$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft File: 8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft (raw, json) Hash identifier: HXoMmNdatVswmZ7i3a9F6bmBItGl5/TmBb1w8+QrXaU= Subject key identifier: 36:52:07:53:FB:55:06:90:98:DD:55:F8:3B:2F:BF:E8:3D:39:DD:4F Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC Certificate issuer: /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC Certificate serial: 6332464F8FF218A7816C49E4E744607BF357A608 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer Subject info access: rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft Manifest number: 01A4 Signing time: Tue 10 Jun 2025 19:52:34 +0000 Manifest this update: Tue 10 Jun 2025 19:47:34 +0000 Manifest next update: Wed 11 Jun 2025 21:04:34 +0000 Files and hashes: 1: 3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa (hash: dZkR7OkwOdS1tzWkqugp2XWNw/VURw0l47xCQklPHRg=) 2: 323830343a316364343a3a2f33322d313238203d3e203631363738.roa (hash: ZAFNIJgwCnwyt7SK/Ssd+849ytnqcqzaf8HYlhtxbkM=) 3: 3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa (hash: ASiz0ZcbAT9VDKQt49gxDLD444Lbu3KuDz6l5NFIFoI=) 4: 8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl (hash: sHcR6g2vEfC5ACwFkOfyhKjZMUlR2RXdAFLN0bC2sIQ=) 5: 3136382e39302e302e302f32322d3332203d3e203631363738.roa (hash: V41xaScAGBtx86DO+b01mCts3BvnSF090MGF8ATKJ90=) 6: 3133312e3130382e3136342e302f32322d3332203d3e203631363738.roa (hash: iyxltKN78mePz4Y5Z3Y6H/UwibveqSISPy8V5PUc2EY=) 7: 3138312e3139312e3230302e302f32322d3332203d3e203631363738.roa (hash: 3kdSaSAmdl/G7ppO5+ZSY5gb3WZSUNqO0u7us0ffcaM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 21:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:32:46:4f:8f:f2:18:a7:81:6c:49:e4:e7:44:60:7b:f3:57:a6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC Validity Not Before: Jun 10 19:47:34 2025 GMT Not After : Jun 11 21:04:34 2025 GMT Subject: CN=36520753FB55069098DD55F83B2FBFE83D39DD4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a8:f6:11:e5:14:8d:f3:e4:9a:a9:30:3e:f0: 41:ba:e8:ca:32:72:fe:c3:84:c9:eb:4e:ee:37:67: aa:0c:e3:df:71:ee:c7:76:14:bc:6b:4b:18:d7:d6: 01:c4:24:84:43:c1:eb:ad:ba:59:10:18:bf:71:65: 09:e1:af:9b:c1:1c:96:7a:e1:28:c1:91:ef:96:63: 30:a4:be:1e:b9:a8:79:a5:75:4c:56:9a:0d:a6:3b: 4a:b0:ab:aa:87:3e:b1:60:f4:ca:db:f6:b6:70:47: ef:bb:9e:63:9e:af:56:d4:f6:58:30:a6:37:f6:a7: a9:1d:90:64:bb:c3:5e:e4:d2:52:12:dc:14:33:42: c0:2b:cc:32:b4:d8:13:90:1f:9c:8f:84:63:d9:6f: d7:47:8d:40:d5:a7:05:91:8d:cd:0b:d4:af:e4:a3: d5:aa:a3:06:dc:71:11:78:c6:61:15:73:6e:1a:38: 35:a2:9a:4e:4b:16:58:0a:4d:91:7b:7c:a4:75:36: 0d:22:35:80:c2:10:e4:de:5e:46:03:5a:c1:3b:8a: 65:ad:54:a6:f6:30:84:7c:0e:99:ad:95:06:ff:12: 