$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft File: 28AEA4799AA16796C18CA8950931D4394F01179A.mft (raw, json) Hash identifier: 0XvEpfqyYc0lI4F8uMULxx2llP19UW7KkgHfxK03NUs= Subject key identifier: 18:33:18:4A:BC:E5:85:CD:CB:6D:EC:EE:AC:DE:DB:3A:D6:D6:68:DB Authority key identifier: 28:AE:A4:79:9A:A1:67:96:C1:8C:A8:95:09:31:D4:39:4F:01:17:9A Certificate issuer: /CN=28AEA4799AA16796C18CA8950931D4394F01179A Certificate serial: 75B4F337E5A0F8474420762DBC6C29476927C820 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer Subject info access: rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft Manifest number: 16 Signing time: Mon 30 Jun 2025 11:10:32 +0000 Manifest this update: Mon 30 Jun 2025 11:05:32 +0000 Manifest next update: Tue 01 Jul 2025 14:04:32 +0000 Files and hashes: 1: 3137302e38342e3136342e302f32332d3332203d3e20323635303136.roa (hash: kHXbgZg7rygQyfin7C/TYfcR2ot5QCGlK4QcindM7ks=) 2: 323830343a333137343a3a2f33362d313238203d3e20323635303136.roa (hash: qAzyEkmPw3mlSBC4lABTQiivdhcCsktw+/oqmoHZXow=) 3: 323830343a333137343a383030303a3a2f33362d313238203d3e20323635303136.roa (hash: Rj6vfHuvEIIrIwG8lNEGd6KDgvKS0X/NDvCLaLd/AAg=) 4: 3137302e38342e3136372e302f32342d3332203d3e20323635303136.roa (hash: wWqc+eArRxIqEULMf/BPN5Sv8TYgF7EU4ymtVcgjlTs=) 5: 28AEA4799AA16796C18CA8950931D4394F01179A.crl (hash: 37O3hxXXCH6D3btR+UDs7rlGlFwR/zWheoiFkYV/7vk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.crl rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 14:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b4:f3:37:e5:a0:f8:47:44:20:76:2d:bc:6c:29:47:69:27:c8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28AEA4799AA16796C18CA8950931D4394F01179A Validity Not Before: Jun 30 11:05:32 2025 GMT Not After : Jul 1 14:04:32 2025 GMT Subject: CN=1833184ABCE585CDCB6DECEEACDEDB3AD6D668DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:85:a1:0d:49:6c:ca:4a:01:22:18:ac:15:90: 65:e8:79:a6:52:00:60:cb:e9:d7:a3:12:d7:14:52: 7f:68:47:1a:84:17:6b:d3:e9:26:8f:f1:ef:b5:9a: 89:39:e9:c8:90:a2:49:53:ce:95:46:e6:1e:5a:90: 99:5d:7c:0e:33:00:db:cd:f2:15:2c:9d:28:57:a9: 7b:47:a9:1a:34:33:a7:5a:f6:b1:7d:27:fa:e7:52: 09:2d:ed:31:bb:57:a7:ed:fe:44:3b:21:72:14:01: 94:ed:f6:1c:2c:1b:79:b9:c2:02:e5:4e:86:af:c0: 88:e8:be:43:b9:6f:93:6e:ef:0e:ea:b6:1c:ac:f3: f5:b1:bd:8d:9b:b8:8e:26:a0:e2:80:ce:c5:53:57: 2e:ed:65:67:2d:d9:aa:40:f6:a4:ad:9f:63:01:0d: da:c7:d9:f5:12:1a:98:73:70:81:bc:70:ed:0c:ad: 7b:da:de:a1:7b:ae:6e:ef:62:ea:23:a7:1a:9c:84: 99:1a:35:c6:2f:22:92:9e:00:3b:db:bf:a1:1e:43: 14:6c:3e:f5:04:71:a7:01:0e:00:0d:2e:b5:c1:b5: c2:ba:b9:89:e8:c7:69:26:ad:60:b7:30:4d:d8:20: 76:8a:cd:dd:97:1a:fe:b1:eb:35:57:87:01:b2:88: d5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:33:18:4A:BC:E5:85:CD:CB:6D:EC:EE:AC:DE:DB:3A:D6:D6:68:DB X509v3 Authority Key Identifier: