$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft File: 5429A630D95311C5AADAF5AC62BF18BF86863194.mft (raw, json) Hash identifier: w+i5yQbKopZSNP4XAa1J8Xh9mfbJnDHHWCHNf0VOFdI= Subject key identifier: 07:BE:56:7A:54:D0:78:1A:A9:6F:C7:58:9F:04:49:68:A0:E8:73:25 Authority key identifier: 54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94 Certificate issuer: /CN=5429A630D95311C5AADAF5AC62BF18BF86863194 Certificate serial: 011CB22E89475B33EBBDEDDFD6E5078D94AD092A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer Subject info access: rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft Manifest number: EF Signing time: Mon 09 Jun 2025 19:33:30 +0000 Manifest this update: Mon 09 Jun 2025 19:28:30 +0000 Manifest next update: Tue 10 Jun 2025 22:04:30 +0000 Files and hashes: 1: 3137372e38372e3233322e302f32322d3234203d3e203532353933.roa (hash: d5DI6/HlpfZKGZTJE1cimx+rFHCSUvIx3f28vzYvW6U=) 2: 323830343a6431303a3a2f33322d3438203d3e203532353933.roa (hash: nSOaWesuogq30r5VD09Dk6DV/wQidOLKt4u2pW7jz6k=) 3: 5429A630D95311C5AADAF5AC62BF18BF86863194.crl (hash: PfjSmPOrHktVyF/sq1majjMrsnK+nKkQ3wUkiSmGfm4=) 4: 3137302e38332e3230382e302f32322d3234203d3e203532353933.roa (hash: 8vwwo/SaNUCndqLG1W6S/xt9MVBLLG9Ywm1/OLdTEj8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.crl rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 22:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1c:b2:2e:89:47:5b:33:eb:bd:ed:df:d6:e5:07:8d:94:ad:09:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5429A630D95311C5AADAF5AC62BF18BF86863194 Validity Not Before: Jun 9 19:28:30 2025 GMT Not After : Jun 10 22:04:30 2025 GMT Subject: CN=07BE567A54D0781AA96FC7589F044968A0E87325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:4a:1d:19:57:3e:7f:8a:0a:16:52:ad:ce: b3:1f:1a:69:b4:85:f2:0d:63:21:23:21:10:7c:72: 26:1e:c6:26:6e:28:47:5d:82:a5:c0:11:19:a6:7e: 82:ba:2b:f4:66:1c:f8:fd:c2:0d:d8:a2:46:9b:a0: ba:9a:21:8a:06:24:f9:b4:26:ba:66:db:f3:dc:09: 18:44:71:8f:49:5c:0a:8f:2b:bc:c8:f8:97:d7:08: af:25:d6:63:ab:aa:b2:c4:0c:f9:70:44:27:88:42: b8:fe:29:53:99:67:7f:10:5a:1a:56:6f:d4:c8:8a: 5b:26:81:7c:c5:49:d6:bb:aa:43:96:94:37:8c:4d: b7:d1:72:79:4b:7c:49:2d:24:98:9d:49:44:fd:e3: 40:5a:a6:6e:de:42:ef:b8:f8:49:fe:a3:da:33:1c: 37:28:e6:6e:e2:f1:55:f4:3c:63:41:dd:c7:64:9e: 60:f5:57:39:89:ec:5d:2d:98:46:a3:6e:85:a5:2d: 06:46:bf:81:b6:7d:42:ac:03:14:26:c6:68:54:c3: 3c:84:63:9e:99:94:ae:f2:dc:59:47:f8:6e:3e:18: 91:cc:34:29:8e:83:4c:17:f9:36:f8:f0:a9:99:e3: 3f:bf:40:58:0b:b7:3e:90:5e:b1:58:b7:e1:09:4f: 70:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BE:56:7A:54:D0:78:1A:A9:6F:C7:58:9F:04:49:68:A0:E8:73:25 