$ rpki-client -vvf rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.mft File: C164F89CAD164E696F5070A43F5B84BA8C3F610A.mft (raw, json) Hash identifier: +fK0LfNJnlma/Jvbek0g9dVyOGMhgS+OfOtlBhGby5k= Subject key identifier: 0F:2C:C4:0A:5A:24:CB:FB:4C:A5:84:91:57:28:64:73:D0:1A:B8:53 Authority key identifier: C1:64:F8:9C:AD:16:4E:69:6F:50:70:A4:3F:5B:84:BA:8C:3F:61:0A Certificate issuer: /CN=C164F89CAD164E696F5070A43F5B84BA8C3F610A Certificate serial: 27BBF5D6E27D13EBB2958C0A3B77D6C2F029D720 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C164F89CAD164E696F5070A43F5B84BA8C3F610A.cer Subject info access: rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.mft Manifest number: 2A Signing time: Sat 21 Jun 2025 01:35:21 +0000 Manifest this update: Sat 21 Jun 2025 01:30:21 +0000 Manifest next update: Sun 22 Jun 2025 04:01:21 +0000 Files and hashes: 1: 34352e3136362e36362e302f32342d3234203d3e20323637393436.roa (hash: RvTdvzlP0x9wP7y2jC1QFa8YosWand47IHE4NO7kAuA=) 2: C164F89CAD164E696F5070A43F5B84BA8C3F610A.crl (hash: X/d2lch1ATAC6wnGgKhI+eS9Ine8uUeh8vvLg/67qow=) 3: 34352e3136362e36372e302f32342d3234203d3e20323637393436.roa (hash: maS4nmFcdiHhy+ZX4S8/5wsNL5C7y3k1hxmjUU8OI0Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.crl rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C164F89CAD164E696F5070A43F5B84BA8C3F610A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Jun 2025 02:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:bb:f5:d6:e2:7d:13:eb:b2:95:8c:0a:3b:77:d6:c2:f0:29:d7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C164F89CAD164E696F5070A43F5B84BA8C3F610A Validity Not Before: Jun 21 01:30:21 2025 GMT Not After : Jun 22 04:01:21 2025 GMT Subject: CN=0F2CC40A5A24CBFB4CA5849157286473D01AB853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:6a:22:9e:03:2a:9d:8e:21:bd:c8:be:9d: 19:17:08:cf:39:e9:bf:62:d6:a1:3f:41:59:db:91: 78:63:de:38:47:5e:c8:07:f6:e1:9b:01:21:29:08: c6:62:90:30:51:b1:ee:46:8e:30:0a:3a:cd:b8:3b: e2:f1:04:ef:4e:fa:c1:c3:43:fb:f3:96:04:06:8a: d8:be:25:43:66:02:95:be:fe:26:ad:3f:ca:ef:ce: 61:97:d1:91:35:81:04:58:af:46:1e:5c:f9:9b:76: 6f:ad:54:29:fa:f6:5c:51:c3:69:f0:80:b8:c6:51: 6a:3a:9d:97:fb:02:44:49:4e:d8:05:13:c5:fa:1d: 38:cc:f0:ff:07:f7:69:8e:b7:8c:bb:e2:ce:76:c6: f7:97:cc:25:93:45:5a:c7:d2:77:fb:cf:42:6f:a1: 99:13:14:5c:54:e9:92:7f:75:c2:20:a2:5c:5a:15: 52:9f:ac:b8:b4:97:75:ed:c1:7b:d9:b6:f4:b6:24: 6a:38:a7:f2:90:ce:eb:00:a6:cf:16:02:1d:0b:5d: 38:18:07:12:35:3d:2f:29:e1:c9:e0:df:cd:5b:b6: 82:d2:ce:be:ff:f2:fd:d2:0b:c6:15:08:ec:16:4b: d3:55:20:88:ed:53:77:14:2e:4b:c7:e3:5f:53:f9: 9f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2C:C4:0A:5A:24:CB:FB:4C:A5:84:91:57:28:64:73:D0:1A:B8:53 X509v3 Authority Key Identifier: