$ rpki-client -vvf rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft File: 9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft (raw, json) Hash identifier: BammwTT8LpPiafbGSr49/MzDLrFOmJH66Y3XOvGT4H0= Subject key identifier: 5E:C5:33:7D:F3:1D:46:57:6A:2A:BE:05:85:30:EC:04:BB:1D:65:B3 Authority key identifier: 9E:1D:7C:47:8D:88:0E:09:3C:83:DC:BE:1D:E4:0D:E8:8E:F8:54:6F Certificate issuer: /CN=9E1D7C478D880E093C83DCBE1DE40DE88EF8546F Certificate serial: 23EB34AB014ABBFF09CCC983CF6DDCA1407555FB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer Subject info access: rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft Manifest number: 024D Signing time: Thu 19 Jun 2025 22:21:45 +0000 Manifest this update: Thu 19 Jun 2025 22:16:45 +0000 Manifest next update: Sat 21 Jun 2025 01:41:45 +0000 Files and hashes: 1: 9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl (hash: akAvgB1MZ5KUD/TLMoRVCIZyb7Kb89SwKUUhRR8/UkQ=) 2: 323830343a6662303a3a2f33322d3332203d3e20323632383431.roa (hash: RbYXVffjJdvIeDJVoaVQ4H7OCdhMNRWApBNY9cjM2es=) 3: 3137372e31302e32342e302f32322d3234203d3e20323632383431.roa (hash: U+A01WCuvZZPHwlM0t2T4L3RVjEHPKcBpkgoSeAHY4M=) 4: 3137372e3133362e3231362e302f32312d3234203d3e20323632383431.roa (hash: pkwtlkOIUTOW0vCXw7qG1lC1xTCoa8/0oVE1nZMmSW4=) 5: 3137372e31302e32382e302f32322d3234203d3e20323632383431.roa (hash: psmOj8EmDDzyd0bmAsj109hherhULfNzcjmq4S7y+B4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 01:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:eb:34:ab:01:4a:bb:ff:09:cc:c9:83:cf:6d:dc:a1:40:75:55:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E1D7C478D880E093C83DCBE1DE40DE88EF8546F Validity Not Before: Jun 19 22:16:45 2025 GMT Not After : Jun 21 01:41:45 2025 GMT Subject: CN=5EC5337DF31D46576A2ABE058530EC04BB1D65B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:40:f5:7a:19:d5:93:1b:7d:d1:04:b9:10:dc: e9:ab:60:b2:e6:44:00:5e:21:27:6b:6f:f8:f1:ba: 6d:dc:d5:a5:26:2b:8d:bd:c9:c0:d0:d2:54:1f:28: 0c:fb:10:c8:16:76:2a:0b:dd:c9:39:ea:c2:6c:27: bb:0b:66:1c:c2:c4:08:8f:e0:6b:0b:51:81:f8:0c: f5:70:c6:df:7b:ec:25:1a:3a:20:a7:64:02:c2:5b: 21:c0:13:f3:1d:3e:3f:f7:c6:18:dc:d7:01:d5:2f: 3d:2b:ac:9d:4f:3b:e1:ff:07:91:f4:ba:88:d9:ba: ac:bc:2b:f5:ba:42:f2:03:48:ab:9f:b6:29:6e:aa: 10:1b:84:64:de:48:5f:0c:67:01:4e:9e:3f:69:57: 65:39:89:e0:93:68:39:12:c2:69:3c:9c:13:de:3f: cd:83:a2:60:45:0d:79:96:4c:0a:21:9f:ab:a9:5d: 19:cf:1d:81:39:d4:ad:61:a2:90:e2:9e:7e:cb:fb: fe:a0:34:9c:2c:1e:99:7b:5d:a7:d1:f9:fb:f9:8c: 40:58:76:d9:3a:f9:95:ec:00:8d:2e:ea:cc:12:1b: bb:2e:cd:07:9c:40:36:31:bf:6b:1e:80:ca:07:22: 40:59:a4:06:14:c4:c3:f9:81:53:bb:10:3c:a7:2d: 0f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C5:33:7D:F3:1D:46:57:6A:2A:BE:05:85:30:EC:04:BB:1D:65:B3 