keyid:28:AE:A4:79:9A:A1:67:96:C1:8C:A8:95:09:31:D4:39:4F:01:17:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28AEA4799AA16796C18CA8950931D4394F01179A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/0/28AEA4799AA16796C18CA8950931D4394F01179A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f1:04:db:08:f9:30:e9:2b:40:36:ad:b5:26:0b:94:cf:ef: a9:cc:de:b6:2b:88:14:ac:e9:19:04:2f:f3:33:c7:15:0a:1d: f8:51:f3:57:ca:39:c8:ab:50:fe:3d:96:eb:5f:68:3f:8e:42: 66:ef:0b:35:0d:c2:b7:e7:c4:83:57:03:ef:d8:b8:dc:50:e0: cb:44:ca:0a:b2:84:8a:9d:60:07:d6:df:18:c1:90:c4:d7:31: b2:66:d6:fa:e4:82:4f:3b:51:a3:fb:9d:3f:08:27:8c:1d:04: 1e:d9:6e:94:07:74:c3:61:44:fe:26:52:df:60:41:4f:0a:1b: a0:bd:85:6b:35:3f:f7:fd:9c:19:e5:b8:82:79:b7:1b:4f:51: 59:3d:94:21:75:b3:72:e2:02:60:05:72:c0:6c:e3:a6:4b:a9: 7d:04:1e:48:7e:93:a1:f4:46:c3:a9:52:b3:9b:76:28:a6:02: 5b:a6:80:f6:7c:61:e6:55:47:29:4c:3e:c5:10:68:30:a3:ad: 84:c9:bd:88:48:01:2d:9f:0e:7f:47:1f:7e:73:8f:4d:48:85: cf:05:bf:d3:e9:50:cc:97:90:de:0b:9e:ea:49:97:f4:de:34: 46:b3:94:70:d8:33:e1:c7:48:a2:74:e5:9b:93:a8:fb:fe:4b: 7a:a6:e5:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdbTzN+Wg+EdEIHYtvGwpR2knyCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhBRUE0Nzk5QUExNjc5NkMxOENBODk1MDkzMUQ0Mzk0 RjAxMTc5QTAeFw0yNTA2MzAxMTA1MzJaFw0yNTA3MDExNDA0MzJaMDMxMTAvBgNV BAMTKDE4MzMxODRBQkNFNTg1Q0RDQjZERUNFRUFDREVEQjNBRDZENjY4REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdhaENSWzKSgEiGKwVkGXoeaZS AGDL6dejEtcUUn9oRxqEF2vT6SaP8e+1mok56ciQoklTzpVG5h5akJldfA4zANvN 8hUsnShXqXtHqRo0M6da9rF9J/rnUgkt7TG7V6ft/kQ7IXIUAZTt9hwsG3m5wgLl ToavwIjovkO5b5Nu7w7qthys8/WxvY2buI4moOKAzsVTVy7tZWct2apA9qStn2MB DdrH2fUSGphzcIG8cO0MrXva3qF7rm7vYuojpxqchJkaNcYvIpKeADvbv6EeQxRs PvUEcacBDgANLrXBtcK6uYnox2kmrWC3ME3YIHaKzd2XGv6x6zVXhwGyiNWDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGDMYSrzlhc3LbezurN7bOtbWaNswHwYDVR0j BBgwFoAUKK6keZqhZ5bBjKiVCTHUOU8BF5owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEdyY0JIZWZmSE12NVJtOG83RjJYSjNkTEJ0Qlo5Sms1OEpjZTFiaGZV WGQvMC8yOEFFQTQ3OTlBQTE2Nzk2QzE4Q0E4OTUwOTMxRDQzOTRGMDExNzlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4QUVBNDc5OUFBMTY3OTZD MThDQTg5NTA5MzFENDM5NEYwMTE3OUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEdyY0JIZWZmSE12NVJtOG83RjJYSjNkTEJ0Qlo5Sms1OEpjZTFiaGZVWGQvMC8y OEFFQTQ3OTlBQTE2Nzk2QzE4Q0E4OTUwOTMxRDQzOTRGMDExNzlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARPEE2wj5MOkrQDattSYLlM/vqczetiuIFKzpGQQv8zPHFQod+FHzV8o5yKtQ /j2W619oP45CZu8LNQ3Ct+fEg1cD79i43FDgy0TKCrKEip1gB9bfGMGQxNcxsmbW +uSCTztRo/udPwgnjB0EHtlulAd0w2FE/iZS32BBTwoboL2FazU/9/2cGeW4gnm3 G09RWT2UIXWzcuICYAVywGzjpkupfQQeSH6TofRGw6lSs5t2KKYCW6aA9nxh5lVH KUw+xRBoMKOthMm9iEgBLZ8Of0cffnOPTUiFzwW/0+lQzJeQ3gue6kmX9N40RrOU cNgz4cdIonTlm5Oo+/5Leqblew== -----END CERTIFICATE-----Generated at Mon Jun 30 15:35:50 2025 by rpki-client