$ rpki-client -vvf rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.mft File: 87B1C7EAED276157BEE841B04303FA76647D005D.mft (raw, json) Hash identifier: MijFC/P9m1QFQuG+DBYexgzH4pizk4ApkAftApaovOk= Subject key identifier: 39:C2:16:6C:34:3B:5B:7A:90:AE:DB:CC:D4:B3:6D:77:49:A3:EA:A1 Authority key identifier: 87:B1:C7:EA:ED:27:61:57:BE:E8:41:B0:43:03:FA:76:64:7D:00:5D Certificate issuer: /CN=87B1C7EAED276157BEE841B04303FA76647D005D Certificate serial: 35CBAB3155B24FF75BB3E5818A55C652A766520C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B1C7EAED276157BEE841B04303FA76647D005D.cer Subject info access: rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.mft Manifest number: 023F Signing time: Wed 11 Jun 2025 08:27:39 +0000 Manifest this update: Wed 11 Jun 2025 08:22:39 +0000 Manifest next update: Thu 12 Jun 2025 10:31:39 +0000 Files and hashes: 1: 87B1C7EAED276157BEE841B04303FA76647D005D.crl (hash: aGJqaRX6ffIAEq61hUMw8ZeqNLIsYR+qk4FwQehxWlM=) 2: 3137392e3132342e34392e302f32342d3234203d3e20323633313034.roa (hash: 8BO24ZXNAG9CfhwU6ckhsGa3X3uJqdCrxTlHNv9Btdo=) 3: 3137392e3132342e34382e302f32312d3332203d3e20323633313034.roa (hash: Wjmu25vr0ifd6CGgL9MD2W5X0vThiTL0u/QKe7sB/Ds=) 4: 323830343a313664633a3a2f33322d313238203d3e20323633313034.roa (hash: G5AAbv33pivu3vzNY7JPwifjM6uOhsc8wAeK1CMPE3k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.crl rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B1C7EAED276157BEE841B04303FA76647D005D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Jun 2025 10:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:cb:ab:31:55:b2:4f:f7:5b:b3:e5:81:8a:55:c6:52:a7:66:52:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87B1C7EAED276157BEE841B04303FA76647D005D Validity Not Before: Jun 11 08:22:39 2025 GMT Not After : Jun 12 10:31:39 2025 GMT Subject: CN=39C2166C343B5B7A90AEDBCCD4B36D7749A3EAA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0a:3f:ca:c9:a5:ec:44:e1:4f:4d:cb:0f:af: 41:62:60:2c:01:99:aa:39:61:21:b5:55:e6:bf:93: 4a:4e:19:fb:ce:87:dd:92:00:03:8a:c8:eb:69:5a: 69:f2:53:79:99:66:97:c4:84:b2:34:15:83:cd:f6: c8:d3:04:26:d2:b9:ef:4d:9d:11:65:d5:9c:c4:0f: aa:65:10:ad:c5:ee:da:27:67:cb:fd:67:a7:ad:72: dd:6d:a2:de:88:9b:77:75:e0:40:c9:bb:79:68:3b: 12:cd:b6:2b:92:67:2d:9d:72:a7:9a:f1:87:04:1e: 3a:7f:1b:52:37:3e:51:54:cb:c9:0e:d6:1a:6a:34: 5f:e3:1d:fb:65:09:28:aa:81:4e:df:61:3f:09:95: ba:f2:ac:28:74:de:a6:b6:4f:05:94:4a:57:8d:12: bd:37:38:a6:2a:6b:38:2b:f2:f2:4d:5d:1f:2b:c9: cb:f7:05:de:3a:63:90:22:90:85:53:27:9e:df:d9: da:84:97:eb:46:07:e3:b9:c1:91:11:8d:78:eb:40: 65:18:d6:1c:9c:70:42:72:f7:85:2f:5a:76:7a:b8: d4:75:b1:44:b4:0c:21:f9:62:9c:3f:b7:f5:fb:7b: a3:51:df:e6:1f:fd:5f:ba:ab:4a:d9:ca:1c:32:20: 99:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C2:16:6C:34:3B:5B:7A:90:AE:DB:CC:D4:B3:6D:77:49:A3:EA:A1 