$ rpki-client -vvf rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.mft File: A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.mft (raw, json) Hash identifier: fnoi3SZesOFrZj7+l3hgRpTt4tR/kWdGpwGNYc/etuY= Subject key identifier: A0:EF:C6:25:54:C5:4B:82:D7:69:9B:6E:B5:C0:26:23:8A:24:6A:4A Authority key identifier: A0:18:B2:CA:A6:D0:D5:0A:96:B8:55:60:1A:C3:B9:9D:5B:B9:CF:FA Certificate issuer: /CN=A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA Certificate serial: 5275C35A802DCE1C713201E19E59DAC9A842B35D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.cer Subject info access: rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.mft Manifest number: E9 Signing time: Sun 08 Jun 2025 12:08:15 +0000 Manifest this update: Sun 08 Jun 2025 12:03:15 +0000 Manifest next update: Mon 09 Jun 2025 13:14:15 +0000 Files and hashes: 1: 3134332e3230382e3234302e302f32322d3234203d3e203631373530.roa (hash: WcKC1sN5ziX22RXbUzReSfmeECyh9hVWahDEtFhDIzk=) 2: A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.crl (hash: MnU2cTpKdxZ8Q8sHM0XLCfBpUHuiJ7cDsT0aYsPiT3M=) 3: 323830343a316263383a3a2f33322d3438203d3e203631373530.roa (hash: qlNFc2tBNukX+9u/fPnfKRlTc2Ao4DGPeLy1N2cKjhU=) 4: 3133312e37322e3138342e302f32322d3234203d3e203631373530.roa (hash: WOc804GL5O6rAbuK0PXLnvcquBktlYjxpDw/C49pPTk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.crl rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Jun 2025 13:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:75:c3:5a:80:2d:ce:1c:71:32:01:e1:9e:59:da:c9:a8:42:b3:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA Validity Not Before: Jun 8 12:03:15 2025 GMT Not After : Jun 9 13:14:15 2025 GMT Subject: CN=A0EFC62554C54B82D7699B6EB5C026238A246A4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ed:ea:d6:3e:f7:87:35:27:5a:9b:76:e1:0a: 57:b3:4d:b8:49:37:2b:1f:84:ac:0a:6f:2d:af:ed: a8:e2:cc:d3:3a:21:2b:73:59:58:78:ea:de:5d:8f: b1:e7:fc:5d:35:66:29:74:89:28:95:bf:af:36:bf: 38:38:6e:27:5a:3e:05:47:7a:a7:25:3d:35:e9:e9: 7f:0c:ff:3f:33:c1:c3:d7:7a:32:61:50:ab:25:74: f7:b9:c0:08:3b:bc:bb:13:ab:7e:3f:de:fb:17:82: e7:bc:d4:bb:7e:31:4e:2f:de:10:bf:30:0e:43:5d: a9:88:de:7d:c4:9a:38:af:27:f7:a4:ee:b0:af:52: 72:d9:4c:c5:a6:90:fa:1a:a3:e2:b4:4e:5f:66:18: 00:a8:6e:fc:26:97:6d:76:23:ba:7b:62:7c:c1:74: 50:49:de:b9:e5:b7:47:c9:33:96:bf:6f:0a:23:25: 3a:26:35:96:87:e9:57:33:f1:5e:76:ab:23:af:09: 07:31:f6:de:bd:a3:ca:61:fe:1d:60:9b:5f:6d:af: 41:88:2f:74:db:9d:dc:ca:f4:41:6c:55:e6:e0:f9: 2e:2f:90:90:20:1a:bf:0f:c0:d0:53:5d:e8:a8:0f: d3:7a:dc:22:42:d0:0e:ce:d7:c3:05:4f:d0:f9:ad: 32:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EF:C6:25:54:C5:4B:82:D7:69:9B:6E:B5:C0:26:23:8A:24:6A:4A