$ rpki-client -vvf rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft File: 52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft (raw, json) Hash identifier: xWNnSZo1BC+IenyaJfbwGFeYGRII8KSkOp07vHb6Mgs= Subject key identifier: 4C:21:0F:8B:27:92:BF:C3:F5:17:73:A1:8F:7E:D0:11:26:E1:1E:97 Authority key identifier: 52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E Certificate issuer: /CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E Certificate serial: 29A7733DC88EA420C528310268537F851488FDCB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer Subject info access: rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft Manifest number: 09 Signing time: Sat 07 Jun 2025 15:17:26 +0000 Manifest this update: Sat 07 Jun 2025 15:12:26 +0000 Manifest next update: Sun 08 Jun 2025 15:52:26 +0000 Files and hashes: 1: 52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl (hash: JXfoiwPS8NPUMcVwXCzAODmhJdjpCF1MArZ+nPLKLH0=) 2: 323830343a386538633a3a2f33322d3332203d3e20323733343333.roa (hash: GKQiZSRTggPaFx/yFhowb4IhNVU02HJ7y8OaPzs+f/0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 15:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a7:73:3d:c8:8e:a4:20:c5:28:31:02:68:53:7f:85:14:88:fd:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E Validity Not Before: Jun 7 15:12:26 2025 GMT Not After : Jun 8 15:52:26 2025 GMT Subject: CN=4C210F8B2792BFC3F51773A18F7ED01126E11E97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1e:52:24:9a:64:1d:a7:35:d0:76:fb:50:6c: 88:f6:7e:58:1c:c5:99:2d:6d:fb:09:b3:06:d5:28: e2:8b:53:c7:19:67:50:5c:25:29:e6:9c:3e:c9:c2: 8f:c3:a4:6f:d5:74:c7:29:ec:e9:32:87:0e:ee:1d: 24:a0:7f:17:05:4c:dd:68:56:ab:e1:dd:de:7b:9f: 65:74:59:61:08:9e:a6:fd:3b:11:f6:04:26:65:87: 91:0f:ab:36:e6:2d:09:e7:c4:db:13:49:1b:66:8c: 5b:86:ae:6d:68:23:c2:6a:c6:18:42:ec:07:c7:d7: a1:76:c3:79:9d:46:eb:00:c6:89:0e:d6:7b:64:2d: bb:0b:ca:25:7b:6c:ec:8c:cb:8d:46:9e:ce:1d:db: 52:47:ce:e3:a3:4d:5a:75:d5:2b:7d:83:cf:41:ae: 77:f7:c7:f9:ff:22:e3:13:67:f5:d8:3e:b7:33:19: 40:43:c1:9e:8b:4f:d8:04:bc:3c:b9:e2:bc:92:d1: 94:ee:ff:bc:8a:f4:e0:5b:b7:90:cd:ba:a7:2b:8c: b5:79:67:30:0b:ea:55:52:88:64:bb:c2:5c:e1:72: 42:64:88:26:0b:d0:88:85:0f:ac:c6:68:38:f8:d4: 8b:a9:55:23:92:e5:e8:02:fa:d3:88:0c:e3:99:0f: bb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:21:0F:8B:27:92:BF:C3:F5:17:73:A1:8F:7E:D0:11:26:E1:1E:97 X509v3 Authority Key Identifier: keyid:52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:93:79:eb:3a:c6:d6:77:c9:9c:b8:17:33:4e:c6:43:e6:e8: 