$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft File: 85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft (raw, json) Hash identifier: N+hRKLylZpcFrIplFIlnv1rVNAmsKMnJ2+JrF2k7NSM= Subject key identifier: 90:42:EC:52:06:88:74:1C:19:59:45:29:CD:B9:46:FA:08:6B:2F:10 Authority key identifier: 85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95 Certificate issuer: /CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995 Certificate serial: 2952DFE65BCBE58B16C5D725E850A7CABA5E18B9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer Subject info access: rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft Manifest number: 0238 Signing time: Tue 03 Jun 2025 23:58:23 +0000 Manifest this update: Tue 03 Jun 2025 23:53:23 +0000 Manifest next update: Thu 05 Jun 2025 01:28:23 +0000 Files and hashes: 1: 85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl (hash: 1c+pLa2yaYiYnnNaZy3lLxiqQKpBWBj9k967of+XmoE=) 2: 323830343a6366303a3a2f33322d3438203d3e203532353736.roa (hash: wiHI9SrflkamLTOfmYBEaJJSlinTuLYPlmXxJbPhtpo=) 3: 3137372e38362e3230302e302f32312d3234203d3e203532353736.roa (hash: TI8fvU+DA9BGVyDJ2qm1cJltZ0I1E38L4u9tbujdTOY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Jun 2025 01:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:52:df:e6:5b:cb:e5:8b:16:c5:d7:25:e8:50:a7:ca:ba:5e:18:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85AC7FF0722409116C1E3C40FE47EAA603DDD995 Validity Not Before: Jun 3 23:53:23 2025 GMT Not After : Jun 5 01:28:23 2025 GMT Subject: CN=9042EC520688741C19594529CDB946FA086B2F10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9d:ec:5a:d4:84:fc:c3:93:d1:99:5d:25:7c: fd:b8:53:14:8c:77:d1:81:27:dc:ef:e2:64:4d:57: 1c:92:e7:30:a1:63:78:1f:ce:12:32:ba:5b:43:bc: 3a:5e:5e:0c:6f:36:31:47:f8:60:54:e9:94:7e:0f: f2:c6:36:e7:06:bb:bf:13:05:67:39:f5:eb:0a:3d: c0:0d:fc:71:86:2f:84:62:b8:a6:78:96:1f:9c:05: 17:e5:d3:79:08:a4:0e:74:07:32:3e:d1:25:fe:c9: 8a:57:1f:8a:56:68:e1:9c:f6:66:ae:42:fc:42:49: b2:3e:92:4a:30:d0:ec:01:d6:46:fb:c2:13:eb:e2: 50:90:39:d2:ec:cb:88:e4:45:a7:ea:c1:05:7f:01: ad:a4:03:14:b0:13:b8:55:99:ef:cb:cf:44:6f:c6: 7a:ee:4a:f5:5c:c6:02:c0:40:73:63:2e:5b:ea:d2: db:14:7d:c4:56:c7:82:13:29:b6:8f:fb:1c:fc:60: f4:a8:8d:20:82:e3:d4:02:27:bb:ad:36:ba:dd:ed: b6:d3:1c:c5:55:0f:aa:9b:44:ef:5f:31:b5:8b:73: 25:49:8b:bc:8c:d5:2b:7e:fc:03:41:0a:66:f8:4a: ab:85:d3:f7:78:fa:89:b1:44:86:88:e8:cd:bd:f4: 97:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:42:EC:52:06:88:74:1C:19:59:45:29:CD:B9:46:FA:08:6B:2F:10 X509v3 Authority Key Identifier: keyid:85:AC:7F:F0:72:24:09:11:6C:1E:3C:40:FE:47:EA:A6:03:DD:D9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/85AC7FF0722409116C1E3C40FE47EAA603DDD995.