$ rpki-client -vvf rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft File: 00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft (raw, json) Hash identifier: EE54pKX3qYexnB+q7+Qe39D2bMhfDZoSrXnFYlfYQjE= Subject key identifier: 9E:95:BA:6E:B1:BE:21:8D:FF:4D:25:39:C6:5F:68:D8:8C:CF:2E:CA Authority key identifier: 00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74 Certificate issuer: /CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74 Certificate serial: 5AE2DA7098CAAFA0FA12F6BBB89F28F3FD5490C8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer Subject info access: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft Manifest number: 023D Signing time: Sat 07 Jun 2025 11:47:52 +0000 Manifest this update: Sat 07 Jun 2025 11:42:52 +0000 Manifest next update: Sun 08 Jun 2025 12:41:52 +0000 Files and hashes: 1: 323830343a356666383a3a2f33322d3438203d3e20323639313337.roa (hash: x6rW9jCCge7pgSikdO+N6Nk7UH7lwIZA6/UkvStSYRc=) 2: 00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl (hash: RhgC9aNGuBwM+lcXt1oYitvSbGhHPj2+csxCMlvyeFA=) 3: 34352e3138302e3134342e302f32322d3332203d3e20323639313337.roa (hash: CQkxTLpB0h8sw9f6HinJ/zgqW1tumRLs+pW63/RGxSA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 07:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:e2:da:70:98:ca:af:a0:fa:12:f6:bb:b8:9f:28:f3:fd:54:90:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74 Validity Not Before: Jun 7 11:42:52 2025 GMT Not After : Jun 8 12:41:52 2025 GMT Subject: CN=9E95BA6EB1BE218DFF4D2539C65F68D88CCF2ECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1d:67:ce:42:8d:cc:72:52:d0:ce:f1:2d:51: 22:95:ee:56:e9:59:d6:6d:19:20:86:c2:09:65:6c: 7b:c1:c5:49:6d:42:76:b9:b5:8c:b9:54:98:86:70: 1a:d6:43:f0:f3:74:eb:cb:ce:71:d3:30:10:b8:03: b8:7a:f1:73:8a:e0:0e:9e:4a:ea:e9:f1:a1:72:44: 9c:66:ed:13:96:3f:a8:d5:6c:1f:ed:65:2d:51:7d: 27:c3:2b:cc:55:36:e4:f8:19:13:d1:cb:56:a4:96: b6:cd:5f:b7:c7:1f:d6:b7:10:b2:47:6d:71:be:6b: 22:03:72:bb:6b:34:e5:24:f4:16:96:69:c0:71:13: 0a:78:13:11:10:ca:7a:b1:d6:2a:8e:c0:50:13:5b: 6f:23:dd:bf:38:80:a5:ed:6d:ae:90:60:5b:76:75: ca:4f:24:25:dc:be:88:be:8d:32:b7:42:1c:91:5a: 41:fe:27:28:65:ba:e0:f0:7f:28:88:0c:fe:41:a9: a6:e6:51:4c:ea:28:0e:81:b1:a9:bf:61:4c:0c:b0: 88:f5:5a:16:39:c4:16:79:5a:6d:4e:40:ee:18:d4: 4e:9f:15:d0:66:24:d4:b4:cc:44:66:5a:db:28:32: 6c:5d:41:4c:61:db:8f:be:5e:9c:21:34:42:d5:38: 20:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:95:BA:6E:B1:BE:21:8D:FF:4D:25:39:C6:5F:68:D8:8C:CF:2E:CA X509v3 Authority Key Identifier: