$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft File: F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft (raw, json) Hash identifier: x8pTKffsDntdd1h0vv9OebzOfOkYr0Sr+3FU4DPHXyY= Subject key identifier: F1:6B:E2:75:8D:C6:31:DD:23:2C:11:FC:16:87:C3:D0:60:DC:7A:B8 Authority key identifier: F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 Certificate issuer: /CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5 Certificate serial: 72A331E083C60BDC49D80CA98C3684C848B588DE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer Subject info access: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft Manifest number: 025E Signing time: Mon 30 Jun 2025 03:51:43 +0000 Manifest this update: Mon 30 Jun 2025 03:46:43 +0000 Manifest next update: Tue 01 Jul 2025 07:12:43 +0000 Files and hashes: 1: 3138362e3233332e31322e302f32322d3234203d3e20323633303833.roa (hash: rojlOjdeX3UrPuGCG6PrXeAls8xreKNh9ggg9OI9Em4=) 2: 323830313a62363a3a2f33322d3438203d3e20323633303833.roa (hash: /sq5AM8I6YaMflMxl5q4xXK1dCuBrTD/NmShXyjbG5M=) 3: 3137392e3130362e3139322e302f31382d3234203d3e20323633303833.roa (hash: fFcuOyny+lMAM8e0QThYzGDXjn34h9O3teYEKFUfcPs=) 4: F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl (hash: 1XEPaWVqBGRWz/VjxtcDWZZcMUwMwgi17XQh8QXSKJ0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 07:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a3:31:e0:83:c6:0b:dc:49:d8:0c:a9:8c:36:84:c8:48:b5:88:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5 Validity Not Before: Jun 30 03:46:43 2025 GMT Not After : Jul 1 07:12:43 2025 GMT Subject: CN=F16BE2758DC631DD232C11FC1687C3D060DC7AB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0e:1a:13:04:82:d7:6d:5b:2c:5d:1b:e7:4d: c6:5f:3f:81:cc:f9:90:cb:fb:0f:59:85:e6:32:d4: 1c:24:2b:e8:9f:db:2a:a3:50:3f:b7:af:b4:d7:a7: 37:ae:53:06:46:c8:ba:6f:d9:98:c1:4e:90:c3:98: 8c:ef:82:84:85:2a:0f:77:08:bc:5e:9d:c3:c1:4b: 51:75:2a:c4:27:d2:46:b1:8d:87:8b:82:3a:1e:20: 9f:2c:a9:66:45:ba:2b:86:f9:db:2e:0d:7a:ff:72: 9a:d7:5d:25:b0:e8:dc:1a:ff:f2:a1:8f:86:cc:7f: 1d:d8:14:7c:e1:5e:c5:12:4b:cf:d0:86:c9:8b:62: e5:34:8f:03:ab:e0:5f:bf:8d:71:29:be:2d:0f:49: 77:0b:0d:e9:bb:a3:f2:64:e6:27:e2:12:25:c6:ea: 74:ec:54:54:bc:d5:af:0d:46:8f:0d:4e:4a:89:fd: c9:25:d7:9d:52:8a:d0:8e:a6:ba:81:30:5c:db:55: 56:91:43:6f:31:72:b3:cc:59:c0:d2:3f:76:9f:c1: f6:63:40:12:85:5a:72:c4:b4:a8:68:f7:0f:e5:9f: 4d:a3:9c:21:f9:b2:ac:85:d5:f6:98:bd:e8:de:98: a7:7a:00:ce:b0:c8:60:6e:fe:bf:2f:0a:59:b4:2f: 9d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6B:E2:75:8D:C6:31:DD:23:2C:11:FC:16:87:C3:D0:60:DC:7A:B8 X509v3 Authority Key Identifier: