$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft File: 89F33609E2B118C8ED9A105548D2D01FD6E38729.mft (raw, json) Hash identifier: sar1iEsVI08T3mNR75eMaSgqLzxyFTyWgcM9OUzWqHk= Subject key identifier: C6:DE:66:CB:73:3B:3F:22:DF:23:6D:29:98:04:C5:93:09:DE:2C:1C Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 Certificate issuer: /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Certificate serial: 64BF0952B5F9AD6967DFA84EB1AF1A21F5095984 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft Manifest number: 023A Signing time: Fri 06 Jun 2025 02:23:07 +0000 Manifest this update: Fri 06 Jun 2025 02:18:07 +0000 Manifest next update: Sat 07 Jun 2025 04:12:07 +0000 Files and hashes: 1: 89F33609E2B118C8ED9A105548D2D01FD6E38729.crl (hash: fSZEIUnn8c5SkSuGTyUEtj88xXxf8diVWV/GqHa/Mto=) 2: 323830343a313263303a3a2f33322d3438203d3e20323633343936.roa (hash: yCRnKe7Cfo4f5weE5YMpi/ZO3/1Psrg+aJlLbswl12Y=) 3: 3139312e3234332e35362e302f32312d3234203d3e20323633343936.roa (hash: bMO8E7JDP414YIw6qvyG05VpeLGja7y87JGV9snRtok=) 4: 3137302e3234342e3231362e302f32322d3234203d3e20323633343936.roa (hash: 91gQ1OFtC7i3YwbFOdgAOt94iN2xUARUXKGh62+Ssos=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 04:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:bf:09:52:b5:f9:ad:69:67:df:a8:4e:b1:af:1a:21:f5:09:59:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729 Validity Not Before: Jun 6 02:18:07 2025 GMT Not After : Jun 7 04:12:07 2025 GMT Subject: CN=C6DE66CB733B3F22DF236D299804C59309DE2C1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:24:96:25:7c:19:bc:c8:9e:b0:49:b1:74:56: 2e:b1:91:90:f7:bb:63:73:b8:d2:1f:c6:c8:25:54: ce:80:6b:cc:1f:30:36:0c:0e:42:70:55:a7:5a:4c: fe:66:9a:a9:89:c8:6c:da:f8:4f:6b:10:c6:a9:e1: a0:17:09:b1:90:34:d3:eb:d7:8d:4e:d8:80:68:c4: da:81:ff:10:46:ea:9c:ac:7f:d2:69:84:9e:73:92: 34:b0:1e:db:bc:30:42:3d:5c:06:a4:99:0c:b2:0a: 29:2e:a9:72:e6:81:41:39:c4:d3:3c:0f:21:43:91: ca:d7:ee:42:63:37:b5:ec:a6:92:a2:e2:6d:6c:46: 29:02:af:d2:4e:28:e2:f6:b6:19:39:ec:9f:c5:39: 09:67:39:00:95:0a:e4:9d:d1:d5:c4:86:4e:9b:4f: c1:03:03:23:85:24:d7:80:27:46:5d:35:68:8a:eb: 0e:af:dd:8d:e4:1f:9d:86:9d:99:9f:72:a2:9a:79: d8:fb:5b:8c:51:fc:64:f6:26:7a:07:90:cd:80:00: 3d:f1:f7:19:b6:14:61:4d:27:20:c3:01:73:81:36: 32:52:e4:b5:71:9f:2c:52:4c:67:f4:fa:22:e4:7b: 16:5b:93:69:20:88:fa:52:a0:12:5c:c8:09:24:f2: 57:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DE:66:CB:73:3B:3F:22:DF:23:6D:29:98:04:C5:93:09:DE:2C:1C X509v3 Authority Key