$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft File: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft (raw, json) Hash identifier: j9DjZfruA1Gjm3oFoTvgWLBK+nFplF/OaxepftbcPS0= Subject key identifier: 58:1C:AA:2F:D5:F6:23:B7:5E:A5:FE:B4:56:55:BC:48:D9:96:67:43 Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 Certificate issuer: /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Certificate serial: 0B9A373EFD27C135FC734A5EFB1C0C554B1EC4D8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft Manifest number: 025C Signing time: Mon 30 Jun 2025 13:50:32 +0000 Manifest this update: Mon 30 Jun 2025 13:45:32 +0000 Manifest next update: Tue 01 Jul 2025 17:19:32 +0000 Files and hashes: 1: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl (hash: RsZMyKdxsLOAtHKS1sM8LEt0tLfGSH7rJKNZGp49GIo=) 2: 323830343a346335633a3a2f33322d3438203d3e20323637333636.roa (hash: aBuDzalJjtN6QjODimHKIqdgYVt/ZmaeAC/ItTdnYZs=) 3: 34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa (hash: uvDWAWwHQEIwaeCaS7oSbgW6akspuwjD8Bob8V00050=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 17:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:9a:37:3e:fd:27:c1:35:fc:73:4a:5e:fb:1c:0c:55:4b:1e:c4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Validity Not Before: Jun 30 13:45:32 2025 GMT Not After : Jul 1 17:19:32 2025 GMT Subject: CN=581CAA2FD5F623B75EA5FEB45655BC48D9966743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:13:10:de:ac:90:b2:06:27:e0:0e:b8:59:9e: 99:2c:78:2a:4c:71:75:ef:4e:09:5f:c9:e7:b1:c5: 80:7b:9c:7b:e5:29:7d:2b:04:c3:4b:ab:8d:27:44: 68:25:1c:6b:10:87:71:95:85:d6:76:8e:b5:98:3e: 2a:02:c3:88:fb:00:3e:58:c2:5a:80:ac:24:57:88: 7f:05:f3:59:a9:e5:f9:c2:49:ca:29:21:6a:65:47: 8f:7e:c2:34:d4:26:71:bd:f8:90:7a:da:c8:04:d0: 04:61:6d:ad:8c:18:65:0b:da:a6:11:4c:f4:14:e9: 37:07:13:aa:36:3b:3a:63:a7:84:48:15:e2:a8:2c: 7f:2a:96:64:45:ff:58:35:60:4d:17:e0:75:95:73: f6:bb:ab:ec:cb:26:d2:a7:c6:1a:e9:45:9a:83:bf: 9f:64:9e:f8:c8:f0:a6:2a:ce:e0:24:04:fa:60:53: 3e:85:06:dc:f5:45:8b:04:ea:b3:a8:55:2a:a0:1c: fa:f5:83:6d:f3:94:f2:6d:5b:8a:46:53:dc:a7:ab: d4:76:80:82:02:b8:14:e4:7c:4d:43:26:c4:50:3f: 3e:bd:8f:72:a3:ce:e1:3a:68:08:34:64:4b:d4:eb: d3:22:00:21:fc:65:58:16:57:ea:e1:05:20:8b:9a: 26:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1C:AA:2F:D5:F6:23:B7:5E:A5:FE:B4:56:55:BC:48:D9:96:67:43 X509v3 Authority Key Identifier: keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:d2:7b:6c:c1:20:41:6f:62:68:ed:da:92:93:74:77:eb:f9: ee:59:a9:1e:88:7b:15:ba:fe:5e:25:4a:09:3a:f8:97:35:58: ff:80:e1:bb:f2:0a:66:a3:09:d9:d6:88:61:b3:95:65:aa:9c: 8e:7d:cd:08:30:50:96:d4:26:0e:21:20:b5:e0:45:10:a3:f6: 3f:2d:c7:1f:10:57:80:ce:24:c6:c7:65:ee:e9:c5:aa:32:0a: 06:36:ea:7b:f5:b7:d7:ad:2a:a9:93:fa:35:7b:dd:b4:50:4a: 10:24:32:a2:4d:40:82:ea:bc:ef:ab:7a:76:ad:eb:86:bc:ce: 9f:a0:4c:85:7a:79:10:7c:89:75:af:bb:41:b8:67:ce:8f:1f: d8:71:39:dc:3a:ff:b4:7b:b9:8e:5f:b0:2a:ee:6e:09:5e:63: 76:c8:15:6d:9d:9c:69:0d:7f:b2:b9:c5:0f:cc:70:e8:3f:9f: 92:f7:2f:15:87:cf:88:be:b5:ab:45:b7:28:c6:25:3a:aa:f9: df:33:69:e9:ec:bc:17:24:f8:07:72:0a:f6:d3:7a:86:c1:90: b3:88:c1:22:b0:77:7f:d5:a9:ab:a3:ea:71:fe:c6:0d:5d:11: 84:ea:25:54:54:0c:59:5c:fe:e4:27:69:89:10:72:82:ce:e3: 41:e0:dc:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUC5o3Pv0nwTX8c0pe+xwMVUsexNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMEFFNjNFRDk5MTI0RjdEM0YxNEI4RkE5QzFGRjM3 ODAwNjdDMjAeFw0yNTA2MzAxMzQ1MzJaFw0yNTA3MDExNzE5MzJaMDMxMTAvBgNV BAMTKDU4MUNBQTJGRDVGNjIzQjc1RUE1RkVCNDU2NTVCQzQ4RDk5NjY3NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhExDerJCyBifgDrhZnpkseCpM cXXvTglfyeexxYB7nHvlKX0rBMNLq40nRGglHGsQh3GVhdZ2jrWYPioCw4j7AD5Y wlqArCRXiH8F81mp5fnCScopIWplR49+wjTUJnG9+JB62sgE0ARhba2MGGUL2qYR TPQU6TcHE6o2Ozpjp4RIFeKoLH8qlmRF/1g1YE0X4HWVc/a7q+zLJtKnxhrpRZqD v59knvjI8KYqzuAkBPpgUz6FBtz1RYsE6rOoVSqgHPr1g23zlPJtW4pGU9ynq9R2 gIICuBTkfE1DJsRQPz69j3KjzuE6aAg0ZEvU69MiACH8ZVgWV+rhBSCLmiZXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWByqL9X2I7depf60VlW8SNmWZ0MwHwYDVR0j BBgwFoAU9CCuY+2ZEk99PxS4+pwf83gAZ8IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhH MWYvMC9GNDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0MjBBRTYzRUQ5OTEyNEY3 RDNGMTRCOEZBOUMxRkYzNzgwMDY3QzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhHMWYvMC9G NDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAltJ7bMEgQW9iaO3akpN0d+v57lmpHoh7Fbr+XiVKCTr4lzVY/4Dhu/IKZqMJ 2daIYbOVZaqcjn3NCDBQltQmDiEgteBFEKP2Py3HHxBXgM4kxsdl7unFqjIKBjbq e/W3160qqZP6NXvdtFBKECQyok1Aguq876t6dq3rhrzOn6BMhXp5EHyJda+7Qbhn zo8f2HE53Dr/tHu5jl+wKu5uCV5jdsgVbZ2caQ1/srnFD8xw6D+fkvcvFYfPiL61 q0W3KMYlOqr53zNp6ey8FyT4B3IK9tN6hsGQs4jBIrB3f9Wpq6Pqcf7GDV0RhOol VFQMWVz+5CdpiRBygs7jQeDcRQ== -----END CERTIFICATE-----Generated at Tue Jul 1 09:55:04 2025 by rpki-client