$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft File: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft (raw, json) Hash identifier: o9z+oMp3WPTZfoP2i3ng+d9BuZ004iUJZSJIHn3mUxs= Subject key identifier: 74:99:FA:EE:21:A8:67:25:EC:5F:97:76:9F:1B:86:7A:02:C9:E1:23 Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 Certificate issuer: /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Certificate serial: 790EA94FDDF6D6A4966AA9B3AC1C32BCB99F7DD8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft Manifest number: 020C Signing time: Thu 12 Jun 2025 06:22:05 +0000 Manifest this update: Thu 12 Jun 2025 06:17:05 +0000 Manifest next update: Fri 13 Jun 2025 08:04:05 +0000 Files and hashes: 1: 323830343a326432383a3a2f33322d313238203d3e20323635323634.roa (hash: 0xs1tTdh2Qke0fip6d1TEfj28igzF6NdDvyXj3IPtmI=) 2: 3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa (hash: WqEYa1LHKO/TdU02rXFXLwns464zC4VFuzHF7wOxsfA=) 3: 3136382e39302e34382e302f32322d3332203d3e20323635323634.roa (hash: Bv6Lyj5+VhdPqvZ/TGH9M1sdk0ISaNwfb7BbI7c/FPE=) 4: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl (hash: Diy2aJoUTVSAye/1e4jBvY3MGtztiWOoAaK1jeOaaNk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 13 Jun 2025 08:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0e:a9:4f:dd:f6:d6:a4:96:6a:a9:b3:ac:1c:32:bc:b9:9f:7d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Validity Not Before: Jun 12 06:17:05 2025 GMT Not After : Jun 13 08:04:05 2025 GMT Subject: CN=7499FAEE21A86725EC5F97769F1B867A02C9E123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cd:2a:27:35:d5:6c:28:41:00:c6:6a:5c:80: 86:8a:2c:fe:18:13:8e:ed:91:1b:ca:90:4e:48:54: e6:7a:ac:fa:43:fc:07:66:e6:82:c9:07:2e:f4:30: 17:dd:55:70:58:eb:42:d8:d5:a0:fc:bf:63:bb:95: 4a:80:b3:3c:b5:7c:93:2f:84:ae:de:ea:ef:12:3a: cb:27:ef:9b:83:dc:84:6a:52:17:61:99:ec:4e:b7: 2a:57:0a:fc:f5:81:44:c0:de:40:d7:da:4c:be:b5: 7e:05:b1:73:10:70:9a:36:a2:a0:8c:51:35:4e:61: 35:9e:97:3c:12:72:77:fe:58:4a:1c:8b:f9:a3:94: 77:35:99:ab:7f:54:a5:ca:8e:16:7f:ef:22:96:8e: 17:5f:a3:e8:2f:f6:d3:c3:c2:b5:79:54:91:df:48: 35:7c:e2:7d:56:8f:00:91:3a:93:46:83:52:eb:e0: eb:87:4c:1d:f4:1e:d9:82:f7:3a:c9:32:fd:e1:1c: fc:b2:1a:c2:5b:7a:dd:d5:dd:a8:6d:2f:02:03:ce: ff:57:b2:41:cc:fb:28:a9:66:71:ce:14:5e:01:5c: ac:e4:b1:9a:59:54:c4:96:a7:32:c7:af:7b:e2:dd: 8a:27:4d:bb:e5:f9:99:d3:73:65:38:19:81:be:05: 41:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:99:FA:EE:21:A8:67:25:EC:5F:97:76:9F:1B:86:7A:02:C9:E1:23 