$ rpki-client -vvf rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/1/5415C40CC79D87E21B5CAE3AAE104F7BB0EE5669.mft File: 5415C40CC79D87E21B5CAE3AAE104F7BB0EE5669.mft (raw, json) Hash identifier: BUdFqwLod4gP8OauCNs/2LkPjSJugcQKoHewp1jlWp8= Subject key identifier: 82:86:0F:24:9A:97:E3:A0:59:E1:E1:D0:DC:44:B1:91:62:C0:94:F2 Authority key identifier: 54:15:C4:0C:C7:9D:87:E2:1B:5C:AE:3A:AE:10:4F:7B:B0:EE:56:69 Certificate issuer: /CN=5415C40CC79D87E21B5CAE3AAE104F7BB0EE5669 Certificate serial: 1C29375F117CA502F4AD3730DC352605035B4A21 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5415C40CC79D87E21B5CAE3AAE104F7BB0EE5669.cer Subject info access: rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/1/5415C40CC79D87E21B5CAE3AAE104F7BB0EE5669.mft Manifest number: 9F Signing time: Wed 02 Jul 2025 05:07:00 +0000 Manifest this update: Wed 02 Jul 2025 05:01:55 +0000 Manifest next update: Thu 03 Jul 2025 06:03:55 +0000 Files and hashes: 1: 3137302e3234352e36382e302f32322d3234203d3e20323634323535.roa (hash: xien6CneK1vsqz+F9NUecOUA7x+6jmhOc/nnhyRxS58=) 2: 5415C40CC79D87E21B5CAE3AAE104F7BB0EE5669.crl (hash: GLMMP/TQEMQ04opTjAU383UnCHlvBo9lmD6vAnglDeU=) 3: 323830343a323530633a3a2f33322d313238203d3e20323634323535.roa (hash: gkR0RwK7wSP2tbDbGGjkZ5nSNjNQvSsRIwha7LYUXl4=) 4: 3133382e3131382e302e302f32322d3234203d3e20323634323535.roa (hash: wqPzowHbFKtwrjWNmQ4PFYIopDX06Ug2E8V+IFZsnR0=) 5: 3133382e3131372e3137352e302f32342d3234203d3e20323634323535.roa (hash: kwAxtf9h8aG6JasZIheZHBh73mrHFkRxhUBYyGXfsOw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/1/5415C40CC79D87E21B5CAE3AAE104F7BB0EE5669.crl rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/1/5415C40CC79D87E21B5CAE3AAE104F7BB0EE5669.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5415C40CC79D87E21B5CAE3AAE104F7BB0EE5669.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 06:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:29:37:5f:11:7c:a5:02:f4:ad:37:30:dc:35:26:05:03:5b:4a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5415C40CC79D87E21B5CAE3AAE104F7BB0EE5669 Validity Not Before: Jul 2 05:01:55 2025 GMT Not After : Jul 3 06:03:55 2025 GMT Subject: CN=82860F249A97E3A059E1E1D0DC44B19162C094F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:17:22:7c:f7:90:ce:58:8b:69:6b:94:44:df: 30:a8:c8:eb:fa:5a:e4:75:94:b2:23:27:b6:4d:d0: e6:9f:bd:b1:ca:c1:41:64:49:aa:1e:4c:19:d3:58: c7:75:7f:5c:18:cf:31:7b:c9:50:37:9f:5b:c3:24: 7c:be:28:96:60:d0:41:8b:cd:12:23:60:91:04:db: 9f:96:d5:23:b7:5b:8a:91:0a:fc:3f:03:95:a2:b3: bb:de:3f:a0:70:7a:a3:47:c7:9f:aa:4c:8c:3b:a3: 0b:35:e2:66:5f:8a:7e:75:ba:d0:43:5a:6c:e3:1d: ec:4a:26:31:54:8d:fa:be:9a:b7:f5:23:9e:23:6c: b7:9f:1c:ae:a7:52:60:4e:1d:66:bf:9c:01:e8:c3: ee:83:de:51:dd:3d:f4:97:01:30:a4:f4:b3:57:4c: 3f:2f:74:65:4c:7f:d4:76:62:e9:58:ed:ad:09:16: c1:d3:04:49:d1:c4:25:77:62:27:21:18:ff:a3:e2: 7f:45:68:2f:89:40:06:f3:e7:87:13:87:30:c6:fa: 73:6b:b0:c5:b3:07:a3:7c:ce:01:5a:c8:28:35:ec: f2:e3:fe:62:6f:fc:8a:e0:47:f5:26:2c:15:3a:75: 44:0f:7b:75:24:e6:a3:ab:70:27:ae:14:25:5b:4d: 2f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:86:0F:24:9A:97:E3:A0:59:E1:E1:D0:DC:44:B1:91:62:C0:94:F2 X509v3 Authority Key Identifier: keyid:54:15:C4:0C:C7:9D:87:E2:1B:5C:AE:3A:AE:10:4F:7B:B0:EE:56:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/1/5415C40CC79D87E21B5CAE3AAE104F7BB0EE5669.