$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft File: 0688357ED433C0A60770FB474BDB2C72796B78BD.mft (raw, json) Hash identifier: 4d0fmQS8BuXvfrmyZKqTyboMTJZ4Mb6CqDPVdvaVOHA= Subject key identifier: 03:BF:D8:DF:42:57:A4:78:AE:F3:65:00:1B:E7:9E:5E:3E:99:B1:9E Authority key identifier: 06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD Certificate issuer: /CN=0688357ED433C0A60770FB474BDB2C72796B78BD Certificate serial: 43E66012C6710948EAFF7195A7BF6D17EFBFFF2E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject info access: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft Manifest number: 52 Signing time: Fri 13 Jun 2025 23:39:32 +0000 Manifest this update: Fri 13 Jun 2025 23:34:32 +0000 Manifest next update: Sun 15 Jun 2025 00:19:32 +0000 Files and hashes: 1: 0688357ED433C0A60770FB474BDB2C72796B78BD.crl (hash: FffXjTzWJngrOiiIrPGTISMccaWA9VnuYJ7zv9T37Ac=) 2: 3230312e3134302e3234382e302f32322d3332203d3e203631363936.roa (hash: IaTZ4i3zNgWw2pTgrax+ua0Htv3rIzLefPo79rSHOwM=) 3: 323830343a316165303a3a2f33322d3634203d3e203631363936.roa (hash: MNi0hCQVw5LiwCn26uDAV8DWpcneKIoS1bbRQFE26gw=) 4: 3133382e33362e3233322e302f32322d3332203d3e203631363936.roa (hash: 0PAGB5C8H6IcqwDv00MSTHzGTYgYIUYZIqOHywJKqvU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 15 Jun 2025 00:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e6:60:12:c6:71:09:48:ea:ff:71:95:a7:bf:6d:17:ef:bf:ff:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0688357ED433C0A60770FB474BDB2C72796B78BD Validity Not Before: Jun 13 23:34:32 2025 GMT Not After : Jun 15 00:19:32 2025 GMT Subject: CN=03BFD8DF4257A478AEF365001BE79E5E3E99B19E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:89:b2:77:3e:4c:13:a0:cc:1c:ed:04:16: 99:b3:5d:50:38:04:99:dd:37:5e:e6:52:e1:d3:3a: 84:34:f5:90:27:86:70:5f:3d:3a:49:6d:ae:87:c6: ee:93:a2:e3:05:84:6e:74:d0:7b:60:6f:2c:43:3b: bc:91:7a:d8:c0:38:bc:6b:e3:6f:9f:80:14:46:39: ce:21:81:27:4e:8e:6a:9e:bc:a5:f5:27:2a:ff:c4: 2f:14:37:24:89:43:a2:24:05:c7:4b:db:83:f2:15: 0d:7c:af:d6:28:2f:45:3a:2a:d2:f8:e6:31:ec:95: f0:50:fd:ff:4f:95:4c:48:23:c3:5b:7b:8e:9e:2c: 5f:9f:f7:12:17:63:17:e3:f9:6a:7f:46:d3:d4:cc: 0c:cb:fb:9f:6e:d9:7a:51:d0:72:87:39:3f:fc:43: 4f:7b:b9:db:01:79:65:39:73:19:19:90:38:e2:00: 1a:a4:80:7a:57:4c:ee:d7:d3:a6:04:93:d4:6a:ca: 40:dd:6f:49:f2:c1:24:61:25:11:e2:4b:0f:75:a9: 3f:40:3d:d1:64:2d:2b:0f:a4:61:76:f3:97:9e:45: 55:f0:b1:3d:5e:c9:eb:eb:05:e1:1e:68:eb:23:05: 5f:7d:f1:33:8b:d2:8e:48:07:70:6d:de:54:36:43: 24:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BF:D8:DF:42:57:A4:78:AE:F3:65:00:1B:E7:9E:5E:3E:99:B1:9E