X509v3 Authority Key Identifier: keyid:9E:1D:7C:47:8D:88:0E:09:3C:83:DC:BE:1D:E4:0D:E8:8E:F8:54:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2f:f5:60:03:e7:63:32:ac:66:98:b8:0a:fa:6e:0e:b8:2c: ea:a4:10:dc:09:5d:17:a2:c6:b3:2f:49:b4:ef:1d:8a:a7:32: b8:3a:d1:05:82:37:c2:88:8c:ea:5f:17:61:e5:a2:8e:79:14: 7e:12:42:e0:37:b4:f6:11:9c:38:5b:2f:79:bc:66:7a:d5:85: 6c:ee:3e:c2:32:57:91:b6:7c:b1:df:bc:1d:45:62:54:fb:fc: 9c:fc:e9:af:de:84:71:71:3c:10:ec:9a:74:e6:a7:2b:9c:f5: e4:6d:bf:ed:e8:20:f6:5b:40:ba:84:4b:0c:38:85:44:74:47: cf:31:6c:4b:91:44:51:f9:58:a0:8d:e3:95:22:f1:f5:5d:4d: 2f:bf:74:1e:2b:cf:d9:82:30:9c:46:8d:04:6c:f6:00:1c:da: b1:ad:5d:03:19:30:ef:ee:c8:9d:28:6d:b9:9c:d8:5c:e1:d2: 40:09:74:cb:a4:d5:82:5b:15:13:4b:95:08:f0:f0:a3:b3:3f: 6f:de:e8:69:f9:0f:6b:87:99:24:09:54:1d:22:4e:e5:73:65: 17:02:92:5d:ff:ed:b5:ee:ed:38:62:29:0e:ea:12:2a:b4:c2: 55:af:f8:84:18:4e:e6:7c:55:e3:16:22:f9:4e:4e:c3:bc:e2: f9:4f:28:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI+s0qwFKu/8JzMmDz23coUB1VfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUxRDdDNDc4RDg4MEUwOTNDODNEQ0JFMURFNDBERTg4 RUY4NTQ2RjAeFw0yNTA2MTkyMjE2NDVaFw0yNTA2MjEwMTQxNDVaMDMxMTAvBgNV BAMTKDVFQzUzMzdERjMxRDQ2NTc2QTJBQkUwNTg1MzBFQzA0QkIxRDY1QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWQPV6GdWTG33RBLkQ3OmrYLLm RABeISdrb/jxum3c1aUmK429ycDQ0lQfKAz7EMgWdioL3ck56sJsJ7sLZhzCxAiP 4GsLUYH4DPVwxt977CUaOiCnZALCWyHAE/MdPj/3xhjc1wHVLz0rrJ1PO+H/B5H0 uojZuqy8K/W6QvIDSKuftiluqhAbhGTeSF8MZwFOnj9pV2U5ieCTaDkSwmk8nBPe P82DomBFDXmWTAohn6upXRnPHYE51K1hopDinn7L+/6gNJwsHpl7XafR+fv5jEBY dtk6+ZXsAI0u6swSG7suzQecQDYxv2segMoHIkBZpAYUxMP5gVO7EDynLQ+BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXsUzffMdRldqKr4FhTDsBLsdZbMwHwYDVR0j BBgwFoAUnh18R42IDgk8g9y+HeQN6I74VG8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSE1MVXZuOXRnV2NTalZGc3VHMldac3BpZEFIamRpaThnelByd1JGUEYy UG4vMS85RTFEN0M0NzhEODgwRTA5M0M4M0RDQkUxREU0MERFODhFRjg1NDZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFMUQ3QzQ3OEQ4ODBFMDkz QzgzRENCRTFERTQwREU4OEVGODU0NkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SE1MVXZuOXRnV2NTalZGc3VHMldac3BpZEFIamRpaThnelByd1JGUEYyUG4vMS85 RTFEN0M0NzhEODgwRTA5M0M4M0RDQkUxREU0MERFODhFRjg1NDZGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHS/1YAPnYzKsZpi4CvpuDrgs6qQQ3AldF6LGsy9JtO8diqcyuDrRBYI3woiM 6l8XYeWijnkUfhJC4De09hGcOFsvebxmetWFbO4+wjJXkbZ8sd+8HUViVPv8nPzp r96EcXE8EOyadOanK5z15G2/7egg9ltAuoRLDDiFRHRHzzFsS5FEUflYoI3jlSLx 9V1NL790HivP2YIwnEaNBGz2ABzasa1dAxkw7+7InShtuZzYXOHSQAl0y6TVglsV E0uVCPDwo7M/b97oafkPa4eZJAlUHSJO5XNlFwKSXf/tte7tOGIpDuoSKrTCVa/4 hBhO5nxV4xYi+U5Ow7zi+U8o8g== -----END CERTIFICATE-----Generated at Fri Jun 20 11:41:02 2025 by rpki-client