$ rpki-client -vvf rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft File: D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft (raw, json) Hash identifier: 7jCJmlR9f12+o5r4xIZ5vgZ8VKYkoYvn0oPfsfCzc6Y= Subject key identifier: B5:B1:E1:25:04:FE:6D:4A:A8:62:6A:71:FE:AA:9A:DE:E7:30:FF:C5 Authority key identifier: D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11 Certificate issuer: /CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211 Certificate serial: 5170514879200041F24FB00E86CCBF0CADDD55B2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer Subject info access: rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft Manifest number: 09 Signing time: Sat 07 Jun 2025 20:26:33 +0000 Manifest this update: Sat 07 Jun 2025 20:21:33 +0000 Manifest next update: Sun 08 Jun 2025 22:23:33 +0000 Files and hashes: 1: 323830343a386262633a3a2f33322d313238203d3e20323733373535.roa (hash: 3uQTnhhz7H1wtPzniSKTigXw3gRffdvQaJmnZ+hmrrA=) 2: D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl (hash: PA2amUp13SkxCRhXAh8Yw3qABPdO1EAQFwv3rYqQPX4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 22:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:70:51:48:79:20:00:41:f2:4f:b0:0e:86:cc:bf:0c:ad:dd:55:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211 Validity Not Before: Jun 7 20:21:33 2025 GMT Not After : Jun 8 22:23:33 2025 GMT Subject: CN=B5B1E12504FE6D4AA8626A71FEAA9ADEE730FFC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2c:11:ee:4d:6f:53:96:ad:b8:5d:0e:b1:c8: 93:ee:3b:ad:7b:fa:45:67:91:af:64:0d:b0:b6:3e: 59:42:42:8f:77:10:75:0f:0b:94:d5:cf:9d:03:d0: a3:8e:d9:91:e9:c8:83:c8:6d:03:09:64:1a:02:15: 66:7f:88:14:3f:2c:9a:76:b1:39:2f:e3:b6:7b:6a: b7:cd:de:86:5c:81:f5:7d:7e:ef:34:bf:3d:3d:b0: 35:b1:80:b6:f1:94:b6:64:9b:8e:02:c7:58:c6:a3: 83:35:a3:b8:bc:a6:92:f1:7a:1b:9c:9b:73:57:1e: 04:e8:4e:66:49:02:4f:a1:ca:0b:67:f1:b0:dc:e1: 78:a2:1c:f3:7e:d7:53:d2:e8:50:89:f5:d7:ca:8c: 6c:0c:4d:05:c0:19:59:b6:2f:f1:35:8f:b5:ee:58: 05:8f:ef:dc:69:85:59:05:af:ce:5c:38:bc:2d:5e: 7d:37:e2:e2:eb:4d:74:0c:b7:cc:26:fb:97:c0:eb: 37:06:bc:d2:3e:5a:48:52:53:b7:90:58:46:5b:46: 14:d5:a3:0c:19:14:00:85:ae:ca:44:03:56:c5:5c: da:fd:38:73:07:71:e0:9a:f4:9a:d1:35:b9:53:49: 6e:00:8b:58:b6:2f:fa:f3:e2:f6:27:28:14:d9:e0: 72:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B1:E1:25:04:FE:6D:4A:A8:62:6A:71:FE:AA:9A:DE:E7:30:FF:C5 X509v3 Authority Key Identifier: keyid:D0:7D:3E:AC:7D:60:CA:B7:BE:84:1A:F5:2F:E5:BD:3B:E7:8D:B2:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/86hkiemhDweP1L1pkP78LuB2UTTYfE6r3EZPLbw3fQx3/0/D07D3EAC7D60CAB7BE841AF52FE5BD3BE78DB211.