$ rpki-client -vvf rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft File: 890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft (raw, json) Hash identifier: mTaEEEXSPcnZk4/i8BBuBSkdrz+zHkL8iOs7Qe6oYiw= Subject key identifier: A9:95:8F:B8:14:D1:E7:2C:F2:D9:71:A9:D9:6D:9F:77:DD:83:0C:91 Authority key identifier: 89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29 Certificate issuer: /CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629 Certificate serial: 4788F9C406964249B60ACBC2A5095492752FB3A1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer Subject info access: rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft Manifest number: 0247 Signing time: Fri 13 Jun 2025 15:29:34 +0000 Manifest this update: Fri 13 Jun 2025 15:24:34 +0000 Manifest next update: Sat 14 Jun 2025 17:29:34 +0000 Files and hashes: 1: 890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl (hash: lQKRhVPjxN9Rkn8Pn+SiLoZwRYkrDi0zmkSnxQCyTAw=) 2: 34352e352e38382e302f32322d3232203d3e20323636303834.roa (hash: K84xCId8+1cs5H3nmPDltEdVWLmM3+PGwnAlVZb81fo=) 3: 323830343a336135383a3a2f33322d3332203d3e20323636303834.roa (hash: sEDi9DwKH3RgvOw8jDr36sB6k6gHWPRVR+WX1w3q6W4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 14 Jun 2025 17:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:88:f9:c4:06:96:42:49:b6:0a:cb:c2:a5:09:54:92:75:2f:b3:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629 Validity Not Before: Jun 13 15:24:34 2025 GMT Not After : Jun 14 17:29:34 2025 GMT Subject: CN=A9958FB814D1E72CF2D971A9D96D9F77DD830C91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fc:06:45:2b:28:9e:ac:00:bb:45:d4:76:46: 5d:5a:67:a3:39:a7:4a:ae:10:2a:f5:61:d4:6c:a0: b4:52:99:d1:69:07:4a:a8:ad:35:b9:09:6b:bd:21: 23:21:b0:3c:35:2e:83:10:10:4f:bf:25:9c:50:f8: cc:13:8c:f8:4a:19:15:71:a3:24:27:32:0d:79:3d: 74:63:0f:a0:28:c5:70:c7:b0:34:95:09:de:eb:bc: b9:fa:91:d3:2f:d7:18:8a:cf:56:58:18:48:25:dd: 5d:9a:30:f8:8e:7a:a3:47:4c:c7:d7:ff:94:44:7f: 99:97:91:20:d7:9f:2c:ec:87:6e:fe:46:96:b6:8d: 06:2a:34:81:84:d0:3b:7a:d6:c6:53:e8:3e:8c:9d: 96:d4:58:a3:8f:8c:90:e6:b9:70:14:29:67:56:80: 6e:3d:c4:8e:b4:d4:fd:90:19:d9:84:dd:db:e6:d5: ba:be:bb:e9:bb:93:6a:7e:c1:59:8c:23:5f:22:b3: 47:cb:f6:a6:34:7d:f5:1a:c2:6e:7c:f2:48:0a:7e: a1:66:f6:57:a3:a0:20:24:39:c7:01:45:79:1c:60: ac:28:57:3d:bd:26:bb:f2:13:60:9a:89:e5:36:23: 7f:c5:d8:f1:3f:9f:92:9a:50:1a:31:22:b6:f7:29: 03:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:95:8F:B8:14:D1:E7:2C:F2:D9:71:A9:D9:6D:9F:77:DD:83:0C:91 X509v3 Authority Key Identifier: keyid:89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:df:81:9e:5c:4f:92:b4:93:fb:d0:ee:11:6e:0d:fb:e8:09: bd:37:34:4e:4b:d7:2f:b4:4b:b0:dc:b8:56:62:39:d6:73:d1: 7c:04:eb:d1:44:2f:c3:21:ab:a6:5e:7a:fd:6e:91:1f:af:09: bb:54:56:37:23:4d:cf:f4:31:3b:35:dd:b2:ad:5f:c3:44:30: 3e:cc:f0:49:20:77:1f:cc:b6:a8:ba:cb:97:18:35:93:db:3d: 4c:1a:69:92:cd:e8:cb:eb:eb:66:1c:79:b3:f7:b0:ca:40:6c: 3e:d3:32:16:a4:28:18:7e:39:41:0b:44:ca:7e:fb:22:37:3c: 56:4f:05:c2:3c:93:c4:64:d9:07:5c:95:7a:47:13:f6:42:f4: 44:fb:85:f8:11:64:52:64:d5:fb:f3:50:f5:b2:96:a8:94:5b: af:07:53:1e:01:e8:b5:41:5a:a1:e4:74:ed:a9:f4:32:d2:3f: 08:63:c7:6a:3f:eb:4e:75:aa:64:a9:91:06:96:e7:48:b1:77: 1c:0b:f6:cf:d8:4c:65:91:ae:a9:67:5d:91:b3:bf:36:7a:e7: b4:f7:4e:f3:e4:9a:00:47:d4:71:19:45:08:2f:0c:5f:99:f0: e0:f4:c6:10:74:b9:11:07:a7:54:4c:99:a0:1e:4c:4c:54:d1: 21:90:f4:c9 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUR4j5xAaWQkm2CsvCpQlUknUvs6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwQUQ1ODRDODNENDRGRkIyREZGRjk1NUQxQkQxQzcy RkYwRjYyOTAeFw0yNTA2MTMxNTI0MzRaFw0yNTA2MTQxNzI5MzRaMDMxMTAvBgNV BAMTKEE5OTU4RkI4MTREMUU3MkNGMkQ5NzFBOUQ5NkQ5Rjc3REQ4MzBDOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2/AZFKyierAC7RdR2Rl1aZ6M5 p0quECr1YdRsoLRSmdFpB0qorTW5CWu9ISMhsDw1LoMQEE+/JZxQ+MwTjPhKGRVx oyQnMg15PXRjD6AoxXDHsDSVCd7rvLn6kdMv1xiKz1ZYGEgl3V2aMPiOeqNHTMfX /5REf5mXkSDXnyzsh27+Rpa2jQYqNIGE0Dt61sZT6D6MnZbUWKOPjJDmuXAUKWdW gG49xI601P2QGdmE3dvm1bq+u+m7k2p+wVmMI18is0fL9qY0ffUawm588kgKfqFm 9lejoCAkOccBRXkcYKwoVz29JrvyE2CaieU2I3/F2PE/n5KaUBoxIrb3KQNnAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUqZWPuBTR5yzy2XGp2W2fd92DDJEwHwYDVR0j BBgwFoAUiQrVhMg9RP+y3/+VXRvRxy/w9ikwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9ZRHp6elVXNjlGbmUyUkdaemJtWFpKcG1Hajl3Q2RqR0NhdEtEUDJNYVBV LzEvODkwQUQ1ODRDODNENDRGRkIyREZGRjk1NUQxQkQxQzcyRkYwRjYyOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84OTBBRDU4NEM4M0Q0NEZGQjJE RkZGOTU1RDFCRDFDNzJGRjBGNjI5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1lE enp6VVc2OUZuZTJSR1p6Ym1YWkpwbUdqOXdDZGpHQ2F0S0RQMk1hUFUvMS84OTBB RDU4NEM4M0Q0NEZGQjJERkZGOTU1RDFCRDFDNzJGRjBGNjI5Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA Ht+BnlxPkrST+9DuEW4N++gJvTc0TkvXL7RLsNy4VmI51nPRfATr0UQvwyGrpl56 /W6RH68Ju1RWNyNNz/QxOzXdsq1fw0QwPszwSSB3H8y2qLrLlxg1k9s9TBppks3o y+vrZhx5s/ewykBsPtMyFqQoGH45QQtEyn77Ijc8Vk8FwjyTxGTZB1yVekcT9kL0 RPuF+BFkUmTV+/NQ9bKWqJRbrwdTHgHotUFaoeR07an0MtI/CGPHaj/rTnWqZKmR BpbnSLF3HAv2z9hMZZGuqWddkbO/NnrntPdO8+SaAEfUcRlFCC8MX5nw4PTGEHS5 EQenVEyZoB5MTFTRIZD0yQ== -----END CERTIFICATE-----Generated at Sat Jun 14 06:29:09 2025 by rpki-client