$ rpki-client -vvf rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.mft File: 70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.mft (raw, json) Hash identifier: YGRIgSjzNhqfMbPblbKCk1EfGMo6FPFiTokOfrOzHq8= Subject key identifier: 62:9D:BA:E0:88:F5:F2:95:7A:8B:64:83:A4:0F:F0:8D:41:60:D8:26 Authority key identifier: 70:EF:5E:1A:EE:B9:FF:8D:5F:AF:7F:72:DD:2B:B9:0C:BE:10:93:45 Certificate issuer: /CN=70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345 Certificate serial: 2E2244A88F01503B3883008B42004CA30396B1A3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.cer Subject info access: rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.mft Manifest number: BD Signing time: Tue 01 Jul 2025 11:50:07 +0000 Manifest this update: Tue 01 Jul 2025 11:45:07 +0000 Manifest next update: Wed 02 Jul 2025 12:51:07 +0000 Files and hashes: 1: 3139322e3134312e37362e302f32322d3232203d3e20323637343731.roa (hash: 31GYOHVEb3h1/buaA/2oWZzLdgJpBqjQU0DB29OrJv4=) 2: 323830343a343230303a3a2f33322d3332203d3e20323637343731.roa (hash: 6S+0R47GzCMBrBMBQOI4dDSt/Rq/13LxRdIrP4yVxMY=) 3: 70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.crl (hash: 0z2ehLRmv/5VAebSsLzWTMAt71iqqCwbmaFK/XJOyrs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.crl rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 12:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:22:44:a8:8f:01:50:3b:38:83:00:8b:42:00:4c:a3:03:96:b1:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345 Validity Not Before: Jul 1 11:45:07 2025 GMT Not After : Jul 2 12:51:07 2025 GMT Subject: CN=629DBAE088F5F2957A8B6483A40FF08D4160D826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d3:8e:d6:29:96:d8:c7:a8:b8:ad:98:0e:6b: 3b:b2:8e:a2:bf:13:6b:90:cc:88:1b:79:21:e2:20: 76:b4:6a:8e:fb:08:f2:41:c4:3e:09:cd:ca:54:31: 95:5f:03:9d:b1:a2:db:7c:c3:74:f4:be:36:4d:20: 72:0f:68:6d:da:f0:45:96:06:f9:e5:5a:c9:95:f0: fd:57:bc:60:6d:01:62:a5:f2:5c:76:d6:97:ac:8a: ad:2c:da:98:1e:51:ef:9e:a9:cf:02:eb:25:bb:e3: d5:42:2d:07:74:03:99:af:c5:ed:33:ea:3a:0d:c2: 4b:f0:83:7e:ad:67:6d:67:f0:27:c2:3d:c2:16:f7: 61:39:da:b0:f2:98:41:b0:fe:78:67:c8:75:27:62: 93:4b:5e:09:41:7d:9f:21:46:d1:f0:2a:84:9a:0b: c2:7c:2a:a6:1f:ca:e5:1a:ec:aa:5a:c7:17:c9:85: 1f:cf:45:c9:c6:bf:63:21:6b:65:9f:cf:92:b0:39: 56:77:cd:15:c8:7c:f7:d3:fc:93:d6:6a:cb:4e:0a: 33:ea:a3:01:2b:14:59:d1:2a:bc:5a:ae:c6:01:6d: 79:3f:6b:bc:6f:59:19:c6:38:43:50:e6:cd:ad:71: d9:c4:fa:75:19:df:61:88:9f:52:1f:0b:50:4f:f7: 2a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9D:BA:E0:88:F5:F2:95:7A:8B:64:83:A4:0F:F0:8D:41:60:D8:26 X509v3 Authority Key Identifier: