$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft File: A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft (raw, json) Hash identifier: PXI1kwsZMbTE2i3de8FMPCbXPHoNM5C/7g9sk+NWeW0= Subject key identifier: AE:61:84:76:F8:7A:42:6A:E7:33:71:68:03:CD:ED:59:BC:12:0C:36 Authority key identifier: A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8 Certificate issuer: /CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8 Certificate serial: 7B8B2F44B7AF2E814E779BE877EBFA5880F2B061 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft Manifest number: 021A Signing time: Wed 11 Jun 2025 10:38:45 +0000 Manifest this update: Wed 11 Jun 2025 10:33:45 +0000 Manifest next update: Thu 12 Jun 2025 14:37:45 +0000 Files and hashes: 1: 3137392e35312e3137322e302f32322d3234203d3e203238323737.roa (hash: yI1dK9ENc+AfYHAbDnixcQKXD5zluVjisHo5V8kfMxg=) 2: 323830343a3264633a3a2f33322d3431203d3e203238323737.roa (hash: Ol+1Kw+Ben9pcieWrCajh7sb58yandi25g3jjxFoMQI=) 3: 3137372e3133362e38382e302f32312d3234203d3e203238323737.roa (hash: SODCeqMppG+109Vh2sZlp+D9Z3QOeLYSsI9zH1eRlCA=) 4: A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl (hash: xao/md82SaeKGUCrO65o+5pR6bZIAOqb13u/55D1XQc=) 5: 3138392e31342e38302e302f32302d3234203d3e203238323737.roa (hash: n7VK4GQZTYnWloqSAMHn76YqbnY1u2pgivENu6CiCes=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Jun 2025 14:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:8b:2f:44:b7:af:2e:81:4e:77:9b:e8:77:eb:fa:58:80:f2:b0:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8 Validity Not Before: Jun 11 10:33:45 2025 GMT Not After : Jun 12 14:37:45 2025 GMT Subject: CN=AE618476F87A426AE733716803CDED59BC120C36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:63:77:a9:82:3a:9f:18:4c:23:e0:39:54:17: f5:e7:e0:39:70:51:f8:c3:7c:99:db:79:5e:d4:fc: c2:19:60:fe:a2:2a:62:44:40:42:c9:9e:be:0a:78: 52:dd:6e:b0:64:36:27:fc:3d:28:c1:a9:69:57:f1: 39:9e:3d:df:cd:dd:de:2f:0b:f8:03:3a:4e:d7:6f: a7:16:bf:44:96:d9:0d:4c:96:d3:80:f7:3e:d1:ca: d6:5e:91:81:39:82:fa:c7:88:db:98:61:60:07:57: d4:e9:47:3d:9b:57:fe:1e:3f:4e:61:2c:2d:1c:75: fa:2c:cf:3a:7b:cb:e8:80:a4:7b:60:67:e5:78:7c: 70:7c:4f:ef:60:96:13:ca:7f:c3:1c:98:97:0c:95: 39:a8:66:c3:b9:49:9c:d5:b5:f8:c9:b2:33:15:89: fc:3f:a4:55:e6:9b:51:b2:d4:8d:b3:83:18:7e:0c: df:42:e5:ca:d7:86:39:96:78:7f:35:83:d6:42:28: f2:1d:1c:28:ab:ad:28:43:94:71:12:ce:1c:6f:52: 10:e4:07:e3:12:f5:70:23:3c:7a:5b:20:58:d7:f1: 92:1b:66:f3:02:3d:fd:5a:81:00:24:a8:7d:08:62: 6c:52:c9:b5:a6:dd:0b:32:e1:ee:e8:44:74:41:a7: b1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:61:84:76:F8:7A:42:6A:E7:33:71:68:03:CD:ED:59:BC:12:0C:36 