$ rpki-client -vvf rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.mft File: 8C9489B5F162370B3CD6AE611F82567891AA2F79.mft (raw, json) Hash identifier: XqRrZOxyjbkmmdgG7LzQI41b46iZbL9aLoVIKATKuHU= Subject key identifier: EA:1D:63:4B:7E:9E:04:BA:99:FB:05:56:A5:55:15:14:EA:74:2F:27 Authority key identifier: 8C:94:89:B5:F1:62:37:0B:3C:D6:AE:61:1F:82:56:78:91:AA:2F:79 Certificate issuer: /CN=8C9489B5F162370B3CD6AE611F82567891AA2F79 Certificate serial: 737756FE4E95200D8DB140073248C0809FADDF29 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9489B5F162370B3CD6AE611F82567891AA2F79.cer Subject info access: rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.mft Manifest number: 3C Signing time: Wed 04 Jun 2025 00:22:36 +0000 Manifest this update: Wed 04 Jun 2025 00:17:36 +0000 Manifest next update: Thu 05 Jun 2025 00:48:36 +0000 Files and hashes: 1: 34352e3136322e3231382e302f32342d3234203d3e20323638353238.roa (hash: B/FW6NB9mbW4dLGdEb/iRIbaB2Z4d1Aejq3uYgvPCeA=) 2: 8C9489B5F162370B3CD6AE611F82567891AA2F79.crl (hash: sJl9S5MqGC9xTOaLN8X9U4QJBGRgkhC3Gv5DArdEGwU=) 3: 323830343a353239383a3a2f33322d3438203d3e20323638353238.roa (hash: npZtOWAX2jdEasirZhHJUpjOYx48/HGh96fzMy2npB8=) 4: 34352e3136322e3231362e302f32332d3234203d3e20323638353238.roa (hash: iA+ldL/fGyDGB/XdXsXTUs22s5Gfxyq23UOMWKTack8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.crl rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9489B5F162370B3CD6AE611F82567891AA2F79.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Jun 2025 00:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:77:56:fe:4e:95:20:0d:8d:b1:40:07:32:48:c0:80:9f:ad:df:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C9489B5F162370B3CD6AE611F82567891AA2F79 Validity Not Before: Jun 4 00:17:36 2025 GMT Not After : Jun 5 00:48:36 2025 GMT Subject: CN=EA1D634B7E9E04BA99FB0556A5551514EA742F27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:42:80:af:46:b7:fb:a9:bd:fa:71:f4:af: fb:6c:74:c7:8a:90:18:02:6a:36:7b:13:e1:77:47: 56:b0:72:c3:e1:c0:de:76:7e:0c:cd:89:41:b6:b0: 71:d4:fa:20:2f:cb:c8:ff:48:d9:fa:06:55:53:50: 0a:1b:33:99:27:8f:24:99:40:da:93:13:c9:6d:d0: 50:76:70:63:cc:dd:d5:2c:1f:a7:d4:5e:99:06:50: df:91:05:ab:e6:d0:c5:d1:30:91:2e:f1:71:ed:24: 18:cf:79:8f:bb:b7:ea:8d:c3:76:a5:65:24:72:a1: 88:52:98:be:4b:f7:0f:d7:93:d2:76:23:78:3c:64: b8:68:af:19:f1:0b:5b:93:33:d0:93:4d:ed:1f:f8: 02:50:3b:92:33:73:28:7b:cb:f2:bf:25:c9:d0:92: c0:c5:8e:fa:48:8f:8a:d8:33:06:eb:d1:32:83:f7: 98:6c:7b:26:91:cf:bb:92:04:1c:a3:7d:42:67:c9: a5:97:cc:79:d1:d7:b2:7c:9a:0b:c4:4b:1d:06:b5: 9d:4f:99:7c:ca:48:b2:87:2e:b2:77:c9:79:1e:f5: c8:ec:a1:22:f6:3e:91:6e:ab:a6:93:98:6e:97:bb: 24:3f:c8:1d:f4:79:18:9c:b1:cf:f4:a2:ed:d9:cf: 34:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1D:63:4B:7E:9E:04:BA:99:FB:05:56:A5:55:15:14:EA:74:2F:27 X509v3 Authority Key Identifier: keyid:8C:94:89:B5:F1:62:37:0B:3C:D6:AE:61:1F:82:56:78:91:AA:2F:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9489B5F162370B3CD6AE611F82567891AA2F79.