$ rpki-client -vvf rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft File: 864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft (raw, json) Hash identifier: Ld9gLay6XP5KumjtKLfpf7a3Re6frHY3DdDDaR0qBas= Subject key identifier: 8A:F1:03:83:1C:D9:5D:4E:6F:91:71:10:9B:CF:02:71:FA:EA:C5:3C Authority key identifier: 86:4B:CB:11:1F:FB:F7:1A:17:94:80:C7:DD:77:FC:C6:64:D8:AB:59 Certificate issuer: /CN=864BCB111FFBF71A179480C7DD77FCC664D8AB59 Certificate serial: 1E46126CEBB55F62781EEBF5D2CBE00F6B841A1C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer Subject info access: rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft Manifest number: A8 Signing time: Mon 09 Jun 2025 18:13:51 +0000 Manifest this update: Mon 09 Jun 2025 18:08:51 +0000 Manifest next update: Tue 10 Jun 2025 19:56:51 +0000 Files and hashes: 1: 864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl (hash: h5wiMdhxxhKSJhThtO9izAKD+kHV57sLnEeAoQx2kf0=) 2: 3137372e39312e3134342e302f32302d3234203d3e20323633343432.roa (hash: U2X+DNMG/Bb1Kgy1CKCKBiUdZyIh3tpWZrlBBVlp8/0=) 3: 3137372e31302e39322e302f32322d3234203d3e20323633343432.roa (hash: e1XjvkH2G61dqhOHqc4pF2YHXIhwmms0v4hSF8s9XzI=) 4: 323830343a313164343a3a2f33322d3336203d3e20323633343432.roa (hash: ZjHIppO8S58r4UufCCbUgVo3HLt+HFAGV3p8lcKLf5I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 19:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:46:12:6c:eb:b5:5f:62:78:1e:eb:f5:d2:cb:e0:0f:6b:84:1a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864BCB111FFBF71A179480C7DD77FCC664D8AB59 Validity Not Before: Jun 9 18:08:51 2025 GMT Not After : Jun 10 19:56:51 2025 GMT Subject: CN=8AF103831CD95D4E6F9171109BCF0271FAEAC53C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:87:ac:ab:5f:3e:80:e5:7d:bb:f2:a9:09:64: 98:3b:29:b4:46:59:0d:4b:85:e0:92:29:5a:d4:b2: 70:15:e7:00:d3:32:c7:c1:05:2c:ff:f7:44:fa:3a: a4:ae:f0:4e:6d:ef:18:62:fa:a9:29:a4:6e:7a:a0: bf:00:2b:37:4c:e3:db:d5:a7:ae:5b:c6:dc:28:55: 8d:dd:9d:dd:77:08:1b:80:ce:f7:ba:4f:f0:7b:cc: 16:51:b1:8a:71:40:b1:b7:97:5e:c0:3c:7f:9f:3a: 10:46:3a:38:3f:26:be:ee:92:4f:a0:38:2e:09:5c: 99:3c:35:f0:ed:02:f5:c1:d8:09:d3:59:f6:65:24: 2d:59:f1:40:0c:9b:10:07:03:78:9a:b1:0f:53:01: 84:f3:a1:c0:b7:05:99:9b:e0:cd:06:6f:2f:80:48: ea:9c:cf:2f:b6:01:ea:15:0a:dd:7c:be:e5:20:d8: 8e:d2:82:a5:86:3c:3b:77:d1:48:c4:4a:2f:a9:d3: d1:3e:4c:4b:a6:19:1d:d8:04:65:96:15:d0:f5:d9: d0:53:f0:42:b8:ff:03:52:44:fb:64:84:6b:52:03: c4:8b:e3:e6:b6:7e:ea:7e:72:07:76:1e:90:86:d3: 16:b2:46:53:c2:d6:e5:ff:25:e8:d6:dc:0f:3b:ab: a9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F1:03:83:1C:D9:5D:4E:6F:91:71:10:9B:CF:02:71:FA:EA:C5:3C X509v3 Authority Key Identifier: keyid:86:4B:CB:11:1F:FB:F7:1A:17:94:80:C7:DD:77:FC:C6:64:D8:AB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/864BCB111FFBF71A179480C7DD77FCC664D8AB59.