$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft File: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft (raw, json) Hash identifier: nYOK/K1ScJWVhRPEJ/6obxbzi/2pZ/AybP5PM68Y7tg= Subject key identifier: FD:3E:B1:AA:C8:24:32:8C:47:D5:AA:67:03:51:ED:9D:A6:BC:FF:20 Authority key identifier: D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC Certificate issuer: /CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC Certificate serial: 1727CB84AEE90E2759156D541B2A2C9A65BA94DA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer Subject info access: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft Manifest number: AA Signing time: Fri 13 Jun 2025 10:30:22 +0000 Manifest this update: Fri 13 Jun 2025 10:25:22 +0000 Manifest next update: Sat 14 Jun 2025 13:22:22 +0000 Files and hashes: 1: 34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa (hash: dGr5cTxS6sHO6LIXh/H72qtLHlSDxdG5hFZ+7Zrlor0=) 2: D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl (hash: BIiCw6p6zLM4N+MCPR2Ac7Cp1m1JC4wW3qo5PJeIBVA=) 3: 3137302e3233332e32302e302f32322d3234203d3e20323638323839.roa (hash: 5XwCvfaoU64ymtIslXprTesI7aefy6dxcTH7KYUOQ3U=) 4: 323830343a346565343a3a2f33322d3438203d3e20323638323839.roa (hash: 8QVrrPvDESPyLlcybwCmEcTLp6Hw5J3De08ADxJOVDg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 14 Jun 2025 13:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:27:cb:84:ae:e9:0e:27:59:15:6d:54:1b:2a:2c:9a:65:ba:94:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC Validity Not Before: Jun 13 10:25:22 2025 GMT Not After : Jun 14 13:22:22 2025 GMT Subject: CN=FD3EB1AAC824328C47D5AA670351ED9DA6BCFF20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c1:98:fa:5b:dc:92:e0:ba:dc:60:20:1f:c7: 0d:b5:ce:8b:8a:74:54:88:61:be:66:0e:8e:d9:7b: e8:33:fb:a8:3d:08:71:c8:38:66:62:1f:fb:cc:3a: 56:e1:dd:d2:bd:07:e6:5c:49:c3:5a:13:8f:f9:32: 9a:29:77:8b:12:08:0e:5c:7c:72:b8:7a:7f:8e:93: 48:11:01:75:d5:5e:6f:16:cd:be:91:f6:28:83:cd: 7f:95:dc:45:e8:36:74:69:75:c1:e9:9e:f3:4f:1f: 5d:47:4f:60:1a:3c:f6:f1:79:07:88:4d:e2:06:17: d5:e6:de:69:8a:17:84:de:4a:0f:1b:61:0d:81:3a: 2a:b7:87:1b:97:4f:bf:0d:a0:8f:57:49:11:92:8b: 36:27:f2:cd:24:cb:a1:76:21:32:84:52:a0:bd:ba: c7:63:c9:4c:4f:36:4e:35:6a:0f:b6:61:83:d8:2e: 56:76:67:7e:33:07:00:d6:fd:79:5c:b9:52:cf:bd: 17:7f:07:a0:90:2b:bb:75:dc:dd:17:27:f0:fb:a4: 3b:32:33:c0:fa:71:1d:74:ab:08:1b:f7:5a:04:73: 91:35:9a:8b:b4:ee:5a:ff:07:1f:22:db:9d:79:65: cd:f7:53:f1:8e:83:73:e2:39:39:76:8f:0b:74:59: 6d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3E:B1:AA:C8:24:32:8C:47:D5:AA:67:03:51:ED:9D:A6:BC:FF:20 