$ rpki-client -vvf rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft File: 8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft (raw, json) Hash identifier: HAM4YKiiDvpHpj2IA9iihJ/0ZtsZJs0m9r5AYg4xyrI= Subject key identifier: 45:BB:8B:F8:92:22:C3:D8:90:71:6D:F4:11:96:09:D0:65:41:21:AE Authority key identifier: 8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F Certificate issuer: /CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F Certificate serial: 0DCDE06D95B9CA4DF686D28AB068FD4F4FCFDC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer Subject info access: rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft Manifest number: 29 Signing time: Mon 09 Jun 2025 08:33:59 +0000 Manifest this update: Mon 09 Jun 2025 08:28:59 +0000 Manifest next update: Tue 10 Jun 2025 11:03:59 +0000 Files and hashes: 1: 8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl (hash: ycxDUIgHKIPgRM5aASUlQjeqk6T2tlIvGoTaABm5uWs=) 2: 323830343a323836303a3a2f33322d313238203d3e20323633393539.roa (hash: oVXD5VaDUqeD9Go0IkrJ158heEh4rOl0USTusw94FRI=) 3: 3133382e3235352e37322e302f32322d3332203d3e20323633393539.roa (hash: waEFhBe+SjRSqQswDzUJGqZm7m+XO9yIfZZm4YTlyYw=) 4: 3137302e3233382e3234382e302f32322d3332203d3e20323633393539.roa (hash: 9vkM44Why6sGQcMypDT8T8Q9VtBz4wbE97cshJxXhpQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 11:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:cd:e0:6d:95:b9:ca:4d:f6:86:d2:8a:b0:68:fd:4f:4f:cf:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F Validity Not Before: Jun 9 08:28:59 2025 GMT Not After : Jun 10 11:03:59 2025 GMT Subject: CN=45BB8BF89222C3D890716DF4119609D0654121AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7e:f1:dc:30:89:bd:af:19:cb:dc:07:5e:13: ca:e7:cc:72:0e:9b:82:7a:67:0f:26:6b:c1:1d:61: 71:e9:8b:dd:b6:c8:09:e2:a4:19:b8:03:8c:57:db: 90:e9:66:9b:db:9f:84:94:2e:99:40:1b:ac:b2:f1: 76:df:31:10:e5:e3:89:01:c0:22:05:f9:e2:1f:26: 8c:32:08:67:7e:94:e6:ff:e4:1c:23:1c:9c:6d:a7: 40:5e:e4:6c:ec:db:17:bc:e3:28:aa:dd:ae:2f:c4: 51:b0:a7:01:e3:d2:53:37:77:bb:8a:ac:69:21:41: a4:67:37:96:0f:23:c4:b1:ab:0c:f6:ef:a4:e2:02: 8f:35:a7:c3:54:6e:09:65:0b:be:ad:80:ba:7d:c2: 4d:da:46:1b:31:80:c6:05:b0:07:75:b6:ac:e6:76: 23:88:17:af:19:4a:11:f5:ba:b3:e3:e9:96:b3:50: 96:29:05:b4:86:49:24:9d:e1:ab:4f:ed:47:24:d7: ea:18:14:e4:cc:89:b5:35:3d:dd:26:a8:29:88:2f: db:ff:2f:19:8a:80:5a:28:3f:89:94:52:dd:60:3d: 98:eb:c0:bc:09:66:8c:cc:e7:c0:b8:f6:a8:aa:a8: 3a:17:11:b9:5a:03:e2:1c:f1:35:24:ec:9f:b3:3b: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BB:8B:F8:92:22:C3:D8:90:71:6D:F4:11:96:09:D0:65:41:21:AE X509v3 Authority Key Identifier: