$ rpki-client -vvf rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft File: 9A8CDCA9443D140D02860AA0070928656A172CE1.mft (raw, json) Hash identifier: GeSROXB8Saxk6sj6rQedTgIbPayJjKJ3j0iBY8doXWc= Subject key identifier: 42:DC:FA:18:A1:2F:9B:CA:35:76:DB:E5:23:6F:66:52:6B:8F:78:19 Authority key identifier: 9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1 Certificate issuer: /CN=9A8CDCA9443D140D02860AA0070928656A172CE1 Certificate serial: 371510F97C3F60FC768C65E199FEACDD8AC0D1DA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer Subject info access: rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft Manifest number: 025F Signing time: Wed 02 Jul 2025 00:55:05 +0000 Manifest this update: Wed 02 Jul 2025 00:50:05 +0000 Manifest next update: Thu 03 Jul 2025 03:22:05 +0000 Files and hashes: 1: 9A8CDCA9443D140D02860AA0070928656A172CE1.crl (hash: w4GmMzM+RgHrU3IYqgFozmJV+Fd0q01vWCmiVZJCWbA=) 2: 323830343a333930633a3a2f33322d3438203d3e20323636353230.roa (hash: 6QI59QFSBypQTZ5kO9smMt1xwKHCr2mkAkTRBmyy6jQ=) 3: 34352e3137372e3134302e302f32322d3234203d3e20323636353230.roa (hash: 8R4rvXI+iMslyFXB4PeOWRFCLmpgdZrCcLVZ5KHaVfI=) 4: 3137302e3234352e39322e302f32322d3234203d3e20323636353230.roa (hash: UXdHA797b5kGmZTBMIoKW3ejH3LItHlI0iAJwdYv0OA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.crl rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 03:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:15:10:f9:7c:3f:60:fc:76:8c:65:e1:99:fe:ac:dd:8a:c0:d1:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A8CDCA9443D140D02860AA0070928656A172CE1 Validity Not Before: Jul 2 00:50:05 2025 GMT Not After : Jul 3 03:22:05 2025 GMT Subject: CN=42DCFA18A12F9BCA3576DBE5236F66526B8F7819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a5:90:1d:93:db:93:2e:84:60:5e:49:7f:68: fe:ac:05:63:49:90:44:6c:5a:58:75:0c:2c:b5:5b: 8c:bb:9f:2e:d8:0f:91:5b:ff:4a:0e:31:19:aa:25: 77:f3:9c:db:30:b1:eb:99:f4:c3:45:d0:dc:26:4b: b1:f1:cc:72:f6:96:ce:e4:95:e8:67:51:e4:03:2d: a4:a9:ab:ca:65:87:dd:b3:2d:a8:4c:d1:b9:19:49: e1:dd:03:ce:66:79:21:e7:26:28:6b:d6:f8:36:5e: 92:b6:7e:d2:7e:0e:b4:48:6e:f6:c4:d3:83:80:cf: 4e:d7:b4:f8:b8:92:a9:e7:95:b4:72:23:d9:d2:c9: 58:25:54:09:57:0d:a8:73:0b:15:0f:8c:a7:9c:18: 7f:7e:a3:29:5e:61:79:26:b0:9f:7c:75:62:de:a8: e1:c0:49:7e:2a:77:c6:12:2b:b3:33:0a:90:ab:e1: be:77:27:a8:a8:29:15:40:86:01:5d:d3:c4:29:2d: 8b:e1:52:0c:d8:f3:82:d5:75:fc:12:95:0e:0c:ce: cc:b9:36:be:12:97:55:44:0b:d5:cd:43:f5:f8:2f: 17:da:45:d7:be:90:74:54:55:53:99:d9:c5:c6:e0: 44:91:2e:27:44:04:81:bc:d3:98:ac:d9:1b:d8:f0: e0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DC:FA:18:A1:2F:9B:CA:35:76:DB:E5:23:6F:66:52:6B:8F:78:19 X509v3 Authority Key Identifier: keyid:9A:8C:DC:A9:44:3D:14:0D:02:86:0A:A0:07:09:28:65:6A:17:2C:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A8CDCA9443D140D02860AA0070928656A172CE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/1/9A8CDCA9443D140D02860AA0070928656A172CE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c6:8c:a1:d3:a4:1f:c4:37:1c:c2:7a:e0:4b:7d:37:1e:22: 2b:f9:c1:1c:55:db:e5:24:7e:1b:1b:62:59:c3:a6:df:c5:9b: 99:8a:db:7b:27:73:78:54:2f:89:cf:d7:41:c2:c3:66:41:55: 9f:bb:68:11:57:d7:bf:ca:e1:dd:25:fa:6f:37:11:f5:aa:7b: b7:da:c5:30:47:e9:49:00:dd:a6:91:40:6e:a3:2d:0b:e0:8e: 32:e1:a2:64:dc:1c:6a:87:e0:98:20:c4:d3:24:4c:02:86:a9: 13:7d:a0:80:45:5a:22:fd:7d:bd:02:8c:c6:f6:c5:fe:b3:12: 37:f8:04:67:b7:fa:93:15:80:32:b9:e3:1f:d7:ef:21:9a:fc: 70:cf:59:de:e5:3f:5a:d2:32:be:b2:c5:be:75:de:98:2c:ef: 7c:c6:09:28:5b:45:d0:8e:0f:9a:4c:1e:b9:1c:7c:23:fa:01: e0:15:3f:19:11:a8:c5:b8:02:8d:e5:f0:31:bd:5f:59:3b:4e: 8c:60:d7:89:5a:5a:ae:6e:f9:ec:9f:6e:20:02:75:68:3a:66: 52:f7:96:5b:11:2d:43:b7:52:2e:c2:74:de:df:23:4f:c3:82: 92:bc:a5:bf:44:7b:7d:ad:de:3a:05:fb:40:fd:81:e0:10:17: 73:09:5f:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNxUQ+Xw/YPx2jGXhmf6s3YrA0dowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE4Q0RDQTk0NDNEMTQwRDAyODYwQUEwMDcwOTI4NjU2 QTE3MkNFMTAeFw0yNTA3MDIwMDUwMDVaFw0yNTA3MDMwMzIyMDVaMDMxMTAvBgNV BAMTKDQyRENGQTE4QTEyRjlCQ0EzNTc2REJFNTIzNkY2NjUyNkI4Rjc4MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9pZAdk9uTLoRgXkl/aP6sBWNJ kERsWlh1DCy1W4y7ny7YD5Fb/0oOMRmqJXfznNswseuZ9MNF0NwmS7HxzHL2ls7k lehnUeQDLaSpq8plh92zLahM0bkZSeHdA85meSHnJihr1vg2XpK2ftJ+DrRIbvbE 04OAz07XtPi4kqnnlbRyI9nSyVglVAlXDahzCxUPjKecGH9+oyleYXkmsJ98dWLe qOHASX4qd8YSK7MzCpCr4b53J6ioKRVAhgFd08QpLYvhUgzY84LVdfwSlQ4Mzsy5 Nr4Sl1VEC9XNQ/X4LxfaRde+kHRUVVOZ2cXG4ESRLidEBIG805is2RvY8ODXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQtz6GKEvm8o1dtvlI29mUmuPeBkwHwYDVR0j BBgwFoAUmozcqUQ9FA0ChgqgBwkoZWoXLOEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmd5TllXTjlyOGZQV003d0NmZHB6M1JOaEh3aEFaeUNrQkhjcVh1OWlC VW0vMS85QThDRENBOTQ0M0QxNDBEMDI4NjBBQTAwNzA5Mjg2NTZBMTcyQ0UxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBOENEQ0E5NDQzRDE0MEQw Mjg2MEFBMDA3MDkyODY1NkExNzJDRTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qmd5TllXTjlyOGZQV003d0NmZHB6M1JOaEh3aEFaeUNrQkhjcVh1OWlCVW0vMS85 QThDRENBOTQ0M0QxNDBEMDI4NjBBQTAwNzA5Mjg2NTZBMTcyQ0UxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXsaModOkH8Q3HMJ64Et9Nx4iK/nBHFXb5SR+GxtiWcOm38WbmYrbeydzeFQv ic/XQcLDZkFVn7toEVfXv8rh3SX6bzcR9ap7t9rFMEfpSQDdppFAbqMtC+COMuGi ZNwcaofgmCDE0yRMAoapE32ggEVaIv19vQKMxvbF/rMSN/gEZ7f6kxWAMrnjH9fv IZr8cM9Z3uU/WtIyvrLFvnXemCzvfMYJKFtF0I4PmkweuRx8I/oB4BU/GRGoxbgC jeXwMb1fWTtOjGDXiVparm757J9uIAJ1aDpmUveWWxEtQ7dSLsJ03t8jT8OCkryl v0R7fa3eOgX7QP2B4BAXcwlf4g== -----END CERTIFICATE-----Generated at Wed Jul 2 13:03:41 2025 by rpki-client