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/q9g6AQUVeUdhYJQDTf81qcSeJjnCMKofX141GRDEmo1/0/864BCB111FFBF71A179480C7DD77FCC664D8AB59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:cc:9f:90:03:1a:43:73:b9:be:ae:7d:f2:c6:52:45:ad:8f: 65:27:54:7e:17:51:f5:31:90:2c:2a:ed:b8:bd:a6:e5:5d:88: 09:4b:99:f6:b3:5d:df:93:c9:00:ec:1d:3d:38:f1:56:7f:26: f5:d3:76:5c:18:83:c7:1c:78:08:96:e9:b3:29:9e:9d:6e:8a: 43:6c:e6:29:4a:ad:84:4f:cc:05:b6:84:dd:1a:78:d5:97:9e: ca:bb:b2:89:1b:d8:99:f0:8f:e6:f4:f0:22:fb:5d:16:41:92: 17:f9:29:94:d1:cb:28:0c:c2:7e:07:73:34:e6:8e:73:59:13: 0d:68:21:2a:47:7f:d1:7d:9e:a1:c6:f8:fa:54:38:94:4a:db: 04:35:d6:a6:10:a6:37:c2:da:43:21:9c:74:5f:09:e1:cf:20: 25:d5:ba:1d:82:a2:d2:b4:01:0b:98:08:d9:62:94:fa:34:0e: 8c:52:e0:29:2b:30:b5:d7:48:31:ec:ee:0c:51:3a:d9:e1:b3: 94:d8:53:d2:aa:77:47:c5:ef:20:0f:e3:9e:96:37:0e:4c:be: 6f:22:e0:c4:d5:3b:cd:29:5d:7f:e6:94:84:c9:66:d7:ab:bd: b2:eb:3e:07:37:6d:d2:c2:fb:bd:5c:a3:f5:6c:32:f8:de:ea: 75:03:c0:5f -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUHkYSbOu1X2J4Huv10svgD2uEGhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY0QkNCMTExRkZCRjcxQTE3OTQ4MEM3REQ3N0ZDQzY2 NEQ4QUI1OTAeFw0yNTA2MDkxODA4NTFaFw0yNTA2MTAxOTU2NTFaMDMxMTAvBgNV BAMTKDhBRjEwMzgzMUNEOTVENEU2RjkxNzExMDlCQ0YwMjcxRkFFQUM1M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmh6yrXz6A5X278qkJZJg7KbRG WQ1LheCSKVrUsnAV5wDTMsfBBSz/90T6OqSu8E5t7xhi+qkppG56oL8AKzdM49vV p65bxtwoVY3dnd13CBuAzve6T/B7zBZRsYpxQLG3l17APH+fOhBGOjg/Jr7ukk+g OC4JXJk8NfDtAvXB2AnTWfZlJC1Z8UAMmxAHA3iasQ9TAYTzocC3BZmb4M0Gby+A SOqczy+2AeoVCt18vuUg2I7SgqWGPDt30UjESi+p09E+TEumGR3YBGWWFdD12dBT 8EK4/wNSRPtkhGtSA8SL4+a2fup+cgd2HpCG0xayRlPC1uX/JejW3A87q6mHAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUivEDgxzZXU5vkXEQm88CcfrqxTwwHwYDVR0j BBgwFoAUhkvLER/79xoXlIDH3Xf8xmTYq1kwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9xOWc2QVFVVmVVZGhZSlFEVGY4MXFjU2VKam5DTUtvZlgxNDFHUkRFbW8x LzAvODY0QkNCMTExRkZCRjcxQTE3OTQ4MEM3REQ3N0ZDQzY2NEQ4QUI1OS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84NjRCQ0IxMTFGRkJGNzFBMTc5 NDgwQzdERDc3RkNDNjY0RDhBQjU5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3E5 ZzZBUVVWZVVkaFlKUURUZjgxcWNTZUpqbkNNS29mWDE0MUdSREVtbzEvMC84NjRC Q0IxMTFGRkJGNzFBMTc5NDgwQzdERDc3RkNDNjY0RDhBQjU5Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA iMyfkAMaQ3O5vq598sZSRa2PZSdUfhdR9TGQLCrtuL2m5V2ICUuZ9rNd35PJAOwd PTjxVn8m9dN2XBiDxxx4CJbpsymenW6KQ2zmKUqthE/MBbaE3Rp41ZeeyruyiRvY mfCP5vTwIvtdFkGSF/kplNHLKAzCfgdzNOaOc1kTDWghKkd/0X2eocb4+lQ4lErb BDXWphCmN8LaQyGcdF8J4c8gJdW6HYKi0rQBC5gI2WKU+jQOjFLgKSswtddIMezu DFE62eGzlNhT0qp3R8XvIA/jnpY3Dky+byLgxNU7zSldf+aUhMlm16u9sus+Bzdt 0sL7vVyj9Wwy+N7qdQPAXw== -----END CERTIFICATE-----Generated at Tue Jun 10 11:01:33 2025 by rpki-client