X509v3 Authority Key Identifier: keyid:06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8b:7f:48:47:68:3b:73:c7:4b:8b:17:ec:10:d7:6f:82:6a: ce:88:6e:73:8b:c4:b1:21:34:6e:59:ef:76:5d:8b:97:e2:c0: f4:c0:25:b9:f7:88:60:19:d2:da:4f:de:31:39:f2:1f:98:3e: fd:16:d9:ea:75:f7:37:86:44:22:63:e5:d4:b5:9d:15:bb:cb: 19:14:ee:cf:b1:e2:38:b0:50:8f:8d:08:d4:ba:b2:60:26:03: 81:a6:08:da:fd:cd:d3:06:91:b7:e6:1d:42:96:1f:79:f9:3a: 94:0e:c6:fb:cc:ad:1e:f7:98:b2:78:dc:f6:cf:0d:6d:06:b8: e3:e3:bf:36:6f:43:51:36:0a:e0:c4:1b:2a:49:0b:4e:97:d1: 2a:15:99:f1:5c:d7:e6:b0:cf:f5:7f:7d:b9:30:a0:f9:66:ec: f0:89:4c:69:b1:36:29:4c:5b:7c:80:bb:66:43:11:94:7c:bb: 29:8d:7c:3d:ff:ee:a9:0d:a8:c0:9c:b0:67:c1:89:b6:14:22: 59:f1:a4:ef:2b:91:b1:ff:51:0d:01:d7:4b:70:2d:09:22:ba: 98:f0:ca:16:52:0a:43:26:94:75:5a:5e:df:3e:1a:0a:1a:ac: 2a:c7:7f:69:91:54:fa:c9:1e:46:6a:51:8d:2f:90:97:1f:75: ee:f4:ff:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ+ZgEsZxCUjq/3GVp79tF++//y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY4ODM1N0VENDMzQzBBNjA3NzBGQjQ3NEJEQjJDNzI3 OTZCNzhCRDAeFw0yNTA2MTMyMzM0MzJaFw0yNTA2MTUwMDE5MzJaMDMxMTAvBgNV BAMTKDAzQkZEOERGNDI1N0E0NzhBRUYzNjUwMDFCRTc5RTVFM0U5OUIxOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC214mydz5ME6DMHO0EFpmzXVA4 BJndN17mUuHTOoQ09ZAnhnBfPTpJba6Hxu6TouMFhG500HtgbyxDO7yRetjAOLxr 42+fgBRGOc4hgSdOjmqevKX1Jyr/xC8UNySJQ6IkBcdL24PyFQ18r9YoL0U6KtL4 5jHslfBQ/f9PlUxII8Nbe46eLF+f9xIXYxfj+Wp/RtPUzAzL+59u2XpR0HKHOT/8 Q097udsBeWU5cxkZkDjiABqkgHpXTO7X06YEk9RqykDdb0nywSRhJRHiSw91qT9A PdFkLSsPpGF285eeRVXwsT1eyevrBeEeaOsjBV998TOL0o5IB3Bt3lQ2QyRvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUA7/Y30JXpHiu82UAG+eeXj6ZsZ4wHwYDVR0j BBgwFoAUBog1ftQzwKYHcPtHS9sscnlreL0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNX c3gvMC8wNjg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2ODgzNTdFRDQzM0MwQTYw NzcwRkI0NzRCREIyQzcyNzk2Qjc4QkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlhFaVJKTlVlVXd2ZWNYYjZNaHpNRGlNSlVvWWFlcjg3ajNxeWNqVGNXc3gvMC8w Njg4MzU3RUQ0MzNDMEE2MDc3MEZCNDc0QkRCMkM3Mjc5NkI3OEJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVot/SEdoO3PHS4sX7BDXb4Jqzohuc4vEsSE0blnvdl2Ll+LA9MAlufeIYBnS 2k/eMTnyH5g+/RbZ6nX3N4ZEImPl1LWdFbvLGRTuz7HiOLBQj40I1LqyYCYDgaYI 2v3N0waRt+YdQpYfefk6lA7G+8ytHveYsnjc9s8NbQa44+O/Nm9DUTYK4MQbKkkL TpfRKhWZ8VzX5rDP9X99uTCg+Wbs8IlMabE2KUxbfIC7ZkMRlHy7KY18Pf/uqQ2o wJywZ8GJthQiWfGk7yuRsf9RDQHXS3AtCSK6mPDKFlIKQyaUdVpe3z4aChqsKsd/ aZFU+skeRmpRjS+Qlx917vT/nQ== -----END CERTIFICATE-----Generated at Sat Jun 14 15:26:23 2025 by rpki-client