keyid:8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:64:98:42:68:50:28:92:a9:54:bc:f5:65:fc:45:c5:cd:88: 6e:dc:9f:74:82:36:3a:83:a0:5b:70:ac:d6:dc:a3:cd:e9:78: fc:c9:d6:69:cf:9b:56:ba:d1:7e:6b:82:a6:40:0f:e2:67:49: b5:1b:9a:f2:49:fd:52:20:db:f3:4f:4f:e2:fd:89:09:f3:50: f5:f5:72:67:63:f2:11:be:e6:55:31:80:a2:00:ac:31:11:61: f3:f0:8d:c0:7d:7d:95:81:94:2c:ca:17:42:20:71:5a:2b:44: ce:d0:d1:a7:27:5e:7d:26:9f:ad:31:1d:18:b5:96:16:ba:2f: a0:ca:c0:04:ca:f7:7d:3d:42:7d:47:65:43:dd:b0:80:2a:c8: fc:fb:f9:57:2d:97:34:3b:72:1c:b1:e4:49:c2:2c:bc:dc:b5: 7c:ee:eb:54:77:31:b3:af:fb:51:6b:0d:f8:50:7b:68:ed:bc: 24:d6:a9:dd:82:02:f2:f4:40:b6:69:6e:0a:7f:ed:ed:b7:f7: ad:57:71:87:b7:dc:2b:76:41:af:a9:59:ca:07:69:c5:a4:75: 95:56:9c:99:6f:2b:0b:76:0a:43:4e:07:c7:13:21:1e:39:04: ae:f1:5b:ef:50:ae:cc:c0:7c:5d:fc:23:80:11:e6:19:20:3d: 32:b3:14:bf -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgITDc3gbZW5yk32htKKsGj9T0/P3DANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg4Q0I1QTI1MTZGNzEzQ0ZGRTlEMTUwNEU3OUE0QkQzQjlB RkIwQTBGMB4XDTI1MDYwOTA4Mjg1OVoXDTI1MDYxMDExMDM1OVowMzExMC8GA1UE AxMoNDVCQjhCRjg5MjIyQzNEODkwNzE2REY0MTE5NjA5RDA2NTQxMjFBRTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALV+8dwwib2vGcvcB14TyufMcg6b gnpnDyZrwR1hcemL3bbICeKkGbgDjFfbkOlmm9ufhJQumUAbrLLxdt8xEOXjiQHA IgX54h8mjDIIZ36U5v/kHCMcnG2nQF7kbOzbF7zjKKrdri/EUbCnAePSUzd3u4qs aSFBpGc3lg8jxLGrDPbvpOICjzWnw1RuCWULvq2Aun3CTdpGGzGAxgWwB3W2rOZ2 I4gXrxlKEfW6s+PplrNQlikFtIZJJJ3hq0/tRyTX6hgU5MyJtTU93SaoKYgv2/8v GYqAWig/iZRS3WA9mOvAvAlmjMznwLj2qKqoOhcRuVoD4hzxNSTsn7M7z20CAwEA AaOCAlkwggJVMB0GA1UdDgQWBBRFu4v4kiLD2JBxbfQRlgnQZUEhrjAfBgNVHSME GDAWgBSMtaJRb3E8/+nRUE55pL07mvsKDzAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby85WEZ6ZWR5cllMTEFIbVhCYWZLN0NLM2pwdE1vZm83SDFtU0NXUVBSNU1h Qy8wLzhDQjVBMjUxNkY3MTNDRkZFOUQxNTA0RTc5QTRCRDNCOUFGQjBBMEYuY3Js MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvOENCNUEyNTE2RjcxM0NGRkU5 RDE1MDRFNzlBNEJEM0I5QUZCMEEwRi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGK BggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85 WEZ6ZWR5cllMTEFIbVhCYWZLN0NLM2pwdE1vZm83SDFtU0NXUVBSNU1hQy8wLzhD QjVBMjUxNkY3MTNDRkZFOUQxNTA0RTc5QTRCRDNCOUFGQjBBMEYubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBwZJhCaFAokqlUvPVl/EXFzYhu3J90gjY6g6BbcKzW3KPN6Xj8ydZpz5tWutF+ a4KmQA/iZ0m1G5rySf1SINvzT0/i/YkJ81D19XJnY/IRvuZVMYCiAKwxEWHz8I3A fX2VgZQsyhdCIHFaK0TO0NGnJ159Jp+tMR0YtZYWui+gysAEyvd9PUJ9R2VD3bCA Ksj8+/lXLZc0O3IcseRJwiy83LV87utUdzGzr/tRaw34UHto7bwk1qndggLy9EC2 aW4Kf+3tt/etV3GHt9wrdkGvqVnKB2nFpHWVVpyZbysLdgpDTgfHEyEeOQSu8Vvv UK7MwHxd/COAEeYZID0ysxS/ -----END CERTIFICATE-----Generated at Mon Jun 9 15:40:30 2025 by rpki-client