53:3d:34:f7:e5:81:a9:35:f4:68:49:2f:a6:9c:99: 18:8d:34:2c:30:b4:51:25:70:ab:86:73:59:c8:41: b5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:52:07:53:FB:55:06:90:98:DD:55:F8:3B:2F:BF:E8:3D:39:DD:4F X509v3 Authority Key Identifier: keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:3b:ff:4f:a9:7a:61:a2:8a:19:41:32:b1:bc:03:d0:5b:46: 04:cd:82:f5:79:a1:24:7e:22:43:d1:e4:6d:61:ca:92:c7:16: b0:0b:46:7d:54:1d:30:e4:aa:33:69:c9:53:4c:85:24:c7:6b: 37:0a:0c:dc:15:d7:72:c8:eb:9a:62:d2:c5:71:ea:1d:e4:90: c9:3e:fa:be:32:b0:a1:a1:21:31:cd:b2:b4:8f:22:0c:6d:7f: c4:ae:72:82:ae:4b:78:33:14:d9:35:2b:0d:a2:58:16:8a:d9: 93:b2:64:49:03:6e:91:18:f3:39:6a:35:4e:ef:67:7d:0c:07: 53:95:62:8d:54:fe:fe:5e:80:e1:75:51:58:25:34:8f:ae:23: 5f:8a:af:f4:71:62:5c:c4:70:12:43:96:e7:12:00:f9:3c:e0: 2e:13:43:ea:db:6a:7d:2f:59:1c:db:a0:3b:34:2b:bd:31:bf: cc:bb:f3:3c:5b:87:ce:36:d3:34:b6:85:95:76:3a:bd:b0:41: 87:69:b1:04:0d:10:33:11:25:1a:94:c4:82:d5:11:0e:f3:05: 73:29:2a:3c:15:9c:3e:c6:1d:d1:43:29:b9:a4:22:83:1a:60: 51:20:3a:44:47:58:05:11:03:16:47:d7:6c:4b:10:2a:32:aa: 33:82:ed:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYzJGT4/yGKeBbEnk50Rge/NXpggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU1MkM2QTlCRUFENzlEQzk1MEY5REE1NjBDNTMwRjI4 QkM2RkNEQzAeFw0yNTA2MTAxOTQ3MzRaFw0yNTA2MTEyMTA0MzRaMDMxMTAvBgNV BAMTKDM2NTIwNzUzRkI1NTA2OTA5OERENTVGODNCMkZCRkU4M0QzOURENEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyqPYR5RSN8+SaqTA+8EG66Moy cv7DhMnrTu43Z6oM499x7sd2FLxrSxjX1gHEJIRDweutulkQGL9xZQnhr5vBHJZ6 4SjBke+WYzCkvh65qHmldUxWmg2mO0qwq6qHPrFg9Mrb9rZwR++7nmOer1bU9lgw pjf2p6kdkGS7w17k0lIS3BQzQsArzDK02BOQH5yPhGPZb9dHjUDVpwWRjc0L1K/k o9WqowbccRF4xmEVc24aODWimk5LFlgKTZF7fKR1Ng0iNYDCEOTeXkYDWsE7imWt VKb2MIR8DpmtlQb/ElM9NPflgak19GhJL6acmRiNNCwwtFElcKuGc1nIQbUTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNlIHU/tVBpCY3VX4Oy+/6D053U8wHwYDVR0j BBgwFoAUjlLGqb6tedyVD52lYMUw8ovG/NwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3Yy azkvMC84RTUyQzZBOUJFQUQ3OURDOTUwRjlEQTU2MEM1MzBGMjhCQzZGQ0RDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNTJDNkE5QkVBRDc5REM5 NTBGOURBNTYwQzUzMEYyOEJDNkZDREMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3YyazkvMC84 RTUyQzZBOUJFQUQ3OURDOTUwRjlEQTU2MEM1MzBGMjhCQzZGQ0RDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUDv/T6l6YaKKGUEysbwD0FtGBM2C9XmhJH4iQ9HkbWHKkscWsAtGfVQdMOSq M2nJU0yFJMdrNwoM3BXXcsjrmmLSxXHqHeSQyT76vjKwoaEhMc2ytI8iDG1/xK5y gq5LeDMU2TUrDaJYForZk7JkSQNukRjzOWo1Tu9nfQwHU5VijVT+/l6A4XVRWCU0 j64jX4qv9HFiXMRwEkOW5xIA+TzgLhND6ttqfS9ZHNugOzQrvTG/zLvzPFuHzjbT NLaFlXY6vbBBh2mxBA0QMxElGpTEgtURDvMFcykqPBWcPsYd0UMpuaQigxpgUSA6 REdYBREDFkfXbEsQKjKqM4LtPg== -----END CERTIFICATE-----Generated at Wed Jun 11 05:57:24 2025 by rpki-client