$ rpki-client -vvf rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft File: 36ED969D92322E6C7F28A050D3ABC47947497160.mft (raw, json) Hash identifier: keTMBjL1Kd+GBgiu4jvQBi1gMOF53BSK3a62YxSHbc8= Subject key identifier: 48:05:E2:78:96:B6:FE:0A:E7:3E:28:C8:E4:55:11:76:9E:7B:0B:BF Authority key identifier: 36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60 Certificate issuer: /CN=36ED969D92322E6C7F28A050D3ABC47947497160 Certificate serial: 5D6EF540EE1B10F8D2649CEBDE418792DE1A2280 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer Subject info access: rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft Manifest number: 0209 Signing time: Tue 10 Jun 2025 02:05:30 +0000 Manifest this update: Tue 10 Jun 2025 02:00:30 +0000 Manifest next update: Wed 11 Jun 2025 04:29:30 +0000 Files and hashes: 1: 36ED969D92322E6C7F28A050D3ABC47947497160.crl (hash: +WEIjVJzw1NgFNXDd6qeTZj5N3JD7FYtgRVbHN9FthE=) 2: 323830343a313962343a3a2f33322d3438203d3e203631383133.roa (hash: AM/mNLDTXwLh2g8b+r6l4a/01ThmpdyzXeaEjiNF0ZY=) 3: 3230312e3135392e3135362e302f32322d3234203d3e203631383133.roa (hash: 5CT5iL8gd5WAum3xmmFF9XzujOAt6f3FH1Xw4sVTvko=) 4: 3133382e3132322e3139362e302f32322d3234203d3e203631383133.roa (hash: L+mPDM3MU8F2FyNxFY/rkbSqd8rt/zzx/y98BM3Dl2Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 04:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:6e:f5:40:ee:1b:10:f8:d2:64:9c:eb:de:41:87:92:de:1a:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36ED969D92322E6C7F28A050D3ABC47947497160 Validity Not Before: Jun 10 02:00:30 2025 GMT Not After : Jun 11 04:29:30 2025 GMT Subject: CN=4805E27896B6FE0AE73E28C8E45511769E7B0BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:c7:32:d0:87:9d:cc:2a:05:71:da:b6:89: 94:ee:eb:9f:1c:06:a7:70:12:3d:84:d5:56:6c:97: b5:f9:3a:64:37:07:5f:2b:d7:72:e3:d1:c9:d3:09: c7:1b:dd:e9:8a:aa:a3:77:a7:51:0e:28:2b:ab:4e: 6d:4f:d5:cc:d1:56:a2:e5:9a:05:15:36:ad:15:29: ae:4d:50:fa:b7:5c:1c:a9:32:83:47:ef:69:26:ed: 09:92:44:51:df:77:80:d2:b8:69:a9:3d:1a:5b:b2: e3:7d:6f:2d:46:34:11:6d:fb:11:b9:10:da:3a:21: dd:a2:e5:37:95:cc:71:68:3a:b9:b9:87:2e:cf:8a: c2:e3:72:19:39:35:c4:c9:83:32:a4:64:8f:89:83: 1e:a2:86:11:c2:7c:76:b0:ac:3f:f0:4d:dd:5a:a8: 1a:fa:01:16:cc:ba:e2:97:35:5b:be:ae:bf:be:d9: 7a:eb:ad:de:fb:ff:0b:3f:00:c3:2e:ef:b2:c2:02: ba:dc:bc:21:a1:bd:64:74:94:60:b8:11:fd:df:bd: 2d:95:e6:93:4e:63:e6:f0:0a:32:ac:b5:e9:0d:4f: 8b:53:40:94:d0:12:99:e0:6a:25:c3:b6:b2:ba:06: fe:e4:47:ef:4f:e6:b6:a9:45:a5:68:1c:3f:01:c6: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:05:E2:78:96:B6:FE:0A:E7:3E:28:C8:E4:55:11:76:9E:7B:0B:BF X509v3 