7:0e:bd:ed:c5:3d:4b:d4:f8:a9:a6:7c:70:e8: 38:f2:4f:9e:e4:62:78:88:6c:98:15:9b:27:ef:7f:90:e0:a4: e9:8a:92:c0:d5:4b:7a:0f:09:4f:83:6f:b7:af:6c:20:a6:ed: b4:f2:f4:ac:7b:01:3f:4f:78:07:73:1f:13:7c:55:40:bc:20: 58:0a:af:bb:eb:5a:48:f4:4c:36:bb:ec:be:99:43:c7:7c:42: 35:5c:b5:18:4c:ed:1c:f1:00:48:7e:2b:da:a2:15:d3:3e:c0: a4:df:be:1a:9a:2d:67:00:37:11:95:96:69:0f:f9:06:bc:1a: cb:57:87:06:fc:88:d8:97:c1:fe:c6:7f:e9:12:b4:d2:aa:33: d6:67:ac:70:8f:da:c5:7f:40:06:12:5b:7e:56:99:2c:39:ea: d1:98:b7:be:85:41:6b:ed:66:97:52:ba:94:bc:62:63:3d:3b: 11:9d:7f:0e:bd:f7:e4:91:6d:cc:bc:fe:2e:93:8b:2d:99:da: 7a:21:60:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNSWKVIvA2zj2oiJNIfjCoTsNoYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QxMTk0NDNBMjY4OUJBNEZDNjE2QkNENjkyOUU2MzZC NTAzMkZDMDAeFw0yNTA2MTYxMDI5NTRaFw0yNTA2MTcxMzQ4NTRaMDMxMTAvBgNV BAMTKEQ4MDVDMUJFNzU2NDcyMTNEMDZCMEFCRUUzRUZBODJEQTE4MDM1MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDwym89lXKQUUwEW5BjRN/EliY 8q5acm4pwtVmWfBfNgtbKF7a4VfKDQ6t2tveQcx4Hdkq28yz2qPL2/U8mozi2sa6 0cIO1UOxLgXb6zEwKNFEzxZjMydBMifX3N+utK7ws11VEGP+95WfPgNFPqwpqfRz AvASnqG+NYgf5bBlnubbPYLw6iflrchUzViWZKYwz7Ear9BWAdIeY/XVoXA+55i5 F7vbQCt1IJp/rdJdcxojEa5zaK74QOLaxVpxvqpt+cAuGPhIt8l6H7JzXWCvhfvs SbnaOIUUWFdSU0xaA3UgQIuhz+/cSvBX5DpVFQUkrSOsH03PqrwEFP9CJFdpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2AXBvnVkchPQawq+4++oLaGANSIwHwYDVR0j BBgwFoAUzRGUQ6Jom6T8YWvNaSnmNrUDL8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDNacUVNekM5cG0yRmhWNlpxMlhyTnpKMUJ1QmY1TkM4Rmo0WDZLQkdW RkUvMS9DRDExOTQ0M0EyNjg5QkE0RkM2MTZCQ0Q2OTI5RTYzNkI1MDMyRkMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMTE5NDQzQTI2ODlCQTRG QzYxNkJDRDY5MjlFNjM2QjUwMzJGQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDNacUVNekM5cG0yRmhWNlpxMlhyTnpKMUJ1QmY1TkM4Rmo0WDZLQkdWRkUvMS9D RDExOTQ0M0EyNjg5QkE0RkM2MTZCQ0Q2OTI5RTYzNkI1MDMyRkMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaarxelx9txJAFbdX4Eh6PZS/jlehuVWAxXgz4w0DiY18mRfVIYmLkcZHUmbr gIfGUjSyKDEl6ZZRwucOve3FPUvU+KmmfHDoOPJPnuRieIhsmBWbJ+9/kOCk6YqS wNVLeg8JT4Nvt69sIKbttPL0rHsBP094B3MfE3xVQLwgWAqvu+taSPRMNrvsvplD x3xCNVy1GEztHPEASH4r2qIV0z7ApN++GpotZwA3EZWWaQ/5Brway1eHBvyI2JfB /sZ/6RK00qoz1mescI/axX9ABhJbflaZLDnq0Zi3voVBa+1ml1K6lLxiYz07EZ1/ Dr335JFtzLz+LpOLLZnaeiFglA== -----END CERTIFICATE-----Generated at Tue Jun 17 02:45:20 2025 by rpki-client