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:fc:29:d6:1d:0b:f9:d8:41:04:77:95:e7:43:36:e5:32:0b: 78:c3:11:81:e5:71:13:33:89:11:a1:04:47:86:21:9f:7d:11: ff:d0:0c:fa:21:72:cb:3a:78:69:06:db:72:d4:13:f0:5b:1f: d2:50:15:11:2d:36:b7:95:13:53:65:92:63:5e:13:8b:68:b5: a9:2f:97:5c:bd:11:b1:c1:34:4d:00:97:62:e7:5e:c2:8a:34: 95:0a:67:0f:6d:ac:d9:d0:a5:c0:b9:63:48:59:c2:a4:39:82: 43:1d:61:5d:64:c0:9b:28:f5:fb:ce:ae:f6:83:83:9e:5f:7b: b0:1a:8b:f4:5e:47:74:8e:6f:a1:0a:bd:f3:f0:5c:0d:b7:f9: 39:9a:41:18:f4:9f:78:24:98:ec:3a:99:bf:fd:3b:01:b3:65: a5:17:01:e8:a9:a4:c7:13:40:76:db:c2:35:a4:86:0b:ad:45: d4:28:04:0d:83:c0:bb:49:ad:d0:1c:e5:9b:4c:3a:dd:70:1a: 08:da:46:71:68:db:a3:db:21:7b:66:ed:6e:ba:b9:84:20:e6: 34:94:b9:2b:fc:f2:88:8d:05:73:11:6d:a4:89:ee:c7:85:ed: b7:cd:47:4d:e2:40:16:f5:7c:6e:fc:95:ec:93:48:99:c4:47: d6:31:a8:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKVLf5lvL5YsWxdcl6FCnyrpeGLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVBQzdGRjA3MjI0MDkxMTZDMUUzQzQwRkU0N0VBQTYw M0RERDk5NTAeFw0yNTA2MDMyMzUzMjNaFw0yNTA2MDUwMTI4MjNaMDMxMTAvBgNV BAMTKDkwNDJFQzUyMDY4ODc0MUMxOTU5NDUyOUNEQjk0NkZBMDg2QjJGMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0nexa1IT8w5PRmV0lfP24UxSM d9GBJ9zv4mRNVxyS5zChY3gfzhIyultDvDpeXgxvNjFH+GBU6ZR+D/LGNucGu78T BWc59esKPcAN/HGGL4RiuKZ4lh+cBRfl03kIpA50BzI+0SX+yYpXH4pWaOGc9mau QvxCSbI+kkow0OwB1kb7whPr4lCQOdLsy4jkRafqwQV/Aa2kAxSwE7hVme/Lz0Rv xnruSvVcxgLAQHNjLlvq0tsUfcRWx4ITKbaP+xz8YPSojSCC49QCJ7utNrrd7bbT HMVVD6qbRO9fMbWLcyVJi7yM1St+/ANBCmb4SquF0/d4+omxRIaI6M299JfrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkELsUgaIdBwZWUUpzblG+ghrLxAwHwYDVR0j BBgwFoAUhax/8HIkCRFsHjxA/kfqpgPd2ZUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWNuYTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9OWEVVSjZDTUdK WFIvMS84NUFDN0ZGMDcyMjQwOTExNkMxRTNDNDBGRTQ3RUFBNjAzREREOTk1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1QUM3RkYwNzIyNDA5MTE2 QzFFM0M0MEZFNDdFQUE2MDNEREQ5OTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWNuYTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9OWEVVSjZDTUdKWFIvMS84 NUFDN0ZGMDcyMjQwOTExNkMxRTNDNDBGRTQ3RUFBNjAzREREOTk1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAz/wp1h0L+dhBBHeV50M25TILeMMRgeVxEzOJEaEER4Yhn30R/9AM+iFyyzp4 aQbbctQT8Fsf0lAVES02t5UTU2WSY14Ti2i1qS+XXL0RscE0TQCXYudewoo0lQpn D22s2dClwLljSFnCpDmCQx1hXWTAmyj1+86u9oODnl97sBqL9F5HdI5voQq98/Bc Dbf5OZpBGPSfeCSY7DqZv/07AbNlpRcB6KmkxxNAdtvCNaSGC61F1CgEDYPAu0mt 0Bzlm0w63XAaCNpGcWjbo9she2btbrq5hCDmNJS5K/zyiI0FcxFtpInux4Xtt81H TeJAFvV8bvyV7JNImcRH1jGomQ== -----END CERTIFICATE-----Generated at Wed Jun 4 11:32:10 2025 by rpki-client