$ rpki-client -vvf rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.mft File: E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.mft (raw, json) Hash identifier: I9ER6Meq0MfPSNO5PpUH70ZwPXmAJgmbWsWv+Q03v20= Subject key identifier: D1:F3:9A:7F:05:A8:3A:0A:D8:28:D4:CF:D6:79:16:37:94:60:A2:82 Authority key identifier: E1:97:0E:01:B5:16:F8:93:C6:1C:B2:5B:64:A1:FB:0E:8C:F7:DC:F9 Certificate issuer: /CN=E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9 Certificate serial: 2DA43D3CFDFAB47C712E2DD465E482A07305D39C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.mft Manifest number: 01D9 Signing time: Sat 21 Jun 2025 06:08:10 +0000 Manifest this update: Sat 21 Jun 2025 06:03:10 +0000 Manifest next update: Sun 22 Jun 2025 08:42:10 +0000 Files and hashes: 1: 3139312e352e37322e302f32312d3332203d3e203532353833.roa (hash: pf17SDXkIWi+sGiJpPePwrGZYTyBqoqy+3rCANByJP0=) 2: 323830343a6430303a3a2f33322d313238203d3e203532353833.roa (hash: eiROdqROSzuY+7QsAnpLUjHuYWtBFqmMUp4t/IKRQjE=) 3: 3137372e38372e3136382e302f32312d3332203d3e203532353833.roa (hash: Nub9mpFDz6y9jsHl8ERmZpUtx1omHaalvGzkX2znOM0=) 4: E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.crl (hash: q4GJyTfJaSDnMeWkF8qaXtnB3o91LS79AEmluhkZICw=) 5: 3139312e352e37362e302f32342d3234203d3e20323638343834.roa (hash: TEJmS+jinMFQHlEre03Shq0+iL0S48QsIL1jZdP+dbI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.crl rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Jun 2025 08:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a4:3d:3c:fd:fa:b4:7c:71:2e:2d:d4:65:e4:82:a0:73:05:d3:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9 Validity Not Before: Jun 21 06:03:10 2025 GMT Not After : Jun 22 08:42:10 2025 GMT Subject: CN=D1F39A7F05A83A0AD828D4CFD67916379460A282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f3:cc:72:f8:ed:86:85:5e:cb:e7:82:96:5a: e4:cd:45:8d:4b:79:7e:19:95:09:0c:a6:89:89:33: 0b:d9:a5:26:dd:0c:21:03:14:db:3c:8a:77:84:48: 89:48:89:60:bc:61:06:51:b1:7c:fe:53:33:d4:69: e6:6b:bb:8a:ee:44:f2:4b:be:a8:74:88:97:e8:87: b2:47:f4:4c:18:54:d1:7a:7f:22:62:a5:54:36:1a: d8:df:3c:10:85:21:0a:d7:1d:db:a8:b0:d4:d5:d9: 76:f5:35:eb:79:4b:fe:d1:ff:68:e0:41:72:df:81: c8:44:3e:fb:22:45:6d:1d:36:98:7b:38:48:55:3d: 91:05:04:8f:71:a2:0e:39:74:ef:92:f5:a0:73:39: 0e:cc:7e:4a:44:c0:50:14:44:79:c7:52:c1:93:d2: ce:76:88:a9:29:2b:16:8f:18:c1:16:3d:06:a5:fb: 9e:07:00:61:4f:59:49:17:dd:4b:df:18:6b:f0:3e: 32:39:4c:2e:98:fd:6b:66:e1:67:1e:92:e1:7e:ee: 86:39:f8:ce:4b:8d:65:d5:52:dc:32:28:ac:78:f0: 23:7d:fc:ae:8b:d9:20:8b:42:7e:07:73:6b:00:72: 36:d6:68:d0:e4:51:89:e2:b9:5d:a7:34:b5:e3:9b: 62:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F3:9A:7F:05:A8:3A:0A:D8:28:D4:CF:D6:79:16:37:94:60:A2:82 