$ rpki-client -vvf rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.mft File: E7F1F0A299597CC5656B837D3DFD4B63C8649C47.mft (raw, json) Hash identifier: dWtxJ/gVFbNJAUozWFEfLtFpDAvOPHwtMi3SpGPnR0U= Subject key identifier: 9B:28:08:5D:25:0E:34:83:E4:F1:55:79:3D:3D:92:54:01:DB:20:7F Authority key identifier: E7:F1:F0:A2:99:59:7C:C5:65:6B:83:7D:3D:FD:4B:63:C8:64:9C:47 Certificate issuer: /CN=E7F1F0A299597CC5656B837D3DFD4B63C8649C47 Certificate serial: 01D88BAA5856EE05CBC0E9564426796B14E7EC1D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.mft Manifest number: 0110 Signing time: Tue 10 Jun 2025 06:20:36 +0000 Manifest this update: Tue 10 Jun 2025 06:15:36 +0000 Manifest next update: Wed 11 Jun 2025 09:42:36 +0000 Files and hashes: 1: 3138312e3232342e37362e302f32322d3234203d3e20323636323238.roa (hash: wt8Bu75iZpsaBH7Pp1+G3hiQrNSJLrVl5HrAg7MoUwo=) 2: E7F1F0A299597CC5656B837D3DFD4B63C8649C47.crl (hash: ZjrzKoeFNLHEtJTzpfSxJAMbjFTfGWXems//dpWGbE0=) 3: 323830343a336361633a3a2f33322d3332203d3e20323636323238.roa (hash: EX5Iaef1ARQrpPTvk9/gywbb6Jru6g/6wHDpk8J3pxo=) 4: 3139322e3134302e34382e302f32322d3234203d3e20323636323238.roa (hash: IBfqcIOnWf45YxKOaOhwPoXuNQSE4FxDHigKFB3cvEI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.crl rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 09:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d8:8b:aa:58:56:ee:05:cb:c0:e9:56:44:26:79:6b:14:e7:ec:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7F1F0A299597CC5656B837D3DFD4B63C8649C47 Validity Not Before: Jun 10 06:15:36 2025 GMT Not After : Jun 11 09:42:36 2025 GMT Subject: CN=9B28085D250E3483E4F155793D3D925401DB207F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:77:dd:8f:20:5e:19:49:31:29:7b:3e:e1: 48:39:6e:c9:d0:d2:1b:48:60:dc:dc:5b:f9:1f:8a: 6a:5f:3e:d9:a5:9f:b7:6e:18:90:ec:a9:90:3b:a5: d7:ff:7a:36:59:ba:03:c8:aa:98:61:43:e0:95:11: 71:e8:f4:f4:c7:6d:9b:53:65:96:11:47:53:50:e4: 69:3e:df:f1:ea:dd:78:cf:ca:5f:e2:cd:59:30:02: d1:b0:1d:0c:ba:5b:04:6a:c9:dc:4c:a5:1b:30:6e: 43:77:50:6a:d9:86:5c:a9:b4:b2:58:1b:38:f4:a3: b9:12:e6:14:fa:fb:46:20:50:b5:08:ec:2e:4c:40: 5c:38:a7:73:76:2f:87:5c:13:fb:46:64:95:4f:c9: 43:a2:5c:9a:c3:66:f1:b8:64:3c:60:a7:fc:29:a2: e3:f5:b1:c1:88:9c:e2:9b:5d:29:be:19:6e:a7:9e: 5e:c5:71:76:d8:7a:e8:a3:99:93:fd:ac:10:22:42: 8b:9d:36:1e:e1:38:ee:1c:fb:b7:47:a8:35:00:21: f6:6a:1f:59:2c:4e:54:c3:7b:db:96:75:cd:21:a6: 81:9a:80:8b:ad:8c:af:c3:7d:28:54:07:30:97:f5: c7:a5:2e:62:1f:02:6b:9d:75:10:e7:76:50:8d:cc: 82:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:28:08:5D:25:0E:34:83:E4:F1:55:79:3D:3D:92:54:01:DB:20:7F X509v3 Authority Key Identifier: keyid:E7:F1:F0:A2:99:59:7C:C5:65:6B:83:7D:3D:FD:4B:63:C8:64:9C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f8:61:68:f0:87:23:cb:f7:fe:c0:70:3a:3f:db:ce:dc:d2: cf:5d:3d:e9:d7:91:5d:9a:c9:32:a9:df:f7:9e:e4:28:9c:54: 3c:c8:13:89:8e:65:c4:3a:80:f6:07:a5:62:d8:10:33:ef:ea: bf:bb:a9:90:8f:51:1c:9d:ce:a7:89:49:07:45:8c:3e:0a:2b: 86:65:d3:c8:bb:f4:0b:26:43:e5:19:d1:69:47:c8:bd:8c:67: 61:5e:a1:3e:c7:39:bc:69:82:0b:0d:2a:33:b8:a3:7d:94:af: e6:39:9f:0c:29:ab:6c:7b:fc:27:bc:df:1a:54:4e:82:82:13: a7:ce:bc:f7:fb:a5:be:c3:fd:be:ca:70:bf:49:c8:c8:c7:7d: 8f:a8:65:3f:7d:5a:84:c7:27:0f:23:d1:aa:ef:a3:6f:c9:cf: 72:01:85:a5:ad:45:ea:5b:be:b8:b3:2a:5b:05:66:4f:72:14: d3:87:c1:5d:e8:5f:31:3a:ae:b6:9d:f6:95:ad:0b:2a:91:dc: 8a:68:d6:40:a1:cb:82:48:33:a2:d2:62:48:5c:ea:f5:31:d5: 0f:e8:8a:d8:5b:92:71:ae:36:bd:0d:92:93:83:39:6e:67:e8: 00:fd:1f:fc:08:c9:b8:77:17:45:5e:e2:b4:1d:69:77:d1:9a: b0:d1:f5:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAdiLqlhW7gXLwOlWRCZ5axTn7B0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdGMUYwQTI5OTU5N0NDNTY1NkI4MzdEM0RGRDRCNjND ODY0OUM0NzAeFw0yNTA2MTAwNjE1MzZaFw0yNTA2MTEwOTQyMzZaMDMxMTAvBgNV BAMTKDlCMjgwODVEMjUwRTM0ODNFNEYxNTU3OTNEM0Q5MjU0MDFEQjIwN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3THfdjyBeGUkxKXs+4Ug5bsnQ 0htIYNzcW/kfimpfPtmln7duGJDsqZA7pdf/ejZZugPIqphhQ+CVEXHo9PTHbZtT ZZYRR1NQ5Gk+3/Hq3XjPyl/izVkwAtGwHQy6WwRqydxMpRswbkN3UGrZhlyptLJY Gzj0o7kS5hT6+0YgULUI7C5MQFw4p3N2L4dcE/tGZJVPyUOiXJrDZvG4ZDxgp/wp ouP1scGInOKbXSm+GW6nnl7FcXbYeuijmZP9rBAiQoudNh7hOO4c+7dHqDUAIfZq H1ksTlTDe9uWdc0hpoGagIutjK/DfShUBzCX9celLmIfAmuddRDndlCNzIILAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmygIXSUONIPk8VV5PT2SVAHbIH8wHwYDVR0j BBgwFoAU5/HwoplZfMVla4N9Pf1LY8hknEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ244dTVuU1JtNm9TdVZObmtKZ2hZQmNyWURac0JnYktDNENSWHNTU28y dzkvMC9FN0YxRjBBMjk5NTk3Q0M1NjU2QjgzN0QzREZENEI2M0M4NjQ5QzQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3RjFGMEEyOTk1OTdDQzU2 NTZCODM3RDNERkQ0QjYzQzg2NDlDNDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q244dTVuU1JtNm9TdVZObmtKZ2hZQmNyWURac0JnYktDNENSWHNTU28ydzkvMC9F N0YxRjBBMjk5NTk3Q0M1NjU2QjgzN0QzREZENEI2M0M4NjQ5QzQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARfhhaPCHI8v3/sBwOj/bztzSz1096deRXZrJMqnf957kKJxUPMgTiY5lxDqA 9gelYtgQM+/qv7upkI9RHJ3Op4lJB0WMPgorhmXTyLv0CyZD5RnRaUfIvYxnYV6h Psc5vGmCCw0qM7ijfZSv5jmfDCmrbHv8J7zfGlROgoITp8689/ulvsP9vspwv0nI yMd9j6hlP31ahMcnDyPRqu+jb8nPcgGFpa1F6lu+uLMqWwVmT3IU04fBXehfMTqu tp32la0LKpHcimjWQKHLgkgzotJiSFzq9THVD+iK2FuSca42vQ2Sk4M5bmfoAP0f /AjJuHcXRV7itB1pd9GasNH1AA== -----END CERTIFICATE-----Generated at Wed Jun 11 02:09:51 2025 by rpki-client