$ rpki-client -vvf rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft File: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft (raw, json) Hash identifier: CLqPbWPh+nJ43iiHnkiOUaqtAkl0zMF9hXJRTU1ri0I= Subject key identifier: 24:CC:B5:91:79:54:37:6E:68:56:9E:6C:17:64:82:EF:BC:B6:BD:95 Authority key identifier: AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A Certificate issuer: /CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A Certificate serial: EAC99CDF5D1A3D3232B68B715AB71EFE3D02C6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer Subject info access: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft Manifest number: 024F Signing time: Fri 20 Jun 2025 06:27:05 +0000 Manifest this update: Fri 20 Jun 2025 06:22:05 +0000 Manifest next update: Sat 21 Jun 2025 09:33:05 +0000 Files and hashes: 1: AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl (hash: wvGRXRWz31d84LQDrKyDwijwhy0GU7NvQUMTN54fbzw=) 2: 323830343a346563343a3a2f33322d3438203d3e20323638323831.roa (hash: ee5l23fWTv1/lWAMo2GfCZn3RRz28vPRce7gjAH3vSM=) 3: 34352e3233372e3134302e302f32322d3234203d3e20323638323831.roa (hash: 741FE6q+LhbUbEXCT3YEJH9sL+8gSKDI67qh5Q3QkQ4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 09:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ea:c9:9c:df:5d:1a:3d:32:32:b6:8b:71:5a:b7:1e:fe:3d:02:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A Validity Not Before: Jun 20 06:22:05 2025 GMT Not After : Jun 21 09:33:05 2025 GMT Subject: CN=24CCB5917954376E68569E6C176482EFBCB6BD95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:42:34:76:3f:f0:e8:88:40:ce:11:ab:91:94: 63:cd:b8:36:fd:53:6f:04:95:1f:a0:9f:2c:21:03: 91:28:e6:53:1f:a7:64:d1:44:49:4d:f9:66:2c:bb: bc:c4:79:34:41:71:e4:66:26:b8:62:b7:d7:1e:59: f5:b7:dc:76:9d:63:36:36:ad:3d:51:7d:e5:af:75: d5:e9:c9:2e:a9:71:8a:37:85:a1:0d:9a:31:b2:63: f7:81:31:77:40:58:8e:74:ce:09:8d:d4:b1:3a:db: d3:ab:8b:2b:70:e6:87:71:f4:8e:88:86:b9:6a:81: 55:be:2d:e6:76:17:03:20:20:56:fa:f1:34:8c:2a: ee:c3:1d:5d:ed:4a:07:e3:d2:8f:27:6a:b1:fa:8d: 7d:33:d7:1f:ac:7a:e7:1c:da:e0:a7:b2:6a:5a:84: b5:29:fe:8d:da:b2:e4:c0:a7:25:fd:29:55:83:15: d9:3c:a9:39:d7:93:20:b5:43:6b:46:47:82:7a:13: a4:4e:66:a7:bf:29:fb:ce:94:0a:47:4e:9c:24:2c: 90:e2:27:07:1b:91:3f:bf:d9:5e:a0:b1:a7:f6:fd: 3b:3c:6c:a9:67:ca:01:86:9b:6e:89:8e:80:74:4b: c4:33:78:b7:0c:03:ab:e4:78:f7:e1:cf:0f:75:ef: 31:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CC:B5:91:79:54:37:6E:68:56:9E:6C:17:64:82:EF:BC:B6:BD:95 X509v3 Authority Key Identifier: