$ rpki-client -vvf rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft File: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft (raw, json) Hash identifier: AnJXdIYcubmH4JUmEOUFu68uXQrr6NkSCqmNcC4cfXE= Subject key identifier: 53:9A:88:19:55:05:09:2C:76:6B:EF:EE:0B:D7:F6:62:1A:04:10:21 Authority key identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 Certificate issuer: /CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1 Certificate serial: 428701BA0A9D30EA3387B1BB5B5B02E260C11FD1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer Subject info access: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft Manifest number: 023E Signing time: Sat 07 Jun 2025 12:54:44 +0000 Manifest this update: Sat 07 Jun 2025 12:49:44 +0000 Manifest next update: Sun 08 Jun 2025 15:37:44 +0000 Files and hashes: 1: 3133382e39372e3130342e302f32322d3232203d3e203533313037.roa (hash: YxmutoTj6CF7MhqKkZWdp2PcBcnZPzoU+yCAdwcvIH8=) 2: 7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl (hash: 8OHuQAvsfODhTUZb3KtOFK8p9y2ICfQzkZjGMDET+GA=) 3: 3133382e39372e3130372e302f32342d3234203d3e203533313037.roa (hash: d37RWCzmBlHMXyTEoKWy+EnzDGvUsG4ci+hJH2k1A/Q=) 4: 323830343a323363383a3a2f33322d3332203d3e20323634313832.roa (hash: 3F2e2/DDYn3RX1xMVmaKyyDfXDqpy3jTInAQP0qhGc4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 15:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:87:01:ba:0a:9d:30:ea:33:87:b1:bb:5b:5b:02:e2:60:c1:1f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1 Validity Not Before: Jun 7 12:49:44 2025 GMT Not After : Jun 8 15:37:44 2025 GMT Subject: CN=539A88195505092C766BEFEE0BD7F6621A041021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a6:50:b9:c9:be:cd:02:df:ff:0d:ab:b9:28: 2e:66:65:ce:1e:c5:cb:e3:c8:46:0e:25:1c:79:fb: 98:44:44:16:2d:7b:f4:43:f0:de:5d:94:fa:6f:7f: da:e9:f7:90:7e:2b:cf:e6:88:ed:5f:f0:97:d3:8a: 4a:f4:99:fc:33:bd:df:f0:56:64:9f:45:92:10:39: df:8c:6a:9a:b9:81:e4:ed:62:a2:1f:64:9b:6b:a5: 80:5f:0e:93:e5:ef:03:0e:5c:4b:28:51:6a:4f:14: e9:26:6c:7c:64:c8:18:7e:4b:87:a0:a5:70:52:91: 4f:41:6f:88:a6:b5:dd:71:bd:dd:e4:f1:ec:65:77: 8f:8c:61:fb:37:14:f4:1e:7c:fc:34:d8:d7:39:0e: 5c:70:1b:01:bc:3a:ef:a5:88:fe:60:d7:b3:ee:5c: 05:2d:4a:1c:20:d5:b4:f2:e0:53:2e:9d:3c:d5:a8: d8:b3:df:4c:d9:17:b1:79:7a:d0:d6:23:6e:cf:15: 23:df:54:5f:4f:b7:3e:f1:d2:2b:ef:e2:7e:47:a2: bc:41:0e:ad:f7:ab:34:32:27:46:d1:a0:92:13:0c: 99:31:32:01:ab:d8:a7:91:4f:20:cc:5c:0b:fe:0a: 1a:7c:5c:7d:de:69:ec:b6:86:2f:0e:74:1a:95:1d: fe:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9A:88:19:55:05:09:2C:76:6B:EF:EE:0B:D7:F6:62:1A:04:10:21 X509v3 Authority Key