$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft File: 5429A630D95311C5AADAF5AC62BF18BF86863194.mft (raw, json) Hash identifier: 9nvKYJhgy8b3Lr6bMiScpLJ9LUCLX/tjBkPVUb5p29I= Subject key identifier: 49:B1:9C:E0:C4:FB:5D:7A:BB:25:C4:36:7B:9D:6D:94:B0:54:0B:FC Authority key identifier: 54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94 Certificate issuer: /CN=5429A630D95311C5AADAF5AC62BF18BF86863194 Certificate serial: 33BD059683EBD78E54D1CDFAA065DFF0ED96DCC7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer Subject info access: rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft Manifest number: F0 Signing time: Tue 10 Jun 2025 14:08:40 +0000 Manifest this update: Tue 10 Jun 2025 14:03:40 +0000 Manifest next update: Wed 11 Jun 2025 16:28:40 +0000 Files and hashes: 1: 3137372e38372e3233322e302f32322d3234203d3e203532353933.roa (hash: d5DI6/HlpfZKGZTJE1cimx+rFHCSUvIx3f28vzYvW6U=) 2: 323830343a6431303a3a2f33322d3438203d3e203532353933.roa (hash: nSOaWesuogq30r5VD09Dk6DV/wQidOLKt4u2pW7jz6k=) 3: 5429A630D95311C5AADAF5AC62BF18BF86863194.crl (hash: cldWv2eQIZGZB+43PetaTCDNEp3+rjI+twXt7t1Ylv8=) 4: 3137302e38332e3230382e302f32322d3234203d3e203532353933.roa (hash: 8vwwo/SaNUCndqLG1W6S/xt9MVBLLG9Ywm1/OLdTEj8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.crl rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 16:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:bd:05:96:83:eb:d7:8e:54:d1:cd:fa:a0:65:df:f0:ed:96:dc:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5429A630D95311C5AADAF5AC62BF18BF86863194 Validity Not Before: Jun 10 14:03:40 2025 GMT Not After : Jun 11 16:28:40 2025 GMT Subject: CN=49B19CE0C4FB5D7ABB25C4367B9D6D94B0540BFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:21:02:a4:52:63:1a:c2:25:97:be:fc:c0: 65:37:0b:47:e0:f8:eb:f0:4b:2b:1a:e5:4f:c7:99: 57:21:b3:69:5f:8e:8a:79:0f:9b:91:9a:b6:17:1e: e8:a8:38:95:77:75:e6:6f:01:78:ed:53:d8:4d:cc: 5e:94:1c:ae:53:fa:66:ca:d3:a3:fb:3f:9c:03:61: ab:d6:ae:c5:ff:b0:21:70:97:1f:ae:a0:bc:82:7a: c3:c2:cf:6e:1d:c2:9a:9c:64:9a:0b:78:0f:01:42: f7:68:97:98:dc:07:99:66:ec:ca:33:5e:13:c6:16: 63:4d:b2:88:51:46:a0:f1:c9:c3:90:cf:b3:44:bd: 88:90:89:33:c5:b3:ed:9b:61:cd:ee:e7:e0:53:38: 66:48:ba:fa:2a:e8:ed:67:84:dc:16:11:b4:47:55: fd:21:20:d2:27:72:f7:1b:31:c8:46:ca:3b:e9:9e: db:f1:79:64:7f:58:41:1a:f4:5a:e5:63:55:1e:c1: 0a:9c:a7:08:82:38:92:b6:d0:a6:b9:3d:2d:cc:91: 82:07:1c:2e:68:9b:8a:de:50:9c:53:b6:33:a7:fa: f6:47:ed:36:22:52:08:bd:44:c5:20:4e:50:93:5e: 83:04:57:9f:f2:69:96:55:25:62:a3:96:3c:38:17: 04:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B1:9C:E0:C4:FB:5D:7A:BB:25:C4:36:7B:9D:6D:94:B0:54:0B:FC X509v3 Authority Key Identifier: keyid:54:29:A6:30:D9:53:11:C5:AA:DA:F5:AC:62:BF:18:BF:86:86:31:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5429A630D95311C5AADAF5AC62BF18BF86863194.