$ rpki-client -vvf rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft File: 8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft (raw, json) Hash identifier: fiLeH05kHL0FgHowfV0cpjbntIkSsU911WeXv/G2WVY= Subject key identifier: 77:FB:6D:BC:5D:0A:CB:CE:B4:11:94:D3:DF:10:AD:DF:95:26:E2:BE Authority key identifier: 86:63:02:1B:58:90:05:D8:D6:AC:BA:9D:6E:EC:9F:6B:4B:B4:19:01 Certificate issuer: /CN=8663021B589005D8D6ACBA9D6EEC9F6B4BB41901 Certificate serial: 435F8822DFB2F8BB431A83D461DFEB4D11ECBF1F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer Subject info access: rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft Manifest number: 18 Signing time: Fri 20 Jun 2025 20:56:21 +0000 Manifest this update: Fri 20 Jun 2025 20:51:21 +0000 Manifest next update: Sat 21 Jun 2025 21:29:21 +0000 Files and hashes: 1: 34352e3136382e3132372e302f32342d3234203d3e20323638303633.roa (hash: 8AKLrxy41tpOvHAUkoY0N6YJ8jl+2fKhpTfK/gLjTgM=) 2: 34352e3136382e3132342e302f32342d3234203d3e20323638303633.roa (hash: iklcuoNIa74a9v+vnGbALu2PVhhOSHroYjM3mB52Vnw=) 3: 8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.crl (hash: WtmWRpbUeB3fIJT6NQ1l8X2ire9TXMQcsO3590YBXQs=) 4: 34352e3136382e3132362e302f32342d3234203d3e20323638303633.roa (hash: lClBtfYM92uXyXK/GybPlj/qsX2ohVNNV0OjpzOgcKs=) 5: 34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa (hash: BVk5GRfmlDttQSTk3gzcNbZFj6xTR2/n5uR1FdOiZ84=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.crl rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 21:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:5f:88:22:df:b2:f8:bb:43:1a:83:d4:61:df:eb:4d:11:ec:bf:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8663021B589005D8D6ACBA9D6EEC9F6B4BB41901 Validity Not Before: Jun 20 20:51:21 2025 GMT Not After : Jun 21 21:29:21 2025 GMT Subject: CN=77FB6DBC5D0ACBCEB41194D3DF10ADDF9526E2BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fa:c7:ae:ed:12:61:80:cf:5c:eb:18:e0:e7: 77:8b:62:09:53:16:cc:91:96:77:6e:b1:9d:25:b0: 79:b4:68:64:a9:5d:14:32:f3:71:37:85:b7:26:d3: 95:bc:32:09:70:95:c1:f5:ac:60:20:ff:12:c0:27: 01:1f:99:ba:b8:c0:cc:db:0a:b7:cf:aa:a0:39:ac: d6:8e:a0:a3:30:c6:05:50:ed:52:88:a4:7d:42:d6: b3:81:4e:4d:fa:88:11:c2:83:34:10:f3:62:20:ea: 8c:ee:d2:05:0b:71:53:89:d3:fc:53:80:3a:44:62: 95:79:2f:c6:84:48:c5:ee:76:a7:d2:51:c2:9b:fd: 38:ab:42:a7:44:bd:4d:25:fb:2b:4d:8a:ea:d2:3d: f7:23:44:f4:15:e3:ae:85:21:6b:95:ba:c9:e5:bd: 58:7a:d5:64:2e:af:5b:d0:c4:65:d3:cd:7c:63:1d: d2:92:44:42:44:ab:16:3b:7c:fd:12:f8:71:28:ad: 74:19:62:3f:4f:7e:05:8b:0f:91:cf:ac:32:47:83: 96:a8:b2:42:12:d5:d2:a8:ff:46:70:ad:26:60:71: 24:07:2b:20:57:40:a4:e9:cf:2c:1a:fc:d2:d0:d2: a0:23:49:76:63:c6:e8:5d:ad:5b:51:a9:ac:88:db: db:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FB:6D:BC:5D:0A:CB:CE:B4:11:94:D3:DF:10:AD:DF:95:26:E2:BE X509v3 Authority Key Identifier: keyid:86:63:02:1B:58:90:05:D8:D6:AC:BA:9D:6E:EC:9F:6B:4B:B4:19:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/8663021B589005D8D6ACBA9D6EEC9F6B4BB41901.