$ rpki-client -vvf rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft File: 5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft (raw, json) Hash identifier: weGkY4gmOGRhxNL9XPvLzi/zaiucCXZJaONwGOZUJks= Subject key identifier: FE:3A:D7:3C:13:E4:B9:64:20:94:A4:08:F6:09:88:0D:FC:97:4B:47 Authority key identifier: 5A:68:B8:8E:02:7E:5A:12:DC:69:EA:EA:AC:20:11:ED:1D:28:25:A2 Certificate issuer: /CN=5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2 Certificate serial: 4451D9251BADB10FAF29551C0B15AD01435C19F2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft Manifest number: 023F Signing time: Fri 06 Jun 2025 06:17:20 +0000 Manifest this update: Fri 06 Jun 2025 06:12:20 +0000 Manifest next update: Sat 07 Jun 2025 08:33:20 +0000 Files and hashes: 1: 323830343a386165303a3a2f33322d3332203d3e203631363130.roa (hash: xmmz9LTZttl2Xfzv5kWiCmHEssTo7PK1z0cqHjKY0mE=) 2: 3138372e38372e32382e302f32322d3234203d3e203631363130.roa (hash: yPua/Ofud6POhXVBl+Vv3ibZEIZGIKOcu8JE11PZEDQ=) 3: 3230302e3232352e34382e302f32312d3234203d3e203631363130.roa (hash: elC9EAeygoRx2H+jiQPOuMLjKX/QJPWSaf/amaZZvrc=) 4: 5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.crl (hash: rs+oAqu7QTuvc12UrU+vjwG3nuVFbo5LNzVqkklAdaU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.crl rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 08:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:51:d9:25:1b:ad:b1:0f:af:29:55:1c:0b:15:ad:01:43:5c:19:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2 Validity Not Before: Jun 6 06:12:20 2025 GMT Not After : Jun 7 08:33:20 2025 GMT Subject: CN=FE3AD73C13E4B9642094A408F609880DFC974B47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:16:db:d5:d0:79:d6:84:bc:09:e1:84:ec:f1: 3b:a6:d1:c3:01:de:aa:15:66:5c:36:72:7c:09:a8: c8:f9:64:1f:bd:c1:83:58:50:e1:ea:8a:25:cc:b4: 16:15:bd:28:8e:82:cb:5d:0e:67:bd:88:b9:ad:04: 4a:45:8a:dd:bc:57:ba:1e:73:30:07:5a:de:14:1f: 2b:5f:d8:7a:1a:a3:ec:c6:10:75:56:f1:5d:4d:14: 92:d9:93:32:3e:51:f5:92:07:a6:79:03:75:77:44: 67:a2:af:a5:7c:3d:cd:e6:79:de:56:2d:68:a1:2d: c5:99:49:ae:25:e3:b4:85:d6:2d:38:52:1b:3e:ce: ec:f6:84:2a:19:e3:ef:f6:aa:80:8c:b7:59:56:b6: 6f:dd:81:97:88:2b:3c:09:50:11:3e:9a:7d:dc:1e: d7:29:2d:93:85:b7:29:51:a6:d9:a6:d0:0e:bf:a0: a2:ac:50:ce:1d:f6:7c:90:40:5f:47:92:1a:d6:32: ff:5f:d3:88:00:28:2b:17:df:57:57:b3:4a:53:27: 91:3d:42:02:67:38:af:d1:aa:19:5d:4f:32:92:53: dc:64:d0:8e:e7:79:d2:f4:7f:ea:41:68:12:a8:eb: fe:50:a1:16:cf:f5:fc:b9:cb:f0:15:28:0b:53:0f: b9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3A:D7:3C:13:E4:B9:64:20:94:A4:08:F6:09:88:0D:FC:97:4B:47 X509v3 Authority Key Identifier: