$ rpki-client -vvf rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft File: 5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft (raw, json) Hash identifier: zVu5za4xGkLcF5bM/QpZXWX350WfeNo5cyJa0a34X1M= Subject key identifier: 68:4E:9B:0B:34:BF:6F:2C:92:B2:A7:BB:FF:37:A0:8E:04:C8:3F:F1 Authority key identifier: 5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F Certificate issuer: /CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F Certificate serial: 78B30572664C8610ACCE5741BBA1A9CAFD290E29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer Subject info access: rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft Manifest number: 01AD Signing time: Tue 10 Jun 2025 20:00:14 +0000 Manifest this update: Tue 10 Jun 2025 19:55:14 +0000 Manifest next update: Wed 11 Jun 2025 21:58:14 +0000 Files and hashes: 1: 323830343a343338303a3a2f33322d313238203d3e20323637353734.roa (hash: 2hFf6qpax1RO4mE3DAUS9lmGsHO6m6S7mC10W5k/lXI=) 2: 5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl (hash: /CA+ffnunah2naSgHFcGH0IzfI1G3106VceLhhXUZ4A=) 3: 34352e37302e32382e302f32322d3332203d3e20323637353734.roa (hash: M7TY98v4yjj0bR9HrRWIH6vqkjhPJO7oXLWdMRKwm94=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 21:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b3:05:72:66:4c:86:10:ac:ce:57:41:bb:a1:a9:ca:fd:29:0e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A052D31FE40B5F370637E2C0E4F1A18FF08295F Validity Not Before: Jun 10 19:55:14 2025 GMT Not After : Jun 11 21:58:14 2025 GMT Subject: CN=684E9B0B34BF6F2C92B2A7BBFF37A08E04C83FF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:21:1e:55:11:24:1c:d5:fd:34:1d:14:1b:ec: 97:2c:9f:87:f6:7d:39:19:fb:50:fa:6c:8a:43:0c: df:01:d5:4f:67:de:5a:f7:ec:7b:03:fc:01:14:41: 26:ac:9b:c0:fe:7f:8a:c6:93:1b:d9:7e:a4:fb:b4: 9f:eb:42:b6:4f:65:be:39:59:32:a8:f6:a0:a3:95: d8:5e:80:ce:0a:7c:54:5c:f5:6b:2b:ed:3f:f8:04: d5:f6:0a:7e:e2:99:95:8c:91:f9:43:e4:42:ed:42: 1c:35:08:f4:b2:2c:54:83:12:d2:eb:0b:18:19:25: f1:f1:c2:06:9d:3e:78:25:27:48:ed:0e:76:07:22: ae:40:73:54:fd:31:6b:1a:2c:ff:4a:02:23:51:8e: d0:02:72:a1:11:0b:eb:86:ea:db:99:7c:a6:05:43: 53:0a:1e:31:c6:99:3e:39:5b:eb:7c:18:5d:06:36: e6:2e:a4:78:7d:c4:d4:eb:4e:32:8d:19:6b:d6:d1: 71:e4:07:a2:64:32:ba:e4:b2:1c:45:35:aa:c1:5b: 05:ff:a3:c9:d3:3d:a9:0c:f1:2e:b2:30:4f:f0:9c: 2d:05:1d:59:28:a5:1f:8c:f4:7d:52:a4:76:71:20: 57:a6:b4:f0:b2:49:aa:3e:9d:7c:6f:41:63:dc:91: 45:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4E:9B:0B:34:BF:6F:2C:92:B2:A7:BB:FF:37:A0:8E:04:C8:3F:F1 X509v3 Authority Key Identifier: keyid:5A:05:2D:31:FE:40:B5:F3:70:63:7E:2C:0E:4F:1A:18:FF:08:29:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MHfXkunCiQBrRSFP59oj1Ur8LXsBGxBgq1sGYT4MfNp/1/5A052D31FE40B5F370637E2C0E4F1A18FF08295F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:00:ba:88:a1:5e:54:59:5d:c2:84:50:52:0a:da:f0:e9:58: d5:9e:40:ab:fa:c5:36:93:c1:2f:d0:10:0f:6b:e1:29:57:be: d0:1b:47:e9:a3:2c:b2:a3:47:5f:6d:6a:2f:3b:35:17:da:03: 7d:3a:15:3f:6d:d0:45:e7:ae:67:4a:e6:f2:8a:45:7b:fc:f8: d3:e2:3c:2e:c2:c9:79:69:87:95:1e:52:a5:00:09:3f:f1:1d: e8:ec:2f:b0:fd:89:5a:9b:e9:46:77:9a:de:92:11:84:3f:0d: fe:29:d6:21:b3:90:24:81:9d:4c:59:16:e5:de:d4:5a:ea:91: 5f:0e:37:96:a9:6d:66:a9:0e:51:34:2c:1a:6c:4d:6b:fa:bb: eb:30:56:b5:7f:e8:af:da:24:c8:4d:e9:bb:89:1f:6a:89:47: 91:0d:e3:4c:3d:a9:6c:ac:ed:be:d2:ed:19:c5:4d:c3:a4:07: 2a:10:19:1f:e5:63:ee:c9:01:8f:c8:f6:83:d5:90:48:bc:e8: 10:cf:48:1d:2e:e7:df:f8:2b:f0:64:1d:75:57:55:11:5c:7b: d0:cc:ce:1b:d3:08:1a:b3:6d:c1:9c:7d:09:6f:f7:6f:8f:92: bb:38:a2:f3:c7:54:79:df:63:c8:29:23:5c:ce:50:f0:e8:82: ab:96:34:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeLMFcmZMhhCszldBu6Gpyv0pDikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwNTJEMzFGRTQwQjVGMzcwNjM3RTJDMEU0RjFBMThG RjA4Mjk1RjAeFw0yNTA2MTAxOTU1MTRaFw0yNTA2MTEyMTU4MTRaMDMxMTAvBgNV BAMTKDY4NEU5QjBCMzRCRjZGMkM5MkIyQTdCQkZGMzdBMDhFMDRDODNGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZIR5VESQc1f00HRQb7Jcsn4f2 fTkZ+1D6bIpDDN8B1U9n3lr37HsD/AEUQSasm8D+f4rGkxvZfqT7tJ/rQrZPZb45 WTKo9qCjldhegM4KfFRc9Wsr7T/4BNX2Cn7imZWMkflD5ELtQhw1CPSyLFSDEtLr CxgZJfHxwgadPnglJ0jtDnYHIq5Ac1T9MWsaLP9KAiNRjtACcqERC+uG6tuZfKYF Q1MKHjHGmT45W+t8GF0GNuYupHh9xNTrTjKNGWvW0XHkB6JkMrrkshxFNarBWwX/ o8nTPakM8S6yME/wnC0FHVkopR+M9H1SpHZxIFemtPCySao+nXxvQWPckUX9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaE6bCzS/byySsqe7/zegjgTIP/EwHwYDVR0j BBgwFoAUWgUtMf5AtfNwY34sDk8aGP8IKV8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN01IZlhrdW5DaVFCclJTRlA1OW9qMVVyOExYc0JHeEJncTFzR1lUNE1m TnAvMS81QTA1MkQzMUZFNDBCNUYzNzA2MzdFMkMwRTRGMUExOEZGMDgyOTVGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBMDUyRDMxRkU0MEI1RjM3 MDYzN0UyQzBFNEYxQTE4RkYwODI5NUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N01IZlhrdW5DaVFCclJTRlA1OW9qMVVyOExYc0JHeEJncTFzR1lUNE1mTnAvMS81 QTA1MkQzMUZFNDBCNUYzNzA2MzdFMkMwRTRGMUExOEZGMDgyOTVGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWAC6iKFeVFldwoRQUgra8OlY1Z5Aq/rFNpPBL9AQD2vhKVe+0BtH6aMssqNH X21qLzs1F9oDfToVP23QReeuZ0rm8opFe/z40+I8LsLJeWmHlR5SpQAJP/Ed6Owv sP2JWpvpRnea3pIRhD8N/inWIbOQJIGdTFkW5d7UWuqRXw43lqltZqkOUTQsGmxN a/q76zBWtX/or9okyE3pu4kfaolHkQ3jTD2pbKztvtLtGcVNw6QHKhAZH+Vj7skB j8j2g9WQSLzoEM9IHS7n3/gr8GQddVdVEVx70MzOG9MIGrNtwZx9CW/3b4+Suzii 88dUed9jyCkjXM5Q8OiCq5Y0yg== -----END CERTIFICATE-----Generated at Wed Jun 11 14:41:56 2025 by rpki-client