keyid:AA:6F:86:A0:5F:D9:F7:D9:AB:E9:E8:E9:5B:24:6A:4C:FE:2C:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/1/AA6F86A05FD9F7D9ABE9E8E95B246A4CFE2C9E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:84:88:51:cf:f8:3d:8d:7f:d8:ed:bb:89:88:27:da:b3:f5: ae:9e:d1:39:e5:ad:e6:d2:2d:f8:09:e2:77:cc:03:25:54:17: 82:40:45:a7:91:0e:cb:91:0d:a2:76:83:fc:05:eb:39:41:b3: 3c:1f:3c:55:7e:08:24:57:01:da:5b:27:fa:5d:14:48:38:90: b5:f4:3e:ea:01:ad:99:9d:cf:e6:59:d2:d8:91:a0:4a:41:10: 9a:8c:7f:78:d3:ed:e8:2e:47:7f:fb:f5:91:9a:6a:ca:2c:dc: c6:ae:a7:9c:95:c4:05:8c:a7:0e:fb:0b:53:c0:00:7d:64:b3: 0f:35:f4:b0:93:ea:31:c8:88:e4:2a:5b:ab:08:f9:c9:a3:59: 15:65:85:94:9f:77:a9:53:fe:44:28:a9:a3:af:d7:de:3e:45: 39:10:b3:9c:59:34:55:92:62:82:98:94:13:a4:10:a7:13:5a: 1e:72:09:44:85:eb:3c:39:9a:bd:5c:06:e1:db:cc:f4:8c:36: 35:8a:f2:1d:64:0c:7c:1a:f0:56:0f:3e:38:9e:d2:b1:ba:2b: 71:79:4f:cf:e9:2d:77:de:84:6a:1c:24:c0:f5:3e:41:63:47: e4:6e:99:3c:d3:9b:2a:0f:89:6a:7d:ae:e1:46:57:3e:62:d9: 5d:f4:55:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAOrJnN9dGj0yMraLcVq3Hv49AsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE2Rjg2QTA1RkQ5RjdEOUFCRTlFOEU5NUIyNDZBNENG RTJDOUUxQTAeFw0yNTA2MjAwNjIyMDVaFw0yNTA2MjEwOTMzMDVaMDMxMTAvBgNV BAMTKDI0Q0NCNTkxNzk1NDM3NkU2ODU2OUU2QzE3NjQ4MkVGQkNCNkJEOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQQjR2P/DoiEDOEauRlGPNuDb9 U28ElR+gnywhA5Eo5lMfp2TRRElN+WYsu7zEeTRBceRmJrhit9ceWfW33HadYzY2 rT1RfeWvddXpyS6pcYo3haENmjGyY/eBMXdAWI50zgmN1LE629Oriytw5odx9I6I hrlqgVW+LeZ2FwMgIFb68TSMKu7DHV3tSgfj0o8narH6jX0z1x+seucc2uCnsmpa hLUp/o3asuTApyX9KVWDFdk8qTnXkyC1Q2tGR4J6E6ROZqe/KfvOlApHTpwkLJDi JwcbkT+/2V6gsaf2/Ts8bKlnygGGm26JjoB0S8QzeLcMA6vkePfhzw917zFnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJMy1kXlUN25oVp5sF2SC77y2vZUwHwYDVR0j BBgwFoAUqm+GoF/Z99mr6ejpWyRqTP4snhowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDg4VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0 NUQvMS9BQTZGODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBNkY4NkEwNUZEOUY3RDlB QkU5RThFOTVCMjQ2QTRDRkUyQzlFMUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDg4VWRIVVRzQjdVYlVtRFZ2eUhKdFBYNTkzaXJ0ZXJYekRKa1NFZ2c0NUQvMS9B QTZGODZBMDVGRDlGN0Q5QUJFOUU4RTk1QjI0NkE0Q0ZFMkM5RTFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgYSIUc/4PY1/2O27iYgn2rP1rp7ROeWt5tIt+Anid8wDJVQXgkBFp5EOy5EN onaD/AXrOUGzPB88VX4IJFcB2lsn+l0USDiQtfQ+6gGtmZ3P5lnS2JGgSkEQmox/ eNPt6C5Hf/v1kZpqyizcxq6nnJXEBYynDvsLU8AAfWSzDzX0sJPqMciI5Cpbqwj5 yaNZFWWFlJ93qVP+RCipo6/X3j5FORCznFk0VZJigpiUE6QQpxNaHnIJRIXrPDma vVwG4dvM9Iw2NYryHWQMfBrwVg8+OJ7SsborcXlPz+ktd96EahwkwPU+QWNH5G6Z PNObKg+Jan2u4UZXPmLZXfRVPQ== -----END CERTIFICATE-----Generated at Fri Jun 20 22:00:24 2025 by rpki-client