$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft File: AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft (raw, json) Hash identifier: YmcTC42ardnoiz54Qzny6AOzPZpQOK46ZuqNWVmK6Gg= Subject key identifier: 49:6D:61:B1:B3:45:72:F2:07:95:EC:2D:07:0C:DE:A6:DC:8C:4E:45 Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 Certificate issuer: /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Certificate serial: 6CBB6573039290A274312E4262BDDB228AD73013 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject info access: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft Manifest number: 025F Signing time: Thu 03 Jul 2025 00:40:00 +0000 Manifest this update: Thu 03 Jul 2025 00:35:00 +0000 Manifest next update: Fri 04 Jul 2025 01:33:00 +0000 Files and hashes: 1: 34352e3233362e3135362e302f32342d3234203d3e20323638323534.roa (hash: g+h7ZeJQoiwltb4pTrWxNjM0uMiKUgQuoMSR90spDQE=) 2: AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl (hash: 14O3+E+JRKvPN7bkknCsF6GPq5UlLgZEn0uIoYVIlA4=) 3: 34352e3233362e3135382e302f32342d3234203d3e20323638323534.roa (hash: JHU7hFLVcz7KCri5GGmgpJSrExwyJApMd1LcVi/3ahc=) 4: 34352e3233362e3135362e302f32322d3232203d3e20323638323534.roa (hash: XrgPqt2d+yXrgA5qVsA3hVOyOYJP6pNSPVOYcSw37As=) 5: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (hash: G+9fnKDKYzXcNVDiQbyVgNQLvfSyrAWnEylFjOb1cKM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Jul 2025 00:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:bb:65:73:03:92:90:a2:74:31:2e:42:62:bd:db:22:8a:d7:30:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021 Validity Not Before: Jul 3 00:35:00 2025 GMT Not After : Jul 4 01:33:00 2025 GMT Subject: CN=496D61B1B34572F20795EC2D070CDEA6DC8C4E45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:18:75:62:fc:f7:60:74:88:41:49:2c:cc:9a: a0:38:c9:b2:15:c9:6f:da:59:78:11:df:40:7b:63: 7d:82:d7:e9:63:db:c1:95:3c:75:59:e8:1f:ac:33: 1e:05:2e:f9:f1:33:0b:88:fd:16:25:48:84:6f:06: 46:13:8f:cb:cc:ca:12:66:93:70:be:8a:9b:b8:b7: 43:d5:71:35:d0:d0:3a:61:db:03:65:09:99:c8:8b: 0b:e1:2d:97:a8:8d:6e:39:27:10:fd:ac:2a:55:68: 4f:88:cd:01:b9:1e:ef:a0:8d:21:a7:cf:e0:80:0f: 21:77:22:9e:d8:29:87:2a:0f:42:88:96:b0:60:09: 28:8f:c9:c9:84:0d:7a:ad:85:c9:fb:ac:a9:fe:db: 6e:86:23:94:c6:a9:82:b2:63:1e:5d:3f:c6:55:2c: 3d:7d:4c:25:93:7a:2a:fe:61:2d:5d:d1:71:e6:47: 65:ed:30:02:94:e5:cf:e0:06:b4:d4:09:39:d9:fc: d7:42:5c:ba:95:2a:7d:03:72:3c:77:e8:03:3e:55: cd:3d:5e:62:25:8e:0d:ed:6e:82:a3:96:19:30:4f: 7d:ab:ac:f0:cf:72:85:e0:26:d4:97:fe:68:e7:e2: 5d:fc:89:ee:b9:b4:32:40:8c:c8:2b:48:1e:8d:49: 