$ rpki-client -vvf rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft File: 9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft (raw, json) Hash identifier: +niYYesqSRrI/kPpk82YRDmt9gMUZVRniLp/lcR5wVw= Subject key identifier: A2:10:81:86:65:15:FE:B1:FB:EF:36:0F:EB:7A:F2:B4:4F:7D:40:EF Authority key identifier: 9E:1D:7C:47:8D:88:0E:09:3C:83:DC:BE:1D:E4:0D:E8:8E:F8:54:6F Certificate issuer: /CN=9E1D7C478D880E093C83DCBE1DE40DE88EF8546F Certificate serial: 08705D348267D9DF56C02CFAF67E3EC0A96296F6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer Subject info access: rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft Manifest number: 025E Signing time: Wed 02 Jul 2025 22:28:46 +0000 Manifest this update: Wed 02 Jul 2025 22:23:46 +0000 Manifest next update: Fri 04 Jul 2025 02:08:46 +0000 Files and hashes: 1: 3137372e3133362e3231362e302f32312d3234203d3e20323632383431.roa (hash: pkwtlkOIUTOW0vCXw7qG1lC1xTCoa8/0oVE1nZMmSW4=) 2: 3137372e31302e32382e302f32322d3234203d3e20323632383431.roa (hash: psmOj8EmDDzyd0bmAsj109hherhULfNzcjmq4S7y+B4=) 3: 3137372e31302e32342e302f32322d3234203d3e20323632383431.roa (hash: U+A01WCuvZZPHwlM0t2T4L3RVjEHPKcBpkgoSeAHY4M=) 4: 323830343a6662303a3a2f33322d3332203d3e20323632383431.roa (hash: RbYXVffjJdvIeDJVoaVQ4H7OCdhMNRWApBNY9cjM2es=) 5: 9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl (hash: s0Gd7/v271niKTGkDpmq6aB7YTrkDRSWF++gvE/Ik+A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Jul 2025 00:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:70:5d:34:82:67:d9:df:56:c0:2c:fa:f6:7e:3e:c0:a9:62:96:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E1D7C478D880E093C83DCBE1DE40DE88EF8546F Validity Not Before: Jul 2 22:23:46 2025 GMT Not After : Jul 4 02:08:46 2025 GMT Subject: CN=A21081866515FEB1FBEF360FEB7AF2B44F7D40EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:12:e3:a2:52:8f:7b:89:37:75:60:f1:6f:31: e9:2b:c2:83:e3:a8:37:3e:be:3c:0f:4e:f0:4c:0f: 9e:06:8b:fd:57:34:0f:45:be:04:d1:d5:76:1b:77: ca:9f:69:64:b4:a9:f7:6c:c8:16:f9:c3:74:cb:6b: 8d:ba:3b:4e:ec:d5:b1:49:18:f3:cc:45:be:4d:55: 3b:24:3a:75:8e:5d:a4:09:63:c4:b6:69:12:ea:69: 13:20:d2:e9:52:4d:c0:d8:62:66:76:28:b2:46:5d: e2:7e:03:42:dd:63:5f:43:c2:1d:25:74:3e:4c:01: 00:7e:c7:62:30:8a:e1:3c:3b:68:ca:89:0a:f2:ec: 2e:06:00:3b:bb:5d:ac:3e:66:7e:c7:84:d5:32:ba: 1d:bd:27:c8:64:4e:8c:25:1c:c9:b0:bd:44:66:77: de:2b:98:00:8a:64:a5:a4:22:de:e6:23:f4:4e:d1: ef:2e:1f:f8:01:4b:2f:26:06:86:07:42:83:5b:93: ad:f3:3f:96:7c:ef:9e:ff:c7:92:c5:90:74:c6:6f: 58:f1:40:9b:af:e8:5d:c2:7e:01:e7:0c:c9:44:a2: 09:5c:60:6f:df:29:99:9c:8d:c8:04:ee:4c:cc:cd: d0:3f:3d:a1:ec:63:70:10:4b:ca:2b:90:fb:35:74: 28:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:10:81:86:65:15:FE:B1:FB:EF:36:0F:EB:7A:F2:B4:4F:7D:40:EF