$ rpki-client -vvf rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.mft File: 60E9E1814AC20560AE7B9A36F212037445A23C52.mft (raw, json) Hash identifier: GT34ofm+kzSdl2spIpRZCp/39fojykc38tEiXmKtTDQ= Subject key identifier: 0A:B2:20:BA:BE:4B:EF:ED:BF:5B:0D:A3:2B:47:57:04:5F:F2:6D:E6 Authority key identifier: 60:E9:E1:81:4A:C2:05:60:AE:7B:9A:36:F2:12:03:74:45:A2:3C:52 Certificate issuer: /CN=60E9E1814AC20560AE7B9A36F212037445A23C52 Certificate serial: 75D27F4B02158AA44D987FD67D37B73D0B0F660D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E9E1814AC20560AE7B9A36F212037445A23C52.cer Subject info access: rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.mft Manifest number: 0128 Signing time: Sat 26 Jul 2025 17:23:50 +0000 Manifest this update: Sat 26 Jul 2025 17:18:50 +0000 Manifest next update: Sun 27 Jul 2025 18:33:50 +0000 Files and hashes: 1: 60E9E1814AC20560AE7B9A36F212037445A23C52.crl (hash: Op67gVGsXGBzio63Hkm+pVkeEhyMhaZiZtM+mZ3Qeww=) 2: 3136382e39302e35362e302f32322d3332203d3e20323635323738.roa (hash: PQIqoT+StSMO2wUYfHgUhCq1IiGJJWgkv6JT4LN3Qqc=) 3: 3137302e3233312e3135302e302f32332d3332203d3e20323635323738.roa (hash: sJml9tW4GbM6Ehc1Y8/P0KgcLa+/lQ2YsiRGz745dno=) 4: 3137302e3233312e3134392e302f32342d3332203d3e20323635323738.roa (hash: zenQan1c0HymGfdGMKm8zMh3KFHSX/5y3l4etpdtNvQ=) 5: 323830343a326436303a3a2f33322d313238203d3e20323635323738.roa (hash: wVDpLquXhLYmOQva4up0lIJzNdpjxE6kRBQ6x/Clj9g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.crl rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E9E1814AC20560AE7B9A36F212037445A23C52.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 18:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d2:7f:4b:02:15:8a:a4:4d:98:7f:d6:7d:37:b7:3d:0b:0f:66:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60E9E1814AC20560AE7B9A36F212037445A23C52 Validity Not Before: Jul 26 17:18:50 2025 GMT Not After : Jul 27 18:33:50 2025 GMT Subject: CN=0AB220BABE4BEFEDBF5B0DA32B4757045FF26DE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:fc:f4:09:3d:53:1e:4a:b4:7a:74:81:45: 7c:1f:0d:8f:f0:be:a9:b7:62:b8:d7:29:32:33:d6: 77:f9:78:1a:6d:6c:d2:77:40:1e:1b:9e:ba:82:a6: 3d:9a:6d:86:86:9c:19:d3:00:c4:f8:73:9a:26:ea: 01:b8:40:58:cd:e1:9c:33:ef:f8:f1:22:c2:2f:23: 0e:e6:80:db:50:6e:a7:06:60:d1:15:b0:17:d6:6d: f5:4e:47:d8:65:9c:f5:53:9f:93:56:49:62:e6:4e: b4:33:c1:be:69:09:03:d8:fe:46:9a:7b:38:c5:31: 92:b1:1d:56:60:21:ea:be:f4:fb:7a:22:98:c2:d8: 1a:9b:39:ac:81:0a:14:d6:9e:e6:5f:fd:45:e6:fd: 1d:5e:7c:07:91:63:c6:14:e4:4b:f0:49:c3:cb:a4: aa:9f:a2:bd:1d:92:2e:04:8a:61:7f:46:7f:d0:85: da:d9:d1:c0:59:59:32:07:ef:b0:a3:82:12:90:60: 24:cc:0d:38:72:df:10:63:4e:93:c6:ab:b4:5a:61: 93:7a:78:81:6e:67:65:c2:9c:4a:93:c3:f9:7e:00: 9e:ec:a8:ec:98:a6:9a:3d:dd:e3:a3:81:89:85:92: da:fe:0b:ab:ed:47:b4:63:5d:ba:5c:ed:29:8c:8a: ad:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B2:20:BA:BE:4B:EF:ED:BF:5B:0D:A3:2B:47:57:04:5F:F2:6D:E6 X509v3 Authority Key Identifier: keyid:60:E9:E1:81:4A:C2:05:60:AE:7B:9A:36:F2:12:03:74:45:A2:3C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E9E1814AC20560AE7B9A36F212037445A23C52.