$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft File: 0688357ED433C0A60770FB474BDB2C72796B78BD.mft (raw, json) Hash identifier: HMHQgwhcKhNMs94DKza9ytYZ/cseYfwGR8S/6k8i3lc= Subject key identifier: 5E:58:4D:AD:3E:55:DA:12:07:97:74:95:3C:DD:46:0C:92:02:86:CD Authority key identifier: 06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD Certificate issuer: /CN=0688357ED433C0A60770FB474BDB2C72796B78BD Certificate serial: 4C8F1F1A81232E1468CE9D558AC596DBEB875FA8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject info access: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft Manifest number: 4E Signing time: Tue 10 Jun 2025 22:56:48 +0000 Manifest this update: Tue 10 Jun 2025 22:51:48 +0000 Manifest next update: Thu 12 Jun 2025 02:20:48 +0000 Files and hashes: 1: 323830343a316165303a3a2f33322d3634203d3e203631363936.roa (hash: MNi0hCQVw5LiwCn26uDAV8DWpcneKIoS1bbRQFE26gw=) 2: 3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa (hash: IaTZ4i3zNgWw2pTgrax+ua0Htv3rIzLefPo79rSHOwM=) 3: 0688357ED433C0A60770FB474BDB2C72796B78BD.crl (hash: FW2XX2AFmQGP6oMtM/Ulu8YoKiHCpIPQd/uk4OwSe+A=) 4: 3133382e33362e3233322e302f32322d3332203d3e203631363936.roa (hash: 0PAGB5C8H6IcqwDv00MSTHzGTYgYIUYZIqOHywJKqvU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Jun 2025 00:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:8f:1f:1a:81:23:2e:14:68:ce:9d:55:8a:c5:96:db:eb:87:5f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0688357ED433C0A60770FB474BDB2C72796B78BD Validity Not Before: Jun 10 22:51:48 2025 GMT Not After : Jun 12 02:20:48 2025 GMT Subject: CN=5E584DAD3E55DA12079774953CDD460C920286CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:06:0d:33:2e:08:cc:42:81:f1:b4:ea:42: 8d:50:c5:be:79:b4:fd:c2:4c:26:0e:22:7b:0e:12: 37:5e:21:89:af:22:40:d1:5c:9e:58:e5:18:33:ce: a9:0a:04:24:c1:e9:d5:34:9c:21:8a:5e:40:42:85: cc:4f:1f:b5:6e:2d:e7:4f:1d:48:b7:5a:3d:19:9c: 33:d9:00:75:66:dd:a8:5a:bd:23:fe:d1:5b:83:ef: 16:67:59:61:08:df:6f:85:53:fd:1d:89:5f:4c:a3: b7:25:64:91:19:59:be:a8:52:c6:db:7c:36:ae:3f: ed:fb:6e:19:4e:c6:9e:c9:ac:9a:bd:e3:9a:a3:c8: 20:13:c7:c6:dc:f4:d6:16:8b:f0:95:0c:bc:37:93: b9:00:60:6a:ae:5d:55:b5:d6:05:6f:ab:a9:ab:f8: 0f:b0:51:07:47:9e:98:8c:78:67:4e:f7:de:1b:1b: 18:cb:82:87:c9:7c:8f:ee:1a:f4:8e:ea:0f:fe:9c: f5:25:82:4d:6a:ea:d8:49:65:1e:77:b5:0e:bf:1c: 7b:39:f6:42:8c:e0:64:7f:b8:94:eb:86:f3:26:a2: 7b:a5:9b:3d:1e:41:c4:89:3d:8f:57:46:79:e7:7a: 6a:87:1a:a5:9c:03:0c:e0:c5:6f:dc:89:a0:81:ba: 69:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:58:4D:AD:3E:55:DA:12:07:97:74:95:3C:DD:46:0C:92:02:86:CD X509v3 Authority Key Identifier: keyid:06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5c:4f:56:53:61:ac:ee:80:4e:6b:e6:01:7b:f9:e0:0a:26: fd:45:30:a8:ea:fa:ff:99:6f:04:b9:81:42:ee:0c:69:62:02: 9e:5b:a6:a1:0e:72:47:99:b8:9d:31:ae:45:f4:4f:d5:b0:95: d6:2c:b6:10:4c:43:a5:f8:e2:b5:b2:97:dd:0c:9e:85:08:0b: 0a:89:4e:a9:79:92:e8:a0:e5:ee:a7:6f:f5:e3:f5:68:f6:88: 85:c4:a5:ca:e3:bc:55:3a:89:e8:ed:a8:40:ef:ad:71:f1:c9: d1:2b:2d:27:23:78:9e:67:85:50:08:b0:5d:df:90:15:df:8b: 67:f9:c5:84:ad:73:8e:dc:7a:e8:27:88:2f:dd:ba:d8:1f:b5: 99:1e:68:77:60:c6:78:4f:13:3b:9b:ef:0e:f5:5b:70:9c:38: 02:ff:9d:d3:91:32:d6:8a:d6:a7:77:a8:63:5f:42:96:20:79: 35:4d:ef:cf:b5:78:0b:a9:4f:a9:29:89:ac:1c:4e:4c:d2:00: c7:d1:7a:7d:bd:a7:de:09:24:e4:e0:b7:7d:5a:5c:77:76:33: c4:eb:48:8e:35:48:c5:36:43:8f:b5:27:4c:ba:c6:de:f5:c1: cd:77:a5:c3:d2:7d:64:c2:c5:9e:29:73:a6:88:9b:35:7e:37: 78:eb:67:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTI8fGoEjLhRozp1VisWW2+uHX6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4ODM1N0VENDMzQzBBNjA3NzBGQjQ3NEJEQjJDNzI3 OTZCNzhCRDAeFw0yNTA2MTAyMjUxNDhaFw0yNTA2MTIwMjIwNDhaMDMxMTAvBgNV BAMTKDVFNTg0REFEM0U1NURBMTIwNzk3NzQ5NTNDREQ0NjBDOTIwMjg2Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvDgYNMy4IzEKB8bTqQo1Qxb55 tP3CTCYOInsOEjdeIYmvIkDRXJ5Y5RgzzqkKBCTB6dU0nCGKXkBChcxPH7VuLedP HUi3Wj0ZnDPZAHVm3ahavSP+0VuD7xZnWWEI32+FU/0diV9Mo7clZJEZWb6oUsbb fDauP+37bhlOxp7JrJq945qjyCATx8bc9NYWi/CVDLw3k7kAYGquXVW11gVvq6mr +A+wUQdHnpiMeGdO994bGxjLgofJfI/uGvSO6g/+nPUlgk1q6thJZR53tQ6/HHs5 9kKM4GR/uJTrhvMmonulmz0eQcSJPY9XRnnnemqHGqWcAwzgxW/ciaCBumlPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXlhNrT5V2hIHl3SVPN1GDJIChs0wHwYDVR0j BBgwFoAUBog1ftQzwKYHcPtHS9sscnlreL0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNX c3gvMC8wNjg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODgzNTdFRDQzM0MwQTYw NzcwRkI0NzRCREIyQzcyNzk2Qjc4QkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNXc3gvMC8w Njg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj1xPVlNhrO6ATmvmAXv54Aom/UUwqOr6/5lvBLmBQu4MaWICnlumoQ5yR5m4 nTGuRfRP1bCV1iy2EExDpfjitbKX3QyehQgLColOqXmS6KDl7qdv9eP1aPaIhcSl yuO8VTqJ6O2oQO+tcfHJ0SstJyN4nmeFUAiwXd+QFd+LZ/nFhK1zjtx66CeIL926 2B+1mR5od2DGeE8TO5vvDvVbcJw4Av+d05Ey1orWp3eoY19CliB5NU3vz7V4C6lP qSmJrBxOTNIAx9F6fb2n3gkk5OC3fVpcd3YzxOtIjjVIxTZDj7UnTLrG3vXBzXel w9J9ZMLFnilzpoibNX43eOtniw== -----END CERTIFICATE-----Generated at Wed Jun 11 01:37:20 2025 by rpki-client