$ rpki-client -vvf rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft File: 22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft (raw, json) Hash identifier: oD/aGVk4kMErTzd3bXd7Go2+NdOjEOJHmWuNS3G/M00= Subject key identifier: 41:D7:EC:D7:31:0F:37:11:2D:CF:21:D6:18:6F:62:FF:05:4E:2C:99 Authority key identifier: 22:DE:B3:D2:A1:4F:98:97:27:53:CA:F8:B7:BC:5C:5E:20:27:F7:FB Certificate issuer: /CN=22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB Certificate serial: 6E0718590D8B9595685D95B8E50B5D5F84F9BF5F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft Manifest number: 0216 Signing time: Tue 01 Jul 2025 22:48:13 +0000 Manifest this update: Tue 01 Jul 2025 22:43:13 +0000 Manifest next update: Wed 02 Jul 2025 23:35:13 +0000 Files and hashes: 1: 22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.crl (hash: nQZWBC0anUWmOnvEbVDFypKfUrY7mP4WOa4juubr1Ok=) 2: 3133382e35392e3230382e302f32322d3234203d3e20323634313136.roa (hash: FT60wN+mTJCyFpoM4iPOVIQrtCrDtPcGjx8aPEN7+Gg=) 3: 323830343a323262303a3a2f33322d3438203d3e20323634313136.roa (hash: qqoGi+kiZZrqmP9rBhvJ1LfaPlz846VGu8vmez2bVQs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.crl rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 23:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:07:18:59:0d:8b:95:95:68:5d:95:b8:e5:0b:5d:5f:84:f9:bf:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB Validity Not Before: Jul 1 22:43:13 2025 GMT Not After : Jul 2 23:35:13 2025 GMT Subject: CN=41D7ECD7310F37112DCF21D6186F62FF054E2C99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:58:d6:2d:f2:69:08:d7:a1:f8:5d:0a:e7:e3: 9e:fc:a3:2c:e2:56:47:5b:8e:d4:0d:6d:bf:33:b5: 4c:33:e4:5e:c4:90:b1:a5:66:ea:06:0d:8a:ee:fc: 3b:24:1d:c7:3b:12:8d:33:23:0d:dc:10:38:41:56: 1a:b4:0e:bc:64:cd:a9:ce:67:2e:69:a7:66:38:7a: db:a8:59:a7:58:50:0c:28:b8:9f:9f:f9:c1:76:f8: e4:07:b1:25:da:95:dc:ce:47:fe:e3:2c:7b:c7:c2: ee:0e:e7:8e:13:34:2e:b6:c3:af:24:ce:e0:27:12: ec:a8:b8:02:11:39:e5:f9:10:3e:35:9d:41:d0:bd: f0:db:08:fa:17:62:7d:74:d3:69:97:d0:97:35:1e: 47:72:25:c7:af:70:33:48:1c:e6:e4:e3:ca:79:e9: 82:80:52:97:87:b5:b7:03:3a:ec:18:cd:a2:1a:b3: 55:44:d7:30:34:85:6c:84:44:9f:e8:2c:5e:a2:e8: aa:82:3d:5a:b5:04:9c:d9:8e:86:0e:9f:c9:86:47: 27:5e:e7:e3:93:ae:fd:14:b7:5e:ab:9a:fd:0f:3a: fa:21:ce:a5:09:49:30:15:94:23:cf:b5:66:f8:89: 6e:da:a2:df:02:38:05:36:9e:05:5f:cc:64:84:f0: 7b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D7:EC:D7:31:0F:37:11:2D:CF:21:D6:18:6F:62:FF:05:4E:2C:99 X509v3 Authority Key Identifier: keyid:22:DE:B3:D2:A1:4F:98:97:27:53:CA:F8:B7:BC:5C:5E:20:27:F7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:df:5a:3e:c5:39:6e:11:01:f7:0b:8e:73:ea:bc:fb:f5:a1: 2f:0f:22:12:3c:96:04:bd:5e:58:a9:aa:05:7f:63:1a:94:f9: 74:02:64:a0:ac:1a:30:94:e3:4c:d1:f3:69:8d:1f:7d:db:15: dc:01:27:ec:5e:79:bb:2f:4b:e5:48:c0:b8:75:3d:cc:15:4b: 01:f3:e8:d0:a6:3b:64:14:ee:7b:85:83:8e:85:8b:f6:6d:e0: 36:1e:f4:e3:58:54:ce:2a:ec:3a:2e:23:54:3c:c8:ac:64:52: 25:02:08:52:49:54:12:8a:8d:b2:58:eb:7e:3b:e1:7d:5c:39: ee:63:9a:16:10:0e:0a:62:2e:39:77:8c:80:85:f9:fd:1c:00: c9:18:e8:39:36:bf:14:c3:53:46:76:16:73:70:54:87:dc:d8: 81:49:57:43:fd:f7:62:8e:51:cf:83:42:e6:b7:c5:66:32:11: 91:16:61:bd:28:02:99:f9:31:b0:2a:dd:ef:e8:a5:63:3b:e0: 6a:92:f1:57:9a:61:72:c0:7c:f8:64:97:21:60:47:38:0b:cf: 92:c5:13:6b:0f:fd:d7:68:80:59:6b:ce:5d:9b:00:3c:18:84: 05:4f:2c:92:84:2c:79:3c:5a:df:bf:be:5c:26:1a:63:22:71: 51:3c:13:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbgcYWQ2LlZVoXZW45QtdX4T5v18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJERUIzRDJBMTRGOTg5NzI3NTNDQUY4QjdCQzVDNUUy MDI3RjdGQjAeFw0yNTA3MDEyMjQzMTNaFw0yNTA3MDIyMzM1MTNaMDMxMTAvBgNV BAMTKDQxRDdFQ0Q3MzEwRjM3MTEyRENGMjFENjE4NkY2MkZGMDU0RTJDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVWNYt8mkI16H4XQrn4578oyzi VkdbjtQNbb8ztUwz5F7EkLGlZuoGDYru/DskHcc7Eo0zIw3cEDhBVhq0DrxkzanO Zy5pp2Y4etuoWadYUAwouJ+f+cF2+OQHsSXaldzOR/7jLHvHwu4O544TNC62w68k zuAnEuyouAIROeX5ED41nUHQvfDbCPoXYn1002mX0Jc1HkdyJcevcDNIHObk48p5 6YKAUpeHtbcDOuwYzaIas1VE1zA0hWyERJ/oLF6i6KqCPVq1BJzZjoYOn8mGRyde 5+OTrv0Ut16rmv0POvohzqUJSTAVlCPPtWb4iW7aot8COAU2ngVfzGSE8HvDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQdfs1zEPNxEtzyHWGG9i/wVOLJkwHwYDVR0j BBgwFoAUIt6z0qFPmJcnU8r4t7xcXiAn9/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHVYUjVBcHVYcFRheEZ6ekc1R1RVcEJCczRUdVVTVTl2RVAzemZWdFpY NGQvMC8yMkRFQjNEMkExNEY5ODk3Mjc1M0NBRjhCN0JDNUM1RTIwMjdGN0ZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyREVCM0QyQTE0Rjk4OTcy NzUzQ0FGOEI3QkM1QzVFMjAyN0Y3RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SHVYUjVBcHVYcFRheEZ6ekc1R1RVcEJCczRUdVVTVTl2RVAzemZWdFpYNGQvMC8y MkRFQjNEMkExNEY5ODk3Mjc1M0NBRjhCN0JDNUM1RTIwMjdGN0ZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAod9aPsU5bhEB9wuOc+q8+/WhLw8iEjyWBL1eWKmqBX9jGpT5dAJkoKwaMJTj TNHzaY0ffdsV3AEn7F55uy9L5UjAuHU9zBVLAfPo0KY7ZBTue4WDjoWL9m3gNh70 41hUzirsOi4jVDzIrGRSJQIIUklUEoqNsljrfjvhfVw57mOaFhAOCmIuOXeMgIX5 /RwAyRjoOTa/FMNTRnYWc3BUh9zYgUlXQ/33Yo5Rz4NC5rfFZjIRkRZhvSgCmfkx sCrd7+ilYzvgapLxV5phcsB8+GSXIWBHOAvPksUTaw/912iAWWvOXZsAPBiEBU8s koQseTxa37++XCYaYyJxUTwT0A== -----END CERTIFICATE-----Generated at Wed Jul 2 15:59:19 2025 by rpki-client