$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.mft File: 000E8F0F5BCF155986A68F056DBFD3BAA939FE78.mft (raw, json) Hash identifier: XXyHgbMnocHPnw3GTFxITer61XSLkbn8d+cox9bEr4U= Subject key identifier: 49:23:6D:7A:77:F7:8D:5D:6E:17:6A:89:B2:03:2F:D8:CA:D5:FD:08 Authority key identifier: 00:0E:8F:0F:5B:CF:15:59:86:A6:8F:05:6D:BF:D3:BA:A9:39:FE:78 Certificate issuer: /CN=000E8F0F5BCF155986A68F056DBFD3BAA939FE78 Certificate serial: 62EC30BA71CABE1CE269EBF275BBE5798FA1F673 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.cer Subject info access: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.mft Manifest number: 0115 Signing time: Fri 06 Jun 2025 17:35:35 +0000 Manifest this update: Fri 06 Jun 2025 17:30:35 +0000 Manifest next update: Sat 07 Jun 2025 20:45:35 +0000 Files and hashes: 1: 000E8F0F5BCF155986A68F056DBFD3BAA939FE78.crl (hash: xlDwR434lpNSfTcoLPkzTAJIOXLC8FygiWMe/njOR4k=) 2: 3138362e3139332e3137362e302f32302d3332203d3e203238313931.roa (hash: c2urmIKEu6tZU24sCn4bd7V6NlwlOt5R6/ocpGM45nQ=) 3: 3138392e39302e33322e302f32302d3332203d3e203238313931.roa (hash: 2rrScVU9LjdZ0hVnH/EWwjnl9SrJD4d3Fi75/n++Ltw=) 4: 323830343a6332633a3a2f33322d313238203d3e203238313931.roa (hash: 1IdDBv8DZUOuEo0fzv9kUqDmkSQq4AgAMpIYQ1dFasc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.crl rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 19:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ec:30:ba:71:ca:be:1c:e2:69:eb:f2:75:bb:e5:79:8f:a1:f6:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000E8F0F5BCF155986A68F056DBFD3BAA939FE78 Validity Not Before: Jun 6 17:30:35 2025 GMT Not After : Jun 7 20:45:35 2025 GMT Subject: CN=49236D7A77F78D5D6E176A89B2032FD8CAD5FD08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:ca:5b:bf:06:72:20:77:3a:3e:7e:bf:e3: 0b:e3:52:71:f7:f2:60:e1:e8:1a:c0:22:2c:54:33: 21:89:68:89:fb:c9:8b:3c:f7:07:f6:58:01:81:49: 0d:8a:c9:48:91:f0:c9:42:c9:a7:a3:74:da:94:48: a6:1d:6e:94:2f:30:38:8d:84:d4:7e:ba:70:2f:a5: e9:7c:b9:4c:c8:2d:65:71:42:be:45:ce:af:d3:97: 8b:dc:91:b3:97:b0:6b:19:a2:3f:ef:90:55:e1:8b: 0b:1f:79:36:f9:a9:5e:24:4f:c9:12:0e:96:5a:1b: d8:f3:48:e9:e6:97:e8:7a:9f:ce:96:cd:50:85:19: 10:60:49:c4:4c:23:99:4f:c8:79:ec:36:89:ad:da: f4:2b:13:44:fd:ce:e5:72:d6:ab:c8:ae:30:88:8a: 25:af:3e:0b:da:99:e4:f6:5f:67:db:c8:29:bc:a9: b5:8a:2c:54:5e:ba:ee:30:19:dd:ef:45:d3:5a:2d: fc:04:18:9b:03:f4:e7:68:1c:e6:a9:0c:18:2b:08: 1f:39:36:4b:48:74:f0:6c:83:2e:81:fa:40:8c:2c: 60:82:34:ca:89:0f:08:10:e8:da:76:ee:ea:18:0d: 30:27:9b:14:1a:24:00:2e:2e:d9:97:db:28:8f:17: 7f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:23:6D:7A:77:F7:8D:5D:6E:17:6A:89:B2:03:2F:D8:CA:D5:FD:08 