keyid:70:EF:5E:1A:EE:B9:FF:8D:5F:AF:7F:72:DD:2B:B9:0C:BE:10:93:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:54:62:e2:b1:0f:43:8c:7d:ab:2d:c2:cd:cd:ba:25:a5:19: eb:a7:c6:d2:f9:f5:1b:73:1d:7e:6a:79:62:fd:70:6e:82:f2: b6:e4:96:ca:5e:47:fc:78:ea:fd:3f:22:31:4a:bd:27:77:b2: 79:0e:f4:04:59:33:56:df:1b:d7:f5:82:1c:37:40:35:9a:b9: bb:cd:63:b5:67:99:bd:e0:d5:7d:90:66:d4:fb:8c:a7:65:a1: 25:ff:8c:d4:1c:1a:92:9a:91:dc:6f:2c:3b:7a:30:95:f1:ff: 0d:a4:0f:1f:e3:7b:b4:6c:70:8b:9b:56:45:28:5a:aa:0c:1b: 9d:d7:80:6f:fd:29:51:e6:ac:75:d8:42:5c:37:88:2d:82:b4: 6b:86:88:17:d6:04:e9:10:54:e6:d0:ca:1b:65:f2:89:c1:e6: 1f:15:1f:09:be:6b:cd:5e:c9:23:50:20:ed:b0:5c:49:4e:79: 54:23:2a:b1:2f:21:af:54:f6:94:4d:65:3a:0d:13:2e:ce:12: 7d:6f:4f:56:55:31:78:1e:90:10:fb:46:4f:80:62:de:40:53: c0:d8:fb:d8:fd:18:d0:6c:52:e7:c4:03:77:54:39:33:99:d9: 47:a1:27:d7:3d:98:3f:cf:85:49:e4:0e:85:4b:4f:27:dd:7f: b9:79:c6:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULiJEqI8BUDs4gwCLQgBMowOWsaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBFRjVFMUFFRUI5RkY4RDVGQUY3RjcyREQyQkI5MENC RTEwOTM0NTAeFw0yNTA3MDExMTQ1MDdaFw0yNTA3MDIxMjUxMDdaMDMxMTAvBgNV BAMTKDYyOURCQUUwODhGNUYyOTU3QThCNjQ4M0E0MEZGMDhENDE2MEQ4MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6047WKZbYx6i4rZgOazuyjqK/ E2uQzIgbeSHiIHa0ao77CPJBxD4JzcpUMZVfA52xott8w3T0vjZNIHIPaG3a8EWW BvnlWsmV8P1XvGBtAWKl8lx21pesiq0s2pgeUe+eqc8C6yW749VCLQd0A5mvxe0z 6joNwkvwg36tZ21n8CfCPcIW92E52rDymEGw/nhnyHUnYpNLXglBfZ8hRtHwKoSa C8J8KqYfyuUa7KpaxxfJhR/PRcnGv2Mha2Wfz5KwOVZ3zRXIfPfT/JPWastOCjPq owErFFnRKrxarsYBbXk/a7xvWRnGOENQ5s2tcdnE+nUZ32GIn1IfC1BP9yoBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYp264Ij18pV6i2SDpA/wjUFg2CYwHwYDVR0j BBgwFoAUcO9eGu65/41fr39y3Su5DL4Qk0UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1lTYmRnMmRmVTl6S3FmbnN4U3BpYzhuRHB5RmJBN3R6N2VVRDhmUzV4 RHAvMC83MEVGNUUxQUVFQjlGRjhENUZBRjdGNzJERDJCQjkwQ0JFMTA5MzQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwRUY1RTFBRUVCOUZGOEQ1 RkFGN0Y3MkREMkJCOTBDQkUxMDkzNDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1lTYmRnMmRmVTl6S3FmbnN4U3BpYzhuRHB5RmJBN3R6N2VVRDhmUzV4RHAvMC83 MEVGNUUxQUVFQjlGRjhENUZBRjdGNzJERDJCQjkwQ0JFMTA5MzQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO1Ri4rEPQ4x9qy3Czc26JaUZ66fG0vn1G3Mdfmp5Yv1wboLytuSWyl5H/Hjq /T8iMUq9J3eyeQ70BFkzVt8b1/WCHDdANZq5u81jtWeZveDVfZBm1PuMp2WhJf+M 1BwakpqR3G8sO3owlfH/DaQPH+N7tGxwi5tWRShaqgwbndeAb/0pUeasddhCXDeI LYK0a4aIF9YE6RBU5tDKG2XyicHmHxUfCb5rzV7JI1Ag7bBcSU55VCMqsS8hr1T2 lE1lOg0TLs4SfW9PVlUxeB6QEPtGT4Bi3kBTwNj72P0Y0GxS58QDd1Q5M5nZR6En 1z2YP8+FSeQOhUtPJ91/uXnGKA== -----END CERTIFICATE-----Generated at Tue Jul 1 14:07:09 2025 by rpki-client