8a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6D:61:B1:B3:45:72:F2:07:95:EC:2D:07:0C:DE:A6:DC:8C:4E:45 X509v3 Authority Key Identifier: keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:43:db:67:f3:cc:23:c1:b9:0e:2a:53:03:16:c2:cc:9e:fc: 2a:17:a4:01:b6:22:e5:75:ac:ae:76:ca:41:4f:1b:db:e6:47: e5:7d:4d:51:2a:ae:ee:54:42:2a:49:50:da:19:3a:46:fc:a5: 7d:8d:39:2a:8f:aa:d4:24:f0:41:91:be:8c:fc:c6:75:9a:ff: 06:04:a2:a1:cf:12:13:20:b2:e9:b7:ed:29:65:42:51:a8:0e: 1c:a5:06:52:1a:4f:af:b7:22:62:27:89:87:a3:33:62:0b:cf: 5d:e8:90:62:3b:e8:cc:04:0d:46:76:10:79:1a:db:80:bf:fd: bb:34:71:1a:c2:fb:ac:e1:0d:22:bc:f4:f8:9d:f9:96:ab:6c: 5e:47:96:6e:1e:fc:07:18:0b:00:0b:c6:0b:ba:02:67:9f:fa: f5:90:f1:6a:fc:d2:b7:2d:a8:1c:93:62:32:3c:8a:9e:0a:a6: e6:ad:dd:eb:b5:59:fd:48:f3:9d:7c:18:ed:5f:51:7c:0a:29: ae:9a:ee:e0:29:4d:91:3d:dd:bb:84:04:b0:b3:da:43:1f:09: 08:66:8d:bf:28:a1:02:0b:2b:c6:65:01:82:46:3d:4b:b7:11: fb:5f:9e:0d:6c:ed:0f:69:dd:63:11:1d:e0:9b:96:9d:c5:0e: 99:70:f3:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbLtlcwOSkKJ0MS5CYr3bIorXMBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDNTI5RkIyNDNCNzc4MEEyMEIyN0EyQzRFNzNEQUY2 NUMyNTAyMTAeFw0yNTA3MDMwMDM1MDBaFw0yNTA3MDQwMTMzMDBaMDMxMTAvBgNV BAMTKDQ5NkQ2MUIxQjM0NTcyRjIwNzk1RUMyRDA3MENERUE2REM4QzRFNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuGHVi/PdgdIhBSSzMmqA4ybIV yW/aWXgR30B7Y32C1+lj28GVPHVZ6B+sMx4FLvnxMwuI/RYlSIRvBkYTj8vMyhJm k3C+ipu4t0PVcTXQ0Dph2wNlCZnIiwvhLZeojW45JxD9rCpVaE+IzQG5Hu+gjSGn z+CADyF3Ip7YKYcqD0KIlrBgCSiPycmEDXqthcn7rKn+226GI5TGqYKyYx5dP8ZV LD19TCWTeir+YS1d0XHmR2XtMAKU5c/gBrTUCTnZ/NdCXLqVKn0Dcjx36AM+Vc09 XmIljg3tboKjlhkwT32rrPDPcoXgJtSX/mjn4l38ie65tDJAjMgrSB6NSYrDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSW1hsbNFcvIHlewtBwzeptyMTkUwHwYDVR0j BBgwFoAUr8Up+yQ7d4CiCyeixOc9r2XCUCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQ UUIvMS9BRkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGQzUyOUZCMjQzQjc3ODBB MjBCMjdBMkM0RTczREFGNjVDMjUwMjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QTNodHpDelJQekxuWUY3cTl5eDdBZEJZM1lHTm9jUUR3aHo3RFdZWjJQUUIvMS9B RkM1MjlGQjI0M0I3NzgwQTIwQjI3QTJDNEU3M0RBRjY1QzI1MDIxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFUPbZ/PMI8G5DipTAxbCzJ78KhekAbYi5XWsrnbKQU8b2+ZH5X1NUSqu7lRC KklQ2hk6RvylfY05Ko+q1CTwQZG+jPzGdZr/BgSioc8SEyCy6bftKWVCUagOHKUG UhpPr7ciYieJh6MzYgvPXeiQYjvozAQNRnYQeRrbgL/9uzRxGsL7rOENIrz0+J35 lqtsXkeWbh78BxgLAAvGC7oCZ5/69ZDxavzSty2oHJNiMjyKngqm5q3d67VZ/Ujz nXwY7V9RfAoprpru4ClNkT3du4QEsLPaQx8JCGaNvyihAgsrxmUBgkY9S7cR+1+e DWztD2ndYxEd4JuWncUOmXDzTA== -----END CERTIFICATE-----Generated at Thu Jul 3 03:03:02 2025 by rpki-client