$ rpki-client -vvf rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft File: 890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft (raw, json) Hash identifier: ZNx2uK4/ojapTqPK9Uikqh8QZk4Y4cN0R2FybuVlGWs= Subject key identifier: 04:3C:C9:D0:2E:03:4E:1E:B3:04:41:C1:C2:A3:5E:AC:D8:7D:61:44 Authority key identifier: 89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29 Certificate issuer: /CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629 Certificate serial: 4C66A340BB4421F237223FF9F1DF8CCD35FAE07C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer Subject info access: rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft Manifest number: 0241 Signing time: Sun 08 Jun 2025 19:55:40 +0000 Manifest this update: Sun 08 Jun 2025 19:50:40 +0000 Manifest next update: Mon 09 Jun 2025 22:36:40 +0000 Files and hashes: 1: 890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl (hash: WTjBiB9XQ11nv9d7yrd0xvXOiLnbuVxiJQIWuOpLD0o=) 2: 34352e352e38382e302f32322d3232203d3e20323636303834.roa (hash: K84xCId8+1cs5H3nmPDltEdVWLmM3+PGwnAlVZb81fo=) 3: 323830343a336135383a3a2f33322d3332203d3e20323636303834.roa (hash: sEDi9DwKH3RgvOw8jDr36sB6k6gHWPRVR+WX1w3q6W4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Jun 2025 22:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:66:a3:40:bb:44:21:f2:37:22:3f:f9:f1:df:8c:cd:35:fa:e0:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629 Validity Not Before: Jun 8 19:50:40 2025 GMT Not After : Jun 9 22:36:40 2025 GMT Subject: CN=043CC9D02E034E1EB30441C1C2A35EACD87D6144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:14:3a:4e:15:d6:fa:7d:b5:04:20:49:ef:24: 27:d9:f9:ae:9b:39:ec:be:83:e2:ce:70:f0:20:a5: 07:12:8a:10:50:8b:66:f1:55:e6:b9:a2:4a:a6:a5: 7c:63:64:b2:bd:3c:f7:3a:37:21:33:53:05:6a:03: 6f:dd:cc:0a:c6:b9:75:64:8f:3c:af:0e:1a:2e:f2: bf:b3:0b:d1:0a:d0:13:80:49:63:d0:d0:d9:13:5c: 62:56:16:14:f8:8c:f4:ae:c1:ae:b2:50:91:0c:d3: 41:27:04:b5:ca:24:a8:cc:65:b2:1b:fd:da:4c:9e: 5f:48:d9:c1:51:87:3c:e8:81:64:d6:ea:16:3e:1b: 3b:d2:f0:1b:a7:76:e1:95:41:a7:8a:fe:28:7c:79: 0e:3f:6a:da:b4:05:75:93:ce:22:52:88:61:e8:1a: e3:2c:a6:f6:0c:bb:83:dd:05:fc:ca:ed:03:49:e0: 3a:86:8e:89:7a:f6:66:43:74:4f:33:52:34:06:87: c0:dd:f3:a8:15:0c:6a:8d:e0:ca:af:8f:a8:92:d3: 4f:b4:07:fc:fc:5c:3d:d9:fa:81:dc:c5:09:74:2b: e5:4c:f2:29:de:8b:e6:c6:d5:76:36:85:40:10:0e: b8:32:57:3e:92:f6:02:c6:cb:4b:d8:b2:04:64:63: f2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3C:C9:D0:2E:03:4E:1E:B3:04:41:C1:C2:A3:5E:AC:D8:7D:61:44 X509v3 Authority Key Identifier: keyid:89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:70:08:fd:25:fc:60:d4:0f:e8:70:32:38:8b:22:12:65:94: 1b:3e:8b:00:f9:16:28:9f:6c:c1:4e:ff:91:9e:c8:64:bd:cd: 1e:9b:ca:47:3b:06:f1:a2:86:f7:d5:22:f8:81:10:76:ee:a8: ee:af:b3:f6:e0:b5:e8:b1:46:df:c6:71:d9:20:05:b5:2d:88: 4e:3d:ec:2f:bb:a8:71:7b:f4:32:b0:03:ab:4a:a9:01:d9:a5: 4f:a5:ca:ed:98:d4:b5:f3:33:f6:18:f9:94:e8:b3:f3:02:ea: 3e:30:19:b0:67:30:fe:e2:98:89:26:ac:27:d2:19:07:9e:44: 7c:a6:9b:c9:de:59:60:5c:3f:78:39:d9:58:82:27:ac:b5:7a: 82:ee:fd:40:3d:34:c0:a2:b4:d0:96:41:e9:d5:1b:2c:08:07: 36:78:07:a6:53:33:f5:1d:78:76:6a:6c:a0:f8:7e:13:8a:9d: 66:fa:d6:a7:4c:19:91:49:5e:bb:df:3a:c5:7d:af:10:7b:41: 29:a9:02:2f:84:d9:64:ba:db:62:30:b0:8e:c2:6e:29:2a:30: f4:17:9b:8a:c8:f2:85:9d:79:ad:0a:45:a8:d5:76:c8:f3:db: 73:c9:cb:3b:79:6c:60:a4:08:38:8b:a9:0a:2a:ad:aa:12:1b: e4:68:41:b9 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUTGajQLtEIfI3Ij/58d+MzTX64HwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwQUQ1ODRDODNENDRGRkIyREZGRjk1NUQxQkQxQzcy RkYwRjYyOTAeFw0yNTA2MDgxOTUwNDBaFw0yNTA2MDkyMjM2NDBaMDMxMTAvBgNV BAMTKDA0M0NDOUQwMkUwMzRFMUVCMzA0NDFDMUMyQTM1RUFDRDg3RDYxNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1FDpOFdb6fbUEIEnvJCfZ+a6b Oey+g+LOcPAgpQcSihBQi2bxVea5okqmpXxjZLK9PPc6NyEzUwVqA2/dzArGuXVk jzyvDhou8r+zC9EK0BOASWPQ0NkTXGJWFhT4jPSuwa6yUJEM00EnBLXKJKjMZbIb /dpMnl9I2cFRhzzogWTW6hY+GzvS8BunduGVQaeK/ih8eQ4/atq0BXWTziJSiGHo GuMspvYMu4PdBfzK7QNJ4DqGjol69mZDdE8zUjQGh8Dd86gVDGqN4Mqvj6iS00+0 B/z8XD3Z+oHcxQl0K+VM8inei+bG1XY2hUAQDrgyVz6S9gLGy0vYsgRkY/KjAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUBDzJ0C4DTh6zBEHBwqNerNh9YUQwHwYDVR0j BBgwFoAUiQrVhMg9RP+y3/+VXRvRxy/w9ikwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9ZRHp6elVXNjlGbmUyUkdaemJtWFpKcG1Hajl3Q2RqR0NhdEtEUDJNYVBV LzEvODkwQUQ1ODRDODNENDRGRkIyREZGRjk1NUQxQkQxQzcyRkYwRjYyOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84OTBBRDU4NEM4M0Q0NEZGQjJE RkZGOTU1RDFCRDFDNzJGRjBGNjI5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1lE enp6VVc2OUZuZTJSR1p6Ym1YWkpwbUdqOXdDZGpHQ2F0S0RQMk1hUFUvMS84OTBB RDU4NEM4M0Q0NEZGQjJERkZGOTU1RDFCRDFDNzJGRjBGNjI5Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA RnAI/SX8YNQP6HAyOIsiEmWUGz6LAPkWKJ9swU7/kZ7IZL3NHpvKRzsG8aKG99Ui +IEQdu6o7q+z9uC16LFG38Zx2SAFtS2ITj3sL7uocXv0MrADq0qpAdmlT6XK7ZjU tfMz9hj5lOiz8wLqPjAZsGcw/uKYiSasJ9IZB55EfKabyd5ZYFw/eDnZWIInrLV6 gu79QD00wKK00JZB6dUbLAgHNngHplMz9R14dmpsoPh+E4qdZvrWp0wZkUleu986 xX2vEHtBKakCL4TZZLrbYjCwjsJuKSow9BebisjyhZ15rQpFqNV2yPPbc8nLO3ls YKQIOIupCiqtqhIb5GhBuQ== -----END CERTIFICATE-----Generated at Mon Jun 9 12:36:18 2025 by rpki-client