keyid:5A:68:B8:8E:02:7E:5A:12:DC:69:EA:EA:AC:20:11:ED:1D:28:25:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:49:ee:b1:dd:d9:bd:70:1c:f3:75:6a:b0:de:e0:c8:16:ec: 36:1e:c6:92:ee:d0:fb:40:9b:9c:fa:67:a7:dc:7e:a7:9c:6d: 57:8f:20:87:73:31:dd:26:da:6c:db:c5:06:45:d1:c9:c2:be: dd:c4:01:95:4c:d9:e6:df:f7:01:6c:c0:09:14:8e:0b:8f:b4: b6:e5:e6:e9:bd:1d:0b:be:f3:89:41:13:49:74:12:57:ec:76: 41:d3:1d:8c:98:99:3e:22:b0:9a:20:98:35:da:e2:35:9c:3d: 84:c9:0a:d4:28:5c:6d:81:8f:7e:0a:c2:49:d6:fa:db:9f:da: 3f:73:e4:d9:ff:c8:18:35:28:be:0b:4e:3e:73:67:66:f5:b1: d4:6a:85:a0:a7:f0:40:ea:44:ba:56:0c:c2:4a:c1:59:5a:f9: 8a:0a:77:62:77:5b:4b:65:e3:64:38:b0:ee:11:1e:cb:dd:f6: 74:c5:48:a9:f5:a3:11:6d:f4:f6:20:c4:20:70:da:91:83:8e: 14:26:33:1f:57:88:67:03:ef:e7:d1:bf:b6:08:a6:8f:a2:07: 90:80:c5:41:83:0a:4a:b7:59:aa:ae:c2:1f:03:d6:ac:75:af: 5a:e9:9c:3d:a5:bf:ad:0e:6e:9e:77:43:5b:da:5a:2a:73:46: e4:34:c2:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURFHZJRutsQ+vKVUcCxWtAUNcGfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE2OEI4OEUwMjdFNUExMkRDNjlFQUVBQUMyMDExRUQx RDI4MjVBMjAeFw0yNTA2MDYwNjEyMjBaFw0yNTA2MDcwODMzMjBaMDMxMTAvBgNV BAMTKEZFM0FENzNDMTNFNEI5NjQyMDk0QTQwOEY2MDk4ODBERkM5NzRCNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXFtvV0HnWhLwJ4YTs8Tum0cMB 3qoVZlw2cnwJqMj5ZB+9wYNYUOHqiiXMtBYVvSiOgstdDme9iLmtBEpFit28V7oe czAHWt4UHytf2Hoao+zGEHVW8V1NFJLZkzI+UfWSB6Z5A3V3RGeir6V8Pc3med5W LWihLcWZSa4l47SF1i04Uhs+zuz2hCoZ4+/2qoCMt1lWtm/dgZeIKzwJUBE+mn3c HtcpLZOFtylRptmm0A6/oKKsUM4d9nyQQF9HkhrWMv9f04gAKCsX31dXs0pTJ5E9 QgJnOK/RqhldTzKSU9xk0I7nedL0f+pBaBKo6/5QoRbP9fy5y/AVKAtTD7nBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/jrXPBPkuWQglKQI9gmIDfyXS0cwHwYDVR0j BBgwFoAUWmi4jgJ+WhLcaerqrCAR7R0oJaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODV0QW01bnlMTHZTclVkZ1J0NDRUUFk1dlI5cVRieXpGTVJEVWFUVk51 RlcvMS81QTY4Qjg4RTAyN0U1QTEyREM2OUVBRUFBQzIwMTFFRDFEMjgyNUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBNjhCODhFMDI3RTVBMTJE QzY5RUFFQUFDMjAxMUVEMUQyODI1QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODV0QW01bnlMTHZTclVkZ1J0NDRUUFk1dlI5cVRieXpGTVJEVWFUVk51RlcvMS81 QTY4Qjg4RTAyN0U1QTEyREM2OUVBRUFBQzIwMTFFRDFEMjgyNUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcknusd3ZvXAc83VqsN7gyBbsNh7Gku7Q+0CbnPpnp9x+p5xtV48gh3Mx3Sba bNvFBkXRycK+3cQBlUzZ5t/3AWzACRSOC4+0tuXm6b0dC77ziUETSXQSV+x2QdMd jJiZPiKwmiCYNdriNZw9hMkK1ChcbYGPfgrCSdb625/aP3Pk2f/IGDUovgtOPnNn ZvWx1GqFoKfwQOpEulYMwkrBWVr5igp3YndbS2XjZDiw7hEey932dMVIqfWjEW30 9iDEIHDakYOOFCYzH1eIZwPv59G/tgimj6IHkIDFQYMKSrdZqq7CHwPWrHWvWumc PaW/rQ5unndDW9paKnNG5DTC7w== -----END CERTIFICATE-----Generated at Fri Jun 6 20:24:44 2025 by rpki-client