$ rpki-client -vvf rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.mft File: 8013DE498C2B907A3EF2E48332493039E7A2F953.mft (raw, json) Hash identifier: ecxtDuDDj6/yWnk/RDtVM/s3PaAifEZ+buxF0ubWY70= Subject key identifier: 5F:46:3C:B4:D8:EE:73:15:A5:06:63:C0:FC:C7:ED:C1:88:30:8F:67 Authority key identifier: 80:13:DE:49:8C:2B:90:7A:3E:F2:E4:83:32:49:30:39:E7:A2:F9:53 Certificate issuer: /CN=8013DE498C2B907A3EF2E48332493039E7A2F953 Certificate serial: 741A04EA6C9B4EE248180410F2E3D04133CFCBED Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer Subject info access: rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.mft Manifest number: 014A Signing time: Fri 20 Jun 2025 06:00:11 +0000 Manifest this update: Fri 20 Jun 2025 05:55:11 +0000 Manifest next update: Sat 21 Jun 2025 06:17:11 +0000 Files and hashes: 1: 8013DE498C2B907A3EF2E48332493039E7A2F953.crl (hash: bOscD1JFIIvUo5Psse2a2ebvpaUteSvubBUVILS1Mg8=) 2: 34352e3232342e3138372e302f32342d3234203d3e20323637363730.roa (hash: l9yWCd/pjyuJABxFiVXdl4lyno3VoXEL7hL/eJbCOVQ=) 3: 34352e3232342e3230302e302f32332d3233203d3e20323637363730.roa (hash: EtPGuSZH3vRBmX/qwPL6+UH0DlEpBn2eWiAs0yBsA2A=) 4: 323830343a343531303a3a2f33322d3332203d3e20323637363730.roa (hash: h88mpkh7qxBNgN9HD7X4gl7QQ9E2VicVIuavbpmWbrg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.crl rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 06:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:1a:04:ea:6c:9b:4e:e2:48:18:04:10:f2:e3:d0:41:33:cf:cb:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8013DE498C2B907A3EF2E48332493039E7A2F953 Validity Not Before: Jun 20 05:55:11 2025 GMT Not After : Jun 21 06:17:11 2025 GMT Subject: CN=5F463CB4D8EE7315A50663C0FCC7EDC188308F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ef:77:9a:57:b3:ce:97:ad:0a:ed:66:ad:dc: 54:2c:c3:8c:fe:de:f3:13:37:ff:0c:ac:30:8c:44: 18:b9:cb:c3:e7:5f:8f:d8:07:39:01:e1:b9:c4:74: 09:a3:8c:fa:c0:e0:14:22:70:ef:4e:08:db:12:74: d0:00:21:c2:3f:df:5f:23:66:63:e2:bd:e4:64:2d: 7c:25:93:7d:23:07:3b:b7:29:1b:68:88:cf:b4:c2: 83:82:7e:53:05:26:bd:38:01:a0:3f:46:dc:bd:ff: 89:05:06:6e:84:84:c7:91:d9:3d:67:9d:d9:ca:01: cf:8d:1b:14:81:80:b2:97:ef:3c:64:83:6e:b0:46: 37:34:eb:18:5e:98:c8:54:54:63:69:ef:b1:ed:93: f2:a3:6a:46:cf:54:03:e9:02:74:9c:9e:0f:29:b7: c7:c2:26:8c:f8:76:ad:1e:d4:6c:4f:02:ad:11:5d: f2:f2:ab:09:51:81:7e:9e:19:8e:c5:7f:8d:a3:89: 69:c6:f0:cf:ce:c0:0b:ee:17:75:61:6a:46:85:d8: e4:d3:4d:47:b5:7c:b6:1b:c2:e1:71:5c:91:0f:33: 77:26:48:ec:00:58:0d:24:6a:5a:80:59:6d:96:2f: 4e:0a:e2:39:a0:9d:25:7f:ae:94:21:11:32:5f:21: e6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:46:3C:B4:D8:EE:73:15:A5:06:63:C0:FC:C7:ED:C1:88:30:8F:67 