$ rpki-client -vvf rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft File: 87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft (raw, json) Hash identifier: 22qea/5bGO+fyep55aa2ohc+RlfDZIVGDW0rfuX2zUA= Subject key identifier: 71:A3:5B:57:2F:48:CE:A2:8A:5B:A9:73:02:03:10:0F:FA:10:CA:21 Authority key identifier: 87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88 Certificate issuer: /CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88 Certificate serial: 3B7126E898EE2201705FE9D202838A8BF8C534EA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer Subject info access: rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft Manifest number: 7C Signing time: Thu 19 Jun 2025 19:43:07 +0000 Manifest this update: Thu 19 Jun 2025 19:38:07 +0000 Manifest next update: Fri 20 Jun 2025 23:37:07 +0000 Files and hashes: 1: 34352e3138352e3130342e302f32342d3234203d3e20323639333735.roa (hash: Cj+XZApZwEyDBIz0YbaEcUyGeZaj4bZtMyXONedMytI=) 2: 34352e3138352e3130362e302f32332d3233203d3e20323639333735.roa (hash: PD33t9dvfUs1NQhXuL3Xie0KcybW7wj9PNJerbegWf4=) 3: 323830343a363361383a3a2f33322d3332203d3e20323639333735.roa (hash: AaZvRo1Gvb8ehjQqNPJyt+YSjKNO902zr4a+9F5QLy4=) 4: 34352e3138352e3130372e302f32342d3234203d3e20323639333735.roa (hash: E7PEVvRvng2uOsiRhVeUjei4pitJ5GoJken0emdnfsg=) 5: 34352e3138352e3130362e302f32342d3234203d3e20323639333735.roa (hash: azYb7n2AhoMfnq11Pg2Qjpcr2bkrMTcbjmZ5g/ma4F8=) 6: 87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl (hash: aqT2CRgTOogo5A+Eaz1RGvAZtPbToRWVyWHbw11aS1k=) 7: 34352e3138352e3130352e302f32342d3234203d3e20323639333735.roa (hash: 8VJcKEqv8e2Tu0UhAjiMptR5U9IhVleiKUHk7Ndb67c=) 8: 34352e3138352e3130342e302f32332d3233203d3e20323639333735.roa (hash: X0k+OEr8tLPrBAoKgoUkicfgVlQuwd4zoHl0bGDYL7E=) 9: 34352e3138352e3130342e302f32322d3232203d3e20323639333735.roa (hash: +sNenIhVPHPzNEjIlSdczqKykJ1F6OVtxAmahgGAIR8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 23:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:71:26:e8:98:ee:22:01:70:5f:e9:d2:02:83:8a:8b:f8:c5:34:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88 Validity Not Before: Jun 19 19:38:07 2025 GMT Not After : Jun 20 23:37:07 2025 GMT Subject: CN=71A35B572F48CEA28A5BA9730203100FFA10CA21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8a:13:55:71:f2:2c:db:9c:e4:85:f0:8b:63: 34:a8:5a:ee:75:58:a6:ae:e1:ae:11:87:30:16:df: 0e:5b:6d:47:be:d1:db:78:80:91:2f:26:32:1e:c3: d8:4b:d3:df:e0:e9:b1:71:1d:5c:ec:1d:de:ce:32: 3b:ff:94:94:b6:72:bf:c9:28:31:d0:68:e3:74:be: 8b:fc:3e:0c:b7:ec:78:06:eb:fc:6e:cd:d7:e4:79: 2d:78:b6:1d:6b:04:33:28:14:8a:d5:38:c4:cc:cb: aa:45:d8:1d:0f:a1:05:94:ea:0d:3e:bd:ec:c8:5f: 35:cc:db:b8:ab:dd:a0:25:b1:e5:6f:f3:d5:57:a2: 20:4e:4b:67:ef:11:b9:d2:b1:81:4c:13:ef:dc:f1: 61:ce:a2:b1:0e:90:71:7c:e9:b6:c7:a2:de:6c:f6: 71:15:bf:2b:16:7c:92:36:de:13:bd:f0:fa:d2:74: b7:78:a1:5c:cd:01:72:4e:41:1c:6e:10:65:25:52: 