keyid:00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:77:87:0e:2f:c7:87:22:b8:80:d0:ef:f7:e1:38:0c:0c:bd: 61:a2:42:bb:ec:e4:35:3a:b6:db:6a:7b:0b:7d:21:e9:c2:fe: 4b:90:46:37:70:4f:e0:4f:00:0b:3d:eb:f2:22:f9:a6:e4:ad: 3c:97:fb:76:da:66:39:12:ea:3e:76:ce:14:2f:fd:2b:ec:8a: d2:48:27:6e:aa:e0:5e:7a:07:97:85:5f:b2:f2:89:c2:ae:4e: cd:72:35:f5:ae:28:0b:a1:5e:72:4e:6c:12:d2:b9:e1:13:b9: 61:46:e8:29:1e:9c:fa:e3:c7:89:23:3e:f2:0d:ea:b3:c6:c4: 2f:71:de:14:bc:1a:e8:b0:ad:4e:1a:2d:bc:52:f4:6e:61:19: dd:3f:b3:fd:5c:8e:37:eb:01:62:64:54:9e:6e:de:99:95:0f: 77:66:41:33:c9:8f:c2:08:67:a9:46:3d:be:a3:0a:d8:a4:4d: a5:c2:01:95:3c:ce:1f:2b:95:19:03:71:81:f1:f8:d6:85:ba: 08:74:75:27:ae:12:c7:db:ac:c2:35:95:b6:1b:a6:f5:cc:89: da:86:6b:d1:f0:ed:87:78:e4:9f:2a:8d:9f:b1:71:73:8f:c8: 3c:ab:7d:8f:f9:50:4a:65:c8:23:fa:86:68:79:90:ae:65:be: 61:04:89:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWuLacJjKr6D6Eva7uJ8o8/1UkMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBEOTVBQUI0M0UwMzZEN0E2REUyMjI4RTlEQjEzRkZB Qjc5QkU3NDAeFw0yNTA2MDcxMTQyNTJaFw0yNTA2MDgxMjQxNTJaMDMxMTAvBgNV BAMTKDlFOTVCQTZFQjFCRTIxOERGRjREMjUzOUM2NUY2OEQ4OENDRjJFQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVHWfOQo3MclLQzvEtUSKV7lbp WdZtGSCGwgllbHvBxUltQna5tYy5VJiGcBrWQ/DzdOvLznHTMBC4A7h68XOK4A6e Surp8aFyRJxm7ROWP6jVbB/tZS1RfSfDK8xVNuT4GRPRy1aklrbNX7fHH9a3ELJH bXG+ayIDcrtrNOUk9BaWacBxEwp4ExEQynqx1iqOwFATW28j3b84gKXtba6QYFt2 dcpPJCXcvoi+jTK3QhyRWkH+JyhluuDwfyiIDP5BqabmUUzqKA6Bsam/YUwMsIj1 WhY5xBZ5Wm1OQO4Y1E6fFdBmJNS0zERmWtsoMmxdQUxh24++XpwhNELVOCAFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnpW6brG+IY3/TSU5xl9o2IzPLsowHwYDVR0j BBgwFoAUANlaq0PgNtem3iIo6dsT/6t5vnQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGFQMWk0eWd5eWlyZFl0YzVRUW01OFRKdVFYYWRxVDcxeXlqaDNOTVF5 Q0svMS8wMEQ5NUFBQjQzRTAzNkQ3QTZERTIyMjhFOURCMTNGRkFCNzlCRTc0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwRDk1QUFCNDNFMDM2RDdB NkRFMjIyOEU5REIxM0ZGQUI3OUJFNzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGFQMWk0eWd5eWlyZFl0YzVRUW01OFRKdVFYYWRxVDcxeXlqaDNOTVF5Q0svMS8w MEQ5NUFBQjQzRTAzNkQ3QTZERTIyMjhFOURCMTNGRkFCNzlCRTc0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATneHDi/HhyK4gNDv9+E4DAy9YaJCu+zkNTq222p7C30h6cL+S5BGN3BP4E8A Cz3r8iL5puStPJf7dtpmORLqPnbOFC/9K+yK0kgnbqrgXnoHl4VfsvKJwq5OzXI1 9a4oC6Feck5sEtK54RO5YUboKR6c+uPHiSM+8g3qs8bEL3HeFLwa6LCtThotvFL0 bmEZ3T+z/VyON+sBYmRUnm7emZUPd2ZBM8mPwghnqUY9vqMK2KRNpcIBlTzOHyuV GQNxgfH41oW6CHR1J64Sx9uswjWVthum9cyJ2oZr0fDth3jknyqNn7Fxc4/IPKt9 j/lQSmXII/qGaHmQrmW+YQSJxA== -----END CERTIFICATE-----Generated at Sat Jun 7 13:10:44 2025 by rpki-client