$ rpki-client -vvf rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft File: 8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft (raw, json) Hash identifier: oXAOSfcEEBpCqF47wTujNkmTi6u0ja1fupT2CaC8M6k= Subject key identifier: 8C:FC:A1:04:27:B1:C0:E4:06:40:05:4A:CC:47:97:79:1B:AC:52:95 Authority key identifier: 86:63:02:1B:58:90:05:D8:D6:AC:BA:9D:6E:EC:9F:6B:4B:B4:19:01 Certificate issuer: /CN=8663021B589005D8D6ACBA9D6EEC9F6B4BB41901 Certificate serial: 492355AD0A71BDF9F4C6DB7A8062A83AF10B2DCA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer Subject info access: rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft Manifest number: 10 Signing time: Sun 15 Jun 2025 04:25:38 +0000 Manifest this update: Sun 15 Jun 2025 04:20:38 +0000 Manifest next update: Mon 16 Jun 2025 04:29:38 +0000 Files and hashes: 1: 34352e3136382e3132372e302f32342d3234203d3e20323638303633.roa (hash: 8AKLrxy41tpOvHAUkoY0N6YJ8jl+2fKhpTfK/gLjTgM=) 2: 8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.crl (hash: pPeQ4JKLa4R8Q8M2TAzGDvh9sYRUTKSGymjBPsTvqCg=) 3: 34352e3136382e3132342e302f32342d3234203d3e20323638303633.roa (hash: iklcuoNIa74a9v+vnGbALu2PVhhOSHroYjM3mB52Vnw=) 4: 34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa (hash: BVk5GRfmlDttQSTk3gzcNbZFj6xTR2/n5uR1FdOiZ84=) 5: 34352e3136382e3132362e302f32342d3234203d3e20323638303633.roa (hash: lClBtfYM92uXyXK/GybPlj/qsX2ohVNNV0OjpzOgcKs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.crl rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 04:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:23:55:ad:0a:71:bd:f9:f4:c6:db:7a:80:62:a8:3a:f1:0b:2d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8663021B589005D8D6ACBA9D6EEC9F6B4BB41901 Validity Not Before: Jun 15 04:20:38 2025 GMT Not After : Jun 16 04:29:38 2025 GMT Subject: CN=8CFCA10427B1C0E40640054ACC4797791BAC5295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fd:d1:ec:b5:51:bd:fb:c3:31:60:41:d4:fb: 12:42:b1:71:79:07:85:2c:79:a9:00:9a:24:40:da: b6:dc:2e:59:fa:81:e9:5c:18:01:52:3a:9c:3d:b5: 58:4b:b5:8e:d2:79:49:a8:99:4b:f3:42:7e:50:ca: 62:05:07:42:d4:48:f3:18:c3:c4:f8:8e:52:9f:8c: 21:8f:32:82:f4:a7:6b:23:62:f0:e1:19:33:ad:cc: fb:b7:37:77:fa:ee:af:7d:3a:22:0c:48:e7:33:4c: 40:b4:73:48:a6:79:d0:bc:fc:ab:04:93:01:90:25: 47:23:16:a4:e2:21:07:fd:be:dd:30:09:e2:57:10: 07:d1:2f:79:d9:0d:5f:22:0a:6b:57:5b:9b:06:dd: 2e:00:90:c9:8e:d4:39:52:3c:c3:5a:a7:c8:4f:1a: a0:ba:32:1c:07:f0:f8:d0:f9:41:57:ba:c9:f2:23: ac:83:b8:7f:b5:b7:d6:79:7b:fb:1c:d3:2d:06:67: e0:5e:a3:5f:68:ac:ae:d0:ca:31:1e:d4:0e:73:9b: e4:3f:53:82:f1:a3:f2:37:bf:da:52:b9:3d:b9:52: 29:91:6b:94:d2:2f:6d:6c:ea:48:be:e2:45:c9:e9: 77:31:fd:6f:20:83:ff:58:44:87:62:91:02:51:68: 55:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:FC:A1:04:27:B1:C0:E4:06:40:05:4A:CC:47:97:79:1B:AC:52:95 X509v3 Authority Key Identifier: keyid:86:63:02:1B:58:90:05:D8:D6:AC:BA:9D:6E:EC:9F:6B:4B:B4:19:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ec:b4:95:dc:c5:8e:c3:45:e9:27:11:de:4b:f2:3a:23:2a: f4:ac:80:f8:68:51:f5:9d:da:a2:4f:21:dd:c4:f9:54:44:6c: ea:a6:51:02:0c:f6:06:34:6f:15:3b:1c:31:c2:05:a3:59:f0: a6:e3:2f:07:d8:ef:e9:91:b0:2c:ad:39:ad:e2:a9:fb:bd:27: 8a:82:c4:62:74:0e:75:a3:5d:31:e2:9f:c7:ed:0e:56:98:56: 10:52:e1:fd:46:fe:a3:fc:ea:4a:ee:7f:76:5d:a7:32:cb:58: 1a:36:57:c9:4c:21:3f:42:da:0b:56:74:5a:36:c4:02:8d:8c: b2:a5:02:5b:be:ff:b4:5f:da:13:a6:0f:3a:2a:f4:a8:0d:4e: d6:c5:de:96:ee:6f:f4:fc:0d:60:4d:f5:2d:f5:96:f0:b1:fc: de:2c:8e:19:0a:00:62:24:a1:c0:03:6d:a1:f2:6d:c7:62:89: 97:0b:27:4b:b9:07:10:18:fc:af:fd:26:32:b5:39:7c:ba:26: 52:f1:cc:b8:62:e8:9f:28:c9:e5:de:0d:15:72:a1:73:f4:bb: 88:2b:28:e7:ca:c4:da:e1:37:e3:cc:c5:f1:4c:c6:24:c4:4a: 85:3f:25:3d:b2:b5:95:87:54:98:fa:b9:cb:27:b6:ea:ab:bb: ad:76:1b:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSSNVrQpxvfn0xtt6gGKoOvELLcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2MzAyMUI1ODkwMDVEOEQ2QUNCQTlENkVFQzlGNkI0 QkI0MTkwMTAeFw0yNTA2MTUwNDIwMzhaFw0yNTA2MTYwNDI5MzhaMDMxMTAvBgNV BAMTKDhDRkNBMTA0MjdCMUMwRTQwNjQwMDU0QUNDNDc5Nzc5MUJBQzUyOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR/dHstVG9+8MxYEHU+xJCsXF5 B4UseakAmiRA2rbcLln6gelcGAFSOpw9tVhLtY7SeUmomUvzQn5QymIFB0LUSPMY w8T4jlKfjCGPMoL0p2sjYvDhGTOtzPu3N3f67q99OiIMSOczTEC0c0imedC8/KsE kwGQJUcjFqTiIQf9vt0wCeJXEAfRL3nZDV8iCmtXW5sG3S4AkMmO1DlSPMNap8hP GqC6MhwH8PjQ+UFXusnyI6yDuH+1t9Z5e/sc0y0GZ+Beo19orK7QyjEe1A5zm+Q/ U4Lxo/I3v9pSuT25UimRa5TSL21s6ki+4kXJ6Xcx/W8gg/9YRIdikQJRaFX/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjPyhBCexwOQGQAVKzEeXeRusUpUwHwYDVR0j BBgwFoAUhmMCG1iQBdjWrLqdbuyfa0u0GQEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzdHcWVRRGFmU2hZWVRtVlhHUVdjekxxOUNIWXRNVGFqWlRrUnNaZ2hR UEovMC84NjYzMDIxQjU4OTAwNUQ4RDZBQ0JBOUQ2RUVDOUY2QjRCQjQxOTAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2NjMwMjFCNTg5MDA1RDhE NkFDQkE5RDZFRUM5RjZCNEJCNDE5MDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzdHcWVRRGFmU2hZWVRtVlhHUVdjekxxOUNIWXRNVGFqWlRrUnNaZ2hRUEovMC84 NjYzMDIxQjU4OTAwNUQ4RDZBQ0JBOUQ2RUVDOUY2QjRCQjQxOTAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXOy0ldzFjsNF6ScR3kvyOiMq9KyA+GhR9Z3aok8h3cT5VERs6qZRAgz2BjRv FTscMcIFo1nwpuMvB9jv6ZGwLK05reKp+70nioLEYnQOdaNdMeKfx+0OVphWEFLh /Ub+o/zqSu5/dl2nMstYGjZXyUwhP0LaC1Z0WjbEAo2MsqUCW77/tF/aE6YPOir0 qA1O1sXelu5v9PwNYE31LfWW8LH83iyOGQoAYiShwANtofJtx2KJlwsnS7kHEBj8 r/0mMrU5fLomUvHMuGLonyjJ5d4NFXKhc/S7iCso58rE2uE348zF8UzGJMRKhT8l PbK1lYdUmPq5yye26qu7rXYb2Q== -----END CERTIFICATE-----Generated at Sun Jun 15 12:31:19 2025 by rpki-client