$ rpki-client -vvf rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft File: 1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft (raw, json) Hash identifier: EUhhjMCGayMTvRYt/8KDfk+6TEOfYVbudpDzPtHjggI= Subject key identifier: 7A:F5:C1:66:4E:F4:8F:98:0E:93:76:8A:7B:30:05:E1:E7:6D:D4:93 Authority key identifier: 1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92 Certificate issuer: /CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92 Certificate serial: 71F10351C25B4CE14B9DD31C81D438613A77A670 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer Subject info access: rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft Manifest number: 024F Signing time: Tue 01 Jul 2025 20:35:38 +0000 Manifest this update: Tue 01 Jul 2025 20:30:38 +0000 Manifest next update: Wed 02 Jul 2025 23:57:38 +0000 Files and hashes: 1: 3230302e3231392e3134392e302f32342d3234203d3e20323634393731.roa (hash: CtlsUAFWjImlwZWNz6P/jVFD3JBP5hLeswnSXTvh7E4=) 2: 323830313a38303a313932303a3a2f34382d3438203d3e20323634393731.roa (hash: V4pr7EMRf7I7ElOQ2jaIag3WW0+6k23seAgpv3kqk1E=) 3: 1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl (hash: 59SJdltO+JW5EIaOyZinZMIBcWPAjBcr2yNrwYXXRzE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 21:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:f1:03:51:c2:5b:4c:e1:4b:9d:d3:1c:81:d4:38:61:3a:77:a6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD53BEC9766C0B4F811551E7385CE2E4D40FE92 Validity Not Before: Jul 1 20:30:38 2025 GMT Not After : Jul 2 23:57:38 2025 GMT Subject: CN=7AF5C1664EF48F980E93768A7B3005E1E76DD493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:67:d2:2c:da:be:be:c6:26:31:86:bb:04: 82:53:01:62:f0:19:5c:bd:4a:a6:21:b2:89:d4:1f: e4:af:cf:52:d1:43:e6:71:c2:fe:5f:43:68:f0:fb: 60:6b:45:4b:ff:ad:5e:22:dc:c5:50:6b:9a:58:e1: 79:9e:66:fd:92:64:70:a7:20:0f:31:0f:65:97:23: 19:05:dc:dd:66:61:64:ea:a1:62:49:a6:3a:7b:03: f8:d7:15:b1:66:cc:04:5e:a9:13:34:15:83:52:5e: 33:6a:38:a3:80:63:b0:a6:14:88:da:0c:61:d4:9a: 33:3e:05:8f:d4:f8:0f:a8:7a:37:de:2c:97:ab:52: b8:ba:d3:a3:ba:2f:9c:ad:c1:30:ad:51:ab:83:48: 27:bb:28:c0:d0:ce:81:14:71:db:b0:7c:20:a6:67: 31:3e:49:6b:41:e0:ad:e0:2e:44:25:7d:b6:c6:75: 16:f5:63:7e:0a:53:a6:5a:ce:ea:17:60:94:85:5c: 2e:3d:ef:07:94:d8:67:04:7a:09:5c:c9:83:c8:24: 1b:b5:b6:fc:8a:de:24:34:cd:d3:be:3b:d6:83:7b: 1a:89:08:52:cd:b7:01:98:c3:9e:70:56:6c:1c:92: 62:1c:b7:fa:dc:ce:4f:e4:48:2f:6d:34:ab:da:0b: af:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F5:C1:66:4E:F4:8F:98:0E:93:76:8A:7B:30:05:E1:E7:6D:D4:93 X509v3 Authority Key Identifier: keyid:1F:D5:3B:EC:97:66:C0:B4:F8:11:55:1E:73:85:CE:2E:4D:40:FE:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aiBaLPcPjrz9NHVhmEtyUa8MmznF41WFRxdWu4SYMYC/0/1FD53BEC9766C0B4F811551E7385CE2E4D40FE92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a7:d2:72:7d:2f:d6:5e:1a:7c:e4:0a:7b:ac:56:ce:a4:f9: 1f:ca:8e:e8:7a:04:e3:83:85:a5:29:5e:22:7b:6e:d0:3c:92: 24:e0:39:64:86:dc:f7:f2:8c:30:43:46:93:d3:26:34:6c:61: 04:da:ee:e9:43:ba:da:ea:85:f7:ba:2b:03:96:ee:4e:c8:35: 8a:cf:ae:cb:62:30:8e:06:6f:bd:98:d3:79:a2:36:45:4b:80: 9d:50:c5:32:1a:80:46:d1:6a:85:c5:e2:b1:3e:ff:8a:f4:74: 70:52:a6:ce:04:88:d0:79:30:ee:b6:90:21:5d:7a:ab:58:4d: c1:10:d3:c5:46:18:55:88:5d:cb:bc:be:41:b2:97:83:4d:3c: 13:de:99:68:78:0c:8d:1f:40:d5:5a:b6:03:d2:b7:e4:a6:3d: 73:e3:12:c3:11:e4:71:ba:30:2b:48:5d:ff:c5:3d:2c:ca:97: 9e:9f:c7:50:d6:2c:21:22:8d:1f:1b:ed:60:1b:f0:11:b6:13: 9e:7c:d2:e0:5a:aa:3d:92:45:34:e9:f1:50:69:9a:cc:90:84: 75:0c:1c:b3:49:4f:58:13:83:3b:bc:50:83:d4:3f:95:f1:b3: ab:50:a0:ab:b0:8b:a0:ca:40:a2:30:a0:07:18:86:31:c6:e7: 03:c7:ef:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcfEDUcJbTOFLndMcgdQ4YTp3pnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZENTNCRUM5NzY2QzBCNEY4MTE1NTFFNzM4NUNFMkU0 RDQwRkU5MjAeFw0yNTA3MDEyMDMwMzhaFw0yNTA3MDIyMzU3MzhaMDMxMTAvBgNV BAMTKDdBRjVDMTY2NEVGNDhGOTgwRTkzNzY4QTdCMzAwNUUxRTc2REQ0OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0WfSLNq+vsYmMYa7BIJTAWLw GVy9SqYhsonUH+Svz1LRQ+Zxwv5fQ2jw+2BrRUv/rV4i3MVQa5pY4XmeZv2SZHCn IA8xD2WXIxkF3N1mYWTqoWJJpjp7A/jXFbFmzAReqRM0FYNSXjNqOKOAY7CmFIja DGHUmjM+BY/U+A+oejfeLJerUri606O6L5ytwTCtUauDSCe7KMDQzoEUcduwfCCm ZzE+SWtB4K3gLkQlfbbGdRb1Y34KU6ZazuoXYJSFXC497weU2GcEeglcyYPIJBu1 tvyK3iQ0zdO+O9aDexqJCFLNtwGYw55wVmwckmIct/rczk/kSC9tNKvaC6/hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUevXBZk70j5gOk3aKezAF4edt1JMwHwYDVR0j BBgwFoAUH9U77JdmwLT4EVUec4XOLk1A/pIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGFpQmFMUGNQanJ6OU5IVmhtRXR5VWE4TW16bkY0MVdGUnhkV3U0U1lN WUMvMC8xRkQ1M0JFQzk3NjZDMEI0RjgxMTU1MUU3Mzg1Q0UyRTRENDBGRTkyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGRDUzQkVDOTc2NkMwQjRG ODExNTUxRTczODVDRTJFNEQ0MEZFOTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGFpQmFMUGNQanJ6OU5IVmhtRXR5VWE4TW16bkY0MVdGUnhkV3U0U1lNWUMvMC8x RkQ1M0JFQzk3NjZDMEI0RjgxMTU1MUU3Mzg1Q0UyRTRENDBGRTkyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ6fScn0v1l4afOQKe6xWzqT5H8qO6HoE44OFpSleIntu0DySJOA5ZIbc9/KM MENGk9MmNGxhBNru6UO62uqF97orA5buTsg1is+uy2IwjgZvvZjTeaI2RUuAnVDF MhqARtFqhcXisT7/ivR0cFKmzgSI0Hkw7raQIV16q1hNwRDTxUYYVYhdy7y+QbKX g008E96ZaHgMjR9A1Vq2A9K35KY9c+MSwxHkcbowK0hd/8U9LMqXnp/HUNYsISKN HxvtYBvwEbYTnnzS4FqqPZJFNOnxUGmazJCEdQwcs0lPWBODO7xQg9Q/lfGzq1Cg q7CLoMpAojCgBxiGMcbnA8fvdw== -----END CERTIFICATE-----Generated at Tue Jul 1 22:39:11 2025 by rpki-client