$ rpki-client -vvf rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26.mft File: E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26.mft (raw, json) Hash identifier: hAz4sIF2ae0uQ7wfdal6ECLM/biB4s0wFmYIFtdRmdI= Subject key identifier: 1B:10:C9:F4:F9:A1:43:24:20:FE:D9:BD:22:8A:1A:66:74:AE:29:87 Authority key identifier: E6:58:FE:87:DF:0E:C0:5F:B5:A0:C9:01:1B:63:72:F3:B3:FB:FA:26 Certificate issuer: /CN=E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26 Certificate serial: 41F4271CF0B9C387D499BC0EB9F808CC985D0FB9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26.cer Subject info access: rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26.mft Manifest number: D2 Signing time: Wed 02 Jul 2025 14:43:25 +0000 Manifest this update: Wed 02 Jul 2025 14:38:25 +0000 Manifest next update: Thu 03 Jul 2025 16:18:25 +0000 Files and hashes: 1: 323830343a323463343a3a2f33322d313238203d3e20323634323431.roa (hash: X7L6S/iz47JYN92bJbRqOMlahKYPpbV1cDTZ4ZDuE78=) 2: 3133382e3131382e342e302f32322d3332203d3e20323634323431.roa (hash: wvj0lQXQrLaJ2zioQChOt62o6/9qJUJLisJe29Wp5VA=) 3: E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26.crl (hash: 1beaPgaGDTX+5DXTOOeUx1gkxNp7amPRspVrd9SgHEs=) 4: 3136382e3139362e382e302f32322d3332203d3e20323634323431.roa (hash: NyQJYTfA3Ss9W6QpZdkzFM/bQPVUmkdvotUyoEq6dZc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26.crl rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 16:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f4:27:1c:f0:b9:c3:87:d4:99:bc:0e:b9:f8:08:cc:98:5d:0f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26 Validity Not Before: Jul 2 14:38:25 2025 GMT Not After : Jul 3 16:18:25 2025 GMT Subject: CN=1B10C9F4F9A1432420FED9BD228A1A6674AE2987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0e:ee:db:0e:71:3c:0d:53:b8:b0:49:0c:f2: 84:0d:a0:08:2b:31:cc:dc:44:e4:98:ca:5a:59:c2: 4b:a5:45:e9:bd:62:ea:2d:1b:38:bf:6e:b9:a6:c9: 47:5e:00:f0:c0:81:28:9c:f7:1d:15:19:55:c6:cc: 3c:1b:7f:ae:6b:06:d6:04:0f:36:fc:8e:a7:5d:44: 91:97:4f:43:0f:02:e7:c0:19:9b:5b:b4:43:5a:73: 8d:76:21:fd:43:41:02:2b:3b:8c:31:b1:e9:f0:77: 9e:c9:9d:8d:85:b0:93:7f:7b:c3:7e:41:fc:1d:1f: 04:82:85:39:52:29:13:40:b5:fa:a0:ff:c0:6a:19: 16:6d:09:c1:66:8c:3e:42:70:33:92:41:3f:68:2a: 73:16:44:9b:66:7d:54:e1:c7:f9:c2:ff:f0:ad:9d: 5a:6c:49:cb:a8:9f:06:3b:8d:ca:40:08:c5:e0:53: 34:22:03:e5:da:0f:72:91:e6:24:f8:97:5a:37:02: ac:6f:d9:12:a6:00:95:56:eb:05:97:e5:54:89:54: 34:39:a5:71:c3:67:7d:48:b5:6a:61:8f:82:5e:fc: f7:ee:47:34:3c:e2:9d:4d:fb:23:06:dc:fd:d3:42: 09:63:c4:e5:5c:d2:8b:38:ba:13:14:1e:93:8a:e3: 60:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:10:C9:F4:F9:A1:43:24:20:FE:D9:BD:22:8A:1A:66:74:AE:29:87 X509v3 Authority Key Identifier: keyid:E6:58:FE:87:DF:0E:C0:5F:B5:A0:C9:01:1B:63:72:F3:B3:FB:FA:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/E658FE87DF0EC05FB5A0C9011B6372F3B3FBFA26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:67:2a:e4:c4:c8:70:84:13:22:ed:de:79:bc:9f:d5:60:ff: 9f:d6:d0:13:4a:96:ac:d8:e9:f5:d2:8d:85:57:46:0a:d2:cf: b8:fe:8c:76:79:ce:11:66:85:90:41:2a:ff:70:b3:a3:0d:14: 20:c3:d4:77:07:9b:34:7f:76:72:1b:c5:b6:9e:2a:28:d2:8f: b2:72:f1:d0:2e:89:0f:a1:d1:6b:97:22:04:97:74:50:f3:64: 7e:2e:aa:56:1c:c6:73:a3:28:d9:ec:99:8e:63:b7:e0:da:22: c0:1f:b7:ec:c1:ba:26:04:af:1a:a7:cb:b7:c6:84:91:00:e4: f6:1b:97:18:7f:54:14:90:52:f1:93:e8:d1:75:d7:83:83:c8: 41:81:b7:48:30:4b:f0:27:8d:09:c2:4d:c7:10:5a:84:d8:57: c9:73:fd:1a:95:7f:a9:49:14:51:a6:8d:a3:75:da:62:31:d0: d1:30:53:56:72:66:f6:fb:ca:7e:d7:98:67:97:29:c2:76:05: 94:ac:fd:1b:03:a5:0c:4c:9d:e3:a3:38:23:7d:af:96:70:f9: 8e:7c:73:a2:ab:2f:84:78:b2:ed:27:9c:62:31:50:b5:8d:73: ad:d0:22:f0:eb:27:fc:20:b8:b7:8d:db:c1:04:e9:48:65:20: 05:20:6f:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQfQnHPC5w4fUmbwOufgIzJhdD7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTY1OEZFODdERjBFQzA1RkI1QTBDOTAxMUI2MzcyRjNC M0ZCRkEyNjAeFw0yNTA3MDIxNDM4MjVaFw0yNTA3MDMxNjE4MjVaMDMxMTAvBgNV BAMTKDFCMTBDOUY0RjlBMTQzMjQyMEZFRDlCRDIyOEExQTY2NzRBRTI5ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKDu7bDnE8DVO4sEkM8oQNoAgr MczcROSYylpZwkulRem9YuotGzi/brmmyUdeAPDAgSic9x0VGVXGzDwbf65rBtYE Dzb8jqddRJGXT0MPAufAGZtbtENac412If1DQQIrO4wxsenwd57JnY2FsJN/e8N+ QfwdHwSChTlSKRNAtfqg/8BqGRZtCcFmjD5CcDOSQT9oKnMWRJtmfVThx/nC//Ct nVpsScuonwY7jcpACMXgUzQiA+XaD3KR5iT4l1o3Aqxv2RKmAJVW6wWX5VSJVDQ5 pXHDZ31ItWphj4Je/PfuRzQ84p1N+yMG3P3TQgljxOVc0os4uhMUHpOK42D7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGxDJ9PmhQyQg/tm9IooaZnSuKYcwHwYDVR0j BBgwFoAU5lj+h98OwF+1oMkBG2Ny87P7+iYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN0E0UDYzYjkyUkJHVmNrRXQ5eE16UmVZWEdtSlN1V0NSSnVGck5uSHdv MzcvMC9FNjU4RkU4N0RGMEVDMDVGQjVBMEM5MDExQjYzNzJGM0IzRkJGQTI2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2NThGRTg3REYwRUMwNUZC NUEwQzkwMTFCNjM3MkYzQjNGQkZBMjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N0E0UDYzYjkyUkJHVmNrRXQ5eE16UmVZWEdtSlN1V0NSSnVGck5uSHdvMzcvMC9F NjU4RkU4N0RGMEVDMDVGQjVBMEM5MDExQjYzNzJGM0IzRkJGQTI2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfGcq5MTIcIQTIu3eebyf1WD/n9bQE0qWrNjp9dKNhVdGCtLPuP6MdnnOEWaF kEEq/3Czow0UIMPUdwebNH92chvFtp4qKNKPsnLx0C6JD6HRa5ciBJd0UPNkfi6q VhzGc6Mo2eyZjmO34NoiwB+37MG6JgSvGqfLt8aEkQDk9huXGH9UFJBS8ZPo0XXX g4PIQYG3SDBL8CeNCcJNxxBahNhXyXP9GpV/qUkUUaaNo3XaYjHQ0TBTVnJm9vvK fteYZ5cpwnYFlKz9GwOlDEyd46M4I32vlnD5jnxzoqsvhHiy7SecYjFQtY1zrdAi 8Osn/CC4t43bwQTpSGUgBSBvDg== -----END CERTIFICATE-----Generated at Thu Jul 3 00:28:13 2025 by rpki-client