$ rpki-client -vvf rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft File: 8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft (raw, json) Hash identifier: Qm0Olaqy8a7A7n9vChumrhOm7mX/bpkIjkG/KwkR5yU= Subject key identifier: 37:75:B1:A5:93:29:24:FC:21:5E:6F:E1:2E:1D:80:66:E5:F1:0B:21 Authority key identifier: 8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5 Certificate issuer: /CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5 Certificate serial: 353A94BC9C9E64C31D238E6A21AFBA77733026E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer Subject info access: rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft Manifest number: 023F Signing time: Sun 08 Jun 2025 08:34:39 +0000 Manifest this update: Sun 08 Jun 2025 08:29:39 +0000 Manifest next update: Mon 09 Jun 2025 11:36:39 +0000 Files and hashes: 1: 3137372e38362e33322e302f32322d3234203d3e20323632363231.roa (hash: xKLrG/AO8ce4eep3uuETd57cPc6b1MP2a+DWkx2KnwU=) 2: 323830343a3732303a3a2f33322d3438203d3e20323632363231.roa (hash: mltDu46I6weMY5jZx2cVC8KWeJwKWTe757nY2EBwNLU=) 3: 8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl (hash: ieNixHEMPeHBUw77T2e2KD03uD8vFun3/d9ya8u42kQ=) 4: 3133312e302e34342e302f32322d3234203d3e20323632363231.roa (hash: 0Ek7QSABbX1hxlww4eo8kRpq1DnlPtP++8bb1A/727Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Jun 2025 11:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:3a:94:bc:9c:9e:64:c3:1d:23:8e:6a:21:af:ba:77:73:30:26:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5 Validity Not Before: Jun 8 08:29:39 2025 GMT Not After : Jun 9 11:36:39 2025 GMT Subject: CN=3775B1A5932924FC215E6FE12E1D8066E5F10B21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:dc:b4:3c:7a:62:2e:45:85:4d:c0:3b:df:7f: da:a2:1a:60:fb:e4:16:5d:50:66:e3:7a:3c:92:4d: e1:ff:a1:7d:ee:21:3b:58:ba:ec:96:e5:e4:97:e6: e0:8a:b5:c9:70:55:a2:79:dd:0b:e9:fb:b9:7d:fd: 20:eb:20:f3:e4:d7:b7:9a:ed:b6:71:5f:ec:a0:5c: fc:b8:bd:87:15:c5:25:c1:16:09:ff:d9:c3:36:f3: 63:64:ed:e9:cc:17:2f:45:9c:d1:e3:72:81:9d:71: 5a:d0:ed:00:c1:d4:96:bf:71:8b:1c:72:fc:ae:36: 90:e3:7d:c2:bc:51:19:88:42:37:58:41:07:22:cc: cf:a2:32:4d:e9:62:41:fe:cd:d9:6b:19:2c:63:8b: 46:95:8c:c6:82:9f:88:c2:e1:ca:ee:2f:4f:22:f2: 4d:78:b3:8f:05:81:45:d5:7d:3d:59:97:82:a2:6b: 38:62:95:8f:2a:64:43:3c:94:69:ab:74:87:08:8d: d8:74:9e:81:d4:66:6b:1c:ab:2b:c6:0e:1f:d0:b6: 82:07:64:03:32:8c:f9:ef:bc:15:a5:ca:2a:e3:69: b7:4b:86:50:82:95:03:9c:a2:59:7f:e3:e8:3f:fe: bf:59:e4:c1:86:ec:72:fc:d7:ba:b1:d9:2e:ac:53: 10:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:75:B1:A5:93:29:24:FC:21:5E:6F:E1:2E:1D:80:66:E5:F1:0B:21 X509v3 