$ rpki-client -vvf rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft File: 0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft (raw, json) Hash identifier: 1CKFFnaCMhOILfcEx6dm8jzcMwWYaL0TxcpMj0o/Nl0= Subject key identifier: 1D:68:8E:F6:F1:79:FC:F3:80:14:61:CE:F8:12:B3:8E:7C:F7:48:62 Authority key identifier: 0E:F7:13:1E:83:15:CF:BC:2A:0C:8E:B2:A6:84:48:B4:0D:F9:DD:EB Certificate issuer: /CN=0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB Certificate serial: 306A20CFBDADEAD8DD495F916C3C0E758C684127 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft Manifest number: 0239 Signing time: Sun 08 Jun 2025 23:13:30 +0000 Manifest this update: Sun 08 Jun 2025 23:08:30 +0000 Manifest next update: Tue 10 Jun 2025 02:28:30 +0000 Files and hashes: 1: 3138312e3233322e3235302e302f32332d3234203d3e20323731353431.roa (hash: 4IIa4k60q+t0mOSWWa3xktMr2fL1MMbexf0+Pk1A8dU=) 2: 0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl (hash: lhHIyP4+hyQiT/DkT1YDIxn838vQhkso0sYAjy11iOo=) 3: 323830313a38303a336537303a3a2f34372d3437203d3e20323731353431.roa (hash: gQvqAbK6gQBmP0J6nHXKQ8gCtZEaiIVsEdHKjqQvV/Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 02:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:6a:20:cf:bd:ad:ea:d8:dd:49:5f:91:6c:3c:0e:75:8c:68:41:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB Validity Not Before: Jun 8 23:08:30 2025 GMT Not After : Jun 10 02:28:30 2025 GMT Subject: CN=1D688EF6F179FCF3801461CEF812B38E7CF74862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:22:80:3f:0c:f3:b2:d6:31:47:4e:01:85:06: 0a:27:07:38:df:bf:9d:69:70:e1:82:e1:51:9d:c6: ff:9b:42:b5:24:31:b1:c4:11:1a:73:0f:5e:27:e3: 96:16:93:03:0b:86:b3:75:8a:ed:dd:df:d1:e6:ef: 41:22:e0:f4:d1:b4:d1:e4:63:43:28:42:07:45:0b: f2:2f:fe:63:db:07:ee:19:ee:15:74:76:c3:a6:11: fd:d2:94:d1:c2:a3:18:87:53:31:76:6c:1e:2c:f0: d8:33:56:e1:e0:45:b3:b6:1a:ad:b7:d1:8d:33:7b: d6:d3:5d:75:a7:aa:14:ff:cc:92:67:34:e6:5a:9f: 86:87:6a:9d:08:de:e9:cd:9c:ce:1a:3c:28:ff:bb: 03:48:89:db:88:46:47:8c:1d:ec:8d:06:b7:7d:3e: 06:07:a2:f5:11:a0:17:c0:71:96:b8:03:76:82:6b: 31:bc:d2:85:78:93:20:88:d9:ab:88:5f:8b:3d:e8: 04:ec:07:54:23:5a:e3:97:77:86:47:9f:a8:5e:6d: 32:f7:3b:6b:4b:85:05:5f:fd:59:07:4d:53:77:78: 93:fc:3b:27:77:65:4c:8a:4e:36:6f:27:a7:b3:b4: 5b:94:46:22:eb:f5:b6:42:e4:f0:6a:59:05:f8:6d: d8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:68:8E:F6:F1:79:FC:F3:80:14:61:CE:F8:12:B3:8E:7C:F7:48:62 X509v3 Authority Key Identifier: keyid:0E:F7:13:1E:83:15:CF:BC:2A:0C:8E:B2:A6:84:48:B4:0D:F9:DD:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:71:1e:1b:5a:75:3c:44:5e:22:8b:94:27:b5:b3:4f:dc:3f: 