$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft File: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft (raw, json) Hash identifier: xGzpacVcQ6LQvneMsYcUuaYNwZkVV+E08sGQBJZhpgo= Subject key identifier: 2E:E8:A5:63:80:DE:E8:67:04:DB:8E:CC:01:0D:B4:B0:48:87:86:79 Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 Certificate issuer: /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Certificate serial: 588688077FDE25D2F28F31F4C627AA6A2811AB00 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft Manifest number: 0219 Signing time: Sun 22 Jun 2025 02:29:00 +0000 Manifest this update: Sun 22 Jun 2025 02:24:00 +0000 Manifest next update: Mon 23 Jun 2025 04:06:00 +0000 Files and hashes: 1: 3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa (hash: WqEYa1LHKO/TdU02rXFXLwns464zC4VFuzHF7wOxsfA=) 2: 323830343a326432383a3a2f33322d313238203d3e20323635323634.roa (hash: 0xs1tTdh2Qke0fip6d1TEfj28igzF6NdDvyXj3IPtmI=) 3: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl (hash: Krr2CLgzeTe099g6lYyiHyiNMCPdGspyKr3aHTiUmzI=) 4: 3136382e39302e34382e302f32322d3332203d3e20323635323634.roa (hash: Bv6Lyj5+VhdPqvZ/TGH9M1sdk0ISaNwfb7BbI7c/FPE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Jun 2025 04:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:86:88:07:7f:de:25:d2:f2:8f:31:f4:c6:27:aa:6a:28:11:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Validity Not Before: Jun 22 02:24:00 2025 GMT Not After : Jun 23 04:06:00 2025 GMT Subject: CN=2EE8A56380DEE86704DB8ECC010DB4B048878679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c0:6c:b1:12:e3:f6:08:33:72:5d:69:8e:2a: 62:21:94:13:ad:a4:aa:24:13:df:e0:e1:06:90:39: 64:cd:07:26:4f:75:48:0a:59:df:7b:00:81:5f:1b: 44:2e:d4:e7:6b:77:d7:76:7a:b3:83:5c:69:ad:10: 67:88:05:69:c8:54:f3:35:9b:3a:a5:b5:d1:67:4d: f7:96:1a:23:31:62:06:40:7c:5f:b1:2c:d0:d1:a4: 5f:39:46:9f:07:bc:fb:39:27:db:38:b9:7e:41:24: db:09:50:10:9b:4a:22:c1:fb:5a:59:a9:4e:c1:f7: 56:34:4f:94:57:9a:a2:66:12:10:a9:bf:0a:47:9a: 96:fc:50:90:4b:49:4a:c3:31:6f:77:95:96:ee:c2: 1a:ed:b9:c3:ce:73:9c:08:04:58:46:da:c6:8a:b9: 28:42:75:92:e2:b1:34:67:8e:a5:19:fd:09:bd:4f: 27:0f:64:7d:33:02:ce:7b:b2:60:11:b7:1f:7c:b5: 39:ea:09:d6:ce:a6:19:4b:79:ea:65:5c:3c:4f:76: 96:72:8a:98:bf:46:33:bf:98:9b:8c:25:a3:b1:90: 09:60:0f:c0:1f:84:67:60:88:71:7f:8f:13:d8:69: ff:0b:cc:0f:ee:cb:84:59:b6:83:03:34:f4:97:03: c9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E8:A5:63:80:DE:E8:67:04:DB:8E:CC:01:0D:B4:B0:48:87:86:79 