$ rpki-client -vvf rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft File: CA5EB04FC8DA601024E12F23EF139B499E69972D.mft (raw, json) Hash identifier: krZqNUkmb7uXVpEnmWJgXQ0zv/5nkQhiBmg0YHhia5E= Subject key identifier: DB:D8:82:25:6F:A3:D5:19:8B:BF:64:34:FA:D3:22:D1:7A:FF:E6:0F Authority key identifier: CA:5E:B0:4F:C8:DA:60:10:24:E1:2F:23:EF:13:9B:49:9E:69:97:2D Certificate issuer: /CN=CA5EB04FC8DA601024E12F23EF139B499E69972D Certificate serial: 1EBF3BCAAC017BB6FCB62C6742F827F8A91EAA68 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer Subject info access: rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft Manifest number: 023F Signing time: Sun 08 Jun 2025 14:17:52 +0000 Manifest this update: Sun 08 Jun 2025 14:12:52 +0000 Manifest next update: Mon 09 Jun 2025 15:04:52 +0000 Files and hashes: 1: 323830343a373634383a3a2f33322d3438203d3e20323731313031.roa (hash: 6V0YrvLeMIiLEZTlyxZrdu23I1DIkWgF0T9EpN6P57k=) 2: 3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa (hash: dl2xxNKmpGyFGlF7VUwUzm3hSJXtz/mVLOM/KbR/f88=) 3: CA5EB04FC8DA601024E12F23EF139B499E69972D.crl (hash: v+EHfkpzRW2wvKB0Eo2iwbXBaGGX2NUfWmhysC9LqfY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.crl rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Jun 2025 14:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:bf:3b:ca:ac:01:7b:b6:fc:b6:2c:67:42:f8:27:f8:a9:1e:aa:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA5EB04FC8DA601024E12F23EF139B499E69972D Validity Not Before: Jun 8 14:12:52 2025 GMT Not After : Jun 9 15:04:52 2025 GMT Subject: CN=DBD882256FA3D5198BBF6434FAD322D17AFFE60F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:35:4b:02:dc:2b:f6:11:a2:1c:35:4b:c6:66: 5c:11:a0:db:ea:64:cb:c7:eb:9d:6a:6c:c6:06:1e: 48:4a:c5:2e:f9:ed:77:7f:3f:05:90:46:97:59:11: cf:58:5f:f7:35:75:e7:db:ed:22:56:03:08:80:3c: 61:42:2d:ec:1f:2c:cb:ca:0f:dc:91:c2:0c:8b:09: 39:19:1b:7a:14:7e:62:e6:4f:de:81:14:23:d2:20: 6d:84:7a:93:cf:00:20:b5:46:52:ea:79:2d:22:3c: ee:9b:57:f2:e6:5a:98:8e:67:94:2b:45:4b:af:fa: 87:1c:6f:1b:80:66:93:e3:36:31:1d:40:1c:fc:a4: 36:af:80:e5:a2:74:e8:24:60:35:f3:64:4c:2c:90: fa:84:04:38:8a:8e:01:d8:b5:30:07:11:25:8a:22: 41:9a:44:e4:58:2e:5a:e4:cb:38:3e:6d:c8:49:be: 1a:6d:ec:f9:4a:35:91:07:6b:12:7a:28:0a:ad:32: 17:3a:9a:26:96:5a:ca:ee:29:f4:a8:74:e8:a2:74: a5:bf:8f:98:1b:13:de:84:7a:e1:fc:54:70:d9:f7: 1e:f5:a9:b7:3d:da:1a:9a:a8:29:2d:45:25:b8:78: 12:08:76:9a:b2:84:5c:4e:30:32:17:9e:1f:64:7c: 3c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D8:82:25:6F:A3:D5:19:8B:BF:64:34:FA:D3:22:D1:7A:FF:E6:0F X509v3 Authority Key Identifier: keyid:CA:5E:B0:4F:C8:DA:60:10:24:E1:2F:23:EF:13:9B:49:9E:69:97:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:1b:fe:2e:27:bf:42:e8:a8:07:30:b9:0a:b8:ac:a4:de:69: 3d:08:2c:84:47:59:6d:fc:00:03:32:62:33:13:e3:76:d1:96: 37:da:22:33:f1:5d:00:20:90:ea:a0:f0:07:d7:fa:78:ff:4d: 9a:19:cd:41:f8:13:01:97:c6:1a:7d:6d:a4:a0:da:39:8d:72: db:85:cd:3f:22:19:aa:fb:f5:65:5c:ad:73:86:a9:4b:12:80: 4a:9b:f5:e0:b0:ef:3e:e8:3f:2f:e6:b4:2b:67:a4:de:52:10: 8a:95:4e:bd:00:91:df:f4:bf:10:87:d1:61:29:4a:de:b7:61: 61:ea:e9:f2:8d:d2:69:1b:75:c2:c3:7f:ff:51:73:e5:a4:e1: 39:b6:17:c8:5b:4c:c0:05:9d:07:03:ce:75:cd:e4:d8:bf:8a: 26:52:65:5b:d3:4b:af:2f:2f:11:4f:0b:0f:e4:ec:9f:2d:6e: 4d:64:20:ed:30:08:82:d5:5d:84:e5:c7:7b:06:61:ad:7d:37: 76:ac:a9:9f:57:7f:c5:85:c3:aa:8e:a2:6f:0c:80:c5:19:0a: 62:23:c8:8c:56:a7:ef:97:41:fa:37:b4:7e:2c:b5:b9:a6:c2: 4f:1a:6b:9c:39:38:e9:5a:1b:06:0b:6f:32:43:b3:df:58:8c: 7c:77:be:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHr87yqwBe7b8tixnQvgn+KkeqmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1RUIwNEZDOERBNjAxMDI0RTEyRjIzRUYxMzlCNDk5 RTY5OTcyRDAeFw0yNTA2MDgxNDEyNTJaFw0yNTA2MDkxNTA0NTJaMDMxMTAvBgNV BAMTKERCRDg4MjI1NkZBM0Q1MTk4QkJGNjQzNEZBRDMyMkQxN0FGRkU2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDANUsC3Cv2EaIcNUvGZlwRoNvq ZMvH651qbMYGHkhKxS757Xd/PwWQRpdZEc9YX/c1defb7SJWAwiAPGFCLewfLMvK D9yRwgyLCTkZG3oUfmLmT96BFCPSIG2EepPPACC1RlLqeS0iPO6bV/LmWpiOZ5Qr RUuv+occbxuAZpPjNjEdQBz8pDavgOWidOgkYDXzZEwskPqEBDiKjgHYtTAHESWK IkGaRORYLlrkyzg+bchJvhpt7PlKNZEHaxJ6KAqtMhc6miaWWsruKfSodOiidKW/ j5gbE96EeuH8VHDZ9x71qbc92hqaqCktRSW4eBIIdpqyhFxOMDIXnh9kfDx5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU29iCJW+j1RmLv2Q0+tMi0Xr/5g8wHwYDVR0j BBgwFoAUyl6wT8jaYBAk4S8j7xObSZ5ply0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDdxNWZZVVZxQXpicmtMUW80UG9ZUzJrR3Y4R1hzS25OOHFBWXc1Ukd4 MkYvMS9DQTVFQjA0RkM4REE2MDEwMjRFMTJGMjNFRjEzOUI0OTlFNjk5NzJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBNUVCMDRGQzhEQTYwMTAy NEUxMkYyM0VGMTM5QjQ5OUU2OTk3MkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NDdxNWZZVVZxQXpicmtMUW80UG9ZUzJrR3Y4R1hzS25OOHFBWXc1Ukd4MkYvMS9D QTVFQjA0RkM4REE2MDEwMjRFMTJGMjNFRjEzOUI0OTlFNjk5NzJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAURv+Lie/QuioBzC5CrispN5pPQgshEdZbfwAAzJiMxPjdtGWN9oiM/FdACCQ 6qDwB9f6eP9NmhnNQfgTAZfGGn1tpKDaOY1y24XNPyIZqvv1ZVytc4apSxKASpv1 4LDvPug/L+a0K2ek3lIQipVOvQCR3/S/EIfRYSlK3rdhYerp8o3SaRt1wsN//1Fz 5aThObYXyFtMwAWdBwPOdc3k2L+KJlJlW9NLry8vEU8LD+Tsny1uTWQg7TAIgtVd hOXHewZhrX03dqypn1d/xYXDqo6ibwyAxRkKYiPIjFan75dB+je0fiy1uabCTxpr nDk46VobBgtvMkOz31iMfHe+Dw== -----END CERTIFICATE-----Generated at Sun Jun 8 18:38:42 2025 by rpki-client