Identifier: keyid:71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:4a:4f:84:9c:21:54:c1:90:dc:05:68:b6:c4:bf:0f:9d:23: f5:8f:8b:17:bf:9a:94:ea:34:f8:17:4a:ff:05:6f:27:47:6b: e2:cd:b9:e0:7c:de:cc:59:dc:4f:49:12:6d:d4:56:00:68:15: ab:d7:b7:ff:58:3b:a4:9b:7f:9e:d8:9c:6f:fc:87:c3:19:ab: ef:3e:7f:ec:3f:31:97:35:18:fe:c9:ff:ed:d2:15:82:38:18: f6:8c:32:1f:d6:e7:91:d7:83:05:f2:5a:5c:3c:da:e7:bf:14: f7:41:f4:95:da:5a:d8:ad:c2:4e:fd:8b:f3:5f:3f:a6:27:72: f7:5b:a6:fc:91:1e:24:2e:6b:7d:16:ed:f3:df:6b:85:e9:2c: bc:a2:ad:8a:4f:b0:89:35:b5:c6:30:5f:52:cc:dd:92:4e:72: 3c:8b:6a:18:7f:69:69:ba:d3:f3:8d:93:7c:29:4a:a3:78:34: 56:da:18:d1:01:33:69:39:dc:16:56:ac:10:0a:b1:3a:03:22: 0e:30:94:4f:72:82:ad:67:51:8e:c8:d7:ed:3f:32:16:9f:99: 42:70:21:68:11:1a:cf:74:21:3f:c1:8d:95:d7:b9:9d:b4:78: d4:ae:7f:d5:36:d4:b2:6f:c9:b3:2b:b0:ed:bf:01:ad:5a:f6: 2f:1a:9e:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQocBugqdMOozh7G7W1sC4mDBH9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEyNUJFRERGRUMyOUMwQTRDRjU5MUU1RUI0MDgzOEJG RTNDN0FDMTAeFw0yNTA2MDcxMjQ5NDRaFw0yNTA2MDgxNTM3NDRaMDMxMTAvBgNV BAMTKDUzOUE4ODE5NTUwNTA5MkM3NjZCRUZFRTBCRDdGNjYyMUEwNDEwMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJplC5yb7NAt//Dau5KC5mZc4e xcvjyEYOJRx5+5hERBYte/RD8N5dlPpvf9rp95B+K8/miO1f8JfTikr0mfwzvd/w VmSfRZIQOd+Mapq5geTtYqIfZJtrpYBfDpPl7wMOXEsoUWpPFOkmbHxkyBh+S4eg pXBSkU9Bb4imtd1xvd3k8exld4+MYfs3FPQefPw02Nc5DlxwGwG8Ou+liP5g17Pu XAUtShwg1bTy4FMunTzVqNiz30zZF7F5etDWI27PFSPfVF9Ptz7x0ivv4n5HorxB Dq33qzQyJ0bRoJITDJkxMgGr2KeRTyDMXAv+Chp8XH3eaey2hi8OdBqVHf5TAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUU5qIGVUFCSx2a+/uC9f2YhoEECEwHwYDVR0j BBgwFoAUcSW+3f7CnApM9ZHl60CDi/48esEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEhnSnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRi eksvMS83MTI1QkVEREZFQzI5QzBBNENGNTkxRTVFQjQwODM4QkZFM0M3QUMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxMjVCRURERkVDMjlDMEE0 Q0Y1OTFFNUVCNDA4MzhCRkUzQzdBQzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEhnSnF4b2RadG51MktpclRoUjhzcDdLUXZEQ3JpWFFKRWZQZkZDNVRieksvMS83 MTI1QkVEREZFQzI5QzBBNENGNTkxRTVFQjQwODM4QkZFM0M3QUMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASUpPhJwhVMGQ3AVotsS/D50j9Y+LF7+alOo0+BdK/wVvJ0dr4s254HzezFnc T0kSbdRWAGgVq9e3/1g7pJt/nticb/yHwxmr7z5/7D8xlzUY/sn/7dIVgjgY9owy H9bnkdeDBfJaXDza578U90H0ldpa2K3CTv2L818/pidy91um/JEeJC5rfRbt899r heksvKKtik+wiTW1xjBfUszdkk5yPItqGH9pabrT842TfClKo3g0VtoY0QEzaTnc FlasEAqxOgMiDjCUT3KCrWdRjsjX7T8yFp+ZQnAhaBEaz3QhP8GNlde5nbR41K5/ 1TbUsm/Jsyuw7b8BrVr2Lxqe/A== -----END CERTIFICATE-----Generated at Sun Jun 8 05:01:30 2025 by rpki-client