$ rpki-client -vvf rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft File: 484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft (raw, json) Hash identifier: nBdqL5wXcZZK2P8buzm9Yyeg7zLQs2nsdcTxqakNrPw= Subject key identifier: 41:89:00:AA:2E:E7:F3:08:1B:3D:88:A1:C5:32:BC:37:16:78:A6:61 Authority key identifier: 48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3 Certificate issuer: /CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3 Certificate serial: 719D2884D0343D1F5237C705E23013AF1869C52A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer Subject info access: rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft Manifest number: 023A Signing time: Sat 07 Jun 2025 03:58:26 +0000 Manifest this update: Sat 07 Jun 2025 03:53:26 +0000 Manifest next update: Sun 08 Jun 2025 05:39:26 +0000 Files and hashes: 1: 484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl (hash: sRtu99ISf+nao/rZHG2zrE35IIGklFLH817uHlMBPb0=) 2: 323830343a383034303a3a2f33322d3332203d3e20323731373339.roa (hash: k8/Tw+SgoiL84ZsrYLWHWBEWIwVDj1v9BVLZaSH4bik=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 05:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:9d:28:84:d0:34:3d:1f:52:37:c7:05:e2:30:13:af:18:69:c5:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3 Validity Not Before: Jun 7 03:53:26 2025 GMT Not After : Jun 8 05:39:26 2025 GMT Subject: CN=418900AA2EE7F3081B3D88A1C532BC371678A661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2a:92:dc:34:21:27:c2:ce:51:bc:6a:c4:83: b6:e6:ff:b2:5c:3f:34:18:3e:3c:a9:ee:ad:b1:0f: 79:d2:63:b6:d2:4c:bc:58:93:38:4e:8e:b3:4f:44: 73:ec:9b:ed:32:e2:65:2d:db:f8:7d:0e:cb:c2:5b: ce:ee:65:e5:f7:05:9b:1f:4c:28:12:42:07:0f:ef: 0c:63:24:66:c1:d5:56:af:c6:49:93:45:ad:44:c4: 4d:1e:bc:a5:dd:f3:a0:52:44:de:81:ee:d2:67:56: 4e:ff:be:0f:cb:81:fc:26:40:b7:b0:56:aa:2b:29: 24:33:9b:83:eb:97:37:cc:d0:a4:3c:be:ed:fd:47: 58:69:8f:98:dc:c2:00:e7:66:3d:eb:8b:f3:9b:f6: 64:89:0d:2e:79:1b:a3:b9:38:83:d3:1c:8b:ad:fd: 7f:52:bf:18:ab:0d:fb:79:3d:7e:4a:1a:4c:15:2d: d1:cb:bd:5b:09:54:c4:b9:fa:f0:86:67:d9:7c:8b: 70:33:fb:ac:8b:3c:1e:70:8a:a3:6b:66:f2:9e:0b: 0e:43:b8:01:ec:02:6c:f4:fb:1b:8a:78:6e:c8:2a: af:85:35:a8:b1:83:fd:af:0c:6a:58:0c:e0:c8:a6: 5e:36:11:b1:62:a6:70:8c:82:a1:04:16:29:cb:69: da:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:89:00:AA:2E:E7:F3:08:1B:3D:88:A1:C5:32:BC:37:16:78:A6:61 X509v3 Authority Key Identifier: keyid:48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:09:a0:42:61:ca:b7:37:ba:92:07:7d:01:df:ad:44:6f:28: a7:9d:55:7a:90:eb:54:77:e4:bb:30:57:62:fa:78:05:88:68: a5:be:2e:3f:4d:cf:7b:46:3c:a5:4e:ad:17:d0:96:0e:eb:0a: 96:5c:07:37:89:75:87:cd:c8:b0:8d:03:a9:46:63:a5:bd:24: bd:dd:52:0a:d3:e5:da:59:f8:d3:01:3b:ac:e5:51:1a:00:2b: ed:ef:08:a7:a9:20:fb:d2:ce:6c:26:c0:98:fe:e4:d4:fa:f7: 6c:f4:5f:09:d5:b6:47:c6:60:a6:18:de:e8:b4:a4:72:27:cc: ce:2a:7a:d1:62:5b:9e:96:5c:08:27:fb:79:6b:22:75:fe:c9: 50:f1:04:12:92:5e:df:99:3c:a2:6e:e8:6e:03:64:c9:a9:1a: 62:47:91:43:e1:cd:ad:58:40:fa:13:b5:51:36:bb:68:54:c6: 0c:fa:a2:a1:6a:b0:39:54:f3:0f:1e:c3:70:32:fc:84:2e:02: df:1e:f3:d1:96:3d:92:cd:28:94:60:82:5a:b2:5e:ed:d2:50: 79:0f:5b:d0:61:df:4c:0c:4c:1e:98:d2:9f:40:d5:36:b8:2f: ee:5f:23:11:27:2e:bf:37:23:0d:79:72:a0:b5:e7:fa:ab:f1: 92:20:84:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcZ0ohNA0PR9SN8cF4jATrxhpxSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg0Q0FGRUQxN0QwMkM0NTU1RTVENDU4NjlGMzBFQ0FB N0UxRTVFMzAeFw0yNTA2MDcwMzUzMjZaFw0yNTA2MDgwNTM5MjZaMDMxMTAvBgNV BAMTKDQxODkwMEFBMkVFN0YzMDgxQjNEODhBMUM1MzJCQzM3MTY3OEE2NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCKpLcNCEnws5RvGrEg7bm/7Jc PzQYPjyp7q2xD3nSY7bSTLxYkzhOjrNPRHPsm+0y4mUt2/h9DsvCW87uZeX3BZsf TCgSQgcP7wxjJGbB1VavxkmTRa1ExE0evKXd86BSRN6B7tJnVk7/vg/LgfwmQLew VqorKSQzm4PrlzfM0KQ8vu39R1hpj5jcwgDnZj3ri/Ob9mSJDS55G6O5OIPTHIut /X9SvxirDft5PX5KGkwVLdHLvVsJVMS5+vCGZ9l8i3Az+6yLPB5wiqNrZvKeCw5D uAHsAmz0+xuKeG7IKq+FNaixg/2vDGpYDODIpl42EbFipnCMgqEEFinLadpNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQYkAqi7n8wgbPYihxTK8NxZ4pmEwHwYDVR0j BBgwFoAUSEyv7RfQLEVV5dRYafMOyqfh5eMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGhUeVptaE1CcEN2TUJ1REhOVmZzSldvUnR5dE5aUjhQWUNQUU52Zktv S0cvMS80ODRDQUZFRDE3RDAyQzQ1NTVFNUQ0NTg2OUYzMEVDQUE3RTFFNUUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4NENBRkVEMTdEMDJDNDU1 NUU1RDQ1ODY5RjMwRUNBQTdFMUU1RTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGhUeVptaE1CcEN2TUJ1REhOVmZzSldvUnR5dE5aUjhQWUNQUU52ZktvS0cvMS80 ODRDQUZFRDE3RDAyQzQ1NTVFNUQ0NTg2OUYzMEVDQUE3RTFFNUUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOQmgQmHKtze6kgd9Ad+tRG8op51VepDrVHfkuzBXYvp4BYhopb4uP03Pe0Y8 pU6tF9CWDusKllwHN4l1h83IsI0DqUZjpb0kvd1SCtPl2ln40wE7rOVRGgAr7e8I p6kg+9LObCbAmP7k1Pr3bPRfCdW2R8Zgphje6LSkcifMzip60WJbnpZcCCf7eWsi df7JUPEEEpJe35k8om7obgNkyakaYkeRQ+HNrVhA+hO1UTa7aFTGDPqioWqwOVTz Dx7DcDL8hC4C3x7z0ZY9ks0olGCCWrJe7dJQeQ9b0GHfTAxMHpjSn0DVNrgv7l8j EScuvzcjDXlyoLXn+qvxkiCE0w== -----END CERTIFICATE-----Generated at Sat Jun 7 22:43:10 2025 by rpki-client