$ rpki-client -vvf rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft File: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft (raw, json) Hash identifier: AScsMqlVq2sumplb5OnM+eS/reCTosYpiXfumjrJlUk= Subject key identifier: B4:7F:9C:FF:4B:70:3C:37:28:BE:89:E3:5B:E0:7F:15:B6:8A:04:A1 Authority key identifier: D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB Certificate issuer: /CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB Certificate serial: 0CC8387D92CFA1300FF4F0D3573E59615F5DC770 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer Subject info access: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft Manifest number: 27 Signing time: Wed 02 Jul 2025 02:38:59 +0000 Manifest this update: Wed 02 Jul 2025 02:33:59 +0000 Manifest next update: Thu 03 Jul 2025 06:31:59 +0000 Files and hashes: 1: 34352e37312e3232302e302f32322d3234203d3e20323637363433.roa (hash: DphYCMXiIhOunJYgpxuGmI/F5WVwTY6x8muqbHvOLD0=) 2: 323830343a343461303a3a2f33322d3438203d3e20323637363433.roa (hash: OhP4AfZLm8wKcC8NRb3lR5wasqSW+ZFcBQBWlmtzm+0=) 3: D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl (hash: ZoOhUbTwbCA/tAL1pCJzAHla5fdsnWcd1uKoWxGXX6Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 06:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c8:38:7d:92:cf:a1:30:0f:f4:f0:d3:57:3e:59:61:5f:5d:c7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB Validity Not Before: Jul 2 02:33:59 2025 GMT Not After : Jul 3 06:31:59 2025 GMT Subject: CN=B47F9CFF4B703C3728BE89E35BE07F15B68A04A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6e:8d:3a:92:9e:85:82:4a:73:06:6b:cc:47: 4e:32:50:02:55:96:49:7a:07:73:1c:12:23:d9:c0: 01:4f:2e:a8:9b:13:d2:04:6f:c6:13:be:b0:22:2e: 26:dc:fa:b1:80:77:8c:a7:9a:bc:f6:9d:fa:9e:e5: e4:fd:24:91:67:cd:eb:2b:9d:b3:c5:4a:2d:a5:18: 73:20:40:df:7c:38:af:9d:d9:74:b8:4f:7b:8e:70: a1:1d:4e:96:40:e6:98:3f:64:91:7e:4d:0d:50:7c: 53:23:4c:f7:b2:ac:7e:aa:e5:68:79:f2:07:ca:0c: 44:c7:af:ba:a5:95:8a:3e:24:ef:17:57:d3:c1:ef: b8:f3:2d:f8:b3:25:4a:70:3b:84:17:b3:54:11:fe: f3:3f:d5:e7:ab:7f:3e:33:cf:fc:c2:48:ba:46:87: 3b:00:67:67:5e:35:1c:ab:0e:2a:5d:ba:ba:b8:8c: 5e:60:cc:db:0b:de:61:1d:b0:5e:89:78:04:ed:16: 1f:1f:69:f3:7c:49:36:61:c8:b5:f2:df:66:32:3a: 76:2c:e8:f8:7c:23:79:cb:80:17:83:ab:f1:df:99: 36:bb:af:05:d7:83:36:9b:1f:3e:41:40:2c:98:3d: 2a:53:86:c0:9a:e5:23:13:a6:29:d9:4d:8a:59:47: 38:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7F:9C:FF:4B:70:3C:37:28:BE:89:E3:5B:E0:7F:15:B6:8A:04:A1 X509v3 Authority Key