$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft File: 9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft (raw, json) Hash identifier: 3j5875lQ2DcVV3mdrKTZyaywSGIjlVwSbdymorcMo3Y= Subject key identifier: AC:C7:79:75:15:64:95:48:9D:DB:21:6E:26:81:16:17:0F:D5:69:EA Authority key identifier: 9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC Certificate issuer: /CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC Certificate serial: 0AFCBE1F1447012E3BD0314C2F6DAC89D0290CBC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft Manifest number: 0152 Signing time: Fri 20 Jun 2025 08:26:47 +0000 Manifest this update: Fri 20 Jun 2025 08:21:47 +0000 Manifest next update: Sat 21 Jun 2025 10:41:47 +0000 Files and hashes: 1: 9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl (hash: jXlG5dJnzNoTazeoRfP7sLzecSgARSCcQCYE6edbA+E=) 2: 3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa (hash: PBAVWDEZ/8URUjnI7xWp37tBWzT+HtUN4BzJA9/c93Q=) 3: 323830343a326437303a3330303a3a2f34312d3431203d3e20323635323832.roa (hash: dVARaFVMdMdHQ6Bld5pZ0sktZQcdpKzswuC/8qU7v78=) 4: 323830343a326437303a3338303a3a2f34312d3431203d3e20323635323832.roa (hash: NM19uogG2PQ1sn58KH5mCEVUZEoPYPuLaMBp+sUjB10=) 5: 323830343a326437303a3238303a3a2f34312d3431203d3e20323635323832.roa (hash: aKfiWJVrKweBQK/uEfhoatdC1VlCcAmXFAwmXZnxZic=) 6: 323830343a326437303a3130303a3a2f34312d3431203d3e20323635323832.roa (hash: hmMHHeJRSGr82SwNrmmok2/PX4gWJw42ZTyIOtk7OEA=) 7: 323830343a326437303a3a2f33322d3332203d3e20323635323832.roa (hash: nmoDArWRO0uLHbSAC4h2F96tm5C0wVkRpDyqnAkDCMY=) 8: 323830343a326437303a38303a3a2f34312d3431203d3e20323635323832.roa (hash: eBtsdDY81NfMBsgLEmJXeXJKkUKD+uNzTdp7rZYUx2M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 10:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:fc:be:1f:14:47:01:2e:3b:d0:31:4c:2f:6d:ac:89:d0:29:0c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC Validity Not Before: Jun 20 08:21:47 2025 GMT Not After : Jun 21 10:41:47 2025 GMT Subject: CN=ACC77975156495489DDB216E268116170FD569EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:10:15:a4:57:5b:c8:b4:37:64:11:2d:49:4e: 6a:9d:f4:b4:2b:74:22:19:8a:04:2a:20:ae:43:d1: 12:54:6f:d3:5f:94:6b:59:b0:f4:ad:cf:51:6a:10: f6:b5:f5:d1:52:22:2d:a8:d9:b3:a4:32:5e:5c:32: 1e:91:86:cd:fd:c1:68:d8:ee:18:47:9d:1c:ca:f3: e1:94:0f:70:c6:0f:6d:94:4d:74:a9:e9:4c:0f:9a: 57:8c:55:1b:1f:a7:a4:b3:4e:ca:3a:67:79:0a:b0: 68:c0:6b:b9:51:24:0a:71:e7:46:29:08:b6:9c:72: 01:e3:d2:ef:0d:b0:88:0d:06:c3:61:68:f3:df:f2: e4:54:bd:b1:2f:34:3d:7f:4d:ed:24:49:1d:5c:69: 52:a1:00:34:c3:3d:d2:75:ca:3a:20:22:a5:e9:48: 26:29:fb:d8:70:9b:d8:f5:8f:6f:45:99:28:fb:0e: fc:1c:de:b7:82:55:1e:24:79:32:02:65:f9:52:8f: ce:f5:00:64:3f:d6:37:ec:52:93:4e:d0:1c:c2:e9: 21:d2:49:de:75:49:85:e0:d6:0c:31:cd:63:13:64: 