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:58:96:ce:cd:85:c1:c6:51:69:02:d3:0d:20:cf:fb:b5:4e: 97:2d:eb:27:c2:84:0f:5d:5b:6f:10:16:e8:d9:72:68:56:5e: ba:10:4b:50:8a:99:10:4b:2b:95:7a:49:43:32:85:42:80:67: f3:5a:ad:7f:77:f2:8a:bc:39:e0:b3:ed:5d:f0:de:53:4a:59: 0a:b1:8e:b7:9b:c5:da:c9:9d:b0:39:a6:46:8e:d7:ea:90:d3: aa:3b:e5:18:ae:69:ec:16:f9:45:b1:c7:62:63:7b:49:da:a7: 99:23:7f:9c:49:2a:45:c7:19:92:12:ea:46:c1:47:d5:7b:0a: c0:46:10:70:9f:7f:77:e7:0a:85:9f:7e:e9:00:ca:e7:d2:50: 5e:d6:ab:6c:87:79:84:47:18:92:1d:0f:e6:80:fd:c5:7b:32: 03:bf:49:af:e7:88:9a:28:c5:3c:f8:8e:3d:aa:59:05:45:bd: fd:d5:90:10:84:b6:22:62:5c:a1:da:db:4e:1b:dc:8b:1f:56: ba:c8:03:1b:1f:9f:f2:c0:b1:df:b5:d8:57:9f:d0:6e:a9:14: b8:ff:28:ad:2c:cf:40:2b:e3:b3:94:4c:84:0a:81:92:39:46: fb:4b:1d:27:a3:08:be:70:33:67:83:1b:3c:73:cc:9e:3a:e3: a7:6b:f1:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ1+IIt+y+LtDGoPUYd/rTRHsvx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2MzAyMUI1ODkwMDVEOEQ2QUNCQTlENkVFQzlGNkI0 QkI0MTkwMTAeFw0yNTA2MjAyMDUxMjFaFw0yNTA2MjEyMTI5MjFaMDMxMTAvBgNV BAMTKDc3RkI2REJDNUQwQUNCQ0VCNDExOTREM0RGMTBBRERGOTUyNkUyQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl+seu7RJhgM9c6xjg53eLYglT FsyRlndusZ0lsHm0aGSpXRQy83E3hbcm05W8MglwlcH1rGAg/xLAJwEfmbq4wMzb CrfPqqA5rNaOoKMwxgVQ7VKIpH1C1rOBTk36iBHCgzQQ82Ig6ozu0gULcVOJ0/xT gDpEYpV5L8aESMXudqfSUcKb/TirQqdEvU0l+ytNiurSPfcjRPQV466FIWuVusnl vVh61WQur1vQxGXTzXxjHdKSREJEqxY7fP0S+HEorXQZYj9PfgWLD5HPrDJHg5ao skIS1dKo/0ZwrSZgcSQHKyBXQKTpzywa/NLQ0qAjSXZjxuhdrVtRqayI29vnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUd/ttvF0Ky860EZTT3xCt35Um4r4wHwYDVR0j BBgwFoAUhmMCG1iQBdjWrLqdbuyfa0u0GQEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzdHcWVRRGFmU2hZWVRtVlhHUVdjekxxOUNIWXRNVGFqWlRrUnNaZ2hR UEovMC84NjYzMDIxQjU4OTAwNUQ4RDZBQ0JBOUQ2RUVDOUY2QjRCQjQxOTAxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2NjMwMjFCNTg5MDA1RDhE NkFDQkE5RDZFRUM5RjZCNEJCNDE5MDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzdHcWVRRGFmU2hZWVRtVlhHUVdjekxxOUNIWXRNVGFqWlRrUnNaZ2hRUEovMC84 NjYzMDIxQjU4OTAwNUQ4RDZBQ0JBOUQ2RUVDOUY2QjRCQjQxOTAxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm1iWzs2FwcZRaQLTDSDP+7VOly3rJ8KED11bbxAW6NlyaFZeuhBLUIqZEEsr lXpJQzKFQoBn81qtf3fyirw54LPtXfDeU0pZCrGOt5vF2smdsDmmRo7X6pDTqjvl GK5p7Bb5RbHHYmN7SdqnmSN/nEkqRccZkhLqRsFH1XsKwEYQcJ9/d+cKhZ9+6QDK 59JQXtarbId5hEcYkh0P5oD9xXsyA79Jr+eImijFPPiOPapZBUW9/dWQEIS2ImJc odrbThvcix9WusgDGx+f8sCx37XYV5/QbqkUuP8orSzPQCvjs5RMhAqBkjlG+0sd J6MIvnAzZ4MbPHPMnjrjp2vxnA== -----END CERTIFICATE-----Generated at Sat Jun 21 06:16:05 2025 by rpki-client