$ rpki-client -vvf rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.mft File: A524FE3F2C38E55657BE6FF4933831B625A9332B.mft (raw, json) Hash identifier: zbYwYBtSp37m0IXZwYbyNL71cpOD59uLoTzFbIArzTc= Subject key identifier: 85:89:61:45:4B:FA:07:07:4B:A0:98:B1:7D:7E:45:0D:13:CE:7C:C2 Authority key identifier: A5:24:FE:3F:2C:38:E5:56:57:BE:6F:F4:93:38:31:B6:25:A9:33:2B Certificate issuer: /CN=A524FE3F2C38E55657BE6FF4933831B625A9332B Certificate serial: 1D2FEEC0B0F44B24D686FCDD9F0A03C4DD84A181 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.cer Subject info access: rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.mft Manifest number: 0238 Signing time: Tue 10 Jun 2025 16:34:17 +0000 Manifest this update: Tue 10 Jun 2025 16:29:17 +0000 Manifest next update: Wed 11 Jun 2025 19:22:17 +0000 Files and hashes: 1: 3137302e3234352e3131362e302f32322d3234203d3e20323634343239.roa (hash: mA+e9BCepKleZteT2rVyUGBhw78+faT2AP7dF7f/kuw=) 2: 323830343a316537303a3a2f33322d3334203d3e20323634343239.roa (hash: ODMy6+S4LJPQ+NMHFs89TQ2hu933OwMNp7GUaWR/S8I=) 3: A524FE3F2C38E55657BE6FF4933831B625A9332B.crl (hash: G3AX/9aurWNtMo+ZP8mGDMxsyqr6VhkF561Bg40sPew=) 4: 3133312e3232312e3133322e302f32322d3234203d3e20323634343239.roa (hash: a27Kyl8uwoD3BNv5lWKqfWcw5mbVizuhYvOIPwoPNw0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.crl rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 19:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2f:ee:c0:b0:f4:4b:24:d6:86:fc:dd:9f:0a:03:c4:dd:84:a1:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A524FE3F2C38E55657BE6FF4933831B625A9332B Validity Not Before: Jun 10 16:29:17 2025 GMT Not After : Jun 11 19:22:17 2025 GMT Subject: CN=858961454BFA07074BA098B17D7E450D13CE7CC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9c:a8:e7:27:f0:f7:ca:4f:08:db:00:90:e9: c1:5c:5b:2b:d7:a8:ec:43:45:fc:de:c3:e7:9e:7c: 31:c3:b8:20:f2:05:4e:48:f3:a2:af:99:ef:cd:d9: 7c:07:20:c8:c3:32:73:b8:b7:ae:46:df:75:8c:fa: af:67:64:16:22:74:9f:3d:7a:c6:c5:e0:80:67:b6: 90:ef:78:33:11:3f:d3:41:e7:f2:d5:39:13:aa:6b: a2:62:c2:24:c1:04:22:8c:ac:1e:8a:4c:ed:0f:a1: e3:f8:78:6f:c9:7b:e0:ea:a5:0a:77:bb:6c:bc:dd: 85:c9:15:b2:72:64:79:8a:e8:39:2e:57:f4:a7:0a: ef:0b:9d:19:98:77:71:8a:51:2f:9c:bd:e0:0d:c7: f2:cc:cf:99:1e:2a:20:11:5c:25:bd:c6:e4:7a:2c: 5d:51:04:c0:37:dc:14:38:de:ba:01:9e:66:5a:4b: 11:9a:1f:b6:6b:c1:83:5b:0a:f9:c4:d2:5e:ba:e7: 9b:82:2b:dc:bd:05:af:56:b6:23:5b:16:03:49:98: 7b:bc:70:4a:ed:c2:34:69:07:4a:a2:41:51:7e:a8: a6:8c:d6:83:7c:a4:22:b2:6b:10:03:a4:58:f4:22: 73:52:21:f2:ef:f7:c9:73:73:2b:5c:f0:2e:89:10: 77:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:89:61:45:4B:FA:07:07:4B:A0:98:B1:7D:7E:45:0D:13:CE:7C:C2 X509v3 Authority Key Identifier: keyid:A5:24:FE:3F:2C:38:E5:56:57:BE:6F:F4:93:38:31:B6:25:A9:33:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EsQE87pvLo2B2YGPSYHzVkh6AjKta7r5ffABNY5FjFNQ/1/A524FE3F2C38E55657BE6FF4933831B625A9332B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:da:02:91:20:59:80:0c:1d:3c:e7:b7:2a:cc:d0:38:36:72: f4:e2:9d:49:ea:54:b7:ab:dc:ee:72:c3:d4:16:6e:24:3a:06: 73:28:31:b5:e9:37:8f:1c:99:81:9b:ca:2e:21:13:d2:22:c7: 4a:8c:b2:1c:ad:a8:24:bc:c0:46:40:0a:bd:8f:4a:58:85:6b: 80:ef:e7:de:c4:fc:70:26:08:57:32:98:30:bb:6c:3e:b3:c2: 90:44:a1:fe:1d:20:88:69:63:d9:ca:a4:cb:08:d8:7d:bf:f4: 2d:2b:00:e3:f1:c6:49:3c:2a:7b:64:fc:3a:8c:02:2c:c0:cb: 41:08:a6:d4:9d:7a:86:3e:52:a8:02:0d:aa:58:5f:f0:a2:fd: ed:3d:fb:5b:22:38:56:df:b7:f7:ea:38:90:3b:77:5a:ad:84: bf:da:60:4b:7d:c2:91:77:a8:e1:c9:b5:33:9e:73:b2:43:a5: fd:1a:57:ad:be:86:bf:fe:65:57:06:62:ef:fa:52:89:82:17: 12:b7:2d:1f:cf:3b:98:0a:21:c5:66:27:5d:83:a6:35:5f:93: da:9e:d4:46:2c:7e:4c:9c:b2:35:21:10:98:6c:fb:40:d0:a9: 07:e8:e4:81:64:65:c9:af:6a:bb:62:da:5e:eb:bc:9c:a5:95: 29:8c:e9:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHS/uwLD0SyTWhvzdnwoDxN2EoYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUyNEZFM0YyQzM4RTU1NjU3QkU2RkY0OTMzODMxQjYy NUE5MzMyQjAeFw0yNTA2MTAxNjI5MTdaFw0yNTA2MTExOTIyMTdaMDMxMTAvBgNV BAMTKDg1ODk2MTQ1NEJGQTA3MDc0QkEwOThCMTdEN0U0NTBEMTNDRTdDQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClnKjnJ/D3yk8I2wCQ6cFcWyvX qOxDRfzew+eefDHDuCDyBU5I86Kvme/N2XwHIMjDMnO4t65G33WM+q9nZBYidJ89 esbF4IBntpDveDMRP9NB5/LVOROqa6JiwiTBBCKMrB6KTO0PoeP4eG/Je+DqpQp3 u2y83YXJFbJyZHmK6DkuV/SnCu8LnRmYd3GKUS+cveANx/LMz5keKiARXCW9xuR6 LF1RBMA33BQ43roBnmZaSxGaH7ZrwYNbCvnE0l6655uCK9y9Ba9WtiNbFgNJmHu8 cErtwjRpB0qiQVF+qKaM1oN8pCKyaxADpFj0InNSIfLv98lzcytc8C6JEHcTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhYlhRUv6BwdLoJixfX5FDRPOfMIwHwYDVR0j BBgwFoAUpST+Pyw45VZXvm/0kzgxtiWpMyswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXNRRTg3cHZMbzJCMllHUFNZSHpWa2g2QWpLdGE3cjVmZkFCTlk1RmpG TlEvMS9BNTI0RkUzRjJDMzhFNTU2NTdCRTZGRjQ5MzM4MzFCNjI1QTkzMzJCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1MjRGRTNGMkMzOEU1NTY1 N0JFNkZGNDkzMzgzMUI2MjVBOTMzMkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXNRRTg3cHZMbzJCMllHUFNZSHpWa2g2QWpLdGE3cjVmZkFCTlk1RmpGTlEvMS9B NTI0RkUzRjJDMzhFNTU2NTdCRTZGRjQ5MzM4MzFCNjI1QTkzMzJCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo9oCkSBZgAwdPOe3KszQODZy9OKdSepUt6vc7nLD1BZuJDoGcygxtek3jxyZ gZvKLiET0iLHSoyyHK2oJLzARkAKvY9KWIVrgO/n3sT8cCYIVzKYMLtsPrPCkESh /h0giGlj2cqkywjYfb/0LSsA4/HGSTwqe2T8OowCLMDLQQim1J16hj5SqAINqlhf 8KL97T37WyI4Vt+39+o4kDt3Wq2Ev9pgS33CkXeo4cm1M55zskOl/RpXrb6Gv/5l VwZi7/pSiYIXErctH887mAohxWYnXYOmNV+T2p7URix+TJyyNSEQmGz7QNCpB+jk gWRlya9qu2LaXuu8nKWVKYzpwg== -----END CERTIFICATE-----Generated at Wed Jun 11 00:46:31 2025 by rpki-client