X509v3 Authority Key Identifier: keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:1f:90:df:ce:2b:07:71:e3:ef:96:b7:22:34:aa:5c:43:0f: fe:74:50:9c:e8:07:6f:10:e4:77:59:e7:13:70:0c:5b:41:75: 26:b2:ed:df:71:46:f0:6e:6f:7b:a2:01:5e:ee:56:7c:3e:2d: c8:c6:78:10:87:27:28:75:28:31:cf:2c:2d:48:cc:a1:c4:ae: 8e:5f:6f:fd:1f:d5:51:e7:f2:4e:37:e2:0f:e3:81:dc:20:83: e1:d6:00:94:80:94:3e:ed:7d:ed:b2:cd:09:46:59:e8:38:8c: c8:e0:aa:b2:ed:14:1f:27:53:0f:55:78:f3:5b:6a:53:11:ca: 8a:95:fa:a1:c2:15:5d:88:b8:6f:75:6a:24:d5:b5:1b:3b:78: 2c:44:ec:26:95:aa:ff:02:90:8c:ee:b3:a8:9d:be:8c:2c:d7: 85:fa:04:95:04:81:89:28:86:bb:00:9d:ba:c8:1e:4c:36:0c: 3d:d4:9b:fe:94:1d:2b:08:b3:2b:8c:79:87:c4:1c:aa:af:da: b5:f6:8a:57:05:c4:8e:2b:e4:b7:f9:67:57:35:ec:66:12:d2: 99:76:bc:49:2c:8d:4e:95:85:17:62:62:2b:7e:d2:47:f3:47: 8d:1d:b4:e0:7c:7c:49:54:9e:0e:a9:11:4e:43:ac:b1:d9:95: 7a:25:36:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWIaIB3/eJdLyjzH0xieqaigRqwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzODM3RDdFQ0ExRkUxMTQ1RDBDRTE1RTBCRjg5NUVF MDZBMjdFMjAeFw0yNTA2MjIwMjI0MDBaFw0yNTA2MjMwNDA2MDBaMDMxMTAvBgNV BAMTKDJFRThBNTYzODBERUU4NjcwNERCOEVDQzAxMERCNEIwNDg4Nzg2NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSwGyxEuP2CDNyXWmOKmIhlBOt pKokE9/g4QaQOWTNByZPdUgKWd97AIFfG0Qu1Odrd9d2erODXGmtEGeIBWnIVPM1 mzqltdFnTfeWGiMxYgZAfF+xLNDRpF85Rp8HvPs5J9s4uX5BJNsJUBCbSiLB+1pZ qU7B91Y0T5RXmqJmEhCpvwpHmpb8UJBLSUrDMW93lZbuwhrtucPOc5wIBFhG2saK uShCdZLisTRnjqUZ/Qm9TycPZH0zAs57smARtx98tTnqCdbOphlLeeplXDxPdpZy ipi/RjO/mJuMJaOxkAlgD8AfhGdgiHF/jxPYaf8LzA/uy4RZtoMDNPSXA8mzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULuilY4De6GcE247MAQ20sEiHhnkwHwYDVR0j BBgwFoAUZTg31+yh/hFF0M4V4L+JXuBqJ+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZl UFMvMC82NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MzgzN0Q3RUNBMUZFMTE0 NUQwQ0UxNUUwQkY4OTVFRTA2QTI3RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZlUFMvMC82 NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASB+Q384rB3Hj75a3IjSqXEMP/nRQnOgHbxDkd1nnE3AMW0F1JrLt33FG8G5v e6IBXu5WfD4tyMZ4EIcnKHUoMc8sLUjMocSujl9v/R/VUefyTjfiD+OB3CCD4dYA lICUPu197bLNCUZZ6DiMyOCqsu0UHydTD1V481tqUxHKipX6ocIVXYi4b3VqJNW1 Gzt4LETsJpWq/wKQjO6zqJ2+jCzXhfoElQSBiSiGuwCdusgeTDYMPdSb/pQdKwiz K4x5h8Qcqq/atfaKVwXEjivkt/lnVzXsZhLSmXa8SSyNTpWFF2JiK37SR/NHjR20 4Hx8SVSeDqkRTkOssdmVeiU21g== -----END CERTIFICATE-----Generated at Sun Jun 22 11:32:32 2025 by rpki-client