$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft File: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft (raw, json) Hash identifier: meqlF0saH5Rn1dIN4nwfOZQ6MUaTx5SHirr1P6WDKnk= Subject key identifier: 51:6E:02:50:04:B1:9F:1A:0E:40:23:68:B1:78:4C:E2:60:8E:66:D7 Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 Certificate issuer: /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Certificate serial: 0C3D4E53451433453CE8A4F42A973F28D589DAD3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft Manifest number: 0208 Signing time: Mon 09 Jun 2025 03:32:19 +0000 Manifest this update: Mon 09 Jun 2025 03:27:19 +0000 Manifest next update: Tue 10 Jun 2025 07:07:19 +0000 Files and hashes: 1: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl (hash: tk/Niy1v3rO45yoYULFVuYVRX6Nav7bBEs5JeSSjZKU=) 2: 323830343a326432383a3a2f33322d313238203d3e20323635323634.roa (hash: 0xs1tTdh2Qke0fip6d1TEfj28igzF6NdDvyXj3IPtmI=) 3: 3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa (hash: WqEYa1LHKO/TdU02rXFXLwns464zC4VFuzHF7wOxsfA=) 4: 3136382e39302e34382e302f32322d3332203d3e20323635323634.roa (hash: Bv6Lyj5+VhdPqvZ/TGH9M1sdk0ISaNwfb7BbI7c/FPE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 07:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:3d:4e:53:45:14:33:45:3c:e8:a4:f4:2a:97:3f:28:d5:89:da:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Validity Not Before: Jun 9 03:27:19 2025 GMT Not After : Jun 10 07:07:19 2025 GMT Subject: CN=516E025004B19F1A0E402368B1784CE2608E66D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9f:41:3b:50:3b:67:18:98:5e:4f:17:d8:4a: 94:95:19:c4:57:1e:2a:6f:de:06:26:e2:e1:1a:58: f2:b3:18:91:39:6b:16:73:0c:5d:7d:02:b3:a4:61: 7f:69:bb:ef:36:18:0f:fe:6e:ad:54:08:80:c3:ed: 80:29:36:0d:68:3d:1f:0c:ac:66:bf:42:22:74:43: b8:d6:82:33:c4:3f:8a:e7:bc:8b:79:0a:32:41:c8: 2f:ea:ee:67:3a:63:d0:3d:56:bc:78:ec:d3:dc:83: 5d:a8:7c:42:95:f3:24:19:5c:94:a4:29:44:16:2f: 54:f7:0e:37:40:ad:89:b4:8a:0c:f6:83:91:1e:36: 80:f7:2e:f8:00:52:1a:7f:c4:44:15:87:7f:b3:4d: c7:1f:5b:37:e9:87:8e:8b:f4:a4:d9:70:ec:8d:62: 8d:ed:f4:14:27:fd:7a:39:8a:a8:3d:83:68:20:1d: 13:dc:e5:48:9d:8b:69:43:68:33:0e:12:10:fc:3e: 09:5a:48:6d:c3:2f:10:e3:32:b5:c6:ef:ae:76:10: 3c:0d:6c:e3:5e:f9:e2:f9:7e:23:46:0f:f7:44:fe: 08:27:7f:58:8d:76:26:0f:1b:20:2f:3b:a3:a6:69: e2:32:07:5a:52:34:f7:0c:73:eb:a3:5f:3d:3e:dd: 4b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:6E:02:50:04:B1:9F:1A:0E:40:23:68:B1:78:4C:E2:60:8E:66:D7 