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:7d:be:eb:ce:5f:97:a8:3f:2c:68:62:72:3c:4e:e9:d3:05: 0f:a9:21:28:16:7f:33:a6:0c:5b:11:01:e9:36:cf:60:27:8f: 1f:b1:c5:b2:e4:94:3e:47:cf:43:a6:76:ae:16:28:c9:84:63: f3:c9:48:cb:d8:7e:50:ac:63:00:83:93:53:ee:1d:32:0e:ee: ad:2c:5d:26:9f:c5:16:f4:18:39:87:1c:37:94:fd:93:8e:f4: 55:b0:34:5b:ad:3f:2e:1a:90:10:f1:29:22:80:65:3a:8a:59: 55:b7:6f:73:18:93:dd:11:1d:3a:22:66:62:40:ea:f2:f7:df: 79:d1:48:31:0e:96:76:35:83:cd:0d:a9:90:b3:8b:c7:89:77: 0f:ed:0a:94:fb:6b:94:59:63:06:f4:f1:a4:2d:57:e7:71:b1: 84:4d:f9:7d:f0:72:f8:8e:e1:9e:b1:07:fe:d2:92:a3:f0:ca: d7:e2:39:01:50:2a:77:7d:da:11:55:ab:49:44:ff:27:d1:8d: 31:3f:ed:c1:93:63:89:76:39:12:2e:3c:d5:bf:c9:0f:27:e3: 28:2e:89:09:1e:e9:92:23:9f:61:d7:3f:3f:4e:23:31:29:20: a1:b3:51:bc:03:f6:79:2b:93:df:e0:1b:a1:c0:82:29:84:1b: d3:42:f5:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUc3dW/k6VIA2NsUAHMkjAgJ+t3ykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM5NDg5QjVGMTYyMzcwQjNDRDZBRTYxMUY4MjU2Nzg5 MUFBMkY3OTAeFw0yNTA2MDQwMDE3MzZaFw0yNTA2MDUwMDQ4MzZaMDMxMTAvBgNV BAMTKEVBMUQ2MzRCN0U5RTA0QkE5OUZCMDU1NkE1NTUxNTE0RUE3NDJGMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdtUKAr0a3+6m9+nH0r/tsdMeK kBgCajZ7E+F3R1awcsPhwN52fgzNiUG2sHHU+iAvy8j/SNn6BlVTUAobM5knjySZ QNqTE8lt0FB2cGPM3dUsH6fUXpkGUN+RBavm0MXRMJEu8XHtJBjPeY+7t+qNw3al ZSRyoYhSmL5L9w/Xk9J2I3g8ZLhorxnxC1uTM9CTTe0f+AJQO5Izcyh7y/K/JcnQ ksDFjvpIj4rYMwbr0TKD95hseyaRz7uSBByjfUJnyaWXzHnR17J8mgvESx0GtZ1P mXzKSLKHLrJ3yXke9cjsoSL2PpFuq6aTmG6XuyQ/yB30eRicsc/0ou3ZzzQTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6h1jS36eBLqZ+wVWpVUVFOp0LycwHwYDVR0j BBgwFoAUjJSJtfFiNws81q5hH4JWeJGqL3kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQndlelBxQ3RwRlpFN1ZtcVJTeVBRRlBzTHc1Y1NKMm52UGlGMjlSQ0w0 OXYvMC84Qzk0ODlCNUYxNjIzNzBCM0NENkFFNjExRjgyNTY3ODkxQUEyRjc5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDOTQ4OUI1RjE2MjM3MEIz Q0Q2QUU2MTFGODI1Njc4OTFBQTJGNzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QndlelBxQ3RwRlpFN1ZtcVJTeVBRRlBzTHc1Y1NKMm52UGlGMjlSQ0w0OXYvMC84 Qzk0ODlCNUYxNjIzNzBCM0NENkFFNjExRjgyNTY3ODkxQUEyRjc5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdH2+685fl6g/LGhicjxO6dMFD6khKBZ/M6YMWxEB6TbPYCePH7HFsuSUPkfP Q6Z2rhYoyYRj88lIy9h+UKxjAIOTU+4dMg7urSxdJp/FFvQYOYccN5T9k470VbA0 W60/LhqQEPEpIoBlOopZVbdvcxiT3REdOiJmYkDq8vffedFIMQ6WdjWDzQ2pkLOL x4l3D+0KlPtrlFljBvTxpC1X53GxhE35ffBy+I7hnrEH/tKSo/DK1+I5AVAqd33a EVWrSUT/J9GNMT/twZNjiXY5Ei481b/JDyfjKC6JCR7pkiOfYdc/P04jMSkgobNR vAP2eSuT3+AbocCCKYQb00L1rQ== -----END CERTIFICATE-----Generated at Wed Jun 4 11:02:14 2025 by rpki-client