$ rpki-client -vvf rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.mft File: 354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.mft (raw, json) Hash identifier: deCiO4J5T0ZSLMfdhae2f1sftNLNsyqRs39Le5B4T8A= Subject key identifier: EB:E6:82:40:3C:5D:7F:29:09:4B:3D:ED:55:E2:95:B6:B6:FA:C5:2E Authority key identifier: 35:4E:A4:4B:0B:C0:80:0A:F1:FC:57:5B:0A:10:61:BA:0B:E3:5D:84 Certificate issuer: /CN=354EA44B0BC0800AF1FC575B0A1061BA0BE35D84 Certificate serial: 5835590DCE0E8F69EC211A5D3254FC1DF0E56336 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.cer Subject info access: rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.mft Manifest number: C7 Signing time: Mon 09 Jun 2025 16:27:20 +0000 Manifest this update: Mon 09 Jun 2025 16:22:20 +0000 Manifest next update: Tue 10 Jun 2025 20:23:20 +0000 Files and hashes: 1: 354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.crl (hash: esirrrzpOAs1rY1LmQ6LonX25SM66DGjdaua9mfRnZ0=) 2: 323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa (hash: qMXYhMp+LVYGti2NuSjxj10R7BA4s8v9jTtjkwNr9pg=) 3: 3138362e3235312e3138382e302f32332d3234203d3e20323633353638.roa (hash: OE04vF3otJ8I3Zw+nN0FQbaJuoDxiyn1dU57jIWzqqM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.crl rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 20:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:35:59:0d:ce:0e:8f:69:ec:21:1a:5d:32:54:fc:1d:f0:e5:63:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=354EA44B0BC0800AF1FC575B0A1061BA0BE35D84 Validity Not Before: Jun 9 16:22:20 2025 GMT Not After : Jun 10 20:23:20 2025 GMT Subject: CN=EBE682403C5D7F29094B3DED55E295B6B6FAC52E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d3:c9:64:ea:4e:12:8b:42:37:fe:fd:b4:ea: 31:3f:e2:9f:eb:7b:2b:49:55:67:93:c7:25:38:75: ac:f9:77:80:4f:02:bb:5b:2e:df:0a:65:5d:f9:ed: 54:c9:36:d9:0b:39:96:28:e1:3c:6e:db:0e:9b:e1: be:74:e3:ee:f7:78:aa:a9:dc:c8:5f:db:3e:b7:63: 26:4e:f3:61:6d:4e:b5:4c:d7:01:1c:8a:c3:21:2b: 77:78:8c:8c:9b:72:6a:c1:1d:c1:57:75:a3:54:6e: 46:42:dd:74:6e:92:ac:cf:3b:6b:2b:2f:00:51:cd: 4d:34:27:95:4a:f9:97:7e:1c:34:a7:b3:0d:2c:25: ae:df:70:4f:b7:04:c7:49:c2:58:49:e5:13:21:14: 71:4e:16:ab:cb:9f:3e:2c:9e:7f:76:c7:b9:10:a6: 2d:14:56:ff:cb:df:2e:95:0e:6d:15:8a:29:87:7c: e4:e9:59:1c:2c:a1:44:d1:f7:ce:41:ee:6d:aa:72: ae:ad:2a:19:f6:5a:76:df:3c:b5:69:54:29:ed:62: 93:1d:23:6f:b9:10:20:4c:d1:17:19:6d:b5:e8:39: f0:3c:d1:cd:e6:c9:7e:44:41:2f:fc:f7:89:69:de: e6:63:df:7a:b5:3f:42:7c:11:df:bd:a4:d8:0a:f0: 82:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E6:82:40:3C:5D:7F:29:09:4B:3D:ED:55:E2:95:B6:B6:FA:C5:2E X509v3 Authority Key Identifier: keyid:35:4E:A4:4B:0B:C0:80:0A:F1:FC:57:5B:0A:10:61:BA:0B:E3:5D:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:27:cd:15:72:5a:b4:0d:b9:1f:74:06:76:23:7f:b9:ce:c7: 4d:ac:4d:e3:15:89:46:26:6f:8e:15:50:51:5e:ea:85:f6:7f: 45:f7:1a:bb:dd:e5:71:62:eb:4d:7b:83:62:56:66:ac:c8:b6: f1:1a:08:00:c6:b6:ab:64:a6:4f:c4:59:2e:94:e2:58:81:4a: 6a:6f:c6:fb:cb:04:1d:cb:e2:14:d4:82:55:9d:f0:48:bc:b9: 49:c0:ef:2a:e7:7e:83:3a:88:87:f4:54:b4:ed:c2:2f:85:98: 51:f2:3e:24:24:2d:21:8b:55:5f:5a:c3:26:41:4b:0f:07:0d: 1a:d3:60:81:e5:40:62:5a:65:01:08:99:40:1b:d3:e3:45:7b: 13:99:47:a2:87:a7:a2:66:80:31:61:b3:80:51:a0:94:58:92: e1:47:3e:3b:99:22:c5:e1:13:9b:f1:9d:ba:d8:c3:05:54:a7: 4d:6b:d3:91:60:ac:86:a1:11:75:cb:f5:e1:5d:43:ba:74:3c: de:9d:c8:99:10:ee:f0:4b:f7:47:51:f5:06:60:cb:99:4f:08: 95:5e:4b:99:10:9c:9e:98:b5:ad:92:0a:66:53:48:87:3a:b1: 33:d3:98:3d:18:4f:8e:fc:99:4d:b0:8f:2d:65:29:fd:29:10: a8:22:a8:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWDVZDc4Oj2nsIRpdMlT8HfDlYzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU0RUE0NEIwQkMwODAwQUYxRkM1NzVCMEExMDYxQkEw QkUzNUQ4NDAeFw0yNTA2MDkxNjIyMjBaFw0yNTA2MTAyMDIzMjBaMDMxMTAvBgNV BAMTKEVCRTY4MjQwM0M1RDdGMjkwOTRCM0RFRDU1RTI5NUI2QjZGQUM1MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc08lk6k4Si0I3/v206jE/4p/r eytJVWeTxyU4daz5d4BPArtbLt8KZV357VTJNtkLOZYo4Txu2w6b4b504+73eKqp 3Mhf2z63YyZO82FtTrVM1wEcisMhK3d4jIybcmrBHcFXdaNUbkZC3XRukqzPO2sr LwBRzU00J5VK+Zd+HDSnsw0sJa7fcE+3BMdJwlhJ5RMhFHFOFqvLnz4snn92x7kQ pi0UVv/L3y6VDm0ViimHfOTpWRwsoUTR985B7m2qcq6tKhn2WnbfPLVpVCntYpMd I2+5ECBM0RcZbbXoOfA80c3myX5EQS/894lp3uZj33q1P0J8Ed+9pNgK8IKZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6+aCQDxdfykJSz3tVeKVtrb6xS4wHwYDVR0j BBgwFoAUNU6kSwvAgArx/FdbChBhugvjXYQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMldBNFE0RFFwOVl4REpucWQxQ1Z2QlJIVlFCaFZuRFBTbXBmalVDUDJF Z0svMC8zNTRFQTQ0QjBCQzA4MDBBRjFGQzU3NUIwQTEwNjFCQTBCRTM1RDg0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1NEVBNDRCMEJDMDgwMEFG MUZDNTc1QjBBMTA2MUJBMEJFMzVEODQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MldBNFE0RFFwOVl4REpucWQxQ1Z2QlJIVlFCaFZuRFBTbXBmalVDUDJFZ0svMC8z NTRFQTQ0QjBCQzA4MDBBRjFGQzU3NUIwQTEwNjFCQTBCRTM1RDg0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhSfNFXJatA25H3QGdiN/uc7HTaxN4xWJRiZvjhVQUV7qhfZ/Rfcau93lcWLr TXuDYlZmrMi28RoIAMa2q2SmT8RZLpTiWIFKam/G+8sEHcviFNSCVZ3wSLy5ScDv Kud+gzqIh/RUtO3CL4WYUfI+JCQtIYtVX1rDJkFLDwcNGtNggeVAYlplAQiZQBvT 40V7E5lHooenomaAMWGzgFGglFiS4Uc+O5kixeETm/GdutjDBVSnTWvTkWCshqER dcv14V1DunQ83p3ImRDu8Ev3R1H1BmDLmU8IlV5LmRCcnpi1rZIKZlNIhzqxM9OY PRhPjvyZTbCPLWUp/SkQqCKo5w== -----END CERTIFICATE-----Generated at Tue Jun 10 00:07:43 2025 by rpki-client