$ rpki-client -vvf rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.mft File: AF4A2DB89E34555B8683D2189961132177B11C81.mft (raw, json) Hash identifier: pu2H5uahqPLFnfr90akqr+p9asBpNOfCXo6E+zBpUSs= Subject key identifier: 6D:76:CC:7B:68:A0:53:E5:D3:E0:2D:96:F5:6C:FC:73:52:D3:5D:30 Authority key identifier: AF:4A:2D:B8:9E:34:55:5B:86:83:D2:18:99:61:13:21:77:B1:1C:81 Certificate issuer: /CN=AF4A2DB89E34555B8683D2189961132177B11C81 Certificate serial: 51F4291DFDA1882C652F33AABCFFAC90F3C0170F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4A2DB89E34555B8683D2189961132177B11C81.cer Subject info access: rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.mft Manifest number: 4B Signing time: Wed 02 Jul 2025 09:30:11 +0000 Manifest this update: Wed 02 Jul 2025 09:25:11 +0000 Manifest next update: Thu 03 Jul 2025 10:02:11 +0000 Files and hashes: 1: 3133382e33362e3131362e302f32322d3332203d3e20323634353737.roa (hash: Db8sToV5ujds5q1beOvfPPCXTGcHwubMfh/VEsxLVhg=) 2: 323830343a323164383a3a2f33322d313238203d3e20323634353737.roa (hash: QNBOlmI1R5nTlUtL4Q8+avShqQstAd9Eh6Nq2rgyZcc=) 3: AF4A2DB89E34555B8683D2189961132177B11C81.crl (hash: Fst6RtUA/suOWCISllp46nfMesn07Ipzy83354UadW8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.crl rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4A2DB89E34555B8683D2189961132177B11C81.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 10:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f4:29:1d:fd:a1:88:2c:65:2f:33:aa:bc:ff:ac:90:f3:c0:17:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4A2DB89E34555B8683D2189961132177B11C81 Validity Not Before: Jul 2 09:25:11 2025 GMT Not After : Jul 3 10:02:11 2025 GMT Subject: CN=6D76CC7B68A053E5D3E02D96F56CFC7352D35D30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:4f:67:46:32:7f:b3:a6:2d:0a:4c:29:85: 5e:2f:0a:f8:fe:12:3d:fe:aa:ed:c4:1d:d9:bb:7f: c7:78:17:26:8d:3c:6c:db:e5:c9:73:18:6f:3e:1d: f7:23:8a:aa:18:35:8d:e5:22:fe:44:57:9c:b3:7c: 18:b1:3a:88:8c:81:25:5b:99:4a:c8:cb:47:fc:a5: ce:ee:6f:c0:79:3b:13:f7:3f:d4:e9:3e:c2:29:5f: 81:6f:33:b7:7c:56:e6:9c:8e:95:92:f1:2b:80:1d: 6e:36:b6:01:45:87:4e:1a:5c:d2:a7:16:d2:fa:83: 0c:20:4d:49:e0:b0:e1:f1:e2:76:15:07:34:6c:43: 09:4d:00:14:ad:4e:da:ad:e3:d5:e4:ea:1f:b2:16: 65:07:c6:a2:7a:14:a0:05:59:ee:f6:aa:f3:7a:b8: 1e:f7:9b:07:36:41:9b:29:4f:d7:f7:fb:c3:0c:b4: 12:c8:d3:66:f4:71:47:99:4a:36:66:00:00:04:69: bf:dd:ad:1f:a3:e5:b4:4e:28:6f:a7:ec:06:e3:26: b0:b1:52:b3:0d:ac:2d:c5:f6:c9:50:ec:9e:a7:b1: 2b:3d:51:fb:52:19:f2:52:32:f1:7e:8c:8f:b9:a7: 1f:8f:7d:06:51:f4:63:13:78:68:fd:c2:14:41:3c: a0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:76:CC:7B:68:A0:53:E5:D3:E0:2D:96:F5:6C:FC:73:52:D3:5D:30 X509v3 Authority Key Identifier: keyid:AF:4A:2D:B8:9E:34:55:5B:86:83:D2:18:99:61:13:21:77:B1:1C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF4A2DB89E34555B8683D2189961132177B11C81.