Identifier: keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a3:ee:72:3a:af:2c:35:6a:a7:3a:66:47:c8:cf:45:3f:5a: c6:e7:4d:04:a5:48:83:8a:ed:8d:5c:01:61:70:1f:81:bb:9b: 81:e0:16:b8:09:9c:9c:03:d7:5e:60:d2:54:98:a2:23:10:9c: ff:7d:10:5f:67:0a:e9:f9:96:ea:37:fc:4c:f8:f1:a1:4f:90: ab:5a:da:eb:7a:d0:4b:70:bf:a9:bb:34:93:65:7a:60:2a:03: 8e:0e:4c:ab:6b:f6:09:62:55:96:d3:3e:01:ee:47:08:68:19: 87:67:c2:7f:4e:03:8d:6d:31:ea:2a:6b:19:b0:eb:98:be:9f: b6:85:fb:16:71:cf:9a:08:fa:83:71:66:13:d9:b6:f4:29:3d: 1b:8f:8f:8f:4f:36:a0:07:ce:63:e3:12:be:83:cd:6d:d7:c4: a0:d2:65:0b:97:1d:a2:c7:71:2d:7f:6a:5b:15:f3:7e:55:a0: bb:1b:7b:f0:f2:9e:56:56:27:e7:22:ce:cc:73:76:3b:f6:9b: b9:5b:fd:31:3d:0a:b7:1b:02:3d:c2:46:6a:7a:5d:fe:32:72: 27:52:2f:fa:79:6d:f3:f6:03:fb:18:12:57:48:95:28:98:81: 03:c6:39:90:2d:d7:99:ab:04:e9:5d:8c:a2:cb:d9:ca:d2:22: ca:10:fa:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZL8JUrX5rWln36hOsa8aIfUJWYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlGMzM2MDlFMkIxMThDOEVEOUExMDU1NDhEMkQwMUZE NkUzODcyOTAeFw0yNTA2MDYwMjE4MDdaFw0yNTA2MDcwNDEyMDdaMDMxMTAvBgNV BAMTKEM2REU2NkNCNzMzQjNGMjJERjIzNkQyOTk4MDRDNTkzMDlERTJDMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJJYlfBm8yJ6wSbF0Vi6xkZD3 u2NzuNIfxsglVM6Aa8wfMDYMDkJwVadaTP5mmqmJyGza+E9rEMap4aAXCbGQNNPr 141O2IBoxNqB/xBG6pysf9JphJ5zkjSwHtu8MEI9XAakmQyyCikuqXLmgUE5xNM8 DyFDkcrX7kJjN7XsppKi4m1sRikCr9JOKOL2thk57J/FOQlnOQCVCuSd0dXEhk6b T8EDAyOFJNeAJ0ZdNWiK6w6v3Y3kH52GnZmfcqKaedj7W4xR/GT2JnoHkM2AAD3x 9xm2FGFNJyDDAXOBNjJS5LVxnyxSTGf0+iLkexZbk2kgiPpSoBJcyAkk8ldLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxt5my3M7PyLfI20pmATFkwneLBwwHwYDVR0j BBgwFoAUifM2CeKxGMjtmhBVSNLQH9bjhykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4 ekUvMS84OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RjMzNjA5RTJCMTE4QzhF RDlBMTA1NTQ4RDJEMDFGRDZFMzg3MjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXBlY2JlcUNKUDVSUWFoaFprejZNWUZoazVRQkNIQUxXSkNLTEw5N1Y4ekUvMS84 OUYzMzYwOUUyQjExOEM4RUQ5QTEwNTU0OEQyRDAxRkQ2RTM4NzI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPaPucjqvLDVqpzpmR8jPRT9axudNBKVIg4rtjVwBYXAfgbubgeAWuAmcnAPX XmDSVJiiIxCc/30QX2cK6fmW6jf8TPjxoU+Qq1ra63rQS3C/qbs0k2V6YCoDjg5M q2v2CWJVltM+Ae5HCGgZh2fCf04DjW0x6iprGbDrmL6ftoX7FnHPmgj6g3FmE9m2 9Ck9G4+Pj082oAfOY+MSvoPNbdfEoNJlC5cdosdxLX9qWxXzflWguxt78PKeVlYn 5yLOzHN2O/abuVv9MT0KtxsCPcJGanpd/jJyJ1Iv+nlt8/YD+xgSV0iVKJiBA8Y5 kC3XmasE6V2MosvZytIiyhD6Vw== -----END CERTIFICATE-----Generated at Fri Jun 6 19:38:41 2025 by rpki-client