$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft File: 22CBA337E0370365B681D563898357F37A7D4D97.mft (raw, json) Hash identifier: w3E//fYdKB1KhM8QeSO73Q4xnMbMyvqkWoYyiIi6rk0= Subject key identifier: FD:08:74:6B:01:ED:14:8B:4D:6C:96:49:5E:C9:62:95:16:C2:4E:DE Authority key identifier: 22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97 Certificate issuer: /CN=22CBA337E0370365B681D563898357F37A7D4D97 Certificate serial: 68A4A627FCE1EB6D8FE99B0D0B94FD52274E3188 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer Subject info access: rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft Manifest number: 010F Signing time: Wed 02 Jul 2025 11:07:20 +0000 Manifest this update: Wed 02 Jul 2025 11:02:20 +0000 Manifest next update: Thu 03 Jul 2025 12:51:20 +0000 Files and hashes: 1: 323830343a346439383a3a2f33322d313238203d3e20323638323037.roa (hash: y7zKx4TsW0QghEIMCq7bJ5hTklvu2VN2EabupoYne2M=) 2: 22CBA337E0370365B681D563898357F37A7D4D97.crl (hash: vb2tYithGwHD/bS5Y0Cf4+mpbEa8NhysOOKqhXfDajU=) 3: 34352e3233352e35322e302f32322d3332203d3e20323638323037.roa (hash: px7bKqzWCRjS/nhYLdDdhRyRozqA4RvYohgLi4LW0Hc=) 4: 3230302e3232352e3131322e302f32322d3332203d3e20323638323037.roa (hash: eI9fHZ3KLBcG6xXFiThpMiP1ThyI4F2F2i1mydfMToo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.crl rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 12:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a4:a6:27:fc:e1:eb:6d:8f:e9:9b:0d:0b:94:fd:52:27:4e:31:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22CBA337E0370365B681D563898357F37A7D4D97 Validity Not Before: Jul 2 11:02:20 2025 GMT Not After : Jul 3 12:51:20 2025 GMT Subject: CN=FD08746B01ED148B4D6C96495EC9629516C24EDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4a:97:3a:56:1b:76:de:d0:1f:0f:fc:bf:14: 48:a8:95:c6:07:86:2a:f7:e0:96:f4:d5:7d:95:d7: 2a:fa:b1:1e:f3:74:16:06:a5:6d:70:2c:ad:a7:c4: d5:24:d2:71:5f:6b:ea:66:64:e0:92:74:33:24:86: 3e:c6:54:22:66:da:54:37:ef:f8:ac:31:c2:cf:7b: e7:cc:b6:9c:0b:d6:e6:b1:0b:7d:87:84:47:ed:d7: 5c:9d:3f:5c:f9:b2:3e:49:43:3f:4f:27:e5:b4:f8: bd:9d:6e:e3:58:bb:9c:06:68:25:8d:1e:d8:5e:8a: 8c:d8:cf:66:c2:d5:95:4c:1f:3c:22:c0:57:19:99: af:aa:ec:fe:18:fd:e8:0a:c4:17:cb:0f:14:4a:5d: 29:07:8a:9d:e4:77:a3:d6:6f:43:7f:27:d9:82:ae: db:80:31:a8:f5:57:42:e0:e3:ca:7c:e8:5c:1c:79: 65:93:5e:7e:7f:9c:ce:7b:57:c1:16:5a:9f:13:5d: 2a:58:b5:72:97:ed:28:f1:08:02:d1:29:3b:4c:f2: 70:49:a6:6b:1d:74:01:af:51:ca:70:f3:c7:b5:77: f7:6d:c3:00:22:44:74:75:ff:5c:af:df:66:78:5e: 62:20:35:df:a9:1a:f3:f2:55:de:fc:24:66:d4:82: 8d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:08:74:6B:01:ED:14:8B:4D:6C:96:49:5E:C9:62:95:16:C2:4E:DE