$ rpki-client -vvf rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft File: CA9298E26EC7D83F990DD29EFD395097A928590F.mft (raw, json) Hash identifier: AYUG3ByxlRBQaFnWARgD3ez0nucYS3hzgusPMGkZIjI= Subject key identifier: 96:1C:93:C1:75:88:2E:0B:FC:B4:6A:66:BC:C1:C2:1E:0B:C4:6A:40 Authority key identifier: CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F Certificate issuer: /CN=CA9298E26EC7D83F990DD29EFD395097A928590F Certificate serial: 5518A9E8AE7B739FFB1261F57347F05B47B8E6F2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer Subject info access: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft Manifest number: 0186 Signing time: Thu 03 Jul 2025 23:06:13 +0000 Manifest this update: Thu 03 Jul 2025 23:01:13 +0000 Manifest next update: Sat 05 Jul 2025 02:44:13 +0000 Files and hashes: 1: 3136382e3232372e38302e302f32322d3234203d3e203631363938.roa (hash: IiEN5Jt+IjiGA4rrpcidQwaTrr06LXFl6U2s56QvoZI=) 2: CA9298E26EC7D83F990DD29EFD395097A928590F.crl (hash: oQzfCDrhrI9+kBa/WG/f8PczFwkIerfiU6pbMNYG0P0=) 3: 323830343a316165633a3a2f33322d3438203d3e203631363938.roa (hash: D4gDikxqDsVeC2Nk5fkAJu3epdejkNKVzJenlLXCHIw=) 4: 3133312e302e3136342e302f32322d3234203d3e203631363938.roa (hash: cirAaasu6EfpKysSqYLdkvU3mPEjtgroPBBXO7Qvj7A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Jul 2025 00:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:18:a9:e8:ae:7b:73:9f:fb:12:61:f5:73:47:f0:5b:47:b8:e6:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA9298E26EC7D83F990DD29EFD395097A928590F Validity Not Before: Jul 3 23:01:13 2025 GMT Not After : Jul 5 02:44:13 2025 GMT Subject: CN=961C93C175882E0BFCB46A66BCC1C21E0BC46A40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2e:ec:d1:42:ce:a9:41:dd:a1:ff:d9:19:1e: cb:7e:91:67:07:0e:bb:b0:53:23:c4:a1:56:da:d0: d5:c2:9e:0b:6f:7c:63:5b:a1:62:20:52:e2:4e:04: d9:db:f1:af:d1:e2:a4:6e:e0:be:b7:46:d8:4b:23: c7:2b:dc:42:2d:ab:32:ee:04:b0:eb:ec:04:03:47: bd:95:bd:2c:ad:ec:27:de:88:b3:0c:3f:78:ec:8b: 81:ce:e9:49:40:ec:33:d9:c3:f9:a5:dc:d9:fe:49: de:40:c9:5c:2c:21:73:05:bc:90:ef:4d:7f:2c:23: af:9d:01:00:10:24:2b:35:c0:81:30:49:07:44:2b: e5:82:3e:64:8d:aa:21:b3:68:1e:e1:9b:3c:81:c4: e0:b4:37:0d:54:68:ed:a0:d7:5b:97:4c:25:13:54: 8c:00:6f:c0:f4:df:49:9b:34:17:a8:73:29:d6:ae: dd:a8:6e:6a:a5:8b:7c:ff:3d:64:a2:b5:e2:36:bf: b5:a3:2a:55:48:4e:ce:51:df:c2:37:3f:4e:9f:70: 74:f0:80:0f:09:d4:f8:cd:16:36:9b:5b:1c:65:8e: c3:92:21:80:fa:c1:7b:b2:7f:9e:5c:51:8d:b2:d4: f5:7a:0b:ec:2b:3d:18:c2:6d:a4:24:ec:00:11:b2: fd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1C:93:C1:75:88:2E:0B:FC:B4:6A:66:BC:C1:C2:1E:0B:C4:6A:40 X509v3 Authority Key Identifier: keyid:CA:92:98:E2:6E:C7:D8:3F:99:0D:D2:9E:FD:39:50:97:A9:28:59:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9298E26EC7D83F990DD29EFD395097A928590F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BihkiDR1zFdi55xn12kGyYSNuswzMgVcyxSQz9ifFfzj/0/CA9298E26EC7D83F990DD29EFD395097A928590F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b3:c6:82:49:73:88:0d:1f:03:9c:fe:b9:5b:3e:f2:18:44: 69:6a:71:60:ed:a2:a9:a5:a2:93:d8:06:52:1e:f8:7b:b0:e4: 3d:48:05:86:f0:55:2f:14:c0:a2:9a:98:e0:2d:c1:bd:1a:66: ae:cc:61:13:22:17:c1:85:3f:68:a1:16:6e:fa:88:c7:20:68: 11:38:41:db:57:19:4b:ed:d8:b7:55:89:5d:1e:b1:18:9e:09: 59:ea:11:07:00:2d:93:e8:78:4d:28:e3:55:79:78:60:c3:55: 0a:c8:bf:9c:6c:05:6d:55:ed:9d:33:be:3f:6b:32:52:e0:9f: d2:71:53:57:ae:96:e7:b6:e4:70:ab:f4:b3:48:94:89:10:79: bb:a4:2b:1d:55:dc:2a:12:2a:27:73:ee:ea:bd:68:8c:45:03: 47:5d:72:0e:a2:e3:52:4a:a2:1c:5b:80:fe:a9:f5:15:a3:7a: c0:66:75:9d:e6:03:51:f0:01:45:57:d1:94:89:6e:1e:f0:da: ac:ac:b7:0b:5e:2a:26:7d:da:97:51:33:e1:bf:23:2d:8e:1d: 19:9f:e1:da:9b:0b:1b:6e:73:91:dc:6f:77:d2:a5:86:1a:14: 8b:45:cd:75:75:d0:67:43:40:33:4a:64:54:4e:91:ef:92:fd: ee:2f:62:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVRip6K57c5/7EmH1c0fwW0e45vIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5Mjk4RTI2RUM3RDgzRjk5MEREMjlFRkQzOTUwOTdB OTI4NTkwRjAeFw0yNTA3MDMyMzAxMTNaFw0yNTA3MDUwMjQ0MTNaMDMxMTAvBgNV BAMTKDk2MUM5M0MxNzU4ODJFMEJGQ0I0NkE2NkJDQzFDMjFFMEJDNDZBNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZLuzRQs6pQd2h/9kZHst+kWcH DruwUyPEoVba0NXCngtvfGNboWIgUuJOBNnb8a/R4qRu4L63RthLI8cr3EItqzLu BLDr7AQDR72VvSyt7CfeiLMMP3jsi4HO6UlA7DPZw/ml3Nn+Sd5AyVwsIXMFvJDv TX8sI6+dAQAQJCs1wIEwSQdEK+WCPmSNqiGzaB7hmzyBxOC0Nw1UaO2g11uXTCUT VIwAb8D030mbNBeocynWrt2obmqli3z/PWSiteI2v7WjKlVITs5R38I3P06fcHTw gA8J1PjNFjabWxxljsOSIYD6wXuyf55cUY2y1PV6C+wrPRjCbaQk7AARsv0lAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlhyTwXWILgv8tGpmvMHCHgvEakAwHwYDVR0j BBgwFoAUypKY4m7H2D+ZDdKe/TlQl6koWQ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmloa2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZm emovMC9DQTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5Mjg1OTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBOTI5OEUyNkVDN0Q4M0Y5 OTBERDI5RUZEMzk1MDk3QTkyODU5MEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Qmloa2lEUjF6RmRpNTV4bjEya0d5WVNOdXN3ek1nVmN5eFNRejlpZkZmemovMC9D QTkyOThFMjZFQzdEODNGOTkwREQyOUVGRDM5NTA5N0E5Mjg1OTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKbPGgklziA0fA5z+uVs+8hhEaWpxYO2iqaWik9gGUh74e7DkPUgFhvBVLxTA opqY4C3BvRpmrsxhEyIXwYU/aKEWbvqIxyBoEThB21cZS+3Yt1WJXR6xGJ4JWeoR BwAtk+h4TSjjVXl4YMNVCsi/nGwFbVXtnTO+P2syUuCf0nFTV66W57bkcKv0s0iU iRB5u6QrHVXcKhIqJ3Pu6r1ojEUDR11yDqLjUkqiHFuA/qn1FaN6wGZ1neYDUfAB RVfRlIluHvDarKy3C14qJn3al1Ez4b8jLY4dGZ/h2psLG25zkdxvd9KlhhoUi0XN dXXQZ0NAM0pkVE6R75L97i9imw== -----END CERTIFICATE-----Generated at Fri Jul 4 04:05:06 2025 by rpki-client