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/AF4A2DB89E34555B8683D2189961132177B11C81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:00:84:1e:1f:e9:18:7e:8d:3e:84:31:b1:73:a2:d5:3b:3c: 37:bf:ec:13:cd:b5:9e:cd:1f:c4:4d:27:94:61:40:ff:09:f1: ed:69:33:a3:2d:44:d7:5f:3a:2e:7e:64:17:b2:04:ae:85:8d: 01:a1:e5:d1:60:42:0a:9c:5e:74:8c:b9:28:bb:99:52:9f:e1: 96:87:d9:7b:1a:35:66:f0:f5:1c:53:5d:23:81:1c:84:15:3f: cc:06:d6:63:9c:40:5b:a3:b7:41:52:e8:46:2d:58:3d:5e:11: 67:aa:75:69:c8:52:eb:83:f2:91:c2:81:74:63:31:28:68:82: 3a:f3:c5:49:23:0b:20:16:57:1b:67:da:a5:88:71:90:cd:89: 99:1b:2b:36:8a:7a:34:0a:b4:b5:76:ed:5c:e9:9d:c8:06:e6: fa:93:eb:6f:d9:d2:70:50:28:47:7a:b2:28:05:19:68:22:d7: 38:66:8e:f7:e4:1c:77:9b:0d:df:9e:c7:37:84:41:51:78:cc: 34:f7:eb:95:68:e5:e9:14:cb:7e:9a:e8:9a:e3:58:f8:92:42: 2e:4b:54:84:ff:69:d1:43:51:5a:04:ea:a8:21:8b:a0:01:5a: 08:6f:b3:a1:2a:ed:61:d2:f9:24:1c:d2:1e:18:17:f1:e3:2b: e9:02:bd:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUfQpHf2hiCxlLzOqvP+skPPAFw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QTJEQjg5RTM0NTU1Qjg2ODNEMjE4OTk2MTEzMjE3 N0IxMUM4MTAeFw0yNTA3MDIwOTI1MTFaFw0yNTA3MDMxMDAyMTFaMDMxMTAvBgNV BAMTKDZENzZDQzdCNjhBMDUzRTVEM0UwMkQ5NkY1NkNGQzczNTJEMzVEMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+zU9nRjJ/s6YtCkwphV4vCvj+ Ej3+qu3EHdm7f8d4FyaNPGzb5clzGG8+HfcjiqoYNY3lIv5EV5yzfBixOoiMgSVb mUrIy0f8pc7ub8B5OxP3P9TpPsIpX4FvM7d8VuacjpWS8SuAHW42tgFFh04aXNKn FtL6gwwgTUngsOHx4nYVBzRsQwlNABStTtqt49Xk6h+yFmUHxqJ6FKAFWe72qvN6 uB73mwc2QZspT9f3+8MMtBLI02b0cUeZSjZmAAAEab/drR+j5bROKG+n7AbjJrCx UrMNrC3F9slQ7J6nsSs9UftSGfJSMvF+jI+5px+PfQZR9GMTeGj9whRBPKDnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUbXbMe2igU+XT4C2W9Wz8c1LTXTAwHwYDVR0j BBgwFoAUr0otuJ40VVuGg9IYmWETIXexHIEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1cyY1NrUVF5cXNBZnVSNjY5NFZaRjJFQmQ3V1Boa0RNY3ZlRDN0ZHl6 ZmIvMC9BRjRBMkRCODlFMzQ1NTVCODY4M0QyMTg5OTYxMTMyMTc3QjExQzgxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNEEyREI4OUUzNDU1NUI4 NjgzRDIxODk5NjExMzIxNzdCMTFDODEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1cyY1NrUVF5cXNBZnVSNjY5NFZaRjJFQmQ3V1Boa0RNY3ZlRDN0ZHl6ZmIvMC9B RjRBMkRCODlFMzQ1NTVCODY4M0QyMTg5OTYxMTMyMTc3QjExQzgxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1ACEHh/pGH6NPoQxsXOi1Ts8N7/sE821ns0fxE0nlGFA/wnx7Wkzoy1E1186 Ln5kF7IEroWNAaHl0WBCCpxedIy5KLuZUp/hlofZexo1ZvD1HFNdI4EchBU/zAbW Y5xAW6O3QVLoRi1YPV4RZ6p1achS64PykcKBdGMxKGiCOvPFSSMLIBZXG2fapYhx kM2JmRsrNop6NAq0tXbtXOmdyAbm+pPrb9nScFAoR3qyKAUZaCLXOGaO9+Qcd5sN 357HN4RBUXjMNPfrlWjl6RTLfpromuNY+JJCLktUhP9p0UNRWgTqqCGLoAFaCG+z oSrtYdL5JBzSHhgX8eMr6QK9bg== -----END CERTIFICATE-----Generated at Wed Jul 2 20:17:21 2025 by rpki-client