X509v3 Authority Key Identifier: keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:1c:b4:93:cf:16:97:b2:7d:d1:ee:ad:9b:7b:ce:11:7a:1a: 4f:99:e0:8b:06:35:e7:10:ff:3a:bc:41:72:3a:68:14:35:a1: 67:5a:84:8a:41:c5:a5:fa:68:f9:12:c0:27:13:01:d6:0d:bb: 24:17:f8:f1:fa:e2:1c:2d:64:56:4c:02:c3:87:ab:d4:5a:19: ef:da:3e:17:2a:db:12:be:da:27:56:61:6c:0a:35:f3:e6:47: 30:08:d7:d7:e3:06:2c:fe:95:1a:61:16:7a:77:c8:1e:0e:c0: 0e:65:c8:2f:51:73:88:08:84:6f:94:3c:69:eb:62:3b:96:ec: 6c:2c:8e:f5:e3:ed:41:81:50:1e:77:47:b9:1f:2b:a1:9a:d9: cd:f2:86:5b:c6:4a:d0:b6:93:e7:a2:f9:cc:90:ac:57:5e:5d: 47:cd:c5:e8:f9:44:e2:1e:72:ad:3e:fc:9f:d0:03:77:0a:86: b4:8e:5a:33:e0:8d:29:db:25:b4:99:3c:e6:89:8c:9b:7d:16: bb:b5:1f:eb:78:fd:c4:c0:4b:5c:f9:45:62:fa:da:ec:59:93: 4d:cb:46:b7:54:35:11:b7:ff:e8:01:2e:6c:0f:e0:b5:47:91: fc:eb:7e:7c:58:1f:ff:cc:02:bf:a8:d4:68:a2:6f:af:5b:13: 63:c3:e3:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDD1OU0UUM0U86KT0Kpc/KNWJ2tMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzODM3RDdFQ0ExRkUxMTQ1RDBDRTE1RTBCRjg5NUVF MDZBMjdFMjAeFw0yNTA2MDkwMzI3MTlaFw0yNTA2MTAwNzA3MTlaMDMxMTAvBgNV BAMTKDUxNkUwMjUwMDRCMTlGMUEwRTQwMjM2OEIxNzg0Q0UyNjA4RTY2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEn0E7UDtnGJheTxfYSpSVGcRX Hipv3gYm4uEaWPKzGJE5axZzDF19ArOkYX9pu+82GA/+bq1UCIDD7YApNg1oPR8M rGa/QiJ0Q7jWgjPEP4rnvIt5CjJByC/q7mc6Y9A9Vrx47NPcg12ofEKV8yQZXJSk KUQWL1T3DjdArYm0igz2g5EeNoD3LvgAUhp/xEQVh3+zTccfWzfph46L9KTZcOyN Yo3t9BQn/Xo5iqg9g2ggHRPc5Uidi2lDaDMOEhD8PglaSG3DLxDjMrXG7652EDwN bONe+eL5fiNGD/dE/ggnf1iNdiYPGyAvO6OmaeIyB1pSNPcMc+ujXz0+3UsFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUW4CUASxnxoOQCNosXhM4mCOZtcwHwYDVR0j BBgwFoAUZTg31+yh/hFF0M4V4L+JXuBqJ+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZl UFMvMC82NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MzgzN0Q3RUNBMUZFMTE0 NUQwQ0UxNUUwQkY4OTVFRTA2QTI3RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZlUFMvMC82 NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAARy0k88Wl7J90e6tm3vOEXoaT5ngiwY15xD/OrxBcjpoFDWhZ1qEikHFpfpo +RLAJxMB1g27JBf48friHC1kVkwCw4er1FoZ79o+FyrbEr7aJ1ZhbAo18+ZHMAjX 1+MGLP6VGmEWenfIHg7ADmXIL1FziAiEb5Q8aetiO5bsbCyO9ePtQYFQHndHuR8r oZrZzfKGW8ZK0LaT56L5zJCsV15dR83F6PlE4h5yrT78n9ADdwqGtI5aM+CNKdsl tJk85omMm30Wu7Uf63j9xMBLXPlFYvra7FmTTctGt1Q1Ebf/6AEubA/gtUeR/Ot+ fFgf/8wCv6jUaKJvr1sTY8Pjog== -----END CERTIFICATE-----Generated at Mon Jun 9 13:05:30 2025 by rpki-client