X509v3 Authority Key Identifier: keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:64:e2:36:1e:ab:67:dd:54:a1:d5:d5:f0:b4:2a:1d:95:89: 4e:e1:4a:bb:b2:80:68:31:6b:c3:05:f3:8e:e6:30:d9:ca:39: f6:0c:e2:27:ac:67:c1:20:c9:70:3e:7c:ff:3c:22:3f:42:6e: 9a:e7:d0:39:fc:c0:43:98:19:a1:ac:8c:1d:30:6d:72:0f:6a: d9:a5:74:75:f4:99:83:1c:77:f8:73:a2:98:f3:ef:1a:9a:ae: e7:f8:ec:56:76:09:83:35:e8:a4:92:da:c3:2d:d1:a4:b1:23: 41:39:7a:23:8d:8f:e0:5c:b9:d5:a7:cd:51:2b:76:9b:8e:50: 82:c7:4c:fb:55:48:e4:64:69:ec:b8:fb:f8:8f:37:e5:ba:9a: 3b:64:10:3c:28:cc:e3:f7:9b:e9:00:78:27:79:e5:94:ec:08: e2:ea:14:3f:25:13:98:53:39:47:02:d4:96:f2:52:55:60:b9: 12:f9:ff:6d:04:67:dc:68:2c:ca:42:b6:98:f5:df:dc:ee:9b: 06:49:c2:82:77:16:47:47:4a:a2:a6:4d:47:e9:e2:d3:18:ca: db:46:55:85:ed:96:c7:df:68:86:7b:98:97:89:5a:68:58:d7: 25:d0:72:fa:88:aa:2e:c9:08:9b:49:bb:b3:b3:8e:9f:c8:e0: 50:5b:70:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeQ6pT9321qSWaqmzrBwyvLmffdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzODM3RDdFQ0ExRkUxMTQ1RDBDRTE1RTBCRjg5NUVF MDZBMjdFMjAeFw0yNTA2MTIwNjE3MDVaFw0yNTA2MTMwODA0MDVaMDMxMTAvBgNV BAMTKDc0OTlGQUVFMjFBODY3MjVFQzVGOTc3NjlGMUI4NjdBMDJDOUUxMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuzSonNdVsKEEAxmpcgIaKLP4Y E47tkRvKkE5IVOZ6rPpD/Adm5oLJBy70MBfdVXBY60LY1aD8v2O7lUqAszy1fJMv hK7e6u8SOssn75uD3IRqUhdhmexOtypXCvz1gUTA3kDX2ky+tX4FsXMQcJo2oqCM UTVOYTWelzwScnf+WEoci/mjlHc1mat/VKXKjhZ/7yKWjhdfo+gv9tPDwrV5VJHf SDV84n1WjwCROpNGg1Lr4OuHTB30HtmC9zrJMv3hHPyyGsJbet3V3ahtLwIDzv9X skHM+yipZnHOFF4BXKzksZpZVMSWpzLHr3vi3YonTbvl+ZnTc2U4GYG+BUH7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUdJn67iGoZyXsX5d2nxuGegLJ4SMwHwYDVR0j BBgwFoAUZTg31+yh/hFF0M4V4L+JXuBqJ+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZl UFMvMC82NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MzgzN0Q3RUNBMUZFMTE0 NUQwQ0UxNUUwQkY4OTVFRTA2QTI3RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZlUFMvMC82 NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUGTiNh6rZ91UodXV8LQqHZWJTuFKu7KAaDFrwwXzjuYw2co59gziJ6xnwSDJ cD58/zwiP0JumufQOfzAQ5gZoayMHTBtcg9q2aV0dfSZgxx3+HOimPPvGpqu5/js VnYJgzXopJLawy3RpLEjQTl6I42P4Fy51afNUSt2m45QgsdM+1VI5GRp7Lj7+I83 5bqaO2QQPCjM4/eb6QB4J3nllOwI4uoUPyUTmFM5RwLUlvJSVWC5Evn/bQRn3Ggs ykK2mPXf3O6bBknCgncWR0dKoqZNR+ni0xjK20ZVhe2Wx99ohnuYl4laaFjXJdBy +oiqLskIm0m7s7OOn8jgUFtwfg== -----END CERTIFICATE-----Generated at Thu Jun 12 18:12:28 2025 by rpki-client