$ rpki-client -vvf rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.mft File: 648C0855082FB44E47607549445757FD4ABB0BD4.mft (raw, json) Hash identifier: ZPWpHYBwCMOS0hd+ezdvpF/velIZZtrnFhiILK72HfY= Subject key identifier: 17:DD:95:A4:BF:83:76:75:BD:24:73:4B:DB:74:8C:F6:9B:D1:DE:61 Authority key identifier: 64:8C:08:55:08:2F:B4:4E:47:60:75:49:44:57:57:FD:4A:BB:0B:D4 Certificate issuer: /CN=648C0855082FB44E47607549445757FD4ABB0BD4 Certificate serial: 5F356D07779C3A142687C6AB0C6BA59F8A3B29CE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/648C0855082FB44E47607549445757FD4ABB0BD4.cer Subject info access: rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.mft Manifest number: 0129 Signing time: Tue 10 Jun 2025 23:52:08 +0000 Manifest this update: Tue 10 Jun 2025 23:47:08 +0000 Manifest next update: Thu 12 Jun 2025 02:10:08 +0000 Files and hashes: 1: 648C0855082FB44E47607549445757FD4ABB0BD4.crl (hash: IxrkExPpebDcMsTscl13mEwuFu7ZDyvu45bFOTT81P4=) 2: 323830343a383331383a3a2f33322d3332203d3e20323732313736.roa (hash: TPVGPWOQX/cU300xBlikgEFrpgEM5qA/wXpZH/BbeVU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.crl rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/648C0855082FB44E47607549445757FD4ABB0BD4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Jun 2025 00:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:35:6d:07:77:9c:3a:14:26:87:c6:ab:0c:6b:a5:9f:8a:3b:29:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=648C0855082FB44E47607549445757FD4ABB0BD4 Validity Not Before: Jun 10 23:47:08 2025 GMT Not After : Jun 12 02:10:08 2025 GMT Subject: CN=17DD95A4BF837675BD24734BDB748CF69BD1DE61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:c4:05:0a:8f:87:0d:85:2f:32:3b:ec:ec: fc:24:61:69:dc:98:fe:6d:b8:fc:ca:f0:d5:ee:a9: 7e:9a:e4:ee:ec:ad:fa:70:4c:aa:b7:f8:ce:42:63: be:70:71:83:9d:f0:e2:ea:73:4d:41:9c:15:91:66: 4a:44:1e:bd:09:d3:ae:fe:da:a7:3d:b1:d0:0f:e6: 9d:53:52:9e:ca:b5:df:33:6a:06:ba:ed:2d:39:ee: c1:1d:57:08:09:d4:15:e4:20:ec:78:74:c4:51:86: ee:e2:6e:08:3e:63:b4:f7:74:cd:f9:d0:2b:bd:cf: 01:76:94:74:ab:bd:23:6e:2a:8e:5e:fc:64:fd:10: 6d:b4:b2:61:f1:7d:43:3c:26:d5:b2:fd:ad:09:17: 0a:4e:42:77:aa:12:f0:a3:84:ca:5a:c1:96:2c:c5: 1a:35:14:1c:d3:bc:82:65:f8:31:e4:db:fd:65:17: 3d:89:42:57:1d:2c:27:3b:d2:e3:8a:c2:d1:ef:3f: e0:98:5a:9a:89:17:32:b3:94:ff:cf:04:08:78:56: de:d8:85:d0:b9:78:b5:b0:b2:d5:ae:d8:f4:43:bb: 86:78:e5:64:87:65:3c:cb:9b:2f:17:a6:bd:8d:19: 01:90:f0:12:83:e2:54:9b:ae:f3:da:b9:d4:a6:bb: ed:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DD:95:A4:BF:83:76:75:BD:24:73:4B:DB:74:8C:F6:9B:D1:DE:61 X509v3 Authority Key Identifier: keyid:64:8C:08:55:08:2F:B4:4E:47:60:75:49:44:57:57:FD:4A:BB:0B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/648C0855082FB44E47607549445757FD4ABB0BD4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ed:6c:fd:21:9b:6e:bd:74:e8:0f:c2:e1:50:45:87:e8:51: a2:3f:d9:39:ce:1a:75:77:d9:77:69:ef:fb:4f:de:1a:46:a9: cb:40:d6:d7:f2:67:4e:f5:df:47:2f:c0:0f:3a:11:1f:10:6e: d6:56:6b:e9:5f:4d:03:d9:5b:b1:93:79:97:03:ae:a4:c7:fb: 45:82:6a:4a:92:43:27:62:83:e0:12:2c:13:6c:b5:1b:f9:58: 0c:fb:ec:f3:2e:a8:5f:79:fd:09:e6:06:83:8c:a6:a6:d4:dd: a8:1a:17:94:74:af:7a:09:45:4f:ed:44:e2:40:64:22:c2:cc: 7a:69:7b:0c:b2:9a:af:fc:08:ab:da:12:d1:de:11:65:e5:50: 2b:f0:71:6e:6d:b5:c3:42:46:84:9d:27:03:21:5b:05:24:71: 2c:c9:d1:36:e1:80:cd:0d:d0:e5:4f:f4:4b:4e:b0:e1:5d:17: 93:4f:c5:27:d6:b0:87:95:b0:05:84:00:a6:09:23:01:ba:24: 36:31:77:f6:41:07:89:ea:38:e1:2a:9d:f5:d5:4e:e6:79:30: 77:c3:c8:eb:8e:5c:4e:7f:fb:bb:4e:c7:3a:11:b0:7f:64:3c: 51:27:0c:08:4f:4d:8e:b1:75:10:47:d7:3c:27:06:f0:7a:e0: 7e:78:2c:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXzVtB3ecOhQmh8arDGuln4o7Kc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ4QzA4NTUwODJGQjQ0RTQ3NjA3NTQ5NDQ1NzU3RkQ0 QUJCMEJENDAeFw0yNTA2MTAyMzQ3MDhaFw0yNTA2MTIwMjEwMDhaMDMxMTAvBgNV BAMTKDE3REQ5NUE0QkY4Mzc2NzVCRDI0NzM0QkRCNzQ4Q0Y2OUJEMURFNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4MMQFCo+HDYUvMjvs7PwkYWnc mP5tuPzK8NXuqX6a5O7srfpwTKq3+M5CY75wcYOd8OLqc01BnBWRZkpEHr0J067+ 2qc9sdAP5p1TUp7Ktd8zaga67S057sEdVwgJ1BXkIOx4dMRRhu7ibgg+Y7T3dM35 0Cu9zwF2lHSrvSNuKo5e/GT9EG20smHxfUM8JtWy/a0JFwpOQneqEvCjhMpawZYs xRo1FBzTvIJl+DHk2/1lFz2JQlcdLCc70uOKwtHvP+CYWpqJFzKzlP/PBAh4Vt7Y hdC5eLWwstWu2PRDu4Z45WSHZTzLmy8Xpr2NGQGQ8BKD4lSbrvPaudSmu+1rAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUF92VpL+DdnW9JHNL23SM9pvR3mEwHwYDVR0j BBgwFoAUZIwIVQgvtE5HYHVJRFdX/Uq7C9QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3ZUVjZiaHY0cjZSSE1uaG5XQmNlc1NkNHNndDNybmd1OVZDcXRtZHFD WTgvMC82NDhDMDg1NTA4MkZCNDRFNDc2MDc1NDk0NDU3NTdGRDRBQkIwQkQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0OEMwODU1MDgyRkI0NEU0 NzYwNzU0OTQ0NTc1N0ZENEFCQjBCRDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3ZUVjZiaHY0cjZSSE1uaG5XQmNlc1NkNHNndDNybmd1OVZDcXRtZHFDWTgvMC82 NDhDMDg1NTA4MkZCNDRFNDc2MDc1NDk0NDU3NTdGRDRBQkIwQkQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXe1s/SGbbr106A/C4VBFh+hRoj/ZOc4adXfZd2nv+0/eGkapy0DW1/JnTvXf Ry/ADzoRHxBu1lZr6V9NA9lbsZN5lwOupMf7RYJqSpJDJ2KD4BIsE2y1G/lYDPvs 8y6oX3n9CeYGg4ymptTdqBoXlHSveglFT+1E4kBkIsLMeml7DLKar/wIq9oS0d4R ZeVQK/Bxbm21w0JGhJ0nAyFbBSRxLMnRNuGAzQ3Q5U/0S06w4V0Xk0/FJ9awh5Ww BYQApgkjAbokNjF39kEHieo44Sqd9dVO5nkwd8PI645cTn/7u07HOhGwf2Q8UScM CE9NjrF1EEfXPCcG8Hrgfngs1A== -----END CERTIFICATE-----Generated at Wed Jun 11 05:21:27 2025 by rpki-client