$ rpki-client -vvf rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.mft File: 9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.mft (raw, json) Hash identifier: pslEabwW8ZAmKVqvK4q5+pXWJ/T7kRNneCuYGX2wY0I= Subject key identifier: 8E:E9:E8:9D:7F:69:64:09:74:63:B6:B1:04:BE:FC:93:1B:84:B0:DC Authority key identifier: 93:54:BF:01:ED:BE:33:FF:FD:B8:75:80:FB:3C:B1:AD:ED:F0:4D:6E Certificate issuer: /CN=9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E Certificate serial: 6FC7612DE10D91C29EF6543895A7C8C85DA1CAD5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.cer Subject info access: rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.mft Manifest number: 71 Signing time: Tue 10 Jun 2025 08:47:56 +0000 Manifest this update: Tue 10 Jun 2025 08:42:56 +0000 Manifest next update: Wed 11 Jun 2025 10:09:56 +0000 Files and hashes: 1: 34352e3136342e3234302e302f32322d3234203d3e20323638363437.roa (hash: 1qeqlxD4i8ErlWYs5BtorIleXavb6sm/ubmG51/SqMA=) 2: 323830343a353436343a3a2f33322d3438203d3e20323638363437.roa (hash: RwIMfdEJPJO5aLK6dYjXlYp2huiKi2TGMfKiAB8zUAE=) 3: 9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.crl (hash: 1IPqJITkH4rnNpcAKhNXx7Xvln5Ra/xnayPsybVut4Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.crl rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 10:09:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c7:61:2d:e1:0d:91:c2:9e:f6:54:38:95:a7:c8:c8:5d:a1:ca:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E Validity Not Before: Jun 10 08:42:56 2025 GMT Not After : Jun 11 10:09:56 2025 GMT Subject: CN=8EE9E89D7F6964097463B6B104BEFC931B84B0DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:df:5a:97:2a:9b:f5:e6:2d:08:62:5c:88:28: 48:c3:ed:38:9f:3c:70:55:19:46:26:e0:fa:32:d0: 1c:a8:42:f4:1a:10:a5:92:db:ec:4e:01:cc:96:98: 43:9f:34:f9:1a:a6:14:1e:f0:9b:75:46:30:71:0e: 1c:7c:d3:f0:b5:e5:4a:64:12:5e:6b:77:35:eb:e5: 75:81:44:03:c7:9f:b6:22:ed:8e:b9:e5:06:21:42: fc:8b:a2:78:44:30:1b:00:bd:46:e7:f4:e6:1b:97: 62:9a:9e:37:7f:88:7d:20:5a:31:e4:c4:2b:98:d5: 12:74:f7:aa:8e:22:bd:e0:e4:b1:67:1d:72:1e:ba: 3c:0f:7e:af:9c:1c:d9:23:12:8a:b5:f3:ef:2c:23: 23:53:b7:02:4c:08:92:77:91:bf:fe:d7:66:6e:96: 64:9b:e8:b6:b9:a6:19:68:e6:ae:ea:ad:ad:3e:55: aa:19:91:f0:1f:10:a3:07:e5:b5:86:7d:42:a6:e1: 07:e5:7f:10:7d:0c:c7:91:a4:4a:a5:dc:53:9b:92: 55:0b:00:4d:10:0f:c5:9c:76:d5:66:f9:d8:25:c5: 91:d3:f2:82:ac:de:49:04:e9:3d:ea:d1:52:cf:6d: 63:11:80:d9:5a:e1:e9:54:9e:d1:d6:e1:15:77:9f: 7c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E9:E8:9D:7F:69:64:09:74:63:B6:B1:04:BE:FC:93:1B:84:B0:DC X509v3 Authority Key Identifier: keyid:93:54:BF:01:ED:BE:33:FF:FD:B8:75:80:FB:3C:B1:AD:ED:F0:4D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/68B7RzM1HgDdTSDKJbGimpTrntYySs7gXA5893AFajgo/0/9354BF01EDBE33FFFDB87580FB3CB1ADEDF04D6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:11:60:b5:b4:45:3c:a2:0c:6f:5c:24:f3:fc:df:09:4f:ca: af:45:19:5f:82:c8:01:d2:f5:64:db:07:88:f2:2e:20:17:a1: f1:79:eb:72:67:20:c7:51:e7:55:ec:5f:74:7b:61:85:be:e8: a1:01:52:b3:79:a4:29:18:a8:d6:30:9a:c7:5c:a0:9b:e4:e9: 56:08:f2:36:0c:5c:44:fb:4a:c2:39:fa:17:07:f0:82:7a:3b: df:ea:25:bf:90:7b:07:5a:4d:e1:0b:fa:38:d6:29:9b:53:b8: f1:98:be:1c:e0:d4:a2:76:78:f9:de:97:0f:b2:2a:74:0e:f8: b4:22:51:ac:a8:42:93:da:94:63:95:96:4a:42:f7:3c:02:af: 07:1a:75:47:59:ca:85:33:f5:f0:3e:ce:06:4f:53:b8:37:e6: c0:a8:f2:59:a6:fd:c6:06:15:07:a4:f4:a0:17:db:e9:26:d8: 04:89:e9:86:b3:79:38:4f:e8:aa:6e:25:ac:e5:07:1a:b2:22: 1c:ac:8b:94:39:e2:36:44:ce:95:a2:6d:f0:dc:9b:e7:bc:b4: 49:ea:6c:db:47:e7:7a:9b:3a:e4:f4:fc:7b:92:e3:90:95:dc: ed:57:c8:82:2f:fc:1d:a3:50:c4:b2:f9:be:9a:e8:ca:52:cd: 84:1c:de:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUb8dhLeENkcKe9lQ4lafIyF2hytUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM1NEJGMDFFREJFMzNGRkZEQjg3NTgwRkIzQ0IxQURF REYwNEQ2RTAeFw0yNTA2MTAwODQyNTZaFw0yNTA2MTExMDA5NTZaMDMxMTAvBgNV BAMTKDhFRTlFODlEN0Y2OTY0MDk3NDYzQjZCMTA0QkVGQzkzMUI4NEIwREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC531qXKpv15i0IYlyIKEjD7Tif PHBVGUYm4Poy0ByoQvQaEKWS2+xOAcyWmEOfNPkaphQe8Jt1RjBxDhx80/C15Upk El5rdzXr5XWBRAPHn7Yi7Y655QYhQvyLonhEMBsAvUbn9OYbl2Kanjd/iH0gWjHk xCuY1RJ096qOIr3g5LFnHXIeujwPfq+cHNkjEoq18+8sIyNTtwJMCJJ3kb/+12Zu lmSb6La5phlo5q7qra0+VaoZkfAfEKMH5bWGfUKm4QflfxB9DMeRpEql3FObklUL AE0QD8WcdtVm+dglxZHT8oKs3kkE6T3q0VLPbWMRgNla4elUntHW4RV3n3wxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjunonX9pZAl0Y7axBL78kxuEsNwwHwYDVR0j BBgwFoAUk1S/Ae2+M//9uHWA+zyxre3wTW4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNjhCN1J6TTFIZ0RkVFNES0piR2ltcFRybnRZeVNzN2dYQTU4OTNBRmFq Z28vMC85MzU0QkYwMUVEQkUzM0ZGRkRCODc1ODBGQjNDQjFBREVERjA0RDZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzNTRCRjAxRURCRTMzRkZG REI4NzU4MEZCM0NCMUFERURGMDRENkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NjhCN1J6TTFIZ0RkVFNES0piR2ltcFRybnRZeVNzN2dYQTU4OTNBRmFqZ28vMC85 MzU0QkYwMUVEQkUzM0ZGRkRCODc1ODBGQjNDQjFBREVERjA0RDZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiRFgtbRFPKIMb1wk8/zfCU/Kr0UZX4LIAdL1ZNsHiPIuIBeh8Xnrcmcgx1Hn VexfdHthhb7ooQFSs3mkKRio1jCax1ygm+TpVgjyNgxcRPtKwjn6Fwfwgno73+ol v5B7B1pN4Qv6ONYpm1O48Zi+HODUonZ4+d6XD7IqdA74tCJRrKhCk9qUY5WWSkL3 PAKvBxp1R1nKhTP18D7OBk9TuDfmwKjyWab9xgYVB6T0oBfb6SbYBInphrN5OE/o qm4lrOUHGrIiHKyLlDniNkTOlaJt8Nyb57y0Seps20fneps65PT8e5LjkJXc7VfI gi/8HaNQxLL5vproylLNhBzeRw== -----END CERTIFICATE-----Generated at Wed Jun 11 03:33:28 2025 by rpki-client