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/0/5429A630D95311C5AADAF5AC62BF18BF86863194.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:04:85:d0:4d:2d:44:87:84:60:bd:8a:fc:b6:7d:2e:18:ff: 80:80:a9:7a:3f:e9:95:aa:30:18:56:05:5a:28:71:c0:27:38: bd:89:ab:46:82:5c:21:8b:fa:7e:40:b9:ab:70:76:2d:da:b6: 3c:1e:b8:43:74:ec:a0:5c:59:bc:d1:75:53:8a:4c:9e:f3:9d: 8a:9c:74:6e:1e:54:49:b1:7a:8d:f3:9c:a7:d9:cd:66:49:95: 5e:6a:8b:82:b1:d0:74:4a:28:15:32:64:5f:6e:bf:be:78:c5: 9b:ae:29:64:5f:67:fe:29:8a:23:3c:19:8f:84:c1:1c:76:30: 93:ce:a6:89:c5:c5:08:d2:38:e3:03:d6:3a:86:d5:34:df:ea: 12:68:22:b1:dc:c5:ab:10:13:db:5a:4c:00:49:81:67:c5:c2: 2d:7a:e0:cd:21:c8:1a:7a:b1:5b:64:42:64:57:8a:57:09:a5: c4:a3:f9:03:00:2b:e6:2c:ed:cc:a5:6d:81:7a:83:03:49:1b: 3c:04:83:b7:56:5a:3f:f2:b2:67:cb:cb:49:89:33:0a:d8:7f: d0:75:b2:3f:a5:6b:6a:cf:08:b6:55:e2:66:af:08:4f:c0:e1: 13:c8:5b:e3:4a:c8:8b:75:d7:7b:d4:7a:d4:47:07:18:0c:f5: 8b:84:81:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUM70FloPr145U0c36oGXf8O2W3McwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQyOUE2MzBEOTUzMTFDNUFBREFGNUFDNjJCRjE4QkY4 Njg2MzE5NDAeFw0yNTA2MTAxNDAzNDBaFw0yNTA2MTExNjI4NDBaMDMxMTAvBgNV BAMTKDQ5QjE5Q0UwQzRGQjVEN0FCQjI1QzQzNjdCOUQ2RDk0QjA1NDBCRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC69CECpFJjGsIll778wGU3C0fg +OvwSysa5U/HmVchs2lfjop5D5uRmrYXHuioOJV3deZvAXjtU9hNzF6UHK5T+mbK 06P7P5wDYavWrsX/sCFwlx+uoLyCesPCz24dwpqcZJoLeA8BQvdol5jcB5lm7Moz XhPGFmNNsohRRqDxycOQz7NEvYiQiTPFs+2bYc3u5+BTOGZIuvoq6O1nhNwWEbRH Vf0hINIncvcbMchGyjvpntvxeWR/WEEa9FrlY1UewQqcpwiCOJK20Ka5PS3MkYIH HC5om4reUJxTtjOn+vZH7TYiUgi9RMUgTlCTXoMEV5/yaZZVJWKjljw4FwQVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSbGc4MT7XXq7JcQ2e51tlLBUC/wwHwYDVR0j BBgwFoAUVCmmMNlTEcWq2vWsYr8Yv4aGMZQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOE1TVlhxMkFwb1BpWlJxWmFQQzNycTc2bllMVFVLZzdUOUtaUWFaWHdN SDcvMC81NDI5QTYzMEQ5NTMxMUM1QUFEQUY1QUM2MkJGMThCRjg2ODYzMTk0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0MjlBNjMwRDk1MzExQzVB QURBRjVBQzYyQkYxOEJGODY4NjMxOTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OE1TVlhxMkFwb1BpWlJxWmFQQzNycTc2bllMVFVLZzdUOUtaUWFaWHdNSDcvMC81 NDI5QTYzMEQ5NTMxMUM1QUFEQUY1QUM2MkJGMThCRjg2ODYzMTk0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYwSF0E0tRIeEYL2K/LZ9Lhj/gICpej/plaowGFYFWihxwCc4vYmrRoJcIYv6 fkC5q3B2Ldq2PB64Q3TsoFxZvNF1U4pMnvOdipx0bh5USbF6jfOcp9nNZkmVXmqL grHQdEooFTJkX26/vnjFm64pZF9n/imKIzwZj4TBHHYwk86micXFCNI44wPWOobV NN/qEmgisdzFqxAT21pMAEmBZ8XCLXrgzSHIGnqxW2RCZFeKVwmlxKP5AwAr5izt zKVtgXqDA0kbPASDt1ZaP/KyZ8vLSYkzCth/0HWyP6Vras8ItlXiZq8IT8DhE8hb 40rIi3XXe9R61EcHGAz1i4SBuw== -----END CERTIFICATE-----Generated at Tue Jun 10 19:34:54 2025 by rpki-client