$ rpki-client -vvf rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.mft File: 94BE3C088C5997DF6AA8B56878A0239FF601A352.mft (raw, json) Hash identifier: TwjXDmZi+fErdRSRa9YJgsRW6IT7dSM5VFg+3rb+eKU= Subject key identifier: DF:B2:BC:4A:8B:A1:B4:72:37:4B:2E:1A:B9:3A:C1:03:37:4F:11:9F Authority key identifier: 94:BE:3C:08:8C:59:97:DF:6A:A8:B5:68:78:A0:23:9F:F6:01:A3:52 Certificate issuer: /CN=94BE3C088C5997DF6AA8B56878A0239FF601A352 Certificate serial: 01B48587328A410248DED4A8648B3C84E797F08F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.cer Subject info access: rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.mft Manifest number: 025F Signing time: Mon 30 Jun 2025 00:43:27 +0000 Manifest this update: Mon 30 Jun 2025 00:38:27 +0000 Manifest next update: Tue 01 Jul 2025 02:56:27 +0000 Files and hashes: 1: 323830343a353834633a3a2f33332d3333203d3e20323638313230.roa (hash: pQ0CYIYKSlW+02ASBQlgpR0BM2UXs/u03JfSAAWre3E=) 2: 34352e3136392e35362e302f32322d3234203d3e20323638313230.roa (hash: c0a70ZW/HXztkzAdglauONsyURi6bUPGDcHSgrGQNBo=) 3: 94BE3C088C5997DF6AA8B56878A0239FF601A352.crl (hash: U/XgEFV2rxVHCJ1PhgReOyEtgLQhuNMDQ9mfiIVf7ko=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.crl rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 02:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:b4:85:87:32:8a:41:02:48:de:d4:a8:64:8b:3c:84:e7:97:f0:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94BE3C088C5997DF6AA8B56878A0239FF601A352 Validity Not Before: Jun 30 00:38:27 2025 GMT Not After : Jul 1 02:56:27 2025 GMT Subject: CN=DFB2BC4A8BA1B472374B2E1AB93AC103374F119F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8c:4f:8d:b4:56:02:df:df:d7:32:c0:88:e1: 7c:b1:f9:90:20:a1:9d:d5:1e:9e:3f:73:7c:d0:ab: cc:3b:16:65:7f:f8:23:bd:52:b0:48:b0:98:1c:22: 13:5f:49:cd:2c:38:10:04:83:5f:cb:17:f9:a5:09: 7f:8d:c6:d3:3a:1d:dd:bf:cb:08:26:6a:52:21:fe: 0b:16:f7:12:ea:91:13:7e:23:4b:40:11:92:c2:a7: 17:43:ef:c6:91:7f:b6:3a:d7:96:1a:fd:ac:c9:f1: 8c:89:1e:c4:5b:92:24:8c:17:83:6f:50:36:e1:68: 00:c8:1e:78:cd:a4:72:00:bd:a9:69:6f:12:4a:ce: ad:59:c0:fe:68:97:48:af:d3:e4:5b:58:c0:f8:47: a5:f5:05:0b:9a:40:9f:3b:5c:2e:0b:3c:40:f8:9a: db:40:69:cc:e0:08:d1:d8:8c:a2:c2:6c:ff:d5:38: f1:fd:55:69:97:67:c2:1a:2a:36:23:3e:01:d7:99: f3:c0:84:2e:e2:53:8b:91:fc:db:1c:da:cb:2a:5d: 1d:0d:09:f1:79:4b:9a:9f:48:a8:69:d1:2c:ff:4f: 9b:89:49:30:8b:07:ef:8e:38:d5:7a:4b:9c:85:04: 75:4d:af:b9:82:01:cb:f8:aa:01:b0:68:68:78:e6: 24:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B2:BC:4A:8B:A1:B4:72:37:4B:2E:1A:B9:3A:C1:03:37:4F:11:9F X509v3 Authority Key Identifier: keyid:94:BE:3C:08:8C:59:97:DF:6A:A8:B5:68:78:A0:23:9F:F6:01:A3:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b9:62:ce:2c:61:85:1f:42:d0:a4:f5:40:5b:8d:7d:e8:d9: e7:f3:0b:49:7b:3b:4c:96:70:c3:a1:4f:98:d5:e7:9a:1a:92: 36:12:1c:c8:84:90:0d:d3:35:24:39:e6:d7:45:d4:75:52:4f: f2:34:0e:09:b0:3f:99:45:21:be:7f:f4:c4:d8:af:1f:47:22: 5f:f4:b1:9b:ce:52:8c:47:85:cf:47:c4:15:cf:29:ab:c0:f4: a4:42:98:41:4a:2b:45:a3:96:3f:b5:d7:17:52:99:a3:fd:82: 23:b8:25:d3:a9:cd:61:32:e3:38:05:56:98:bd:85:9f:83:ad: c3:7b:5a:cd:bf:23:54:03:16:a7:c8:7f:1b:8b:43:e7:b3:83: 05:9d:64:51:f0:96:71:d0:2c:7f:9f:67:4b:10:e9:0f:e5:f1: 1d:0e:9c:ea:de:7d:5e:f5:d6:70:bc:ed:bb:1a:4c:fc:1b:70: fd:f7:b2:d0:8a:b2:96:a3:f9:51:ba:19:4c:14:29:f8:50:44: 01:f2:2e:8e:f1:e6:c3:33:9c:a5:b3:b0:67:fe:f4:8c:b3:61: f5:9c:79:ec:03:28:31:0c:7d:0e:4e:55:25:64:b2:76:aa:a7: b4:b4:9b:26:3e:08:6d:67:49:3b:ef:a8:76:33:50:47:b2:3e: 1e:6b:30:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAbSFhzKKQQJI3tSoZIs8hOeX8I8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRCRTNDMDg4QzU5OTdERjZBQThCNTY4NzhBMDIzOUZG NjAxQTM1MjAeFw0yNTA2MzAwMDM4MjdaFw0yNTA3MDEwMjU2MjdaMDMxMTAvBgNV BAMTKERGQjJCQzRBOEJBMUI0NzIzNzRCMkUxQUI5M0FDMTAzMzc0RjExOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8jE+NtFYC39/XMsCI4Xyx+ZAg oZ3VHp4/c3zQq8w7FmV/+CO9UrBIsJgcIhNfSc0sOBAEg1/LF/mlCX+NxtM6Hd2/ ywgmalIh/gsW9xLqkRN+I0tAEZLCpxdD78aRf7Y615Ya/azJ8YyJHsRbkiSMF4Nv UDbhaADIHnjNpHIAvalpbxJKzq1ZwP5ol0iv0+RbWMD4R6X1BQuaQJ87XC4LPED4 mttAaczgCNHYjKLCbP/VOPH9VWmXZ8IaKjYjPgHXmfPAhC7iU4uR/Nsc2ssqXR0N CfF5S5qfSKhp0Sz/T5uJSTCLB++OONV6S5yFBHVNr7mCAcv4qgGwaGh45iTJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU37K8SouhtHI3Sy4auTrBAzdPEZ8wHwYDVR0j BBgwFoAUlL48CIxZl99qqLVoeKAjn/YBo1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnZrZGQ1MmJEZGRyamJGbXE4Q1h3cE1ONEpkWHJ0N1hTMlRqUGV0R1VU SFovMS85NEJFM0MwODhDNTk5N0RGNkFBOEI1Njg3OEEwMjM5RkY2MDFBMzUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0QkUzQzA4OEM1OTk3REY2 QUE4QjU2ODc4QTAyMzlGRjYwMUEzNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnZrZGQ1MmJEZGRyamJGbXE4Q1h3cE1ONEpkWHJ0N1hTMlRqUGV0R1VUSFovMS85 NEJFM0MwODhDNTk5N0RGNkFBOEI1Njg3OEEwMjM5RkY2MDFBMzUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACrlizixhhR9C0KT1QFuNfejZ5/MLSXs7TJZww6FPmNXnmhqSNhIcyISQDdM1 JDnm10XUdVJP8jQOCbA/mUUhvn/0xNivH0ciX/Sxm85SjEeFz0fEFc8pq8D0pEKY QUorRaOWP7XXF1KZo/2CI7gl06nNYTLjOAVWmL2Fn4Otw3tazb8jVAMWp8h/G4tD 57ODBZ1kUfCWcdAsf59nSxDpD+XxHQ6c6t59XvXWcLztuxpM/Btw/fey0IqylqP5 UboZTBQp+FBEAfIujvHmwzOcpbOwZ/70jLNh9Zx57AMoMQx9Dk5VJWSydqqntLSb Jj4IbWdJO++odjNQR7I+Hmswdw== -----END CERTIFICATE-----Generated at Mon Jun 30 10:40:02 2025 by rpki-client