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5415C40CC79D87E21B5CAE3AAE104F7BB0EE5669.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/1/5415C40CC79D87E21B5CAE3AAE104F7BB0EE5669.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:60:20:43:02:9f:57:99:1f:53:d3:be:d7:32:1b:c3:02:69: ca:2c:68:be:3a:09:28:5f:55:94:1b:70:0e:df:09:29:18:72: 9b:98:5b:f8:7f:fd:b1:ee:13:62:8d:3f:88:25:01:fd:a2:1f: 61:4b:18:51:34:84:c2:1b:62:03:76:d3:37:09:d0:d3:92:83: 23:e3:bb:4d:8b:7c:69:57:e5:ac:97:c0:33:f2:d2:48:9b:2c: c2:f6:2e:ec:ae:e2:eb:89:ba:c4:46:85:ec:49:fc:55:48:30: 45:b1:2d:6f:2b:c3:d5:04:0e:f7:5f:9c:01:c4:d2:81:cf:40: 82:02:3e:86:24:bb:0d:50:f3:fe:62:b4:4d:3c:fc:7c:d0:17: 98:3e:e5:18:52:25:21:75:e0:4b:1c:86:24:29:2c:6a:af:f3: 66:75:4d:87:8c:72:cc:8c:9c:3b:c7:29:15:6f:ae:f7:6d:9b: b3:4a:0f:c1:c5:e3:57:17:ec:7b:a7:5c:54:c2:7e:cb:ae:00: 9f:ce:57:7c:fa:a0:fc:91:6f:01:1c:90:81:5c:20:8e:6e:c0: bb:bd:58:c6:a7:cb:aa:55:f8:04:98:2d:03:c6:79:d9:7a:38: e5:c1:90:97:6d:b8:97:c8:08:46:dd:73:4d:39:cb:82:2a:ba: 6a:8f:c0:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHCk3XxF8pQL0rTcw3DUmBQNbSiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQxNUM0MENDNzlEODdFMjFCNUNBRTNBQUUxMDRGN0JC MEVFNTY2OTAeFw0yNTA3MDIwNTAxNTVaFw0yNTA3MDMwNjAzNTVaMDMxMTAvBgNV BAMTKDgyODYwRjI0OUE5N0UzQTA1OUUxRTFEMERDNDRCMTkxNjJDMDk0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJFyJ895DOWItpa5RE3zCoyOv6 WuR1lLIjJ7ZN0OafvbHKwUFkSaoeTBnTWMd1f1wYzzF7yVA3n1vDJHy+KJZg0EGL zRIjYJEE25+W1SO3W4qRCvw/A5Wis7veP6BweqNHx5+qTIw7ows14mZfin51utBD WmzjHexKJjFUjfq+mrf1I54jbLefHK6nUmBOHWa/nAHow+6D3lHdPfSXATCk9LNX TD8vdGVMf9R2YulY7a0JFsHTBEnRxCV3YichGP+j4n9FaC+JQAbz54cThzDG+nNr sMWzB6N8zgFayCg17PLj/mJv/IrgR/UmLBU6dUQPe3Uk5qOrcCeuFCVbTS/9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgoYPJJqX46BZ4eHQ3ESxkWLAlPIwHwYDVR0j BBgwFoAUVBXEDMedh+IbXK46rhBPe7DuVmkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSkVKWkhTYXBwcnVnbnkzdm52OUJjNFphdFJDZkZrU3k2SnM2OHlSb3VT TkMvMS81NDE1QzQwQ0M3OUQ4N0UyMUI1Q0FFM0FBRTEwNEY3QkIwRUU1NjY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0MTVDNDBDQzc5RDg3RTIx QjVDQUUzQUFFMTA0RjdCQjBFRTU2NjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SkVKWkhTYXBwcnVnbnkzdm52OUJjNFphdFJDZkZrU3k2SnM2OHlSb3VTTkMvMS81 NDE1QzQwQ0M3OUQ4N0UyMUI1Q0FFM0FBRTEwNEY3QkIwRUU1NjY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuGAgQwKfV5kfU9O+1zIbwwJpyixovjoJKF9VlBtwDt8JKRhym5hb+H/9se4T Yo0/iCUB/aIfYUsYUTSEwhtiA3bTNwnQ05KDI+O7TYt8aVflrJfAM/LSSJsswvYu 7K7i64m6xEaF7En8VUgwRbEtbyvD1QQO91+cAcTSgc9AggI+hiS7DVDz/mK0TTz8 fNAXmD7lGFIlIXXgSxyGJCksaq/zZnVNh4xyzIycO8cpFW+u922bs0oPwcXjVxfs e6dcVMJ+y64An85XfPqg/JFvARyQgVwgjm7Au71YxqfLqlX4BJgtA8Z52Xo45cGQ l224l8gIRt1zTTnLgiq6ao/AzA== -----END CERTIFICATE-----Generated at Wed Jul 2 20:20:10 2025 by rpki-client