X509v3 Authority Key Identifier: keyid:80:13:DE:49:8C:2B:90:7A:3E:F2:E4:83:32:49:30:39:E7:A2:F9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:80:0c:9d:7e:7a:81:bc:06:57:8c:0b:dd:49:05:5b:52:46: 36:a8:dd:15:7c:2f:db:c3:b6:45:52:3c:b3:64:ac:4c:4f:92: 9a:06:a1:09:54:c3:ef:bb:f9:ce:30:99:d8:27:08:55:f9:ce: 5d:39:05:62:ad:c9:9a:6d:1c:d3:98:07:c8:23:3c:d6:bc:1a: c4:b2:92:ea:96:4c:3c:fe:ae:d4:ed:e1:e3:e4:5e:7c:c5:6c: cc:a2:05:d5:57:21:c9:ba:16:9b:31:0b:fc:83:27:94:9d:a3: 1d:2a:fd:9b:53:36:3b:46:c9:f8:85:fa:81:a8:9c:27:9a:c0: d3:e5:41:47:28:b4:74:f0:e7:8b:46:8c:7a:0b:ea:72:66:ad: ff:d6:36:c4:a6:c3:96:4f:35:79:11:fb:57:e8:e0:16:d0:18: ec:27:8a:8c:e3:fa:01:4d:77:90:d9:c1:97:fd:3a:e5:c9:4b: 71:77:7c:b3:33:68:4b:5f:54:b6:fd:37:95:48:c6:95:ba:aa: d9:75:a6:a0:4c:13:62:6a:d0:38:76:1d:21:43:26:27:24:7f: 93:c2:d6:3a:30:35:b4:d5:f1:34:b8:4e:d2:c2:b9:6e:04:47: 94:82:22:3a:05:5f:65:a0:e2:01:a6:0b:cc:e2:d2:ff:c0:9f: 96:04:b4:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdBoE6mybTuJIGAQQ8uPQQTPPy+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAxM0RFNDk4QzJCOTA3QTNFRjJFNDgzMzI0OTMwMzlF N0EyRjk1MzAeFw0yNTA2MjAwNTU1MTFaFw0yNTA2MjEwNjE3MTFaMDMxMTAvBgNV BAMTKDVGNDYzQ0I0RDhFRTczMTVBNTA2NjNDMEZDQzdFREMxODgzMDhGNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw73eaV7POl60K7Wat3FQsw4z+ 3vMTN/8MrDCMRBi5y8PnX4/YBzkB4bnEdAmjjPrA4BQicO9OCNsSdNAAIcI/318j ZmPiveRkLXwlk30jBzu3KRtoiM+0woOCflMFJr04AaA/Rty9/4kFBm6EhMeR2T1n ndnKAc+NGxSBgLKX7zxkg26wRjc06xhemMhUVGNp77Htk/KjakbPVAPpAnScng8p t8fCJoz4dq0e1GxPAq0RXfLyqwlRgX6eGY7Ff42jiWnG8M/OwAvuF3VhakaF2OTT TUe1fLYbwuFxXJEPM3cmSOwAWA0kalqAWW2WL04K4jmgnSV/rpQhETJfIeYNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUX0Y8tNjucxWlBmPA/MftwYgwj2cwHwYDVR0j BBgwFoAUgBPeSYwrkHo+8uSDMkkwOeei+VMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWF2dExlQW9odE1BTEVjUXBxakVtZEZnYVZlaTkxRWhNVmhFa3pRRHNu Z2ovMS84MDEzREU0OThDMkI5MDdBM0VGMkU0ODMzMjQ5MzAzOUU3QTJGOTUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwMTNERTQ5OEMyQjkwN0Ez RUYyRTQ4MzMyNDkzMDM5RTdBMkY5NTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWF2dExlQW9odE1BTEVjUXBxakVtZEZnYVZlaTkxRWhNVmhFa3pRRHNuZ2ovMS84 MDEzREU0OThDMkI5MDdBM0VGMkU0ODMzMjQ5MzAzOUU3QTJGOTUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACYAMnX56gbwGV4wL3UkFW1JGNqjdFXwv28O2RVI8s2SsTE+SmgahCVTD77v5 zjCZ2CcIVfnOXTkFYq3Jmm0c05gHyCM81rwaxLKS6pZMPP6u1O3h4+RefMVszKIF 1VchyboWmzEL/IMnlJ2jHSr9m1M2O0bJ+IX6gaicJ5rA0+VBRyi0dPDni0aMegvq cmat/9Y2xKbDlk81eRH7V+jgFtAY7CeKjOP6AU13kNnBl/065clLcXd8szNoS19U tv03lUjGlbqq2XWmoEwTYmrQOHYdIUMmJyR/k8LWOjA1tNXxNLhO0sK5bgRHlIIi OgVfZaDiAaYLzOLS/8CflgS0rg== -----END CERTIFICATE-----Generated at Fri Jun 20 15:48:08 2025 by rpki-client