3e:de:b6:ff:7b:48:cf:61:31:fc:91:48:ae:80:ac:ed:48:9d: b4:96:4b:0a:1d:ec:0e:69:35:c0:34:88:78:c6:40:a8:aa:a3: e3:d6:8a:7a:d3:eb:e2:6c:74:b3:0c:14:b1:2b:21:84:64:ad: cc:23:8b:99:e7:9a:ec:e2:2d:d8:c3:7a:85:d1:36:33:ed:66: d3:35:71:b3:57:24:d4:e9:e0:9f:b4:a6:ec:63:f6:8e:53:62: 02:45:62:7a:a1:0d:04:2b:3a:6b:8b:e2:57:47:fa:36:c6:0a: b2:f1:6d:36:a5:66:c4:b9:92:50:6b:5b:9c:80:2c:69:ee:f3: 05:a8:08:06:2a:22:56:fd:93:fc:e2:8b:72:de:75:b0:20:aa: 8c:0b:3f:9c:71:9a:89:41:72:85:ea:56:b4:80:c0:13:21:6f: b5:a4:eb:df:49:3d:c3:e5:4c:58:a8:cf:d0:2b:b2:6d:9a:3a: 4e:83:bc:40:53:22:65:61:9f:0f:bd:43:43:94:b5:75:5a:ee: ef:d9:dd:ed:c8:25:4b:f9:da:dc:6a:b3:15:88:31:ba:4e:70: 52:b2:b1:9a:20:2b:c2:51:5f:57:7f:57:88:9f:b2:4d:84:48: b3:64:95:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKadzPciOpCDFKDECaFN/hRSI/cswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGRDM4QzVEMERGMzY1Q0Q4REUzQkQxREQwRTkyQzFB NkI2OUY3RTAeFw0yNTA2MDcxNTEyMjZaFw0yNTA2MDgxNTUyMjZaMDMxMTAvBgNV BAMTKDRDMjEwRjhCMjc5MkJGQzNGNTE3NzNBMThGN0VEMDExMjZFMTFFOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9HlIkmmQdpzXQdvtQbIj2flgc xZktbfsJswbVKOKLU8cZZ1BcJSnmnD7Jwo/DpG/VdMcp7Okyhw7uHSSgfxcFTN1o Vqvh3d57n2V0WWEInqb9OxH2BCZlh5EPqzbmLQnnxNsTSRtmjFuGrm1oI8JqxhhC 7AfH16F2w3mdRusAxokO1ntkLbsLyiV7bOyMy41Gns4d21JHzuOjTVp11St9g89B rnf3x/n/IuMTZ/XYPrczGUBDwZ6LT9gEvDy54ryS0ZTu/7yK9OBbt5DNuqcrjLV5 ZzAL6lVSiGS7wlzhckJkiCYL0IiFD6zGaDj41IupVSOS5egC+tOIDOOZD7sDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTCEPiyeSv8P1F3Ohj37QESbhHpcwHwYDVR0j BBgwFoAUUv04xdDfNlzY3jvR3Q6Swaa2n34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1lOeGVGVjU2elNOdkthZDR6WnZIeUtiallYd1BLM0NGTFNkWHExVUxn TUovMC81MkZEMzhDNUQwREYzNjVDRDhERTNCRDFERDBFOTJDMUE2QjY5RjdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyRkQzOEM1RDBERjM2NUNE OERFM0JEMUREMEU5MkMxQTZCNjlGN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1lOeGVGVjU2elNOdkthZDR6WnZIeUtiallYd1BLM0NGTFNkWHExVUxnTUovMC81 MkZEMzhDNUQwREYzNjVDRDhERTNCRDFERDBFOTJDMUE2QjY5RjdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAJN56zrG1nfJnLgXM07GQ+boPt62/3tIz2Ex/JFIroCs7UidtJZLCh3sDmk1 wDSIeMZAqKqj49aKetPr4mx0swwUsSshhGStzCOLmeea7OIt2MN6hdE2M+1m0zVx s1ck1Ongn7Sm7GP2jlNiAkVieqENBCs6a4viV0f6NsYKsvFtNqVmxLmSUGtbnIAs ae7zBagIBioiVv2T/OKLct51sCCqjAs/nHGaiUFyhepWtIDAEyFvtaTr30k9w+VM WKjP0CuybZo6ToO8QFMiZWGfD71DQ5S1dVru79nd7cglS/na3GqzFYgxuk5wUrKx miArwlFfV39XiJ+yTYRIs2SVFg== -----END CERTIFICATE-----Generated at Sun Jun 8 06:33:07 2025 by rpki-client