X509v3 Authority Key Identifier: keyid:87:B1:C7:EA:ED:27:61:57:BE:E8:41:B0:43:03:FA:76:64:7D:00:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B1C7EAED276157BEE841B04303FA76647D005D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:62:d2:32:73:13:3a:1b:fc:8f:e1:d6:52:51:cd:02:b1:ca: a2:84:90:86:16:1c:11:a9:3a:a2:c6:54:88:07:95:54:d2:82: 83:5a:b8:2c:32:24:12:2d:c7:9f:2d:ef:88:9a:9c:78:4e:c2: 21:75:06:5a:05:9d:34:44:d0:98:a1:c1:88:5e:1b:2a:66:16: 1b:41:b2:0c:8e:26:c1:a0:58:b6:36:57:79:34:8a:f1:b1:09: 91:c2:c6:9a:15:aa:c3:59:69:49:9b:f0:aa:6f:ac:7d:7c:5e: 82:9d:34:84:3d:1c:1d:43:9d:4c:36:7a:33:bd:0c:f0:0d:8e: a6:a8:15:ff:9e:a3:a9:2b:e8:28:98:57:c4:c4:3e:ab:1a:50: dc:46:2e:9d:94:ca:cf:60:6a:04:f3:3b:ff:be:5b:04:15:c4: 75:cc:28:38:ed:80:be:7d:1c:63:f5:28:d0:d0:f2:bf:b2:17: 44:2f:fd:b0:e6:36:36:a3:13:0c:08:f9:f1:f9:c5:ca:32:d1: a4:03:97:9c:a0:10:56:96:f5:36:d2:76:cd:b6:07:21:3a:34: 39:c1:33:94:74:f0:0c:67:74:c6:07:8d:d8:53:59:5c:df:aa: c0:d7:da:dc:c4:3d:a1:a6:39:42:b1:39:ee:9d:c1:a6:03:67: 31:16:c0:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNcurMVWyT/dbs+WBilXGUqdmUgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdCMUM3RUFFRDI3NjE1N0JFRTg0MUIwNDMwM0ZBNzY2 NDdEMDA1RDAeFw0yNTA2MTEwODIyMzlaFw0yNTA2MTIxMDMxMzlaMDMxMTAvBgNV BAMTKDM5QzIxNjZDMzQzQjVCN0E5MEFFREJDQ0Q0QjM2RDc3NDlBM0VBQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCj/KyaXsROFPTcsPr0FiYCwB mao5YSG1Vea/k0pOGfvOh92SAAOKyOtpWmnyU3mZZpfEhLI0FYPN9sjTBCbSue9N nRFl1ZzED6plEK3F7tonZ8v9Z6etct1tot6Im3d14EDJu3loOxLNtiuSZy2dcqea 8YcEHjp/G1I3PlFUy8kO1hpqNF/jHftlCSiqgU7fYT8JlbryrCh03qa2TwWUSleN Er03OKYqazgr8vJNXR8rycv3Bd46Y5AikIVTJ57f2dqEl+tGB+O5wZERjXjrQGUY 1hyccEJy94UvWnZ6uNR1sUS0DCH5Ypw/t/X7e6NR3+Yf/V+6q0rZyhwyIJmxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOcIWbDQ7W3qQrtvM1LNtd0mj6qEwHwYDVR0j BBgwFoAUh7HH6u0nYVe+6EGwQwP6dmR9AF0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHF3ZmpGdUJYNGtRNGdNVXpSeDFEOGZ2SzRLWUZmWFpvTkZaNkphNkFy R3IvMS84N0IxQzdFQUVEMjc2MTU3QkVFODQxQjA0MzAzRkE3NjY0N0QwMDVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QjFDN0VBRUQyNzYxNTdC RUU4NDFCMDQzMDNGQTc2NjQ3RDAwNUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHF3ZmpGdUJYNGtRNGdNVXpSeDFEOGZ2SzRLWUZmWFpvTkZaNkphNkFyR3IvMS84 N0IxQzdFQUVEMjc2MTU3QkVFODQxQjA0MzAzRkE3NjY0N0QwMDVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOGLSMnMTOhv8j+HWUlHNArHKooSQhhYcEak6osZUiAeVVNKCg1q4LDIkEi3H ny3viJqceE7CIXUGWgWdNETQmKHBiF4bKmYWG0GyDI4mwaBYtjZXeTSK8bEJkcLG mhWqw1lpSZvwqm+sfXxegp00hD0cHUOdTDZ6M70M8A2OpqgV/56jqSvoKJhXxMQ+ qxpQ3EYunZTKz2BqBPM7/75bBBXEdcwoOO2Avn0cY/Uo0NDyv7IXRC/9sOY2NqMT DAj58fnFyjLRpAOXnKAQVpb1NtJ2zbYHITo0OcEzlHTwDGd0xgeN2FNZXN+qwNfa 3MQ9oaY5QrE57p3BpgNnMRbAgg== -----END CERTIFICATE-----Generated at Thu Jun 12 03:56:42 2025 by rpki-client