$ rpki-client -vvf rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft File: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft (raw, json) Hash identifier: ZoaLdX8Gdv6nFvr3MnMwGOrSUZ0tL3ovj33fSxgPqy8= Subject key identifier: C8:C7:F6:27:88:B5:9C:49:58:D0:F0:F2:87:38:21:E7:1D:47:6B:EB Authority key identifier: 09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0 Certificate issuer: /CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0 Certificate serial: 44F37AFC1E1D3A9954D8A12478062C8ABB71B782 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer Subject info access: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft Manifest number: 019C Signing time: Tue 01 Jul 2025 21:23:21 +0000 Manifest this update: Tue 01 Jul 2025 21:18:21 +0000 Manifest next update: Wed 02 Jul 2025 22:59:21 +0000 Files and hashes: 1: 323830343a353232633a3a2f33322d313238203d3e20323638353030.roa (hash: wuN8qHU/NQzTWfY0LflG0MyAQQTaz3Hq4vCYZX+edCU=) 2: 34352e3136312e33362e302f32322d3332203d3e20323638353030.roa (hash: XosRWuhy50p/XlmB964uJcpmK6P7/+s4YBWKrRfgxzQ=) 3: 09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl (hash: K8GvH46pIuFbBE1WxjKOsu11sQudxnbgaP3Vaex6e6A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 22:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f3:7a:fc:1e:1d:3a:99:54:d8:a1:24:78:06:2c:8a:bb:71:b7:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09D8D4A67069580E34F16AB047420BD4A08D4FF0 Validity Not Before: Jul 1 21:18:21 2025 GMT Not After : Jul 2 22:59:21 2025 GMT Subject: CN=C8C7F62788B59C4958D0F0F2873821E71D476BEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e9:c5:ed:f2:89:18:aa:e5:cb:30:86:ee:b7: 4f:94:69:0c:6b:14:86:d7:3c:f8:c9:c7:5e:97:a2: f3:e6:5c:19:b8:57:19:37:c5:16:44:05:c6:21:aa: 53:8b:29:cc:42:ea:88:e3:39:50:f2:0e:0c:81:e8: 5a:fc:96:5d:0c:10:ed:5d:5c:f9:4c:7c:eb:10:eb: e9:55:63:06:dd:85:d7:96:b0:2e:b0:90:ea:89:16: ae:f9:e4:6b:8e:90:79:dd:b7:5a:fa:64:46:5a:f6: 82:65:88:17:56:72:f7:e2:a7:a0:7d:86:69:94:76: 3b:ad:b1:79:02:8c:40:55:6d:49:4a:d6:ae:2c:be: 13:4f:61:28:09:6d:c8:29:d1:99:d5:6a:08:53:70: df:ad:1b:69:b5:87:d9:31:f8:e6:e8:38:33:eb:54: 81:50:e7:db:cd:42:92:6f:c4:57:f7:6e:72:88:29: 29:5d:81:30:45:1b:c6:50:00:ed:ae:3e:88:7f:86: f6:8f:e9:c9:fd:fd:62:eb:f2:75:ca:c8:d4:10:1b: 46:fd:e1:49:57:ce:e6:70:ee:57:87:fd:3f:e8:ca: 7b:73:3b:bb:05:62:e3:64:6a:bd:b5:36:81:8a:c0: ea:9f:3d:66:52:c7:38:09:f2:31:77:fa:c9:23:25: 17:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C7:F6:27:88:B5:9C:49:58:D0:F0:F2:87:38:21:E7:1D:47:6B:EB X509v3 Authority Key Identifier: keyid:09:D8:D4:A6:70:69:58:0E:34:F1:6A:B0:47:42:0B:D4:A0:8D:4F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09D8D4A67069580E34F16AB047420BD4A08D4FF0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ByL1DT1wkZbt3muAqa1TX1ZzX3Pjc6CfPha9fAx2oCQk/0/09D8D4A67069580E34F16AB047420BD4A08D4FF0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:a7:ef:d4:17:73:48:da:88:a5:7c:c8:3e:50:5a:53:eb:33: 98:b8:e2:06:3e:4d:fc:de:4d:2c:7b:a7:7d:91:23:e3:2b:8c: cd:d2:3b:cb:f0:b1:e7:06:98:57:1c:93:3a:89:c4:4e:82:9d: f3:6a:77:1b:07:d2:0e:74:81:2c:1a:45:85:38:d2:ca:f7:d7: f9:24:41:5e:f1:b7:07:2a:0d:17:c0:13:d4:47:c5:e3:4d:9f: a0:6e:17:0f:24:08:d9:d8:c5:52:4e:fe:de:ab:f4:d0:c3:6f: c6:e4:a0:78:13:91:b5:09:a2:f4:fb:9b:ac:0c:a6:8a:31:96: d4:50:37:e3:8d:bd:b8:bb:ee:32:eb:26:c5:60:ad:ff:6e:d7: e6:02:b6:d8:55:d5:78:a4:41:a6:a3:6f:8b:42:c2:cc:37:b5: 4e:81:7b:4c:13:93:8e:34:05:ce:05:a0:ec:9a:43:22:fb:70: e8:cf:cd:81:6d:b0:4a:ad:3d:30:8b:82:60:23:ae:25:c5:55: 11:1c:e6:d6:5b:f5:40:c8:47:cd:23:3b:fe:b8:e6:e2:33:26: a1:d3:25:3a:e3:6b:96:fa:7a:ec:69:a8:86:a4:db:43:c1:77: 04:c8:84:5c:4f:1a:4f:58:93:03:44:ee:3c:d9:a8:bc:76:6d: 34:f4:30:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURPN6/B4dOplU2KEkeAYsirtxt4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlEOEQ0QTY3MDY5NTgwRTM0RjE2QUIwNDc0MjBCRDRB MDhENEZGMDAeFw0yNTA3MDEyMTE4MjFaFw0yNTA3MDIyMjU5MjFaMDMxMTAvBgNV BAMTKEM4QzdGNjI3ODhCNTlDNDk1OEQwRjBGMjg3MzgyMUU3MUQ0NzZCRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ6cXt8okYquXLMIbut0+UaQxr FIbXPPjJx16XovPmXBm4Vxk3xRZEBcYhqlOLKcxC6ojjOVDyDgyB6Fr8ll0MEO1d XPlMfOsQ6+lVYwbdhdeWsC6wkOqJFq755GuOkHndt1r6ZEZa9oJliBdWcvfip6B9 hmmUdjutsXkCjEBVbUlK1q4svhNPYSgJbcgp0ZnVaghTcN+tG2m1h9kx+OboODPr VIFQ59vNQpJvxFf3bnKIKSldgTBFG8ZQAO2uPoh/hvaP6cn9/WLr8nXKyNQQG0b9 4UlXzuZw7leH/T/oyntzO7sFYuNkar21NoGKwOqfPWZSxzgJ8jF3+skjJRdfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyMf2J4i1nElY0PDyhzgh5x1Ha+swHwYDVR0j BBgwFoAUCdjUpnBpWA408WqwR0IL1KCNT/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9D UWsvMC8wOUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5RDhENEE2NzA2OTU4MEUz NEYxNkFCMDQ3NDIwQkQ0QTA4RDRGRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QnlMMURUMXdrWmJ0M211QXFhMVRYMVp6WDNQamM2Q2ZQaGE5ZkF4Mm9DUWsvMC8w OUQ4RDRBNjcwNjk1ODBFMzRGMTZBQjA0NzQyMEJENEEwOEQ0RkYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANafv1BdzSNqIpXzIPlBaU+szmLjiBj5N/N5NLHunfZEj4yuMzdI7y/Cx5waY VxyTOonEToKd82p3GwfSDnSBLBpFhTjSyvfX+SRBXvG3ByoNF8AT1EfF402foG4X DyQI2djFUk7+3qv00MNvxuSgeBORtQmi9PubrAymijGW1FA34429uLvuMusmxWCt /27X5gK22FXVeKRBpqNvi0LCzDe1ToF7TBOTjjQFzgWg7JpDIvtw6M/NgW2wSq09 MIuCYCOuJcVVERzm1lv1QMhHzSM7/rjm4jMmodMlOuNrlvp67GmohqTbQ8F3BMiE XE8aT1iTA0TuPNmovHZtNPQwrw== -----END CERTIFICATE-----Generated at Wed Jul 2 15:06:51 2025 by rpki-client