Identifier: keyid:D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:78:34:b7:13:d4:62:1b:6c:ec:96:d5:c1:ac:83:44:bb:0b: ae:e5:bf:c0:3d:75:d9:34:68:b8:90:5f:6f:4e:f1:41:22:1e: 1f:08:f3:90:78:15:ad:0a:b0:45:ac:47:60:c6:cd:c6:7b:01: 30:a8:cd:9c:03:49:ff:20:ba:8b:b2:87:3b:be:e5:a0:43:11: b1:82:3e:c5:6b:0d:d4:74:cd:cc:51:de:66:05:5d:2b:4e:98: 3d:c8:3c:09:48:68:3a:d0:aa:0f:39:e7:f3:d4:ee:74:51:73: 74:1f:e4:a9:93:1d:25:e9:2c:37:c9:d0:db:86:c6:b2:fb:c0: 51:0a:83:e1:5f:e1:b4:d0:9a:d7:52:13:bc:6d:dd:2c:1c:f8: 2a:48:7f:0b:73:a1:03:22:ea:20:b3:fb:9c:05:45:28:b2:cb: b4:a1:61:b0:31:05:8f:b5:ba:7e:7a:56:68:4a:7d:37:00:98: c3:bc:0c:59:a2:63:e3:1d:64:ce:11:14:c2:56:f2:03:e6:b9: 27:27:95:a2:45:b9:5c:e7:8a:47:58:42:5d:50:35:67:f6:fe: ee:07:2a:3a:82:b4:13:e8:69:95:8e:ec:d7:e7:c0:9a:a1:3a: 19:ec:83:05:c8:8e:52:5b:bb:94:ab:b6:45:ea:95:c4:07:04: b0:8f:2b:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDMg4fZLPoTAP9PDTVz5ZYV9dx3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk3MEYxN0M4NkQ0RDVBOUM2Mzk1RTlFMkQxNjAxQkJE OUZBOEJEQjAeFw0yNTA3MDIwMjMzNTlaFw0yNTA3MDMwNjMxNTlaMDMxMTAvBgNV BAMTKEI0N0Y5Q0ZGNEI3MDNDMzcyOEJFODlFMzVCRTA3RjE1QjY4QTA0QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCobo06kp6FgkpzBmvMR04yUAJV lkl6B3McEiPZwAFPLqibE9IEb8YTvrAiLibc+rGAd4ynmrz2nfqe5eT9JJFnzesr nbPFSi2lGHMgQN98OK+d2XS4T3uOcKEdTpZA5pg/ZJF+TQ1QfFMjTPeyrH6q5Wh5 8gfKDETHr7qllYo+JO8XV9PB77jzLfizJUpwO4QXs1QR/vM/1eerfz4zz/zCSLpG hzsAZ2deNRyrDipdurq4jF5gzNsL3mEdsF6JeATtFh8fafN8STZhyLXy32YyOnYs 6Ph8I3nLgBeDq/HfmTa7rwXXgzabHz5BQCyYPSpThsCa5SMTpinZTYpZRzi1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtH+c/0twPDcovonjW+B/FbaKBKEwHwYDVR0j BBgwFoAU2XDxfIbU1anGOV6eLRYBu9n6i9swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhv dmIvMS9EOTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NzBGMTdDODZENEQ1QTlD NjM5NUU5RTJEMTYwMUJCRDlGQThCREIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzNDNHQ3bUpYVzNZRllwWkhDTmJlRjl3Ujl6dW5FZnptNXQyM0JBTFhvdmIvMS9E OTcwRjE3Qzg2RDRENUE5QzYzOTVFOUUyRDE2MDFCQkQ5RkE4QkRCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHHg0txPUYhts7JbVwayDRLsLruW/wD112TRouJBfb07xQSIeHwjzkHgVrQqw RaxHYMbNxnsBMKjNnANJ/yC6i7KHO77loEMRsYI+xWsN1HTNzFHeZgVdK06YPcg8 CUhoOtCqDznn89TudFFzdB/kqZMdJeksN8nQ24bGsvvAUQqD4V/htNCa11ITvG3d LBz4Kkh/C3OhAyLqILP7nAVFKLLLtKFhsDEFj7W6fnpWaEp9NwCYw7wMWaJj4x1k zhEUwlbyA+a5JyeVokW5XOeKR1hCXVA1Z/b+7gcqOoK0E+hplY7s1+fAmqE6GeyD BciOUlu7lKu2ReqVxAcEsI8rAA== -----END CERTIFICATE-----Generated at Wed Jul 2 15:21:00 2025 by rpki-client