Authority Key Identifier: keyid:36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:a3:25:51:cf:3d:d2:97:d7:61:49:79:14:b5:7b:23:15:59: a3:b9:cf:3b:c2:48:23:06:a4:57:d3:77:5a:db:a8:28:8a:3d: 7e:ae:6a:66:f7:19:fb:e9:aa:82:09:17:69:c6:a5:7d:f7:a8: 14:75:07:36:30:d4:ac:7e:bd:ed:85:37:46:dd:d8:b1:5c:0b: 08:e3:81:42:85:3d:4f:d5:60:66:15:65:7e:df:dd:31:57:2c: 00:48:58:b2:5f:ca:b4:83:27:90:d7:98:41:ea:3c:b4:b0:ef: b1:4b:69:b7:2f:9e:6b:3d:a9:be:16:2f:66:69:4e:53:b4:86: 84:21:78:d2:fb:1c:8a:40:4b:ec:75:04:5b:58:21:aa:60:e9: b9:d6:23:73:91:f7:a6:22:18:3e:59:1f:02:21:5f:53:89:37: 7d:b9:86:6a:28:1b:1a:df:74:2c:f6:04:29:e7:19:56:78:09: b0:1b:c8:c1:a5:4a:84:f9:de:54:e8:ff:8c:dc:7e:0f:ee:ac: 2c:83:67:3f:5f:40:eb:2c:60:bc:93:25:19:92:7a:c3:a3:ab: c9:68:32:fa:63:0e:0d:89:9b:46:a6:db:a6:48:dd:38:09:94: 89:1b:ae:08:35:09:6b:14:2a:4d:f6:ef:a4:ec:4e:f3:71:c1: 21:31:59:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXW71QO4bEPjSZJzr3kGHkt4aIoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZFRDk2OUQ5MjMyMkU2QzdGMjhBMDUwRDNBQkM0Nzk0 NzQ5NzE2MDAeFw0yNTA2MTAwMjAwMzBaFw0yNTA2MTEwNDI5MzBaMDMxMTAvBgNV BAMTKDQ4MDVFMjc4OTZCNkZFMEFFNzNFMjhDOEU0NTUxMTc2OUU3QjBCQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAGscy0IedzCoFcdq2iZTu658c BqdwEj2E1VZsl7X5OmQ3B18r13Lj0cnTCccb3emKqqN3p1EOKCurTm1P1czRVqLl mgUVNq0VKa5NUPq3XBypMoNH72km7QmSRFHfd4DSuGmpPRpbsuN9by1GNBFt+xG5 ENo6Id2i5TeVzHFoOrm5hy7PisLjchk5NcTJgzKkZI+Jgx6ihhHCfHawrD/wTd1a qBr6ARbMuuKXNVu+rr++2Xrrrd77/ws/AMMu77LCArrcvCGhvWR0lGC4Ef3fvS2V 5pNOY+bwCjKstekNT4tTQJTQEpngaiXDtrK6Bv7kR+9P5rapRaVoHD8Bxo2zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSAXieJa2/grnPijI5FURdp57C78wHwYDVR0j BBgwFoAUNu2WnZIyLmx/KKBQ06vEeUdJcWAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFhVeUYyVm00YVpXY0RjenMzSk1SaDRydUdCUzF0bk10UE5jdkNGZXQ2 emUvMC8zNkVEOTY5RDkyMzIyRTZDN0YyOEEwNTBEM0FCQzQ3OTQ3NDk3MTYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2RUQ5NjlEOTIzMjJFNkM3 RjI4QTA1MEQzQUJDNDc5NDc0OTcxNjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFhVeUYyVm00YVpXY0RjenMzSk1SaDRydUdCUzF0bk10UE5jdkNGZXQ2emUvMC8z NkVEOTY5RDkyMzIyRTZDN0YyOEEwNTBEM0FCQzQ3OTQ3NDk3MTYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB6MlUc890pfXYUl5FLV7IxVZo7nPO8JIIwakV9N3WtuoKIo9fq5qZvcZ++mq ggkXacalffeoFHUHNjDUrH697YU3Rt3YsVwLCOOBQoU9T9VgZhVlft/dMVcsAEhY sl/KtIMnkNeYQeo8tLDvsUtpty+eaz2pvhYvZmlOU7SGhCF40vscikBL7HUEW1gh qmDpudYjc5H3piIYPlkfAiFfU4k3fbmGaigbGt90LPYEKecZVngJsBvIwaVKhPne VOj/jNx+D+6sLINnP19A6yxgvJMlGZJ6w6OryWgy+mMODYmbRqbbpkjdOAmUiRuu CDUJaxQqTfbvpOxO83HBITFZDg== -----END CERTIFICATE-----Generated at Tue Jun 10 18:13:17 2025 by rpki-client