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/60E9E1814AC20560AE7B9A36F212037445A23C52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:aa:45:64:53:80:bc:20:fc:f0:54:60:7f:8b:27:34:ea:18: ab:24:0b:49:ef:3b:b0:0c:b4:3d:b8:9d:f3:5e:b6:5b:28:28: b1:20:f2:81:10:b6:cc:45:27:0f:fc:93:23:a7:4f:37:8b:04: cf:3e:e2:2d:64:db:aa:2b:f6:c4:39:a8:ea:4b:cd:b7:a5:28: 91:59:73:ef:f6:36:95:f7:ae:e5:f5:57:7e:19:7a:26:39:c4: 28:df:46:90:e4:1e:b7:72:40:b5:75:16:bd:ce:2d:11:bc:16: ea:d0:35:09:95:fd:99:eb:37:46:76:ab:2b:7f:4a:81:e6:e1: 94:f9:8d:d6:aa:a7:d5:d5:76:ce:53:b3:bd:e8:ad:3a:12:b5: 3a:71:1b:2b:d1:7d:42:d9:00:3f:51:d3:74:73:38:68:c9:2f: 5a:f1:66:6a:86:3f:04:5d:d8:e4:a3:2c:8a:5f:79:b6:8a:b9: 27:f1:6c:e0:ec:83:54:2a:9d:58:28:41:c0:d2:36:57:b3:a1: b5:7d:ec:63:86:44:bf:13:2f:39:14:fb:8a:0d:ae:26:e2:65: 32:88:cd:7a:20:c4:42:85:e4:55:2f:b4:91:cc:ba:49:d7:77: fd:a8:cf:8e:86:06:ce:5f:91:9b:ea:c9:da:22:e2:d2:d8:7e: 55:25:45:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUddJ/SwIViqRNmH/WfTe3PQsPZg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFOUUxODE0QUMyMDU2MEFFN0I5QTM2RjIxMjAzNzQ0 NUEyM0M1MjAeFw0yNTA3MjYxNzE4NTBaFw0yNTA3MjcxODMzNTBaMDMxMTAvBgNV BAMTKDBBQjIyMEJBQkU0QkVGRURCRjVCMERBMzJCNDc1NzA0NUZGMjZERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClDvz0CT1THkq0enSBRXwfDY/w vqm3YrjXKTIz1nf5eBptbNJ3QB4bnrqCpj2abYaGnBnTAMT4c5om6gG4QFjN4Zwz 7/jxIsIvIw7mgNtQbqcGYNEVsBfWbfVOR9hlnPVTn5NWSWLmTrQzwb5pCQPY/kaa ezjFMZKxHVZgIeq+9Pt6IpjC2BqbOayBChTWnuZf/UXm/R1efAeRY8YU5EvwScPL pKqfor0dki4EimF/Rn/QhdrZ0cBZWTIH77CjghKQYCTMDThy3xBjTpPGq7RaYZN6 eIFuZ2XCnEqTw/l+AJ7sqOyYppo93eOjgYmFktr+C6vtR7RjXbpc7SmMiq3DAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCrIgur5L7+2/Ww2jK0dXBF/ybeYwHwYDVR0j BBgwFoAUYOnhgUrCBWCue5o28hIDdEWiPFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWVMQkRSSE44cGNqeXBwakNldnV1UU5hN0xxN0U4V0JkQWdITUZxdzIy cXIvMC82MEU5RTE4MTRBQzIwNTYwQUU3QjlBMzZGMjEyMDM3NDQ1QTIzQzUyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwRTlFMTgxNEFDMjA1NjBB RTdCOUEzNkYyMTIwMzc0NDVBMjNDNTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWVMQkRSSE44cGNqeXBwakNldnV1UU5hN0xxN0U4V0JkQWdITUZxdzIycXIvMC82 MEU5RTE4MTRBQzIwNTYwQUU3QjlBMzZGMjEyMDM3NDQ1QTIzQzUyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW6pFZFOAvCD88FRgf4snNOoYqyQLSe87sAy0Pbid8162WygosSDygRC2zEUn D/yTI6dPN4sEzz7iLWTbqiv2xDmo6kvNt6UokVlz7/Y2lfeu5fVXfhl6JjnEKN9G kOQet3JAtXUWvc4tEbwW6tA1CZX9mes3RnarK39KgebhlPmN1qqn1dV2zlOzveit OhK1OnEbK9F9QtkAP1HTdHM4aMkvWvFmaoY/BF3Y5KMsil95toq5J/Fs4OyDVCqd WChBwNI2V7OhtX3sY4ZEvxMvORT7ig2uJuJlMojNeiDEQoXkVS+0kcy6Sdd3/ajP joYGzl+Rm+rJ2iLi0th+VSVF4A== -----END CERTIFICATE-----Generated at Sun Jul 27 09:37:53 2025 by rpki-client