$ rpki-client -vvf rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.mft File: 8013DE498C2B907A3EF2E48332493039E7A2F953.mft (raw, json) Hash identifier: TK6l/wSIIKC3jGN99YbTtjxai1MNkROWrIzVxoPBaDA= Subject key identifier: C6:7C:02:0D:C8:E3:39:6C:53:77:F8:CE:3D:CB:06:43:48:FD:E0:73 Authority key identifier: 80:13:DE:49:8C:2B:90:7A:3E:F2:E4:83:32:49:30:39:E7:A2:F9:53 Certificate issuer: /CN=8013DE498C2B907A3EF2E48332493039E7A2F953 Certificate serial: 7ED6263CA3089CB5F3333891DFC4F27230A2613A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer Subject info access: rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.mft Manifest number: 0138 Signing time: Fri 06 Jun 2025 21:50:11 +0000 Manifest this update: Fri 06 Jun 2025 21:45:11 +0000 Manifest next update: Sat 07 Jun 2025 22:21:11 +0000 Files and hashes: 1: 34352e3232342e3230302e302f32332d3233203d3e20323637363730.roa (hash: EtPGuSZH3vRBmX/qwPL6+UH0DlEpBn2eWiAs0yBsA2A=) 2: 8013DE498C2B907A3EF2E48332493039E7A2F953.crl (hash: 3K4oE7PY0maRNgMzxCl1zeGGewhjj2Jbbqp16iEa85U=) 3: 34352e3232342e3138372e302f32342d3234203d3e20323637363730.roa (hash: l9yWCd/pjyuJABxFiVXdl4lyno3VoXEL7hL/eJbCOVQ=) 4: 323830343a343531303a3a2f33322d3332203d3e20323637363730.roa (hash: h88mpkh7qxBNgN9HD7X4gl7QQ9E2VicVIuavbpmWbrg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.crl rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 22:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d6:26:3c:a3:08:9c:b5:f3:33:38:91:df:c4:f2:72:30:a2:61:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8013DE498C2B907A3EF2E48332493039E7A2F953 Validity Not Before: Jun 6 21:45:11 2025 GMT Not After : Jun 7 22:21:11 2025 GMT Subject: CN=C67C020DC8E3396C5377F8CE3DCB064348FDE073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1d:e7:c5:61:c2:7b:86:aa:de:38:70:f7:9b: f6:93:4d:cb:ef:b0:7f:f6:7d:fe:80:55:01:7e:61: 91:95:8c:e4:2a:a0:96:d7:d8:81:5c:d8:1a:28:37: c3:ff:c9:b6:48:47:b2:96:4c:f9:de:f6:91:88:51: 4d:9c:4e:5e:5a:c4:1d:fb:5d:d1:19:ff:7d:c3:5b: ba:c3:ed:e9:9e:3d:7c:c0:f8:2d:30:32:df:16:c5: 36:e5:ad:94:7b:47:30:e7:4d:f0:38:16:2b:db:1a: 19:bd:36:cb:02:d8:97:0a:45:58:2a:78:4f:71:12: 34:30:d8:e0:13:0f:9c:ba:32:41:8f:45:c9:a9:fe: f6:13:f5:cf:8b:6f:7b:92:b3:1a:54:21:87:bb:63: bc:f4:18:f4:be:cb:61:ea:dd:65:ca:81:62:81:2c: c4:c5:50:fe:93:14:9f:ab:d0:ea:f4:d8:1f:34:47: 3b:82:5f:d9:5a:c4:70:ce:7c:34:1d:61:8a:99:c5: c4:2f:03:8c:19:09:d3:9b:6b:e8:57:6d:12:94:2c: fd:e5:ef:8a:7b:17:c3:71:b9:1c:dd:39:7d:9f:62: 40:3a:ad:02:ef:0f:54:7d:3c:bf:63:5c:d0:13:27: 24:ce:57:ba:48:f7:a0:3e:6e:af:2c:65:90:ff:6b: 52:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7C:02:0D:C8:E3:39:6C:53:77:F8:CE:3D:CB:06:43:48:FD:E0:73 