$ rpki-client -vvf rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.mft File: 8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.mft (raw, json) Hash identifier: 84c5HcrM8QUHd5dUWgZsOt8mUt70me0Cq2MC1/nUrUQ= Subject key identifier: 31:3B:F0:D7:73:F8:DC:30:FB:BA:18:80:54:6D:A9:3A:46:07:48:0E Authority key identifier: 8C:EB:93:8E:E7:EE:7A:3D:30:ED:A7:14:BE:1B:C7:A9:15:23:DA:C5 Certificate issuer: /CN=8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5 Certificate serial: 38734C1BBE43A8AAECDBA51B2E615C41426C1F1B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.mft Manifest number: 01E3 Signing time: Sat 07 Jun 2025 08:31:02 +0000 Manifest this update: Sat 07 Jun 2025 08:26:02 +0000 Manifest next update: Sun 08 Jun 2025 11:38:02 +0000 Files and hashes: 1: 323830343a333666343a3a2f33322d3438203d3e20323636333832.roa (hash: jFr/CimE+edpA8rbbsH8LkCTfbjjMlqmeqoowLoMrLg=) 2: 3137302e38302e3138342e302f32322d3234203d3e20323636333832.roa (hash: AdEUOJn+RF6A6GW6vepiaLabho76RamU0zT7FRHQxVw=) 3: 8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.crl (hash: CcWZbe57njRRTQufG3nssU6GLQ5lwrKXGFjbtFVxNH0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.crl rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 07:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:73:4c:1b:be:43:a8:aa:ec:db:a5:1b:2e:61:5c:41:42:6c:1f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5 Validity Not Before: Jun 7 08:26:02 2025 GMT Not After : Jun 8 11:38:02 2025 GMT Subject: CN=313BF0D773F8DC30FBBA1880546DA93A4607480E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:92:97:2e:91:e4:75:17:96:6c:97:ae:da:7d: 31:9e:17:7f:93:1a:c0:91:aa:8d:d1:fe:f0:bd:d8: 5b:42:95:12:e5:20:c2:29:85:7a:56:ed:7f:80:dd: 47:f1:e1:bf:92:7a:25:44:87:c7:7d:ee:c7:48:cf: bb:02:a8:db:25:bf:99:22:3a:94:17:34:24:ae:1b: 50:a9:63:2c:8b:2c:cd:1d:bf:a4:4d:aa:53:3e:10: 9f:36:e2:de:46:2e:12:5b:2c:65:9c:3f:0e:98:61: 3a:aa:e8:f7:7e:80:75:d5:0f:d9:4f:f8:0d:80:c7: e3:71:f9:c9:c4:1a:05:4e:62:8b:9e:51:fe:7e:ac: 91:7f:c1:48:6c:aa:c5:e7:0d:c5:5f:c9:87:43:80: c0:ea:65:fe:bf:c4:04:66:2a:b9:b1:61:57:41:7e: 56:a3:32:78:5d:2c:5f:a4:a3:fd:91:18:47:d8:b1: a4:99:2e:e3:fe:66:86:dd:e5:e8:6b:72:f6:7c:91: 2e:a1:11:45:27:ab:ea:da:c9:c5:f4:3f:dd:b3:58: bd:a8:c4:37:53:4e:b1:ae:43:ce:02:39:c0:20:bc: b8:9f:32:5f:e1:66:b5:71:1d:36:49:47:ee:e3:46: 65:78:e1:98:2a:71:37:11:04:58:c9:21:bf:b1:4d: e1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3B:F0:D7:73:F8:DC:30:FB:BA:18:80:54:6D:A9:3A:46:07:48:0E X509v3 Authority Key Identifier: keyid:8C:EB:93:8E:E7:EE:7A:3D:30:ED:A7:14:BE:1B:C7:A9:15:23:DA:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:75:4b:de:e9:da:14:d4:71:42:5b:9e:44:e0:f9:3f:5d:b9: dd:15:23:26:22:c9:6e:0f:33:a3:fe:c1:b2:db:e0:8f:db:75: f5:8c:66:9c:81:77:fe:2b:87:bb:3d:cf:73:63:f6:8d:47:08: 5b:39:ea:67:bb:57:04:a9:f0:c2:fe:ab:62:73:7d:71:fd:b3: d7:71:59:97:be:fc:eb:07:b1:ae:74:19:c7:c5:27:ca:5b:7c: f6:42:ff:73:a0:a7:a5:1f:1f:95:26:45:69:ab:cd:53:3b:9c: e0:d7:39:38:1c:be:ea:b6:33:ad:6c:8a:ed:35:b9:91:e4:ef: 43:0c:c5:9b:91:b0:c0:15:9f:ea:60:a9:e0:bc:43:76:ce:75: c9:96:55:c0:be:5f:e2:47:44:3a:e6:86:b8:84:65:23:23:af: c6:b5:f2:1d:cb:a1:33:40:36:64:6f:7c:8a:d6:f9:3e:ab:fc: 4e:3d:1a:34:f9:8d:a6:ee:42:76:71:52:82:75:5d:c8:56:05: 77:5a:4d:ca:a0:a6:10:df:4f:d3:77:6b:6f:62:8d:3d:5a:09: db:d6:92:e6:31:dd:d0:0f:00:35:d2:bb:fb:65:04:e4:54:56: 5b:ef:14:92:fc:4b:cb:f8:29:08:b1:b6:a6:9e:9c:01:f3:ff: 57:5e:72:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOHNMG75DqKrs26UbLmFcQUJsHxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENFQjkzOEVFN0VFN0EzRDMwRURBNzE0QkUxQkM3QTkx NTIzREFDNTAeFw0yNTA2MDcwODI2MDJaFw0yNTA2MDgxMTM4MDJaMDMxMTAvBgNV BAMTKDMxM0JGMEQ3NzNGOERDMzBGQkJBMTg4MDU0NkRBOTNBNDYwNzQ4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSkpcukeR1F5Zsl67afTGeF3+T GsCRqo3R/vC92FtClRLlIMIphXpW7X+A3Ufx4b+SeiVEh8d97sdIz7sCqNslv5ki OpQXNCSuG1CpYyyLLM0dv6RNqlM+EJ824t5GLhJbLGWcPw6YYTqq6Pd+gHXVD9lP +A2Ax+Nx+cnEGgVOYoueUf5+rJF/wUhsqsXnDcVfyYdDgMDqZf6/xARmKrmxYVdB flajMnhdLF+ko/2RGEfYsaSZLuP+Zobd5ehrcvZ8kS6hEUUnq+raycX0P92zWL2o xDdTTrGuQ84COcAgvLifMl/hZrVxHTZJR+7jRmV44ZgqcTcRBFjJIb+xTeGbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMTvw13P43DD7uhiAVG2pOkYHSA4wHwYDVR0j BBgwFoAUjOuTjufuej0w7acUvhvHqRUj2sUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSG10OWdubUpGdXo4NnQ2WnJ1ZGNhbXJLdVhSbTd1ZDVXSmJvTkRxRzVu R28vMC84Q0VCOTM4RUU3RUU3QTNEMzBFREE3MTRCRTFCQzdBOTE1MjNEQUM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDRUI5MzhFRTdFRTdBM0Qz MEVEQTcxNEJFMUJDN0E5MTUyM0RBQzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SG10OWdubUpGdXo4NnQ2WnJ1ZGNhbXJLdVhSbTd1ZDVXSmJvTkRxRzVuR28vMC84 Q0VCOTM4RUU3RUU3QTNEMzBFREE3MTRCRTFCQzdBOTE1MjNEQUM1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEXVL3unaFNRxQlueROD5P1253RUjJiLJbg8zo/7Bstvgj9t19YxmnIF3/iuH uz3Pc2P2jUcIWznqZ7tXBKnwwv6rYnN9cf2z13FZl7786wexrnQZx8Unylt89kL/ c6CnpR8flSZFaavNUzuc4Nc5OBy+6rYzrWyK7TW5keTvQwzFm5GwwBWf6mCp4LxD ds51yZZVwL5f4kdEOuaGuIRlIyOvxrXyHcuhM0A2ZG98itb5Pqv8Tj0aNPmNpu5C dnFSgnVdyFYFd1pNyqCmEN9P03drb2KNPVoJ29aS5jHd0A8ANdK7+2UE5FRWW+8U kvxLy/gpCLG2pp6cAfP/V15y8Q== -----END CERTIFICATE-----Generated at Sat Jun 7 12:32:49 2025 by rpki-client