X509v3 Authority Key Identifier: keyid:E1:97:0E:01:B5:16:F8:93:C6:1C:B2:5B:64:A1:FB:0E:8C:F7:DC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:cd:a0:0a:f9:06:a6:16:81:04:f5:05:50:ba:5b:4b:44:b0: 5c:2e:8c:57:31:6d:e7:0e:91:6c:aa:51:f1:dd:e5:15:df:42: 85:45:e2:bf:37:fa:4a:18:5f:89:65:48:09:6d:83:37:6d:29: 54:14:70:25:a9:44:12:a5:80:41:c4:48:01:21:97:ed:e4:c3: 03:98:c9:5f:d8:84:29:ed:c4:71:0d:92:84:ea:61:84:ff:77: ee:d2:12:8b:f8:99:c7:ff:1a:45:47:04:e7:c5:4e:80:c4:02: 56:fc:d8:43:9c:9e:79:a9:57:42:99:02:59:f5:4a:a9:6f:3e: 6f:db:f1:96:76:98:17:10:71:0b:73:fc:13:e5:d9:48:62:c5: 8e:b3:2b:bb:1a:32:15:f8:bf:50:6b:3e:a2:37:2f:d3:98:c9: a6:d2:8b:22:db:5a:02:82:78:3d:79:33:c8:dc:c8:4f:89:75: 12:70:64:d6:ce:15:e5:b8:52:39:f6:5b:d0:f2:60:21:bc:af: 4a:dd:5d:31:f1:c6:f4:f4:6d:a6:a8:6c:57:8a:e8:70:41:c6: 71:b2:74:47:58:96:2c:2d:f5:ec:83:24:0d:0b:91:14:85:36: 89:bd:cb:e1:8e:68:1f:2d:f9:ce:3f:07:cc:e7:a2:5a:42:b4: 83:3c:b8:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULaQ9PP36tHxxLi3UZeSCoHMF05wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5NzBFMDFCNTE2Rjg5M0M2MUNCMjVCNjRBMUZCMEU4 Q0Y3RENGOTAeFw0yNTA2MjEwNjAzMTBaFw0yNTA2MjIwODQyMTBaMDMxMTAvBgNV BAMTKEQxRjM5QTdGMDVBODNBMEFEODI4RDRDRkQ2NzkxNjM3OTQ2MEEyODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd88xy+O2GhV7L54KWWuTNRY1L eX4ZlQkMpomJMwvZpSbdDCEDFNs8ineESIlIiWC8YQZRsXz+UzPUaeZru4ruRPJL vqh0iJfoh7JH9EwYVNF6fyJipVQ2GtjfPBCFIQrXHduosNTV2Xb1Net5S/7R/2jg QXLfgchEPvsiRW0dNph7OEhVPZEFBI9xog45dO+S9aBzOQ7MfkpEwFAURHnHUsGT 0s52iKkpKxaPGMEWPQal+54HAGFPWUkX3UvfGGvwPjI5TC6Y/Wtm4WcekuF+7oY5 +M5LjWXVUtwyKKx48CN9/K6L2SCLQn4Hc2sAcjbWaNDkUYniuV2nNLXjm2LNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU0fOafwWoOgrYKNTP1nkWN5RgooIwHwYDVR0j BBgwFoAU4ZcOAbUW+JPGHLJbZKH7Doz33PkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSG14NHlqcnNuTHRBM2FuZEZSNVpWY0hRblRFdXBGOW9XVHFvdkdvN21I a1MvMC9FMTk3MEUwMUI1MTZGODkzQzYxQ0IyNUI2NEExRkIwRThDRjdEQ0Y5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxOTcwRTAxQjUxNkY4OTND NjFDQjI1QjY0QTFGQjBFOENGN0RDRjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SG14NHlqcnNuTHRBM2FuZEZSNVpWY0hRblRFdXBGOW9XVHFvdkdvN21Ia1MvMC9F MTk3MEUwMUI1MTZGODkzQzYxQ0IyNUI2NEExRkIwRThDRjdEQ0Y5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj82gCvkGphaBBPUFULpbS0SwXC6MVzFt5w6RbKpR8d3lFd9ChUXivzf6Shhf iWVICW2DN20pVBRwJalEEqWAQcRIASGX7eTDA5jJX9iEKe3EcQ2ShOphhP937tIS i/iZx/8aRUcE58VOgMQCVvzYQ5yeealXQpkCWfVKqW8+b9vxlnaYFxBxC3P8E+XZ SGLFjrMruxoyFfi/UGs+ojcv05jJptKLIttaAoJ4PXkzyNzIT4l1EnBk1s4V5bhS OfZb0PJgIbyvSt1dMfHG9PRtpqhsV4rocEHGcbJ0R1iWLC317IMkDQuRFIU2ib3L 4Y5oHy35zj8HzOeiWkK0gzy4jw== -----END CERTIFICATE-----Generated at Sat Jun 21 13:00:33 2025 by rpki-client