Authority Key Identifier: keyid:8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9e:fe:65:55:2f:6a:21:a0:96:53:8e:b7:5a:77:9b:42:65: 89:88:11:d7:40:29:53:01:6e:24:34:5d:9a:73:f1:e9:44:95: 26:d7:42:b4:ad:b5:3f:53:0d:43:ad:9c:c3:9e:19:58:7d:b1: 06:cf:b4:a8:46:36:73:19:55:97:84:73:60:2d:b6:80:0a:c6: 0c:fb:65:80:9d:be:b7:71:e0:f5:4d:41:44:87:3d:6b:6f:e4: 14:f4:5b:d4:60:52:35:55:7c:b5:39:6e:65:19:19:cc:d7:c0: ea:78:67:90:51:60:1d:43:80:07:c9:0d:4b:24:76:59:e9:65: 42:f3:02:6b:e3:93:0a:e6:dc:99:92:14:78:ea:76:e7:f6:a0: 0b:3e:3f:8d:dc:db:b7:c8:ad:c6:25:e8:17:f2:63:41:c6:80: 87:e3:e1:cc:94:20:e8:63:d1:0f:ec:95:79:19:79:f9:c2:af: cb:a0:19:9f:75:59:29:19:6c:1d:e0:de:90:2e:dd:28:09:ac: 92:74:18:9f:0c:10:00:8c:70:f2:8b:b2:42:f8:a1:3e:70:e6: f3:3b:3a:ee:53:ce:f6:a2:e5:c7:17:af:66:d3:b3:4a:f9:87: df:59:e3:d4:e0:78:d9:40:39:84:2a:14:07:4f:fb:42:29:53: 59:2c:16:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNTqUvJyeZMMdI45qIa+6d3MwJuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2RkQ3M0I3RTI0RTcwNzcxMkVDMDA2MDQ3MUQ0NkVE REMxRDBBNTAeFw0yNTA2MDgwODI5MzlaFw0yNTA2MDkxMTM2MzlaMDMxMTAvBgNV BAMTKDM3NzVCMUE1OTMyOTI0RkMyMTVFNkZFMTJFMUQ4MDY2RTVGMTBCMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw3LQ8emIuRYVNwDvff9qiGmD7 5BZdUGbjejySTeH/oX3uITtYuuyW5eSX5uCKtclwVaJ53Qvp+7l9/SDrIPPk17ea 7bZxX+ygXPy4vYcVxSXBFgn/2cM282Nk7enMFy9FnNHjcoGdcVrQ7QDB1Ja/cYsc cvyuNpDjfcK8URmIQjdYQQcizM+iMk3pYkH+zdlrGSxji0aVjMaCn4jC4cruL08i 8k14s48FgUXVfT1Zl4KiazhilY8qZEM8lGmrdIcIjdh0noHUZmscqyvGDh/QtoIH ZAMyjPnvvBWlyirjabdLhlCClQOcoll/4+g//r9Z5MGG7HL817qx2S6sUxDjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUN3WxpZMpJPwhXm/hLh2AZuXxCyEwHwYDVR0j BBgwFoAUjG/XO34k5wdxLsAGBHHUbt3B0KUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR1hoaWtpclJFS0xtZlNqamRFZnJ5U2RVb2JoVTJYVHV2c1hqUHI3dmlN OGUvMS84QzZGRDczQjdFMjRFNzA3NzEyRUMwMDYwNDcxRDQ2RUREQzFEMEE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDNkZENzNCN0UyNEU3MDc3 MTJFQzAwNjA0NzFENDZFRERDMUQwQTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R1hoaWtpclJFS0xtZlNqamRFZnJ5U2RVb2JoVTJYVHV2c1hqUHI3dmlNOGUvMS84 QzZGRDczQjdFMjRFNzA3NzEyRUMwMDYwNDcxRDQ2RUREQzFEMEE1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS57+ZVUvaiGgllOOt1p3m0JliYgR10ApUwFuJDRdmnPx6USVJtdCtK21P1MN Q62cw54ZWH2xBs+0qEY2cxlVl4RzYC22gArGDPtlgJ2+t3Hg9U1BRIc9a2/kFPRb 1GBSNVV8tTluZRkZzNfA6nhnkFFgHUOAB8kNSyR2WellQvMCa+OTCubcmZIUeOp2 5/agCz4/jdzbt8itxiXoF/JjQcaAh+PhzJQg6GPRD+yVeRl5+cKvy6AZn3VZKRls HeDekC7dKAmsknQYnwwQAIxw8ouyQvihPnDm8zs67lPO9qLlxxevZtOzSvmH31nj 1OB42UA5hCoUB0/7QilTWSwW8g== -----END CERTIFICATE-----Generated at Sun Jun 8 20:12:39 2025 by rpki-client