05:5b:6c:b7:15:9d:f2:32:69:4d:56:34:f8:a7:46: 4e:47:5e:d8:61:f5:e2:89:64:74:8d:d8:d2:5b:77: 19:94:23:f8:67:ac:ba:aa:8f:96:38:e5:94:a6:61: a9:6e:fa:ba:76:0e:03:86:d5:cd:cc:40:d1:36:14: 06:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A3:5B:57:2F:48:CE:A2:8A:5B:A9:73:02:03:10:0F:FA:10:CA:21 X509v3 Authority Key Identifier: keyid:87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:28:81:8f:ae:31:3c:ff:77:d7:c4:7a:48:8f:33:50:de:5a: 41:54:7a:86:6e:eb:59:f6:e9:6b:9a:e2:53:44:88:b9:0f:65: fa:85:b7:76:25:3f:69:7d:51:34:5a:c4:32:8d:03:80:3e:f6: 3e:c5:e9:57:27:fa:db:21:63:b0:f8:66:2e:13:99:08:a0:cd: 6a:4e:bd:54:a8:0d:2c:fa:c0:11:ca:8b:e1:57:c2:1f:aa:6b: 84:73:97:f8:2d:98:f6:99:3b:7d:a8:3c:50:91:89:c7:ac:3a: de:dc:41:52:45:6c:3f:10:8b:a7:cd:82:05:cf:7b:a0:b6:53: 0c:7b:b3:24:a0:55:90:50:f7:f6:73:7a:ed:c9:b3:61:72:68: a4:27:36:71:60:7b:4a:0b:2c:ad:bb:99:eb:92:9f:1f:af:e4: 15:f1:a4:a0:88:b0:fa:16:ae:17:07:ba:66:9f:e9:8a:4e:68: 10:f8:e0:2d:35:cf:57:67:f3:39:30:71:a5:1b:a0:02:6f:a5: f3:77:aa:13:f7:6c:29:07:05:d9:2e:77:31:24:1b:a2:00:f1: 56:7e:73:31:86:f2:51:b2:60:2b:75:2f:75:4e:0e:4b:29:d5: f6:38:3b:78:23:9f:d6:4a:ea:84:d4:86:18:f0:9c:ce:79:90: 7d:18:59:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO3Em6JjuIgFwX+nSAoOKi/jFNOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNTRDRDY4RjlCNzY0QkQzRTdGRUMzM0I5MjhDMDJE MjVGOEQ4ODAeFw0yNTA2MTkxOTM4MDdaFw0yNTA2MjAyMzM3MDdaMDMxMTAvBgNV BAMTKDcxQTM1QjU3MkY0OENFQTI4QTVCQTk3MzAyMDMxMDBGRkExMENBMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ihNVcfIs25zkhfCLYzSoWu51 WKau4a4RhzAW3w5bbUe+0dt4gJEvJjIew9hL09/g6bFxHVzsHd7OMjv/lJS2cr/J KDHQaON0vov8Pgy37HgG6/xuzdfkeS14th1rBDMoFIrVOMTMy6pF2B0PoQWU6g0+ vezIXzXM27ir3aAlseVv89VXoiBOS2fvEbnSsYFME+/c8WHOorEOkHF86bbHot5s 9nEVvysWfJI23hO98PrSdLd4oVzNAXJOQRxuEGUlUgVbbLcVnfIyaU1WNPinRk5H Xthh9eKJZHSN2NJbdxmUI/hnrLqqj5Y45ZSmYalu+rp2DgOG1c3MQNE2FAaXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcaNbVy9IzqKKW6lzAgMQD/oQyiEwHwYDVR0j BBgwFoAUh6VM1o+bdkvT5/7DO5KMAtJfjYgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFhYZzZ5V1lFQk5FanFQa3FjcG8xQVd4VEFtWnpuRXBDZGJ1V2s1eXpo ZUQvMC84N0E1NENENjhGOUI3NjRCRDNFN0ZFQzMzQjkyOEMwMkQyNUY4RDg4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QTU0Q0Q2OEY5Qjc2NEJE M0U3RkVDMzNCOTI4QzAyRDI1RjhEODguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFhYZzZ5V1lFQk5FanFQa3FjcG8xQVd4VEFtWnpuRXBDZGJ1V2s1eXpoZUQvMC84 N0E1NENENjhGOUI3NjRCRDNFN0ZFQzMzQjkyOEMwMkQyNUY4RDg4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADiiBj64xPP9318R6SI8zUN5aQVR6hm7rWfbpa5riU0SIuQ9l+oW3diU/aX1R NFrEMo0DgD72PsXpVyf62yFjsPhmLhOZCKDNak69VKgNLPrAEcqL4VfCH6prhHOX +C2Y9pk7fag8UJGJx6w63txBUkVsPxCLp82CBc97oLZTDHuzJKBVkFD39nN67cmz YXJopCc2cWB7SgssrbuZ65KfH6/kFfGkoIiw+hauFwe6Zp/pik5oEPjgLTXPV2fz OTBxpRugAm+l83eqE/dsKQcF2S53MSQbogDxVn5zMYbyUbJgK3UvdU4OSynV9jg7 eCOf1krqhNSGGPCcznmQfRhZig== -----END CERTIFICATE-----Generated at Fri Jun 20 10:35:12 2025 by rpki-client