$ rpki-client -vvf rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft File: E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft (raw, json) Hash identifier: lhRtrjx37LsoDCUArOCmMg1/ZzpN2RABknuzOaNlScE= Subject key identifier: 02:C0:E2:E0:7C:53:51:74:D2:96:EB:50:97:C6:99:EB:8B:C3:15:4A Authority key identifier: E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4 Certificate issuer: /CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4 Certificate serial: 396DC73034499AF2DD7E5E19F2BAE87ACF4D0C3A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer Subject info access: rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft Manifest number: 025A Signing time: Mon 30 Jun 2025 00:40:37 +0000 Manifest this update: Mon 30 Jun 2025 00:35:37 +0000 Manifest next update: Tue 01 Jul 2025 03:38:37 +0000 Files and hashes: 1: E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl (hash: N665gPHTeAFe7iBhrc2DfxXEcc71nSZ0G9m02QZ5lpk=) 2: 323830343a363331343a3a2f33322d3438203d3e20323639333337.roa (hash: 8rIADCc1IMBXHDjsfVNZY3xX+m3yox+H7e16XbvP0l4=) 3: 34352e3138332e3138302e302f32322d3234203d3e20323639333337.roa (hash: ht/LU548z0DQ9qyd/CXKzpoxrH9NqeBOqRLrPd+T36Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 03:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:6d:c7:30:34:49:9a:f2:dd:7e:5e:19:f2:ba:e8:7a:cf:4d:0c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4 Validity Not Before: Jun 30 00:35:37 2025 GMT Not After : Jul 1 03:38:37 2025 GMT Subject: CN=02C0E2E07C535174D296EB5097C699EB8BC3154A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:3e:e9:d6:af:4c:ba:f6:98:2c:37:28:35: 26:64:0d:72:70:b8:68:29:91:a7:97:24:36:4a:8e: ca:75:9e:cb:b2:7e:5d:f5:9d:fb:bd:15:7d:d9:01: aa:fb:25:0a:da:c0:7d:0d:23:5b:ec:c4:36:82:f2: ad:b6:44:cc:58:e1:71:bf:cc:17:48:4a:e4:71:33: 8b:45:7d:f3:18:e9:19:59:0d:92:14:bb:1f:08:d5: 3e:ca:68:8e:f0:1f:f5:60:ab:d1:1e:cb:60:7f:9f: 0e:05:a3:2b:75:a9:eb:80:66:de:44:55:50:dc:79: ba:78:ab:70:a6:6a:b0:c4:15:52:84:e4:59:b1:8c: 39:d7:95:a1:10:f8:e3:c4:f9:b6:aa:3c:b9:87:26: 55:93:f3:5a:51:8b:b3:24:ad:ca:f6:b1:3d:d7:b6: ec:45:bc:22:1b:15:b6:77:53:15:73:00:f8:76:24: 81:e4:e8:50:6a:9b:31:31:c6:9c:4b:9b:16:48:10: 75:f9:fa:1a:5f:97:73:e8:b7:d5:bd:0d:fd:ce:04: 3c:a3:73:e3:9c:f6:48:26:16:8e:01:31:2b:44:31: 56:b7:ec:b9:e9:35:b2:bb:c7:3c:5d:7f:88:19:b6: c4:9f:86:5f:ce:91:fc:04:0d:88:19:e5:22:c3:43: 11:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C0:E2:E0:7C:53:51:74:D2:96:EB:50:97:C6:99:EB:8B:C3:15:4A X509v3 Authority Key Identifier: keyid:E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:5f:ac:35:86:b3:83:bc:28:d2:64:7a:fa:11:26:1f:f2:69: 49:80:43:b1:65:a1:df:fd:9e:3e:12:73:dd:77:58:b7:b0:47: b1:07:6a:5c:11:8d:b8:91:74:47:60:a5:b2:11:f7:5f:25:9c: 28:35:2a:8f:2b:29:23:60:c0:30:63:ac:85:1f:fc:bf:aa:87: d7:1b:9e:8f:4e:f2:44:5c:4d:79:10:66:42:74:9d:19:aa:46: 8a:42:d0:55:5d:59:04:fe:16:bc:f3:f5:ec:e8:0d:bb:64:cc: ca:3a:aa:66:0a:22:e4:02:c4:9f:ce:59:fa:f8:2b:af:96:ff: 1a:6d:e3:53:64:9e:86:d5:c2:10:ad:32:cf:ec:f1:00:e6:5b: 56:4e:e2:bf:6f:fd:b3:56:ae:ce:e2:50:61:44:f3:07:fb:0a: 7e:1e:8f:4b:e8:52:40:5a:3e:0e:54:f7:07:1e:0f:0c:3a:6f: 23:11:c6:c6:77:af:77:9e:00:00:18:63:99:f2:51:37:ed:d4: ae:db:55:d1:83:86:63:c1:f4:67:5d:55:56:ce:d1:a7:44:3a: 33:7a:fa:12:11:b0:88:46:1f:80:c8:37:94:51:19:13:49:c8: dd:ac:ea:42:68:7b:4f:4e:5f:31:d3:08:14:a4:c7:92:ae:55: 70:5b:98:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOW3HMDRJmvLdfl4Z8rroes9NDDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEFCRjAzOUIxRkYyMEY5REU1RkY2Q0UxREUzRENC QkFGRDZCNDAeFw0yNTA2MzAwMDM1MzdaFw0yNTA3MDEwMzM4MzdaMDMxMTAvBgNV BAMTKDAyQzBFMkUwN0M1MzUxNzREMjk2RUI1MDk3QzY5OUVCOEJDMzE1NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5QD7p1q9MuvaYLDcoNSZkDXJw uGgpkaeXJDZKjsp1nsuyfl31nfu9FX3ZAar7JQrawH0NI1vsxDaC8q22RMxY4XG/ zBdISuRxM4tFffMY6RlZDZIUux8I1T7KaI7wH/Vgq9Eey2B/nw4Foyt1qeuAZt5E VVDcebp4q3CmarDEFVKE5FmxjDnXlaEQ+OPE+baqPLmHJlWT81pRi7Mkrcr2sT3X tuxFvCIbFbZ3UxVzAPh2JIHk6FBqmzExxpxLmxZIEHX5+hpfl3Pot9W9Df3OBDyj c+Oc9kgmFo4BMStEMVa37LnpNbK7xzxdf4gZtsSfhl/OkfwEDYgZ5SLDQxGDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAsDi4HxTUXTSlutQl8aZ64vDFUowHwYDVR0j BBgwFoAU5wir8Dmx/yD53l/2zh3j3Luv1rQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0g0NmE5dFJGdFZSNWJaRkthalZlZTlZNzV2cDQ0QzZhMzRMMVlzblVq SEUvMS9FNzA4QUJGMDM5QjFGRjIwRjlERTVGRjZDRTFERTNEQ0JCQUZENkI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3MDhBQkYwMzlCMUZGMjBG OURFNUZGNkNFMURFM0RDQkJBRkQ2QjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0g0NmE5dFJGdFZSNWJaRkthalZlZTlZNzV2cDQ0QzZhMzRMMVlzblVqSEUvMS9F NzA4QUJGMDM5QjFGRjIwRjlERTVGRjZDRTFERTNEQ0JCQUZENkI0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfF+sNYazg7wo0mR6+hEmH/JpSYBDsWWh3/2ePhJz3XdYt7BHsQdqXBGNuJF0 R2ClshH3XyWcKDUqjyspI2DAMGOshR/8v6qH1xuej07yRFxNeRBmQnSdGapGikLQ VV1ZBP4WvPP17OgNu2TMyjqqZgoi5ALEn85Z+vgrr5b/Gm3jU2SehtXCEK0yz+zx AOZbVk7iv2/9s1auzuJQYUTzB/sKfh6PS+hSQFo+DlT3Bx4PDDpvIxHGxnevd54A ABhjmfJRN+3UrttV0YOGY8H0Z11VVs7Rp0Q6M3r6EhGwiEYfgMg3lFEZE0nI3azq Qmh7T05fMdMIFKTHkq5VcFuYBw== -----END CERTIFICATE-----Generated at Mon Jun 30 13:30:10 2025 by rpki-client