X509v3 Authority Key Identifier: keyid:22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:15:73:b5:73:dd:29:41:3e:7c:fc:e2:6c:cf:80:e8:d8:a7: 9f:6e:ec:97:9f:5b:53:69:4f:90:00:0e:0d:d7:b3:81:d8:13: 44:5c:0e:1c:93:f4:a5:b1:8c:e9:85:e3:74:1e:04:94:47:43: c5:e8:42:14:23:65:d7:59:c1:c5:67:6a:ad:1a:a1:a7:97:06: bc:00:66:a8:72:07:92:be:ca:e7:22:4e:3e:a6:b0:e7:32:81: 39:fb:d1:fb:c7:19:87:4f:52:72:cb:2b:23:9f:f3:17:ad:49: 62:9a:e3:09:aa:fd:1c:f9:62:97:7b:94:2f:f3:fd:b9:96:fb: 04:20:e4:6f:06:a7:d5:a0:d4:bd:5a:4e:f0:5a:d7:bc:9f:fa: 5e:02:5c:64:fa:fd:ad:a0:67:cc:f2:11:d1:31:8c:c3:06:47: e0:3f:7b:54:c5:cb:dd:21:4c:78:f5:89:ef:0e:8a:fe:33:d8: fd:de:0b:34:b3:c5:86:e6:bc:69:27:4d:71:54:22:da:ea:d5: d0:01:d2:69:80:00:c6:33:b8:61:5b:e7:b2:81:b5:5b:bf:68: 1c:3e:ed:08:a4:46:ed:0f:73:bc:85:0d:61:83:58:54:47:83: 73:d5:40:5c:dc:be:10:e0:b5:99:cd:af:b6:81:2e:a0:31:a7: c5:e7:a6:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaKSmJ/zh622P6ZsNC5T9UidOMYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJDQkEzMzdFMDM3MDM2NUI2ODFENTYzODk4MzU3RjM3 QTdENEQ5NzAeFw0yNTA3MDIxMTAyMjBaFw0yNTA3MDMxMjUxMjBaMDMxMTAvBgNV BAMTKEZEMDg3NDZCMDFFRDE0OEI0RDZDOTY0OTVFQzk2Mjk1MTZDMjRFREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSSpc6Vht23tAfD/y/FEiolcYH hir34Jb01X2V1yr6sR7zdBYGpW1wLK2nxNUk0nFfa+pmZOCSdDMkhj7GVCJm2lQ3 7/isMcLPe+fMtpwL1uaxC32HhEft11ydP1z5sj5JQz9PJ+W0+L2dbuNYu5wGaCWN HtheiozYz2bC1ZVMHzwiwFcZma+q7P4Y/egKxBfLDxRKXSkHip3kd6PWb0N/J9mC rtuAMaj1V0Lg48p86FwceWWTXn5/nM57V8EWWp8TXSpYtXKX7SjxCALRKTtM8nBJ pmsddAGvUcpw88e1d/dtwwAiRHR1/1yv32Z4XmIgNd+pGvPyVd78JGbUgo31AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/Qh0awHtFItNbJZJXslilRbCTt4wHwYDVR0j BBgwFoAUIsujN+A3A2W2gdVjiYNX83p9TZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzNwOXRrY2hkQVB2cEo5U29xeXA5cVpIR205Y1M5NExSYTFIOWdreFlM QVMvMi8yMkNCQTMzN0UwMzcwMzY1QjY4MUQ1NjM4OTgzNTdGMzdBN0Q0RDk3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyQ0JBMzM3RTAzNzAzNjVC NjgxRDU2Mzg5ODM1N0YzN0E3RDREOTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzNwOXRrY2hkQVB2cEo5U29xeXA5cVpIR205Y1M5NExSYTFIOWdreFlMQVMvMi8y MkNCQTMzN0UwMzcwMzY1QjY4MUQ1NjM4OTgzNTdGMzdBN0Q0RDk3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASRVztXPdKUE+fPzibM+A6Ninn27sl59bU2lPkAAODdezgdgTRFwOHJP0pbGM 6YXjdB4ElEdDxehCFCNl11nBxWdqrRqhp5cGvABmqHIHkr7K5yJOPqaw5zKBOfvR +8cZh09ScssrI5/zF61JYprjCar9HPlil3uUL/P9uZb7BCDkbwan1aDUvVpO8FrX vJ/6XgJcZPr9raBnzPIR0TGMwwZH4D97VMXL3SFMePWJ7w6K/jPY/d4LNLPFhua8 aSdNcVQi2urV0AHSaYAAxjO4YVvnsoG1W79oHD7tCKRG7Q9zvIUNYYNYVEeDc9VA XNy+EOC1mc2vtoEuoDGnxeemJg== -----END CERTIFICATE-----Generated at Thu Jul 3 02:56:01 2025 by rpki-client