$ rpki-client -vvf rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft File: 8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft (raw, json) Hash identifier: dGPCFW/h9kqJtVhqQnwzJtgDRrTUdROx9FoWpZd83WI= Subject key identifier: C5:56:ED:A7:4B:87:C8:92:BA:56:B2:23:C7:41:C9:42:EA:38:A4:B0 Authority key identifier: 86:63:02:1B:58:90:05:D8:D6:AC:BA:9D:6E:EC:9F:6B:4B:B4:19:01 Certificate issuer: /CN=8663021B589005D8D6ACBA9D6EEC9F6B4BB41901 Certificate serial: 21DE1FC5D159C123AA481D7AD10B498C47A5E813 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer Subject info access: rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft Manifest number: 0D Signing time: Fri 13 Jun 2025 01:03:38 +0000 Manifest this update: Fri 13 Jun 2025 00:58:38 +0000 Manifest next update: Sat 14 Jun 2025 03:24:38 +0000 Files and hashes: 1: 8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.crl (hash: pLmm70idYj4Dw9Zf8sW/2kAQYrbvdVi7YXH0jt+Zqwk=) 2: 34352e3136382e3132342e302f32342d3234203d3e20323638303633.roa (hash: iklcuoNIa74a9v+vnGbALu2PVhhOSHroYjM3mB52Vnw=) 3: 34352e3136382e3132372e302f32342d3234203d3e20323638303633.roa (hash: 8AKLrxy41tpOvHAUkoY0N6YJ8jl+2fKhpTfK/gLjTgM=) 4: 34352e3136382e3132362e302f32342d3234203d3e20323638303633.roa (hash: lClBtfYM92uXyXK/GybPlj/qsX2ohVNNV0OjpzOgcKs=) 5: 34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa (hash: BVk5GRfmlDttQSTk3gzcNbZFj6xTR2/n5uR1FdOiZ84=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.crl rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 14 Jun 2025 03:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:de:1f:c5:d1:59:c1:23:aa:48:1d:7a:d1:0b:49:8c:47:a5:e8:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8663021B589005D8D6ACBA9D6EEC9F6B4BB41901 Validity Not Before: Jun 13 00:58:38 2025 GMT Not After : Jun 14 03:24:38 2025 GMT Subject: CN=C556EDA74B87C892BA56B223C741C942EA38A4B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c7:16:a3:b9:8d:92:01:a2:a0:f5:8f:81:f3: 7a:20:b1:ec:6a:dc:8b:ad:61:02:d7:a1:05:9b:b0: 52:73:6a:1c:10:ee:c7:0c:7c:19:ad:73:da:b3:18: b9:df:29:3c:cf:ee:f2:9f:75:43:18:53:4e:b2:25: f8:8a:82:f9:80:67:3b:8d:4a:b7:d9:5a:6e:35:4b: db:2b:7d:fe:bf:bc:f2:c8:03:50:93:88:92:8e:bd: 49:6a:70:86:43:d7:3b:3b:3c:01:69:92:87:46:c4: 29:cb:88:0c:3a:17:39:ad:22:6f:bf:b4:d4:29:60: de:b0:bb:79:cb:a3:72:ce:82:5a:52:b9:b6:ff:07: 3e:85:48:f8:9f:36:3a:06:41:a4:37:8e:01:3d:4a: 37:76:8e:8a:9c:c5:94:b3:25:70:99:47:20:2f:3f: ca:39:d6:7d:11:01:38:5c:13:e4:61:d6:3c:f0:84: 70:8a:50:49:84:99:5e:0f:7e:4d:0f:9a:a4:17:11: b4:b9:d0:fc:b3:82:c6:a6:61:d5:d3:d9:2b:53:b0: 10:8c:13:7f:57:cf:46:71:58:2c:d7:de:0b:81:52: 1c:01:f7:1b:15:a3:a4:e9:f3:fe:bd:f1:2f:53:42: cb:79:ab:9e:05:9f:8e:0d:59:e7:33:d7:f8:73:48: eb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:56:ED:A7:4B:87:C8:92:BA:56:B2:23:C7:41:C9:42:EA:38:A4:B0 X509v3 Authority Key Identifier: keyid:86:63:02:1B:58:90:05:D8:D6:AC:BA:9D:6E:EC:9F:6B:4B:B4:19:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:f6:e5:55:fd:4a:5d:f0:14:f2:61:5c:7a:66:00:0c:cb:ea: ce:d6:72:55:74:d1:04:ee:6a:6a:b0:0f:50:05:b8:a9:e8:18: 65:e2:76:ba:cf:d2:7b:06:cf:92:23:39:f6:8a:07:8f:80:80: 40:40:f3:09:f7:78:49:7f:2b:7b:fd:c7:66:bd:16:dc:44:10: b9:00:16:89:f4:ec:72:96:6d:22:1e:9a:13:05:60:3e:18:c9: cc:1b:ab:2d:32:5f:9d:f7:1a:15:d3:02:4a:86:98:b0:26:88: 23:df:e0:38:94:7b:cb:a5:7e:06:04:15:a6:55:38:a7:f3:1a: d8:9e:99:65:e5:6e:64:b1:b5:2a:b3:3b:d9:45:42:18:05:a1: 88:f4:6f:e5:94:43:50:02:dd:be:37:9c:7a:b4:ef:5a:f8:4e: fd:ec:e3:50:5d:09:5f:76:e9:fc:4f:5b:95:41:ae:a0:eb:dc: fd:bd:42:3b:8d:dd:09:c3:27:c3:46:73:57:3a:04:4d:67:c9: 8e:6c:d9:86:02:8e:e9:c7:74:ae:74:3b:9b:7d:bc:10:06:f6: b2:64:65:06:0b:63:f7:a0:fd:5e:03:c0:78:da:26:ee:a8:ae: 7b:5d:63:23:8c:b2:90:c7:1e:72:19:8b:03:95:53:87:c7:e3: 61:ab:cf:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUId4fxdFZwSOqSB160QtJjEel6BMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2MzAyMUI1ODkwMDVEOEQ2QUNCQTlENkVFQzlGNkI0 QkI0MTkwMTAeFw0yNTA2MTMwMDU4MzhaFw0yNTA2MTQwMzI0MzhaMDMxMTAvBgNV BAMTKEM1NTZFREE3NEI4N0M4OTJCQTU2QjIyM0M3NDFDOTQyRUEzOEE0QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFxxajuY2SAaKg9Y+B83ogsexq 3IutYQLXoQWbsFJzahwQ7scMfBmtc9qzGLnfKTzP7vKfdUMYU06yJfiKgvmAZzuN SrfZWm41S9srff6/vPLIA1CTiJKOvUlqcIZD1zs7PAFpkodGxCnLiAw6FzmtIm+/ tNQpYN6wu3nLo3LOglpSubb/Bz6FSPifNjoGQaQ3jgE9Sjd2joqcxZSzJXCZRyAv P8o51n0RAThcE+Rh1jzwhHCKUEmEmV4Pfk0PmqQXEbS50PyzgsamYdXT2StTsBCM E39Xz0ZxWCzX3guBUhwB9xsVo6Tp8/698S9TQst5q54Fn44NWecz1/hzSOvhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxVbtp0uHyJK6VrIjx0HJQuo4pLAwHwYDVR0j BBgwFoAUhmMCG1iQBdjWrLqdbuyfa0u0GQEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzdHcWVRRGFmU2hZWVRtVlhHUVdjekxxOUNIWXRNVGFqWlRrUnNaZ2hR UEovMC84NjYzMDIxQjU4OTAwNUQ4RDZBQ0JBOUQ2RUVDOUY2QjRCQjQxOTAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2NjMwMjFCNTg5MDA1RDhE NkFDQkE5RDZFRUM5RjZCNEJCNDE5MDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzdHcWVRRGFmU2hZWVRtVlhHUVdjekxxOUNIWXRNVGFqWlRrUnNaZ2hRUEovMC84 NjYzMDIxQjU4OTAwNUQ4RDZBQ0JBOUQ2RUVDOUY2QjRCQjQxOTAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKPblVf1KXfAU8mFcemYADMvqztZyVXTRBO5qarAPUAW4qegYZeJ2us/SewbP kiM59ooHj4CAQEDzCfd4SX8re/3HZr0W3EQQuQAWifTscpZtIh6aEwVgPhjJzBur LTJfnfcaFdMCSoaYsCaII9/gOJR7y6V+BgQVplU4p/Ma2J6ZZeVuZLG1KrM72UVC GAWhiPRv5ZRDUALdvjecerTvWvhO/ezjUF0JX3bp/E9blUGuoOvc/b1CO43dCcMn w0ZzVzoETWfJjmzZhgKO6cd0rnQ7m328EAb2smRlBgtj96D9XgPAeNom7qiue11j I4yykMcechmLA5VTh8fjYavPqA== -----END CERTIFICATE-----Generated at Fri Jun 13 08:21:21 2025 by rpki-client