X509v3 Authority Key Identifier: keyid:A0:18:B2:CA:A6:D0:D5:0A:96:B8:55:60:1A:C3:B9:9D:5B:B9:CF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:44:f7:79:b6:db:aa:67:8e:66:37:b5:90:d0:80:c0:65:99: 86:7a:34:77:e1:26:02:36:2c:68:0e:26:99:cd:0c:a7:fc:25: 33:da:3c:b0:e9:c4:6d:c6:81:3b:5c:ed:a2:54:ba:d3:0d:a0: bc:56:3d:cb:8f:05:a8:f0:1c:c2:8a:68:4b:6f:c9:af:47:af: 44:f9:98:ea:1b:06:60:5e:6f:e8:53:64:0b:44:fb:a5:eb:d9: 0f:db:9a:a2:6e:f9:aa:84:d7:10:cc:cf:a2:fe:b0:bc:b6:3a: 72:d6:08:0b:d3:74:15:79:66:29:32:7f:a1:2a:66:75:23:72: 4d:6c:a1:bd:ed:da:3f:31:14:1a:a3:e4:78:99:aa:06:fe:99: 3d:11:bb:f7:63:40:af:5c:03:d5:72:c5:12:3d:1d:0d:fa:56: 28:d8:b1:04:9b:80:04:e5:0a:c6:3e:05:89:f2:17:a0:85:fc: cb:df:20:f3:9b:70:a3:3f:a9:ed:cd:26:e5:77:7c:e5:26:42: 28:3d:9d:2e:a5:4c:1b:ca:aa:0f:51:ef:63:25:a4:48:b9:30: 18:0e:56:63:8e:be:7d:b8:a4:f9:33:ae:e8:0e:c4:b2:00:26: 51:da:b4:74:82:f1:dd:93:2d:53:0d:78:c1:35:0f:28:ef:c1: 9c:b0:e8:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUnXDWoAtzhxxMgHhnlnayahCs10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxOEIyQ0FBNkQwRDUwQTk2Qjg1NTYwMUFDM0I5OUQ1 QkI5Q0ZGQTAeFw0yNTA2MDgxMjAzMTVaFw0yNTA2MDkxMzE0MTVaMDMxMTAvBgNV BAMTKEEwRUZDNjI1NTRDNTRCODJENzY5OUI2RUI1QzAyNjIzOEEyNDZBNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC47erWPveHNSdam3bhClezTbhJ NysfhKwKby2v7ajizNM6IStzWVh46t5dj7Hn/F01Zil0iSiVv682vzg4bidaPgVH eqclPTXp6X8M/z8zwcPXejJhUKsldPe5wAg7vLsTq34/3vsXgue81Lt+MU4v3hC/ MA5DXamI3n3EmjivJ/ek7rCvUnLZTMWmkPoao+K0Tl9mGACobvwml212I7p7YnzB dFBJ3rnlt0fJM5a/bwojJTomNZaH6Vcz8V52qyOvCQcx9t69o8ph/h1gm19tr0GI L3TbndzK9EFsVebg+S4vkJAgGr8PwNBTXeioD9N63CJC0A7O18MFT9D5rTLdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUoO/GJVTFS4LXaZtutcAmI4okakowHwYDVR0j BBgwFoAUoBiyyqbQ1QqWuFVgGsO5nVu5z/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFFpeDRFZk5nYXBuWWtLM3V2cVlHREpQQ3Z1Vmd6WWhINnB4YVdKUHdX OFUvMC9BMDE4QjJDQUE2RDBENTBBOTZCODU1NjAxQUMzQjk5RDVCQjlDRkZBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwMThCMkNBQTZEMEQ1MEE5 NkI4NTU2MDFBQzNCOTlENUJCOUNGRkEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFFpeDRFZk5nYXBuWWtLM3V2cVlHREpQQ3Z1Vmd6WWhINnB4YVdKUHdXOFUvMC9B MDE4QjJDQUE2RDBENTBBOTZCODU1NjAxQUMzQjk5RDVCQjlDRkZBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1UT3ebbbqmeOZje1kNCAwGWZhno0d+EmAjYsaA4mmc0Mp/wlM9o8sOnEbcaB O1ztolS60w2gvFY9y48FqPAcwopoS2/Jr0evRPmY6hsGYF5v6FNkC0T7pevZD9ua om75qoTXEMzPov6wvLY6ctYIC9N0FXlmKTJ/oSpmdSNyTWyhve3aPzEUGqPkeJmq Bv6ZPRG792NAr1wD1XLFEj0dDfpWKNixBJuABOUKxj4FifIXoIX8y98g85twoz+p 7c0m5Xd85SZCKD2dLqVMG8qqD1HvYyWkSLkwGA5WY46+fbik+TOu6A7EsgAmUdq0 dILx3ZMtUw14wTUPKO/BnLDo8A== -----END CERTIFICATE-----Generated at Sun Jun 8 16:00:50 2025 by rpki-client