X509v3 Authority Key Identifier: keyid:D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:a7:d8:11:cc:db:78:59:1d:d5:6e:2a:73:31:4c:a7:81:22: d6:d7:4e:93:dd:5e:43:9c:ce:03:a0:31:be:12:a9:a6:6e:c3: d7:a4:f5:9d:c9:44:30:e8:08:84:20:8e:40:38:fd:ac:fe:de: e7:13:96:25:e4:90:73:54:28:6c:c8:55:b6:db:9e:cd:79:57: 41:ba:f4:53:12:cc:56:ca:f2:a0:10:21:eb:15:2e:c2:55:3d: 8a:f2:e4:f3:86:7f:96:50:4e:3c:5c:55:9b:b1:dc:8a:dd:f8: 4b:d6:4a:aa:0e:02:84:3c:5e:92:cd:d1:fa:fd:9c:b8:ec:98: 92:1e:61:a1:1f:1d:2f:a8:8b:8b:9d:d0:3e:f6:f9:d2:87:c1: 35:d6:ac:dd:1f:8e:c3:6d:31:b3:b6:fc:e4:1b:ab:10:68:df: 75:96:76:69:da:d4:35:00:cc:05:ab:fc:14:c2:fb:6a:89:0c: 5d:f7:14:92:ed:72:18:60:14:79:9d:47:f3:f1:80:dc:86:2e: 5f:25:59:d2:10:95:27:14:ea:36:cc:63:e4:8a:f6:46:2e:7c: d4:01:11:3b:ca:82:d7:ce:3a:d7:7e:4d:2a:0c:b8:14:87:80: da:4d:bf:2a:70:71:4a:86:a9:90:11:0a:8f:dd:c8:9e:67:3f: 5a:7e:ea:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFyfLhK7pDidZFW1UGyosmmW6lNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCQTdDMzVBNUMyNDIwNTg5QjMwQzMzRDlDRjEzNzQ1 MDVGM0RCQzAeFw0yNTA2MTMxMDI1MjJaFw0yNTA2MTQxMzIyMjJaMDMxMTAvBgNV BAMTKEZEM0VCMUFBQzgyNDMyOEM0N0Q1QUE2NzAzNTFFRDlEQTZCQ0ZGMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wZj6W9yS4LrcYCAfxw21zouK dFSIYb5mDo7Ze+gz+6g9CHHIOGZiH/vMOlbh3dK9B+ZcScNaE4/5Mpopd4sSCA5c fHK4en+Ok0gRAXXVXm8Wzb6R9iiDzX+V3EXoNnRpdcHpnvNPH11HT2AaPPbxeQeI TeIGF9Xm3mmKF4TeSg8bYQ2BOiq3hxuXT78NoI9XSRGSizYn8s0ky6F2ITKEUqC9 usdjyUxPNk41ag+2YYPYLlZ2Z34zBwDW/XlcuVLPvRd/B6CQK7t13N0XJ/D7pDsy M8D6cR10qwgb91oEc5E1mou07lr/Bx8i2515Zc33U/GOg3PiOTl2jwt0WW0bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/T6xqsgkMoxH1apnA1Htnaa8/yAwHwYDVR0j BBgwFoAU2Lp8NaXCQgWJswwz2c8TdFBfPbwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6 VnQvMC9EOEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4QkE3QzM1QTVDMjQyMDU4 OUIzMEMzM0Q5Q0YxMzc0NTA1RjNEQkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NU5XZ0dUbnlQSlR2dmhCWVc0OFZpVG4xV0toOGljeVN0VmVjeHE3eVR6VnQvMC9E OEJBN0MzNUE1QzI0MjA1ODlCMzBDMzNEOUNGMTM3NDUwNUYzREJDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo6fYEczbeFkd1W4qczFMp4Ei1tdOk91eQ5zOA6AxvhKppm7D16T1nclEMOgI hCCOQDj9rP7e5xOWJeSQc1QobMhVttuezXlXQbr0UxLMVsryoBAh6xUuwlU9ivLk 84Z/llBOPFxVm7Hcit34S9ZKqg4ChDxeks3R+v2cuOyYkh5hoR8dL6iLi53QPvb5 0ofBNdas3R+Ow20xs7b85BurEGjfdZZ2adrUNQDMBav8FML7aokMXfcUku1yGGAU eZ1H8/GA3IYuXyVZ0hCVJxTqNsxj5Ir2Ri581AERO8qC1846135NKgy4FIeA2k2/ KnBxSoapkBEKj93Inmc/Wn7qdg== -----END CERTIFICATE-----Generated at Fri Jun 13 15:39:56 2025 by rpki-client