X509v3 Authority Key Identifier: keyid:54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:7b:0b:53:c6:7c:f9:9c:93:29:51:69:31:8a:fd:78:1c:86: 47:74:a4:5e:d5:57:e9:0a:42:8a:db:e7:4d:df:ac:c9:3e:fe: 11:ee:08:98:d5:4c:fe:04:84:09:2d:a8:de:a9:a8:77:a9:78: 9c:b3:92:88:e6:df:cc:39:aa:53:52:66:e1:a4:3b:76:e0:bf: 66:e3:96:e5:33:26:7e:88:92:10:61:f1:0d:71:ea:31:3c:21: 50:8e:fd:a5:a6:ac:1e:f0:9f:f4:22:94:43:a3:2a:bf:9e:bd: c2:89:a0:ce:22:79:fb:b9:99:73:b4:7e:22:18:cb:c8:78:4e: 76:72:5a:a0:4b:f0:d7:99:3a:a1:5e:0b:e4:6a:dd:6d:64:4e: c8:ce:5a:20:6c:bb:40:da:d8:31:9d:9a:64:eb:b8:04:0f:10: f2:2e:5f:85:b1:80:2e:72:a8:af:18:d4:7d:e3:16:a4:de:fa: 74:30:88:b4:f2:a4:99:66:15:ed:b7:9c:32:bf:4e:d7:d0:e0: 93:fc:e8:85:3f:09:99:0e:0c:80:66:c7:7a:15:16:ce:5a:ad: 00:15:79:a8:90:90:d3:3a:cd:44:85:85:f7:d6:ef:23:87:d3: cf:4b:d0:4f:52:3f:b2:73:f2:a4:ae:f4:0f:93:c8:5a:af:ae: aa:87:9d:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUARyyLolHWzPrve3f1uUHjZStCSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQyOUE2MzBEOTUzMTFDNUFBREFGNUFDNjJCRjE4QkY4 Njg2MzE5NDAeFw0yNTA2MDkxOTI4MzBaFw0yNTA2MTAyMjA0MzBaMDMxMTAvBgNV BAMTKDA3QkU1NjdBNTREMDc4MUFBOTZGQzc1ODlGMDQ0OTY4QTBFODczMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15kodGVc+f4oKFlKtzrMfGmm0 hfINYyEjIRB8ciYexiZuKEddgqXAERmmfoK6K/RmHPj9wg3YokaboLqaIYoGJPm0 Jrpm2/PcCRhEcY9JXAqPK7zI+JfXCK8l1mOrqrLEDPlwRCeIQrj+KVOZZ38QWhpW b9TIilsmgXzFSda7qkOWlDeMTbfRcnlLfEktJJidSUT940Bapm7eQu+4+En+o9oz HDco5m7i8VX0PGNB3cdknmD1VzmJ7F0tmEajboWlLQZGv4G2fUKsAxQmxmhUwzyE Y56ZlK7y3FlH+G4+GJHMNCmOg0wX+Tb48KmZ4z+/QFgLtz6QXrFYt+EJT3A3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUB75WelTQeBqpb8dYnwRJaKDocyUwHwYDVR0j BBgwFoAUVCmmMNlTEcWq2vWsYr8Yv4aGMZQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOE1TVlhxMkFwb1BpWlJxWmFQQzNycTc2bllMVFVLZzdUOUtaUWFaWHdN SDcvMC81NDI5QTYzMEQ5NTMxMUM1QUFEQUY1QUM2MkJGMThCRjg2ODYzMTk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0MjlBNjMwRDk1MzExQzVB QURBRjVBQzYyQkYxOEJGODY4NjMxOTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OE1TVlhxMkFwb1BpWlJxWmFQQzNycTc2bllMVFVLZzdUOUtaUWFaWHdNSDcvMC81 NDI5QTYzMEQ5NTMxMUM1QUFEQUY1QUM2MkJGMThCRjg2ODYzMTk0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd3sLU8Z8+ZyTKVFpMYr9eByGR3SkXtVX6QpCitvnTd+syT7+Ee4ImNVM/gSE CS2o3qmod6l4nLOSiObfzDmqU1Jm4aQ7duC/ZuOW5TMmfoiSEGHxDXHqMTwhUI79 paasHvCf9CKUQ6Mqv569womgziJ5+7mZc7R+IhjLyHhOdnJaoEvw15k6oV4L5Grd bWROyM5aIGy7QNrYMZ2aZOu4BA8Q8i5fhbGALnKorxjUfeMWpN76dDCItPKkmWYV 7becMr9O19Dgk/zohT8JmQ4MgGbHehUWzlqtABV5qJCQ0zrNRIWF99bvI4fTz0vQ T1I/snPypK70D5PIWq+uqoedGg== -----END CERTIFICATE-----Generated at Tue Jun 10 00:06:47 2025 by rpki-client