X509v3 Authority Key Identifier: keyid:80:13:DE:49:8C:2B:90:7A:3E:F2:E4:83:32:49:30:39:E7:A2:F9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:46:6d:4f:a6:ea:53:1e:79:9b:92:4f:b1:e4:e1:8b:e4:73: 8f:6c:9b:b1:a7:fd:86:fb:6a:66:39:c3:38:4c:94:e8:f5:38: fd:85:6d:19:d5:59:cb:0b:82:20:f1:42:5a:a9:51:a8:49:c7: bf:d4:d3:d3:4e:8e:34:b2:3a:89:ff:fb:2e:38:ff:23:b1:fb: 0e:93:72:94:c8:23:0b:4a:ce:6d:f9:e4:ed:20:66:78:7f:41: 6b:33:52:6e:c4:0c:95:14:5d:62:1d:7c:68:58:53:50:8c:1b: dd:e7:24:e1:0c:c9:23:93:52:59:c5:34:61:08:fb:fd:d5:55: 80:d6:f8:b0:5e:98:08:ad:22:87:80:7d:6d:7e:25:76:01:46: 77:2a:df:05:9e:a9:e1:13:6e:d4:d8:6f:18:47:c3:31:a3:17: e1:ab:c8:c7:69:f2:a9:50:fe:6f:39:4c:7c:1d:26:5c:d1:ca: d8:cf:ed:bb:c2:01:a3:ea:1e:64:d0:71:f3:55:4f:39:6e:d3: e7:75:42:63:0c:ad:41:a5:69:b8:1d:8c:9e:b5:3a:e4:42:3e: b1:35:ac:e7:8b:de:c1:a0:0c:a2:ca:14:a6:82:f1:e7:d5:e9: a1:de:a8:11:4c:40:cf:b5:77:2c:34:1d:ca:4a:c1:3f:75:41: f2:05:4a:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUftYmPKMInLXzMziR38TycjCiYTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAxM0RFNDk4QzJCOTA3QTNFRjJFNDgzMzI0OTMwMzlF N0EyRjk1MzAeFw0yNTA2MDYyMTQ1MTFaFw0yNTA2MDcyMjIxMTFaMDMxMTAvBgNV BAMTKEM2N0MwMjBEQzhFMzM5NkM1Mzc3RjhDRTNEQ0IwNjQzNDhGREUwNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsHefFYcJ7hqreOHD3m/aTTcvv sH/2ff6AVQF+YZGVjOQqoJbX2IFc2BooN8P/ybZIR7KWTPne9pGIUU2cTl5axB37 XdEZ/33DW7rD7emePXzA+C0wMt8WxTblrZR7RzDnTfA4FivbGhm9NssC2JcKRVgq eE9xEjQw2OATD5y6MkGPRcmp/vYT9c+Lb3uSsxpUIYe7Y7z0GPS+y2Hq3WXKgWKB LMTFUP6TFJ+r0Or02B80RzuCX9laxHDOfDQdYYqZxcQvA4wZCdOba+hXbRKULP3l 74p7F8NxuRzdOX2fYkA6rQLvD1R9PL9jXNATJyTOV7pI96A+bq8sZZD/a1JxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxnwCDcjjOWxTd/jOPcsGQ0j94HMwHwYDVR0j BBgwFoAUgBPeSYwrkHo+8uSDMkkwOeei+VMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWF2dExlQW9odE1BTEVjUXBxakVtZEZnYVZlaTkxRWhNVmhFa3pRRHNu Z2ovMS84MDEzREU0OThDMkI5MDdBM0VGMkU0ODMzMjQ5MzAzOUU3QTJGOTUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwMTNERTQ5OEMyQjkwN0Ez RUYyRTQ4MzMyNDkzMDM5RTdBMkY5NTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWF2dExlQW9odE1BTEVjUXBxakVtZEZnYVZlaTkxRWhNVmhFa3pRRHNuZ2ovMS84 MDEzREU0OThDMkI5MDdBM0VGMkU0ODMzMjQ5MzAzOUU3QTJGOTUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJkZtT6bqUx55m5JPseThi+Rzj2ybsaf9hvtqZjnDOEyU6PU4/YVtGdVZywuC IPFCWqlRqEnHv9TT006ONLI6if/7Ljj/I7H7DpNylMgjC0rObfnk7SBmeH9BazNS bsQMlRRdYh18aFhTUIwb3eck4QzJI5NSWcU0YQj7/dVVgNb4sF6YCK0ih4B9bX4l dgFGdyrfBZ6p4RNu1NhvGEfDMaMX4avIx2nyqVD+bzlMfB0mXNHK2M/tu8IBo+oe ZNBx81VPOW7T53VCYwytQaVpuB2MnrU65EI+sTWs54vewaAMosoUpoLx59Xpod6o EUxAz7V3LDQdykrBP3VB8gVK5g== -----END CERTIFICATE-----Generated at Sat Jun 7 05:35:53 2025 by rpki-client