27:0b:99:ca:fd:bd:b0:4d:35:99:5d:2e:c3:9c:c2: 6b:3c:97:56:9d:5f:12:6b:06:07:4c:7d:bd:91:a6: 17:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C7:79:75:15:64:95:48:9D:DB:21:6E:26:81:16:17:0F:D5:69:EA X509v3 Authority Key Identifier: keyid:9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:35:58:ba:64:3d:a7:e0:41:21:f7:3c:99:a3:2f:62:f8:e0: f0:48:41:8d:ae:5f:4f:af:45:ed:1d:e3:75:a8:6b:22:5d:3c: 5c:5f:40:ce:fd:04:36:6a:93:60:dc:ee:3d:4c:4e:63:9c:1a: c0:68:aa:b4:9e:d3:ab:1c:5d:59:2d:70:ec:5f:e3:95:31:d0: fb:28:33:1f:28:3c:d1:8f:77:c7:e1:47:e3:70:2b:67:1c:33: 70:1c:26:ff:c0:e9:a6:17:3e:ff:c2:b0:22:e1:09:67:0a:9c: ad:dc:de:ed:9d:cb:63:9c:71:d0:dd:f3:dd:88:48:a9:2b:9d: 06:b1:bb:b3:39:aa:fb:58:7a:91:d7:d2:87:1b:79:64:af:b9: 75:2a:74:cb:43:4f:8a:45:e9:c7:89:e2:a4:56:bd:75:d0:1f: 24:7c:f2:4a:cf:e6:2d:a8:b3:60:4a:4b:62:97:dd:2c:13:34: 58:91:da:01:53:90:ec:f7:0b:b4:d5:89:d6:22:b2:5b:d8:8b: 31:6e:85:57:e6:8a:fb:f9:c0:12:ef:fe:5a:51:0c:5d:9b:00: d1:6c:b2:be:b4:56:79:4c:35:0a:69:b4:f8:40:38:7e:02:0b: 47:3d:2b:78:2c:06:80:36:23:71:45:20:8b:d8:c7:cd:93:58: 64:f5:a5:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCvy+HxRHAS470DFML22sidApDLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNCNkQ1RUM1MzAwRDFBMzZGRjg5M0M2MEYzOTBENjRC RjAwRjFFQzAeFw0yNTA2MjAwODIxNDdaFw0yNTA2MjExMDQxNDdaMDMxMTAvBgNV BAMTKEFDQzc3OTc1MTU2NDk1NDg5RERCMjE2RTI2ODExNjE3MEZENTY5RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4EBWkV1vItDdkES1JTmqd9LQr dCIZigQqIK5D0RJUb9NflGtZsPStz1FqEPa19dFSIi2o2bOkMl5cMh6Rhs39wWjY 7hhHnRzK8+GUD3DGD22UTXSp6UwPmleMVRsfp6SzTso6Z3kKsGjAa7lRJApx50Yp CLaccgHj0u8NsIgNBsNhaPPf8uRUvbEvND1/Te0kSR1caVKhADTDPdJ1yjogIqXp SCYp+9hwm9j1j29FmSj7Dvwc3reCVR4keTICZflSj871AGQ/1jfsUpNO0BzC6SHS Sd51SYXg1gwxzWMTZCcLmcr9vbBNNZldLsOcwms8l1adXxJrBgdMfb2Rphc9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrMd5dRVklUid2yFuJoEWFw/VaeowHwYDVR0j BBgwFoAUnLbV7FMA0aNv+JPGDzkNZL8A8ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHZ4ZjNlSjV4MkNMeGsyTkZhVUZhUnhoR21XeFIxR28zdFdZdHREOGRF Tk4vMC85Q0I2RDVFQzUzMDBEMUEzNkZGODkzQzYwRjM5MEQ2NEJGMDBGMUVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQjZENUVDNTMwMEQxQTM2 RkY4OTNDNjBGMzkwRDY0QkYwMEYxRUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHZ4ZjNlSjV4MkNMeGsyTkZhVUZhUnhoR21XeFIxR28zdFdZdHREOGRFTk4vMC85 Q0I2RDVFQzUzMDBEMUEzNkZGODkzQzYwRjM5MEQ2NEJGMDBGMUVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJjVYumQ9p+BBIfc8maMvYvjg8EhBja5fT69F7R3jdahrIl08XF9Azv0ENmqT YNzuPUxOY5wawGiqtJ7TqxxdWS1w7F/jlTHQ+ygzHyg80Y93x+FH43ArZxwzcBwm /8Dpphc+/8KwIuEJZwqcrdze7Z3LY5xx0N3z3YhIqSudBrG7szmq+1h6kdfShxt5 ZK+5dSp0y0NPikXpx4nipFa9ddAfJHzySs/mLaizYEpLYpfdLBM0WJHaAVOQ7PcL tNWJ1iKyW9iLMW6FV+aK+/nAEu/+WlEMXZsA0WyyvrRWeUw1Cmm0+EA4fgILRz0r eCwGgDYjcUUgi9jHzZNYZPWltA== -----END CERTIFICATE-----Generated at Fri Jun 20 14:07:47 2025 by rpki-client