X509v3 Authority Key Identifier: keyid:9E:1D:7C:47:8D:88:0E:09:3C:83:DC:BE:1D:E4:0D:E8:8E:F8:54:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e8:dc:22:29:0f:9e:bb:7c:69:08:f7:49:12:22:35:df:d6: e7:bc:19:e8:06:e9:bb:1e:c7:65:7b:a5:1d:32:3f:17:7f:7b: 59:ce:b8:28:f1:9e:14:16:b1:93:a0:2e:e9:e0:bb:e6:ac:88: 4e:70:61:dc:f8:8e:89:51:1d:62:90:0f:de:87:77:1c:73:6e: eb:b5:f1:9e:85:84:b2:d5:e3:78:31:14:9d:62:d2:b5:53:96: c3:78:70:54:34:49:47:22:a8:60:e7:fe:6f:39:40:59:a0:b4: ac:c1:ed:b6:31:45:81:86:7a:24:c6:9d:c6:19:84:26:b9:59: 97:d7:ec:98:35:ea:1c:d9:a0:c4:f6:b2:1a:fa:0a:50:50:87: 78:c2:5a:b9:39:a0:e9:d2:67:08:05:bf:e5:b7:95:97:33:83: 82:d4:a6:be:89:7b:2d:63:b3:6a:32:a5:37:c6:58:d0:8f:e7: 00:97:cd:ee:af:95:d7:6c:73:49:3d:c2:cc:94:71:1c:74:b3: 69:77:3e:e9:2b:8a:be:c5:cb:c8:a6:2d:27:01:f5:fb:dd:1d: a9:8f:03:4f:6a:26:9d:43:4a:20:dc:7e:0c:4b:fe:80:1d:6f: ff:2b:67:52:05:39:95:15:a3:69:16:d6:71:62:3e:ee:0f:09: 1c:65:ec:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCHBdNIJn2d9WwCz69n4+wKlilvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUxRDdDNDc4RDg4MEUwOTNDODNEQ0JFMURFNDBERTg4 RUY4NTQ2RjAeFw0yNTA3MDIyMjIzNDZaFw0yNTA3MDQwMjA4NDZaMDMxMTAvBgNV BAMTKEEyMTA4MTg2NjUxNUZFQjFGQkVGMzYwRkVCN0FGMkI0NEY3RDQwRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZEuOiUo97iTd1YPFvMekrwoPj qDc+vjwPTvBMD54Gi/1XNA9FvgTR1XYbd8qfaWS0qfdsyBb5w3TLa426O07s1bFJ GPPMRb5NVTskOnWOXaQJY8S2aRLqaRMg0ulSTcDYYmZ2KLJGXeJ+A0LdY19Dwh0l dD5MAQB+x2IwiuE8O2jKiQry7C4GADu7Xaw+Zn7HhNUyuh29J8hkTowlHMmwvURm d94rmACKZKWkIt7mI/RO0e8uH/gBSy8mBoYHQoNbk63zP5Z8757/x5LFkHTGb1jx QJuv6F3CfgHnDMlEoglcYG/fKZmcjcgE7kzMzdA/PaHsY3AQS8orkPs1dCjTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUohCBhmUV/rH77zYP63rytE99QO8wHwYDVR0j BBgwFoAUnh18R42IDgk8g9y+HeQN6I74VG8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSE1MVXZuOXRnV2NTalZGc3VHMldac3BpZEFIamRpaThnelByd1JGUEYy UG4vMS85RTFEN0M0NzhEODgwRTA5M0M4M0RDQkUxREU0MERFODhFRjg1NDZGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFMUQ3QzQ3OEQ4ODBFMDkz QzgzRENCRTFERTQwREU4OEVGODU0NkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SE1MVXZuOXRnV2NTalZGc3VHMldac3BpZEFIamRpaThnelByd1JGUEYyUG4vMS85 RTFEN0M0NzhEODgwRTA5M0M4M0RDQkUxREU0MERFODhFRjg1NDZGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ+jcIikPnrt8aQj3SRIiNd/W57wZ6Abpux7HZXulHTI/F397Wc64KPGeFBax k6Au6eC75qyITnBh3PiOiVEdYpAP3od3HHNu67XxnoWEstXjeDEUnWLStVOWw3hw VDRJRyKoYOf+bzlAWaC0rMHttjFFgYZ6JMadxhmEJrlZl9fsmDXqHNmgxPayGvoK UFCHeMJauTmg6dJnCAW/5beVlzODgtSmvol7LWOzajKlN8ZY0I/nAJfN7q+V12xz ST3CzJRxHHSzaXc+6SuKvsXLyKYtJwH1+90dqY8DT2omnUNKINx+DEv+gB1v/ytn UgU5lRWjaRbWcWI+7g8JHGXs3g== -----END CERTIFICATE-----Generated at Thu Jul 3 03:27:01 2025 by rpki-client