$ rpki-client -vvf rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/1/695731EDFF54F578E90830237184310A6E30F74C.mft File: 695731EDFF54F578E90830237184310A6E30F74C.mft (raw, json) Hash identifier: 5Do+x3QaQ7pnQp+VD49AnDR/8BGDlgkk6GdKxpuUPIk= Subject key identifier: 2E:81:25:66:06:34:A8:7E:A0:40:3B:C9:6F:74:3D:6B:7E:A2:2A:A1 Authority key identifier: 69:57:31:ED:FF:54:F5:78:E9:08:30:23:71:84:31:0A:6E:30:F7:4C Certificate issuer: /CN=695731EDFF54F578E90830237184310A6E30F74C Certificate serial: 590E986F9052DD2449B7EF42BA8B9CF15143DACF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695731EDFF54F578E90830237184310A6E30F74C.cer Subject info access: rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/1/695731EDFF54F578E90830237184310A6E30F74C.mft Manifest number: 025D Signing time: Wed 02 Jul 2025 08:35:10 +0000 Manifest this update: Wed 02 Jul 2025 08:30:10 +0000 Manifest next update: Thu 03 Jul 2025 09:32:10 +0000 Files and hashes: 1: 695731EDFF54F578E90830237184310A6E30F74C.crl (hash: TRcY3HIvLzw6ZYRJXljess7W2mofif1HejeQ4mzqD74=) 2: 34352e3138312e3130342e302f32322d3235203d3e20323639313830.roa (hash: hXLsjsjfw06KoXKFhh+PSm2DkVkRoZLr4pTh9Ln/McQ=) 3: 323830343a363039633a3a2f33322d3438203d3e20323639313830.roa (hash: ppP3yse6G/FX91m/jUwIygwRkddoAMrS3xPsvAQcsoU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/1/695731EDFF54F578E90830237184310A6E30F74C.crl rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/1/695731EDFF54F578E90830237184310A6E30F74C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695731EDFF54F578E90830237184310A6E30F74C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 09:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:0e:98:6f:90:52:dd:24:49:b7:ef:42:ba:8b:9c:f1:51:43:da:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=695731EDFF54F578E90830237184310A6E30F74C Validity Not Before: Jul 2 08:30:10 2025 GMT Not After : Jul 3 09:32:10 2025 GMT Subject: CN=2E8125660634A87EA0403BC96F743D6B7EA22AA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:26:06:12:18:00:76:2a:85:70:5c:31:cf:86: 71:6b:c6:b9:8c:15:f5:9c:a4:76:90:40:96:e1:c5: 05:e3:7e:2f:67:a0:c4:5d:4b:82:ba:d7:58:08:6b: c1:8c:a3:64:d8:c5:7a:96:21:24:25:30:2c:22:20: d8:e9:6f:99:56:15:fc:9f:89:99:6f:87:83:8b:59: 31:80:cd:f6:01:fa:26:5b:38:20:f5:9a:b0:75:d2: d6:30:f7:49:8c:5c:4e:42:41:ab:de:57:04:66:8b: 9b:a6:17:18:fa:cb:b4:53:1c:47:bc:95:e0:10:ac: aa:84:43:29:4d:fd:7f:4d:70:ad:44:ae:76:12:f7: ec:ab:33:4a:75:f0:f5:04:e8:52:10:18:51:0c:e6: 72:62:e1:f0:54:77:cf:4e:11:8c:85:5c:54:6e:5b: 34:1b:ab:6f:9c:24:d2:66:a0:82:1d:d3:d9:34:8d: 0c:99:54:dc:dc:b5:45:2b:91:ce:c8:f3:2a:5d:9e: 51:5a:04:47:ff:e6:20:3f:d4:1e:f1:fe:65:34:4d: 77:01:c6:b2:29:64:88:15:36:c6:49:aa:ee:6d:55: 64:a9:b8:d8:ab:9f:4e:70:42:d4:47:c1:16:d6:0f: 5a:d0:0e:3a:13:72:51:5d:fd:3d:76:f1:0a:b5:3e: e1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:81:25:66:06:34:A8:7E:A0:40:3B:C9:6F:74:3D:6B:7E:A2:2A:A1 X509v3 Authority Key Identifier: keyid:69:57:31:ED:FF:54:F5:78:E9:08:30:23:71:84:31:0A:6E:30:F7:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/1/695731EDFF54F578E90830237184310A6E30F74C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/695731EDFF54F578E90830237184310A6E30F74C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn2PoZUTVXkuatDUyMatcfUZBG2HPZtCmdRw9YwEJE4d/1/695731EDFF54F578E90830237184310A6E30F74C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:81:a5:bd:f4:ac:6a:e0:40:7c:d8:2f:8b:a5:cb:28:47:b2: 88:d2:e8:81:3d:06:44:3b:09:66:1a:60:f4:99:1a:94:c1:65: 3e:02:18:1e:f6:73:4e:af:01:8a:b1:c1:f1:ed:f4:de:9f:7d: 47:83:69:3c:64:0b:bf:89:86:a8:f4:44:0d:61:60:f1:aa:37: 8b:6d:59:9f:02:51:96:42:0d:bd:fe:3e:34:63:d9:18:17:be: 5b:c5:12:b3:39:20:d7:a5:e0:88:b1:bc:e7:ae:ee:7d:13:1c: 7f:d5:94:00:a5:44:d1:c7:4f:0e:bb:23:11:a1:c4:93:64:0f: aa:3b:84:e4:fc:d3:82:8a:a7:64:ab:c4:12:59:d3:06:32:c4: 10:6f:a7:63:e8:54:f6:f9:fd:b9:0b:8e:ae:47:f8:de:37:6b: 3e:7c:e0:be:ae:fe:a7:81:66:47:d9:93:04:d6:14:59:68:7c: 7d:d8:af:ba:af:18:87:1d:52:92:9f:cb:64:7f:db:08:9e:ba: 34:70:e4:63:95:a3:e6:e1:a1:a1:bc:9a:ad:21:af:0f:51:34: 62:56:8b:df:24:09:c5:64:96:3c:bf:22:8c:2b:7a:55:d3:75: 79:c2:b6:b4:54:ca:4b:4b:92:f0:35:91:a6:12:01:e1:54:6f: c4:b2:ab:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWQ6Yb5BS3SRJt+9Cuouc8VFD2s8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk1NzMxRURGRjU0RjU3OEU5MDgzMDIzNzE4NDMxMEE2 RTMwRjc0QzAeFw0yNTA3MDIwODMwMTBaFw0yNTA3MDMwOTMyMTBaMDMxMTAvBgNV BAMTKDJFODEyNTY2MDYzNEE4N0VBMDQwM0JDOTZGNzQzRDZCN0VBMjJBQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXJgYSGAB2KoVwXDHPhnFrxrmM FfWcpHaQQJbhxQXjfi9noMRdS4K611gIa8GMo2TYxXqWISQlMCwiINjpb5lWFfyf iZlvh4OLWTGAzfYB+iZbOCD1mrB10tYw90mMXE5CQaveVwRmi5umFxj6y7RTHEe8 leAQrKqEQylN/X9NcK1ErnYS9+yrM0p18PUE6FIQGFEM5nJi4fBUd89OEYyFXFRu WzQbq2+cJNJmoIId09k0jQyZVNzctUUrkc7I8ypdnlFaBEf/5iA/1B7x/mU0TXcB xrIpZIgVNsZJqu5tVWSpuNirn05wQtRHwRbWD1rQDjoTclFd/T128Qq1PuG3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULoElZgY0qH6gQDvJb3Q9a36iKqEwHwYDVR0j BBgwFoAUaVcx7f9U9XjpCDAjcYQxCm4w90wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR24yUG9aVVRWWGt1YXREVXlNYXRjZlVaQkcySFBadENtZFJ3OVl3RUpF NGQvMS82OTU3MzFFREZGNTRGNTc4RTkwODMwMjM3MTg0MzEwQTZFMzBGNzRDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5NTczMUVERkY1NEY1NzhF OTA4MzAyMzcxODQzMTBBNkUzMEY3NEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R24yUG9aVVRWWGt1YXREVXlNYXRjZlVaQkcySFBadENtZFJ3OVl3RUpFNGQvMS82 OTU3MzFFREZGNTRGNTc4RTkwODMwMjM3MTg0MzEwQTZFMzBGNzRDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqoGlvfSsauBAfNgvi6XLKEeyiNLogT0GRDsJZhpg9JkalMFlPgIYHvZzTq8B irHB8e303p99R4NpPGQLv4mGqPREDWFg8ao3i21ZnwJRlkINvf4+NGPZGBe+W8US szkg16XgiLG8567ufRMcf9WUAKVE0cdPDrsjEaHEk2QPqjuE5PzTgoqnZKvEElnT BjLEEG+nY+hU9vn9uQuOrkf43jdrPnzgvq7+p4FmR9mTBNYUWWh8fdivuq8Yhx1S kp/LZH/bCJ66NHDkY5Wj5uGhobyarSGvD1E0YlaL3yQJxWSWPL8ijCt6VdN1ecK2 tFTKS0uS8DWRphIB4VRvxLKriQ== -----END CERTIFICATE-----Generated at Wed Jul 2 23:22:24 2025 by rpki-client