keyid:C1:64:F8:9C:AD:16:4E:69:6F:50:70:A4:3F:5B:84:BA:8C:3F:61:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C164F89CAD164E696F5070A43F5B84BA8C3F610A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/0/C164F89CAD164E696F5070A43F5B84BA8C3F610A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e2:28:2d:93:93:84:60:54:db:79:09:f2:f8:06:bb:41:21: 9a:a6:88:40:1e:17:27:6f:a7:3d:a7:14:48:de:4d:7c:06:56: d7:76:6e:1c:4c:0e:bb:49:0a:46:8e:41:1f:3d:de:d0:fc:db: 9a:73:b5:8b:f3:da:c5:20:41:a6:29:b4:1a:c5:88:54:37:e0: bd:4f:50:27:33:bd:13:31:ca:5c:2e:f6:a9:71:d2:08:3e:f2: 8b:ca:c2:c3:8b:54:66:75:28:d6:a7:f6:80:25:66:7f:50:0e: 30:2c:d8:81:bb:0a:74:99:d5:46:7c:f0:5a:71:43:84:b8:e9: 08:af:89:1d:b4:df:de:f9:f1:88:3b:14:4f:b9:ab:f7:3a:75: 1c:29:80:0a:12:87:c3:dc:63:9c:00:51:a2:f8:96:9c:99:12: 7f:b9:51:06:df:cf:d5:34:89:74:10:6a:b8:f4:b5:19:3d:a4: 28:1a:bc:ca:e6:e5:0c:c3:0a:b0:c7:dc:b1:50:84:49:fd:20: 9f:d9:41:57:e7:7c:ea:61:cd:31:03:2c:3b:03:c0:bc:bd:b0: 02:9f:73:91:a9:87:7b:6b:1a:18:18:2a:16:6a:4b:5a:60:3f: d2:41:21:4b:ff:54:9e:4d:82:ba:aa:86:0e:34:f1:0e:ee:88: 2f:34:a2:f0 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUJ7v11uJ9E+uylYwKO3fWwvAp1yAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2NEY4OUNBRDE2NEU2OTZGNTA3MEE0M0Y1Qjg0QkE4 QzNGNjEwQTAeFw0yNTA2MjEwMTMwMjFaFw0yNTA2MjIwNDAxMjFaMDMxMTAvBgNV BAMTKDBGMkNDNDBBNUEyNENCRkI0Q0E1ODQ5MTU3Mjg2NDczRDAxQUI4NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74WoingMqnY4hvci+nRkXCM85 6b9i1qE/QVnbkXhj3jhHXsgH9uGbASEpCMZikDBRse5GjjAKOs24O+LxBO9O+sHD Q/vzlgQGiti+JUNmApW+/iatP8rvzmGX0ZE1gQRYr0YeXPmbdm+tVCn69lxRw2nw gLjGUWo6nZf7AkRJTtgFE8X6HTjM8P8H92mOt4y74s52xveXzCWTRVrH0nf7z0Jv oZkTFFxU6ZJ/dcIgolxaFVKfrLi0l3XtwXvZtvS2JGo4p/KQzusAps8WAh0LXTgY BxI1PS8p4cng381btoLSzr7/8v3SC8YVCOwWS9NVIIjtU3cULkvH419T+Z+lAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUDyzECloky/tMpYSRVyhkc9AauFMwHwYDVR0j BBgwFoAUwWT4nK0WTmlvUHCkP1uEuow/YQowDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby94ZUhZV2hRR0o1TVBqRVp1WnRwWEF1WXQ0UzFia0pOTG9pWnkza29YbXNI LzAvQzE2NEY4OUNBRDE2NEU2OTZGNTA3MEE0M0Y1Qjg0QkE4QzNGNjEwQS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DMTY0Rjg5Q0FEMTY0RTY5NkY1 MDcwQTQzRjVCODRCQThDM0Y2MTBBLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3hl SFlXaFFHSjVNUGpFWnVadHBYQXVZdDRTMWJrSk5Mb2laeTNrb1htc0gvMC9DMTY0 Rjg5Q0FEMTY0RTY5NkY1MDcwQTQzRjVCODRCQThDM0Y2MTBBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA QOIoLZOThGBU23kJ8vgGu0EhmqaIQB4XJ2+nPacUSN5NfAZW13ZuHEwOu0kKRo5B Hz3e0PzbmnO1i/PaxSBBpim0GsWIVDfgvU9QJzO9EzHKXC72qXHSCD7yi8rCw4tU ZnUo1qf2gCVmf1AOMCzYgbsKdJnVRnzwWnFDhLjpCK+JHbTf3vnxiDsUT7mr9zp1 HCmAChKHw9xjnABRoviWnJkSf7lRBt/P1TSJdBBquPS1GT2kKBq8yublDMMKsMfc sVCESf0gn9lBV+d86mHNMQMsOwPAvL2wAp9zkamHe2saGBgqFmpLWmA/0kEhS/9U nk2CuqqGDjTxDu6ILzSi8A== -----END CERTIFICATE-----Generated at Sat Jun 21 03:27:41 2025 by rpki-client