X509v3 Authority Key Identifier: keyid:00:0E:8F:0F:5B:CF:15:59:86:A6:8F:05:6D:BF:D3:BA:A9:39:FE:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:fc:3c:96:18:1f:8e:a6:66:64:69:9d:ec:85:54:ee:ac:48: bd:10:c7:bc:30:f9:b5:5c:34:54:df:b2:72:54:c5:6c:4e:34: 46:6e:b8:06:04:a2:37:19:f4:74:4f:22:7f:ce:a1:33:3f:65: 5f:0c:3a:1c:50:b7:85:f3:cf:65:c8:ee:fd:ff:b1:5e:fd:18: 77:33:ab:89:42:34:95:1a:d2:f8:ae:77:fc:6b:b7:30:68:b7: 0b:1f:97:55:7c:c6:8c:ba:a0:17:a5:8f:a0:c8:af:ec:82:b4: 1c:eb:26:01:27:87:8a:0e:d9:98:cb:09:ec:95:99:e4:de:1c: f1:c0:7e:77:ff:ed:b3:78:6a:96:e1:c6:70:2a:66:09:13:f0: 93:15:68:d4:fb:d5:a6:9f:f9:b7:3c:87:74:c3:df:8e:1c:25: ad:32:f8:68:48:ec:3c:85:cb:9f:bb:69:95:fb:4b:dc:72:49: e2:9a:da:fd:88:83:e2:a5:3a:1a:04:92:40:46:23:7a:9a:65: 31:19:0c:fe:6a:c2:ae:58:a1:aa:12:e2:75:05:a5:5c:6d:ea: 9f:60:41:36:89:78:d3:53:e8:fa:ea:17:2e:bf:7f:f7:95:45: 99:39:b6:32:15:ed:98:d1:ca:aa:ef:2d:9e:25:eb:c3:95:71: 5c:f8:c5:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYuwwunHKvhziaevydbvleY+h9nMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDAwRThGMEY1QkNGMTU1OTg2QTY4RjA1NkRCRkQzQkFB OTM5RkU3ODAeFw0yNTA2MDYxNzMwMzVaFw0yNTA2MDcyMDQ1MzVaMDMxMTAvBgNV BAMTKDQ5MjM2RDdBNzdGNzhENUQ2RTE3NkE4OUIyMDMyRkQ4Q0FENUZEMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7WspbvwZyIHc6Pn6/4wvjUnH3 8mDh6BrAIixUMyGJaIn7yYs89wf2WAGBSQ2KyUiR8MlCyaejdNqUSKYdbpQvMDiN hNR+unAvpel8uUzILWVxQr5Fzq/Tl4vckbOXsGsZoj/vkFXhiwsfeTb5qV4kT8kS DpZaG9jzSOnml+h6n86WzVCFGRBgScRMI5lPyHnsNomt2vQrE0T9zuVy1qvIrjCI iiWvPgvameT2X2fbyCm8qbWKLFReuu4wGd3vRdNaLfwEGJsD9OdoHOapDBgrCB85 NktIdPBsgy6B+kCMLGCCNMqJDwgQ6Np27uoYDTAnmxQaJAAuLtmX2yiPF389AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSSNtenf3jV1uF2qJsgMv2MrV/QgwHwYDVR0j BBgwFoAUAA6PD1vPFVmGpo8Fbb/Tuqk5/ngwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5 R1MvMC8wMDBFOEYwRjVCQ0YxNTU5ODZBNjhGMDU2REJGRDNCQUE5MzlGRTc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMEU4RjBGNUJDRjE1NTk4 NkE2OEYwNTZEQkZEM0JBQTkzOUZFNzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5R1MvMC8w MDBFOEYwRjVCQ0YxNTU5ODZBNjhGMDU2REJGRDNCQUE5MzlGRTc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA5/w8lhgfjqZmZGmd7IVU7qxIvRDHvDD5tVw0VN+yclTFbE40Rm64BgSiNxn0 dE8if86hMz9lXww6HFC3hfPPZcju/f+xXv0YdzOriUI0lRrS+K53/Gu3MGi3Cx+X VXzGjLqgF6WPoMiv7IK0HOsmASeHig7ZmMsJ7JWZ5N4c8cB+d//ts3hqluHGcCpm CRPwkxVo1PvVpp/5tzyHdMPfjhwlrTL4aEjsPIXLn7tplftL3HJJ4pra/YiD4qU6 GgSSQEYjepplMRkM/mrCrlihqhLidQWlXG3qn2BBNol401Po+uoXLr9/95VFmTm2 MhXtmNHKqu8tniXrw5VxXPjFMA== -----END CERTIFICATE-----Generated at Fri Jun 6 19:42:09 2025 by rpki-client