X509v3 Authority Key Identifier: keyid:A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:16:8d:1b:85:6f:d0:c2:16:a2:ee:50:56:23:e3:da:8f:64: 91:27:1a:3b:89:ee:d2:9d:45:c9:1b:7d:bb:74:18:f4:59:9c: 17:5a:b3:64:9c:47:62:44:59:8e:52:45:dc:ef:c1:e7:10:73: 96:c3:d9:df:90:f8:26:fd:1a:ab:8b:f1:7e:24:fb:52:c7:e6: e2:1a:ba:18:47:45:c2:61:05:b2:00:5c:35:04:96:48:ab:14: 22:90:25:75:3d:e6:82:37:f2:c1:47:71:33:dd:d8:b9:aa:b8: 6c:a5:b4:a8:10:60:a4:7c:b1:94:37:23:bf:4c:ae:72:7e:97: d5:0a:f4:5f:48:cd:97:d2:9a:a8:84:76:0d:56:aa:93:22:16: 2a:f5:99:8a:87:5c:c3:f1:f3:9d:c1:d0:9e:a1:be:81:90:97: 3b:b9:17:f6:9c:a2:9c:5c:fc:16:ac:a9:06:44:5a:92:7f:17: 95:ec:02:73:27:50:6b:29:ec:19:2d:e1:e5:ef:db:45:21:7d: 99:d8:8b:fe:ce:bd:80:fb:63:88:21:44:37:f3:0a:06:09:1d: ad:71:20:99:f9:e1:08:73:dd:fd:ab:5e:9a:70:1e:9e:00:f9: 7e:4c:2c:ff:03:dc:e4:55:2f:e5:c2:d9:aa:9a:3f:3b:8b:e8: 2d:d1:c6:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUe4svRLevLoFOd5vod+v6WIDysGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg2RjI5MDlBOENGOEE4MEMyMjM5RTVGOTUzRkYxQjRB QjlENzNDODAeFw0yNTA2MTExMDMzNDVaFw0yNTA2MTIxNDM3NDVaMDMxMTAvBgNV BAMTKEFFNjE4NDc2Rjg3QTQyNkFFNzMzNzE2ODAzQ0RFRDU5QkMxMjBDMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFY3epgjqfGEwj4DlUF/Xn4Dlw UfjDfJnbeV7U/MIZYP6iKmJEQELJnr4KeFLdbrBkNif8PSjBqWlX8TmePd/N3d4v C/gDOk7Xb6cWv0SW2Q1MltOA9z7RytZekYE5gvrHiNuYYWAHV9TpRz2bV/4eP05h LC0cdfoszzp7y+iApHtgZ+V4fHB8T+9glhPKf8McmJcMlTmoZsO5SZzVtfjJsjMV ifw/pFXmm1Gy1I2zgxh+DN9C5crXhjmWeH81g9ZCKPIdHCirrShDlHESzhxvUhDk B+MS9XAjPHpbIFjX8ZIbZvMCPf1agQAkqH0IYmxSybWm3Qsy4e7oRHRBp7GVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrmGEdvh6QmrnM3FoA83tWbwSDDYwHwYDVR0j BBgwFoAUqG8pCajPioDCI55flT/xtKudc8gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDd0dnBGSEYzQmtaUGM1SlpTaVVMS3RqR212UGU0ZkFqeGlVMkRKWnFQ RzEvMC9BODZGMjkwOUE4Q0Y4QTgwQzIyMzlFNUY5NTNGRjFCNEFCOUQ3M0M4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4NkYyOTA5QThDRjhBODBD MjIzOUU1Rjk1M0ZGMUI0QUI5RDczQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDd0dnBGSEYzQmtaUGM1SlpTaVVMS3RqR212UGU0ZkFqeGlVMkRKWnFQRzEvMC9B ODZGMjkwOUE4Q0Y4QTgwQzIyMzlFNUY5NTNGRjFCNEFCOUQ3M0M4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQhaNG4Vv0MIWou5QViPj2o9kkScaO4nu0p1FyRt9u3QY9FmcF1qzZJxHYkRZ jlJF3O/B5xBzlsPZ35D4Jv0aq4vxfiT7Usfm4hq6GEdFwmEFsgBcNQSWSKsUIpAl dT3mgjfywUdxM93Yuaq4bKW0qBBgpHyxlDcjv0yucn6X1Qr0X0jNl9KaqIR2DVaq kyIWKvWZiodcw/HzncHQnqG+gZCXO7kX9pyinFz8FqypBkRakn8XlewCcydQayns GS3h5e/bRSF9mdiL/s69gPtjiCFEN/MKBgkdrXEgmfnhCHPd/atemnAengD5fkws /wPc5FUv5cLZqpo/O4voLdHGkQ== -----END CERTIFICATE-----Generated at Thu Jun 12 04:15:50 2025 by rpki-client