$ rpki-client -vvf rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft File: 9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft (raw, json) Hash identifier: mXN+g77rbZDp1HRYIeOSzo716z+RSd0GT62pcgzAsxM= Subject key identifier: 1B:EA:2B:3C:C5:23:FF:D2:7A:DC:85:F1:99:BE:03:A6:CA:8A:E6:7B Authority key identifier: 9B:CF:53:52:E2:C8:A4:37:59:7F:AB:4E:62:75:E8:61:F7:E4:2F:01 Certificate issuer: /CN=9BCF5352E2C8A437597FAB4E6275E861F7E42F01 Certificate serial: 5BB0702CD5ECEFFF3DA4F5987F7D625F155785D2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.cer Subject info access: rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft Manifest number: 27 Signing time: Tue 01 Jul 2025 13:59:01 +0000 Manifest this update: Tue 01 Jul 2025 13:54:01 +0000 Manifest next update: Wed 02 Jul 2025 14:24:01 +0000 Files and hashes: 1: 9BCF5352E2C8A437597FAB4E6275E861F7E42F01.crl (hash: +JdqCXFJDda3XLNpeKxHlkytzerKy5l7Q7JmdkuGw58=) 2: 3139322e3233312e3137352e302f32342d3234203d3e20323731323937.roa (hash: RvjBWTTGSRQhFYPFHIcADDXN+HPlEAjpyTfgUWjt4MY=) 3: 34352e3232392e3133362e302f32342d3234203d3e20323731323937.roa (hash: +o5sIScdM46kmAqqS9GWVWLK1tGhtWhWXgceQVZIZ0s=) 4: 323830343a373934633a3a2f33322d3332203d3e20323731323937.roa (hash: EPgT0uqHRP14e2Ydws+qdNEZrTAIh7Vm9BAP/DL1mMo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.crl rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 14:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b0:70:2c:d5:ec:ef:ff:3d:a4:f5:98:7f:7d:62:5f:15:57:85:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BCF5352E2C8A437597FAB4E6275E861F7E42F01 Validity Not Before: Jul 1 13:54:01 2025 GMT Not After : Jul 2 14:24:01 2025 GMT Subject: CN=1BEA2B3CC523FFD27ADC85F199BE03A6CA8AE67B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ba:b0:fc:56:b9:9a:17:6e:76:2a:cd:10:7e: ea:e9:5d:04:6e:fc:45:b9:b5:60:24:23:8b:2d:56: 93:f2:53:ed:56:20:af:92:24:91:e1:14:cc:ac:77: af:ba:4d:3b:1a:af:f6:a4:49:84:a8:81:b7:81:0b: 56:65:2f:bb:07:ec:6c:f0:b0:12:e9:83:56:3a:13: d1:61:a9:13:40:d2:02:ff:cc:ef:d1:1b:37:7a:ac: 1d:36:fb:cb:51:e8:3f:5a:ee:42:0d:c5:e4:d2:ac: bb:4a:b5:e4:18:3b:2c:ab:7e:54:f1:4f:0e:cc:63: d9:64:e2:88:66:35:c5:bf:33:0b:3e:2c:5a:95:04: 00:40:2c:e3:d4:16:d8:91:49:2e:ac:22:c7:54:ad: f1:70:0b:9b:73:ef:c4:00:c2:21:2d:91:d8:03:cf: fb:d9:f7:f9:3f:12:90:22:ee:72:cb:95:4f:0c:fc: 33:9e:68:d1:e2:6b:b3:14:85:fb:15:08:25:1a:a5: f2:6b:d4:a2:7c:a6:a1:9b:e5:b8:5b:42:6c:9f:48: 29:53:e8:70:d5:36:a6:06:01:81:48:a3:78:6a:54: 1b:05:fb:b0:24:33:71:92:14:a1:cd:fe:8b:a1:58: 0b:e1:10:a3:e7:16:7f:9a:2d:45:ab:45:41:ac:2e: 3f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EA:2B:3C:C5:23:FF:D2:7A:DC:85:F1:99:BE:03:A6:CA:8A:E6:7B X509v3 Authority Key Identifier: keyid:9B:CF:53:52:E2:C8:A4:37:59:7F:AB:4E:62:75:E8:61:F7:E4:2F:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/9BCF5352E2C8A437597FAB4E6275E861F7E42F01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:bb:fc:aa:ea:fe:4d:02:a8:84:08:b2:bf:0d:ff:57:15:dc: 08:19:52:c7:de:06:84:c6:b7:0b:51:54:df:db:3c:5d:38:6f: 18:90:5f:29:a6:91:f5:4e:ae:5e:9c:3d:31:34:9c:dd:5e:5c: cc:21:b1:11:fe:7c:8b:ab:fe:03:f9:19:22:54:b1:44:5c:ac: 4a:36:d7:70:d2:c4:ed:07:7e:36:c4:c2:4f:ab:d4:e0:2d:ff: 03:4f:b6:e4:81:4b:49:c6:75:3b:a5:cf:a2:93:8f:b5:77:2c: 58:73:7a:ca:5b:06:1e:7d:ac:21:aa:b8:70:24:5e:72:a9:6c: 9f:33:a0:23:c1:87:e6:60:f2:01:bd:f1:ea:71:07:f4:e5:c1: 79:6c:b5:6b:ef:9c:5d:5d:0a:c1:8f:37:3d:14:e6:34:7f:d0: 4e:6d:77:3a:8d:19:d7:55:08:d9:19:e5:14:9d:dc:c0:02:62: a6:03:db:80:53:e5:ec:fe:f4:11:ed:46:fa:86:99:54:c5:3c: 3b:7a:bc:c1:18:d7:21:f7:e3:6e:6c:54:8f:a3:7e:3d:30:5c: e6:a5:11:aa:71:5d:90:65:f9:3e:ce:50:e1:41:58:e4:49:5d: 9c:b9:2f:bb:ad:ec:36:29:83:56:52:06:c6:5d:6c:19:17:57: 09:ab:e6:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUW7BwLNXs7/89pPWYf31iXxVXhdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJDRjUzNTJFMkM4QTQzNzU5N0ZBQjRFNjI3NUU4NjFG N0U0MkYwMTAeFw0yNTA3MDExMzU0MDFaFw0yNTA3MDIxNDI0MDFaMDMxMTAvBgNV BAMTKDFCRUEyQjNDQzUyM0ZGRDI3QURDODVGMTk5QkUwM0E2Q0E4QUU2N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChurD8VrmaF252Ks0QfurpXQRu /EW5tWAkI4stVpPyU+1WIK+SJJHhFMysd6+6TTsar/akSYSogbeBC1ZlL7sH7Gzw sBLpg1Y6E9FhqRNA0gL/zO/RGzd6rB02+8tR6D9a7kINxeTSrLtKteQYOyyrflTx Tw7MY9lk4ohmNcW/Mws+LFqVBABALOPUFtiRSS6sIsdUrfFwC5tz78QAwiEtkdgD z/vZ9/k/EpAi7nLLlU8M/DOeaNHia7MUhfsVCCUapfJr1KJ8pqGb5bhbQmyfSClT 6HDVNqYGAYFIo3hqVBsF+7AkM3GSFKHN/ouhWAvhEKPnFn+aLUWrRUGsLj+TAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUG+orPMUj/9J63IXxmb4DpsqK5nswHwYDVR0j BBgwFoAUm89TUuLIpDdZf6tOYnXoYffkLwEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN01aRWltbmFTNTlFMmVBdzhoNG9YS2VocjVDWW1tTXRIWGtuMW91QXRo ZFEvMC85QkNGNTM1MkUyQzhBNDM3NTk3RkFCNEU2Mjc1RTg2MUY3RTQyRjAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCQ0Y1MzUyRTJDOEE0Mzc1 OTdGQUI0RTYyNzVFODYxRjdFNDJGMDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N01aRWltbmFTNTlFMmVBdzhoNG9YS2VocjVDWW1tTXRIWGtuMW91QXRoZFEvMC85 QkNGNTM1MkUyQzhBNDM3NTk3RkFCNEU2Mjc1RTg2MUY3RTQyRjAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXbv8qur+TQKohAiyvw3/VxXcCBlSx94GhMa3C1FU39s8XThvGJBfKaaR9U6u Xpw9MTSc3V5czCGxEf58i6v+A/kZIlSxRFysSjbXcNLE7Qd+NsTCT6vU4C3/A0+2 5IFLScZ1O6XPopOPtXcsWHN6ylsGHn2sIaq4cCRecqlsnzOgI8GH5mDyAb3x6nEH 9OXBeWy1a++cXV0KwY83PRTmNH/QTm13Oo0Z11UI2RnlFJ3cwAJipgPbgFPl7P70 Ee1G+oaZVMU8O3q8wRjXIffjbmxUj6N+PTBc5qURqnFdkGX5Ps5Q4UFY5EldnLkv u63sNimDVlIGxl1sGRdXCavm+w== -----END CERTIFICATE-----Generated at Wed Jul 2 02:10:50 2025 by rpki-client