keyid:F0:A9:8F:77:9D:3B:EF:65:95:96:B6:4B:32:B2:8E:B6:AF:E8:EA:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/1/F0A98F779D3BEF659596B64B32B28EB6AFE8EAB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:fe:c3:14:65:84:06:e9:43:a3:21:1d:60:a1:06:06:18:4b: 26:67:b2:1f:8a:80:95:c1:4a:1a:ad:a9:1c:d1:17:fd:b6:d3: 99:9e:62:66:38:97:9c:f0:ff:c0:a8:7f:0c:a3:48:0f:46:23: bf:3c:cb:34:f6:ff:7b:f3:21:62:44:7c:57:66:b9:14:be:e4: 8e:6e:b0:60:11:21:3c:47:f3:bd:c7:7e:c9:97:a6:78:88:ef: b5:44:f8:80:fd:c5:1e:99:23:f3:9e:22:f4:d1:c7:5a:00:6a: 5f:82:5b:c9:3d:4f:ae:4e:7d:4c:e8:2b:cf:4f:a6:a9:48:05: 2a:9f:ce:71:73:13:5e:25:70:ea:50:22:90:99:fc:cf:6a:87: c9:b1:d8:83:2e:33:ac:a5:43:5b:13:7e:89:2b:e6:c0:24:29: b4:45:8c:7e:01:1e:0d:45:e7:e4:b7:15:31:5f:29:23:a5:22: a1:dd:00:46:d2:7a:81:ec:e4:85:42:5b:10:55:4e:6f:bf:54: 89:4d:6b:e2:13:e1:f5:03:fd:09:af:e8:82:46:74:58:e2:48: 91:4f:23:b8:6d:bb:2f:c3:62:67:d2:18:c6:c6:1a:67:0d:45: 02:a4:06:59:13:74:39:1f:9d:62:a0:fb:5e:65:59:eb:aa:2d: a4:76:04:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcqMx4IPGC9xJ2AypjDaEyEi1iN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBOThGNzc5RDNCRUY2NTk1OTZCNjRCMzJCMjhFQjZB RkU4RUFCNTAeFw0yNTA2MzAwMzQ2NDNaFw0yNTA3MDEwNzEyNDNaMDMxMTAvBgNV BAMTKEYxNkJFMjc1OERDNjMxREQyMzJDMTFGQzE2ODdDM0QwNjBEQzdBQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUDhoTBILXbVssXRvnTcZfP4HM +ZDL+w9ZheYy1BwkK+if2yqjUD+3r7TXpzeuUwZGyLpv2ZjBTpDDmIzvgoSFKg93 CLxencPBS1F1KsQn0kaxjYeLgjoeIJ8sqWZFuiuG+dsuDXr/cprXXSWw6Nwa//Kh j4bMfx3YFHzhXsUSS8/QhsmLYuU0jwOr4F+/jXEpvi0PSXcLDem7o/Jk5ifiEiXG 6nTsVFS81a8NRo8NTkqJ/ckl151SitCOprqBMFzbVVaRQ28xcrPMWcDSP3afwfZj QBKFWnLEtKho9w/ln02jnCH5sqyF1faYvejemKd6AM6wyGBu/r8vClm0L51zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8WvidY3GMd0jLBH8FofD0GDcergwHwYDVR0j BBgwFoAU8KmPd50772WVlrZLMrKOtq/o6rUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE5uWjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRt OWIvMS9GMEE5OEY3NzlEM0JFRjY1OTU5NkI2NEIzMkIyOEVCNkFGRThFQUI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwQTk4Rjc3OUQzQkVGNjU5 NTk2QjY0QjMyQjI4RUI2QUZFOEVBQjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE5uWjgyYTJrSnZiOWZ3YUhnakpWb29iTVY3V25YSzlIRDRzUHgxUlRtOWIvMS9G MEE5OEY3NzlEM0JFRjY1OTU5NkI2NEIzMkIyOEVCNkFGRThFQUI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf/7DFGWEBulDoyEdYKEGBhhLJmeyH4qAlcFKGq2pHNEX/bbTmZ5iZjiXnPD/ wKh/DKNID0YjvzzLNPb/e/MhYkR8V2a5FL7kjm6wYBEhPEfzvcd+yZemeIjvtUT4 gP3FHpkj854i9NHHWgBqX4JbyT1Prk59TOgrz0+mqUgFKp/OcXMTXiVw6lAikJn8 z2qHybHYgy4zrKVDWxN+iSvmwCQptEWMfgEeDUXn5LcVMV8pI6Uiod0ARtJ6gezk hUJbEFVOb79UiU1r4hPh9QP9Ca/ogkZ0WOJIkU8juG27L8NiZ9IYxsYaZw1FAqQG WRN0OR+dYqD7XmVZ66otpHYE3Q== -----END CERTIFICATE-----Generated at Mon Jun 30 10:46:03 2025 by rpki-client