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:33:34:5b:c0:0a:f3:7f:a1:94:21:b1:c9:af:cf:9c:f1:31: 1c:dd:83:4e:46:89:eb:a3:32:e3:eb:d0:28:5b:bb:1a:00:b4: 66:e8:4f:46:e0:bc:9b:9a:b9:a5:29:32:a1:53:f7:55:15:e1: aa:53:be:6e:79:d9:95:5a:98:27:2d:aa:62:e6:9e:4a:d5:d7: ee:93:d2:5a:f5:db:30:8e:19:32:07:b8:45:b1:81:dc:3d:a3: 7e:5a:5e:e1:9d:58:8b:29:62:54:6c:1b:df:a1:68:49:54:e9: b2:93:2b:af:c8:2b:64:b7:0c:c4:b7:b2:e5:8b:74:c2:5b:fc: 36:c0:50:d6:82:df:b5:ee:bf:af:34:cc:e0:db:30:0c:19:d0: 05:36:8a:3b:4d:99:8c:a7:0b:cd:10:32:b1:3d:38:26:d0:a9: 30:d4:7c:18:4e:7c:01:1c:60:91:f1:a9:4f:2e:8f:84:ab:74: c9:8a:27:e1:22:b5:e4:58:04:29:03:a8:9c:9a:41:2e:fa:5c: 86:26:73:21:2f:fb:55:0b:84:29:c0:bf:42:c4:04:44:02:83: 26:53:b5:ee:b6:8e:12:d4:22:ca:db:99:03:eb:22:d7:61:b5: 76:22:83:53:a1:f9:64:f9:51:49:12:66:41:77:de:e3:3f:eb: 33:8d:4c:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUXBRSHkgAEHyT7AOhsy/DK3dVbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA3RDNFQUM3RDYwQ0FCN0JFODQxQUY1MkZFNUJEM0JF NzhEQjIxMTAeFw0yNTA2MDcyMDIxMzNaFw0yNTA2MDgyMjIzMzNaMDMxMTAvBgNV BAMTKEI1QjFFMTI1MDRGRTZENEFBODYyNkE3MUZFQUE5QURFRTczMEZGQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLBHuTW9Tlq24XQ6xyJPuO617 +kVnka9kDbC2PllCQo93EHUPC5TVz50D0KOO2ZHpyIPIbQMJZBoCFWZ/iBQ/LJp2 sTkv47Z7arfN3oZcgfV9fu80vz09sDWxgLbxlLZkm44Cx1jGo4M1o7i8ppLxehuc m3NXHgToTmZJAk+hygtn8bDc4XiiHPN+11PS6FCJ9dfKjGwMTQXAGVm2L/E1j7Xu WAWP79xphVkFr85cOLwtXn034uLrTXQMt8wm+5fA6zcGvNI+WkhSU7eQWEZbRhTV owwZFACFrspEA1bFXNr9OHMHceCa9JrRNblTSW4Ai1i2L/rz4vYnKBTZ4HIFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtbHhJQT+bUqoYmpx/qqa3ucw/8UwHwYDVR0j BBgwFoAU0H0+rH1gyre+hBr1L+W9O+eNshEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODZoa2llbWhEd2VQMUwxcGtQNzhMdUIyVVRUWWZFNnIzRVpQTGJ3M2ZR eDMvMC9EMDdEM0VBQzdENjBDQUI3QkU4NDFBRjUyRkU1QkQzQkU3OERCMjExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwN0QzRUFDN0Q2MENBQjdC RTg0MUFGNTJGRTVCRDNCRTc4REIyMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODZoa2llbWhEd2VQMUwxcGtQNzhMdUIyVVRUWWZFNnIzRVpQTGJ3M2ZReDMvMC9E MDdEM0VBQzdENjBDQUI3QkU4NDFBRjUyRkU1QkQzQkU3OERCMjExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWzM0W8AK83+hlCGxya/PnPExHN2DTkaJ66My4+vQKFu7GgC0ZuhPRuC8m5q5 pSkyoVP3VRXhqlO+bnnZlVqYJy2qYuaeStXX7pPSWvXbMI4ZMge4RbGB3D2jflpe 4Z1YiyliVGwb36FoSVTpspMrr8grZLcMxLey5Yt0wlv8NsBQ1oLfte6/rzTM4Nsw DBnQBTaKO02ZjKcLzRAysT04JtCpMNR8GE58ARxgkfGpTy6PhKt0yYon4SK15FgE KQOonJpBLvpchiZzIS/7VQuEKcC/QsQERAKDJlO17raOEtQiytuZA+si12G1diKD U6H5ZPlRSRJmQXfe4z/rM41MtQ== -----END CERTIFICATE-----Generated at Sun Jun 8 01:34:59 2025 by rpki-client