00:67:67:2d:e9:88:68:85:b8:c6:c1:9a:96:7d:d0:81:50:fa: 68:88:b3:4e:0a:b2:78:d1:43:4f:8e:37:93:e4:aa:ab:0a:8b: 66:ea:da:47:92:77:bd:93:80:e1:1c:e9:0c:be:2a:fe:be:cb: 58:0a:38:7e:75:2a:11:1f:18:61:05:6a:91:53:a7:42:30:69: 59:b9:d7:13:95:95:03:56:3d:23:09:5b:d2:b0:ad:3b:ab:64: 95:c4:c5:f3:c9:61:f8:5b:81:e5:e8:af:0b:1f:f2:d4:86:15: 22:7d:65:da:a3:0c:15:2e:d5:13:39:1b:d2:b1:7b:42:75:63: d6:a2:67:64:df:c1:82:ba:c9:e5:79:40:86:6d:c8:16:32:c4: 03:27:3f:db:6b:7e:db:91:6d:ad:28:c0:46:70:78:ae:6e:1c: 57:05:3c:a9:f9:d2:e4:96:aa:2c:52:b9:51:76:42:fd:57:88: 69:f6:dd:bb:4c:54:48:fd:88:3b:08:df:29:0e:18:a8:6b:e4: 9c:6e:8d:cb:ee:a6:ce:1e:a4:47:c5:73:77:d4:93:ea:66:d4: 00:93:bd:1a:3a:95:61:d2:ef:e3:0c:1f:1c:b3:fd:91:2a:80: 09:ba:18:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMGogz72t6tjdSV+RbDwOdYxoQScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVGNzEzMUU4MzE1Q0ZCQzJBMEM4RUIyQTY4NDQ4QjQw REY5RERFQjAeFw0yNTA2MDgyMzA4MzBaFw0yNTA2MTAwMjI4MzBaMDMxMTAvBgNV BAMTKDFENjg4RUY2RjE3OUZDRjM4MDE0NjFDRUY4MTJCMzhFN0NGNzQ4NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvIoA/DPOy1jFHTgGFBgonBzjf v51pcOGC4VGdxv+bQrUkMbHEERpzD14n45YWkwMLhrN1iu3d39Hm70Ei4PTRtNHk Y0MoQgdFC/Iv/mPbB+4Z7hV0dsOmEf3SlNHCoxiHUzF2bB4s8NgzVuHgRbO2Gq23 0Y0ze9bTXXWnqhT/zJJnNOZan4aHap0I3unNnM4aPCj/uwNIiduIRkeMHeyNBrd9 PgYHovURoBfAcZa4A3aCazG80oV4kyCI2auIX4s96ATsB1QjWuOXd4ZHn6hebTL3 O2tLhQVf/VkHTVN3eJP8Oyd3ZUyKTjZvJ6eztFuURiLr9bZC5PBqWQX4bdiTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHWiO9vF5/POAFGHO+BKzjnz3SGIwHwYDVR0j BBgwFoAUDvcTHoMVz7wqDI6ypoRItA353eswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQmE1MThTbjVDWWh3SnZFaWh5dHhDdkplUHU2d3k0eUhFWDZlZkx5aUFY RkEvMS8wRUY3MTMxRTgzMTVDRkJDMkEwQzhFQjJBNjg0NDhCNDBERjlEREVCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFRjcxMzFFODMxNUNGQkMy QTBDOEVCMkE2ODQ0OEI0MERGOURERUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QmE1MThTbjVDWWh3SnZFaWh5dHhDdkplUHU2d3k0eUhFWDZlZkx5aUFYRkEvMS8w RUY3MTMxRTgzMTVDRkJDMkEwQzhFQjJBNjg0NDhCNDBERjlEREVCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAXEeG1p1PEReIouUJ7WzT9w/AGdnLemIaIW4xsGaln3QgVD6aIizTgqyeNFD T443k+SqqwqLZuraR5J3vZOA4RzpDL4q/r7LWAo4fnUqER8YYQVqkVOnQjBpWbnX E5WVA1Y9Iwlb0rCtO6tklcTF88lh+FuB5eivCx/y1IYVIn1l2qMMFS7VEzkb0rF7 QnVj1qJnZN/BgrrJ5XlAhm3IFjLEAyc/22t+25FtrSjARnB4rm4cVwU8qfnS5Jaq LFK5UXZC/VeIafbdu0xUSP2IOwjfKQ4YqGvknG6Ny+6mzh6kR8Vzd9ST6mbUAJO9 GjqVYdLv4wwfHLP9kSqACboY/w== -----END CERTIFICATE-----Generated at Mon Jun 9 16:19:03 2025 by rpki-client