$ rpki-client -vvf rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft File: 9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft (raw, json) Hash identifier: asxsEq1P068JWQvVnWLywrN9ZsOWNaY1e2f1E9BRVeM= Subject key identifier: B4:C0:97:62:7F:AB:D5:46:33:16:3F:24:55:C1:C8:31:48:24:E2:6C Authority key identifier: 99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87 Certificate issuer: /CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87 Certificate serial: 5093BD31918CE931DA93C8F7D5E896471B91534B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer Subject info access: rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft Manifest number: 0248 Signing time: Mon 30 Jun 2025 10:55:28 +0000 Manifest this update: Mon 30 Jun 2025 10:50:28 +0000 Manifest next update: Tue 01 Jul 2025 12:09:28 +0000 Files and hashes: 1: 323830343a346566303a3a2f33322d3336203d3e20323638323932.roa (hash: JzJsy650SSsFhDpBxyHj9SfH3TNilDwlyqAwmdmbW/o=) 2: 34352e3233372e342e302f32322d3234203d3e20323638323932.roa (hash: YOvdKqb793ktG+K4voH6fVWuWoEYneOJkNY8DmbE57k=) 3: 9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl (hash: uqW5Ntm83qb63xJYxreesc9LQTkeuwUHRtDLoPvfw2o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 12:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:93:bd:31:91:8c:e9:31:da:93:c8:f7:d5:e8:96:47:1b:91:53:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87 Validity Not Before: Jun 30 10:50:28 2025 GMT Not After : Jul 1 12:09:28 2025 GMT Subject: CN=B4C097627FABD54633163F2455C1C8314824E26C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:43:8d:cb:a7:78:79:7a:84:8a:d5:87:0a:da: f5:a9:01:eb:7f:2d:23:5f:b4:1d:b3:57:0b:59:17: 8d:6c:a2:07:1d:23:c2:e9:b2:b6:4b:c1:18:8e:92: 6e:12:13:5d:a8:22:0d:71:9c:1c:5b:fc:c3:f2:60: ec:fa:4d:0e:39:d3:3d:1e:5f:f1:d6:97:00:56:fd: 73:c5:49:5b:e7:9d:9c:c5:f4:8c:6c:38:f8:99:e7: 44:fc:42:85:fc:aa:18:48:c4:f9:9a:4b:a3:30:a0: 7c:02:80:51:c2:61:b3:2d:7d:eb:7b:69:ed:55:ff: 7b:85:26:30:98:e3:b3:ef:5d:f4:03:f2:4b:b3:7b: 1b:76:96:d7:53:b4:c6:96:27:3c:85:15:94:05:46: ac:51:1a:c8:f5:25:ff:89:a0:3b:02:e2:f1:01:95: 77:10:81:2c:88:21:5d:fe:fd:2f:63:bf:7a:92:5d: b2:2d:46:ff:30:a2:4c:cb:36:a3:0f:69:d0:8a:49: 91:0f:d4:b8:66:cf:03:3c:90:4f:be:d9:c7:02:76: 1f:ba:e2:0c:31:1c:fe:bf:5a:0a:cd:89:9e:72:16: b7:9f:c7:8d:3f:e7:39:81:da:cd:99:ae:99:c2:a3: 52:b6:a8:f3:0d:23:82:be:a7:5d:20:9c:a8:2f:4e: d3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C0:97:62:7F:AB:D5:46:33:16:3F:24:55:C1:C8:31:48:24:E2:6C X509v3 Authority Key Identifier: keyid:99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:26:78:a2:f3:95:05:d6:f8:f0:67:b7:00:87:22:2d:08:a2: 7b:62:15:60:db:13:fa:34:59:89:d2:1d:b1:6c:bf:e0:f8:f0: 3e:fa:11:9b:52:39:0b:52:73:57:81:3b:4e:b8:34:b8:01:ac: 97:d9:c1:7a:f4:a4:12:c7:22:d6:8f:ec:f6:5a:16:17:73:94: 31:c6:09:3d:cd:df:cf:25:f3:1d:0a:b3:de:18:a1:15:b9:89: 8a:c8:3a:b3:60:08:79:66:27:58:c9:3a:ed:7d:ac:b5:d3:b1: bd:f1:a2:f0:7b:1a:8a:cb:5d:62:2f:ca:86:e1:98:4b:ce:d1: e0:db:09:05:ee:0d:d3:13:5e:f7:3c:a6:1e:4b:17:bd:b5:55: 5f:e9:9e:e0:c2:36:7f:a5:0d:24:41:d3:dc:1c:48:ab:3f:0f: 87:c5:27:09:a7:a0:5a:66:af:c5:8e:58:d8:77:11:35:27:58: 6f:43:1e:25:5e:32:db:64:2a:5f:ad:b5:a4:e0:94:17:03:2a: 52:d1:cf:4f:31:0d:26:e8:71:8d:2c:ae:4c:a6:53:27:fa:08: a1:16:d7:2a:97:1f:d0:b3:aa:67:cd:b6:6c:a6:f7:42:bc:09: 69:31:78:95:76:33:47:93:8a:3f:a7:9c:c0:b7:cf:9e:b9:ba: 0e:16:9b:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUJO9MZGM6THak8j31eiWRxuRU0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk2NUIxRTI5MzFDOTRDREEwM0NCNjNFRjNBNkNBRTMz QkMxNUU4NzAeFw0yNTA2MzAxMDUwMjhaFw0yNTA3MDExMjA5MjhaMDMxMTAvBgNV BAMTKEI0QzA5NzYyN0ZBQkQ1NDYzMzE2M0YyNDU1QzFDODMxNDgyNEUyNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDQ43Lp3h5eoSK1YcK2vWpAet/ LSNftB2zVwtZF41sogcdI8LpsrZLwRiOkm4SE12oIg1xnBxb/MPyYOz6TQ450z0e X/HWlwBW/XPFSVvnnZzF9IxsOPiZ50T8QoX8qhhIxPmaS6MwoHwCgFHCYbMtfet7 ae1V/3uFJjCY47PvXfQD8kuzext2ltdTtMaWJzyFFZQFRqxRGsj1Jf+JoDsC4vEB lXcQgSyIIV3+/S9jv3qSXbItRv8wokzLNqMPadCKSZEP1LhmzwM8kE++2ccCdh+6 4gwxHP6/WgrNiZ5yFrefx40/5zmB2s2ZrpnCo1K2qPMNI4K+p10gnKgvTtMhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtMCXYn+r1UYzFj8kVcHIMUgk4mwwHwYDVR0j BBgwFoAUmWWx4pMclM2gPLY+86bK4zvBXocwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmJkM2RjelpMb3phcVVoRmdyVTJiVGlBN2o3aktvelRHZ0VSZHo4bzJi aG4vMC85OTY1QjFFMjkzMUM5NENEQTAzQ0I2M0VGM0E2Q0FFMzNCQzE1RTg3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5NjVCMUUyOTMxQzk0Q0RB MDNDQjYzRUYzQTZDQUUzM0JDMTVFODcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmJkM2RjelpMb3phcVVoRmdyVTJiVGlBN2o3aktvelRHZ0VSZHo4bzJiaG4vMC85 OTY1QjFFMjkzMUM5NENEQTAzQ0I2M0VGM0E2Q0FFMzNCQzE1RTg3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYSZ4ovOVBdb48Ge3AIciLQiie2IVYNsT+jRZidIdsWy/4PjwPvoRm1I5C1Jz V4E7Trg0uAGsl9nBevSkEsci1o/s9loWF3OUMcYJPc3fzyXzHQqz3hihFbmJisg6 s2AIeWYnWMk67X2stdOxvfGi8HsaistdYi/KhuGYS87R4NsJBe4N0xNe9zymHksX vbVVX+me4MI2f6UNJEHT3BxIqz8Ph8UnCaegWmavxY5Y2HcRNSdYb0MeJV4y22Qq X621pOCUFwMqUtHPTzENJuhxjSyuTKZTJ/oIoRbXKpcf0LOqZ822bKb3QrwJaTF4 lXYzR5OKP6ecwLfPnrm6DhabQA== -----END CERTIFICATE-----Generated at Tue Jul 1 03:58:00 2025 by rpki-client