$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft File: B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft (raw, json) Hash identifier: WMnccwYk2neaa0TjYLiKOhTK6vrYfamVFWqVDWwxsG8= Subject key identifier: BE:FA:9F:9F:0E:AC:7B:B8:9F:C1:FD:DD:31:C2:FB:97:87:89:25:BB Authority key identifier: B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69 Certificate issuer: /CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369 Certificate serial: 535D41964FE8EF4DE1323BFF5CB461325147693B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer Subject info access: rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft Manifest number: F7 Signing time: Thu 19 Jun 2025 03:25:18 +0000 Manifest this update: Thu 19 Jun 2025 03:20:18 +0000 Manifest next update: Fri 20 Jun 2025 07:02:18 +0000 Files and hashes: 1: 3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa (hash: Orbb6MeNodxx3916UDCrBEg7Fpk2zV0yU2VrzE/g0s8=) 2: 3138372e3130392e3131382e302f32342d3234203d3e20323635393238.roa (hash: KszOIxvzdb2byYIAkB/jo2J14kAdHgZWkp71wd+hZKU=) 3: B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl (hash: 0ac2tKV55RLPlv3bmym5nQnMVbbtTxKE4dpb+Dfx5Mw=) 4: 323830343a343030343a3a2f33322d3438203d3e20323635393238.roa (hash: XcxDfu5Dk/JfCL8RQs0hAY0KSxIgVRPmT1tOWH4+b4g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 07:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:5d:41:96:4f:e8:ef:4d:e1:32:3b:ff:5c:b4:61:32:51:47:69:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369 Validity Not Before: Jun 19 03:20:18 2025 GMT Not After : Jun 20 07:02:18 2025 GMT Subject: CN=BEFA9F9F0EAC7BB89FC1FDDD31C2FB97878925BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c7:d0:d3:21:9b:d2:09:93:47:10:a2:d1:71: c3:6b:2e:a7:d9:bd:ea:05:c3:74:2c:b3:0c:7d:28: 29:78:e3:dc:b6:03:26:48:dc:b3:8e:89:67:49:c5: 22:26:a1:e5:97:38:43:ae:4d:ae:d2:ed:e8:a1:ab: cf:49:21:e5:ea:1e:9d:8a:c9:72:df:00:40:44:3f: 57:24:ee:b2:01:c3:9c:3d:11:b1:20:95:dd:f0:71: 68:c0:e3:08:99:d9:55:f1:82:e6:22:bc:61:58:78: 4f:c5:80:12:5e:c4:cc:37:e7:58:03:91:7a:5a:f1: 9c:3a:a7:6e:ef:4b:d4:2a:82:28:88:a4:78:b6:e3: 15:64:b0:50:00:13:bf:26:43:de:03:4e:3b:5e:48: 87:88:c7:4b:e7:d8:20:e1:e8:d7:a1:c7:5a:6e:0c: 12:35:e6:58:3d:63:08:9d:b6:7d:56:a9:6e:15:6d: 5a:3b:04:03:aa:2f:c8:06:27:e4:bf:ec:20:87:2d: cf:de:1e:0a:f3:7d:b6:77:06:c7:12:e9:3a:b2:e1: 1f:6a:a6:fb:40:7d:3a:ae:4b:c7:33:bf:da:85:20: 88:89:aa:6d:0d:23:35:67:9b:7a:ff:1f:0f:cb:11: 61:fd:4b:2d:60:5d:88:86:e2:fd:1e:f7:94:c8:1a: 68:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FA:9F:9F:0E:AC:7B:B8:9F:C1:FD:DD:31:C2:FB:97:87:89:25:BB X509v3 Authority Key Identifier: keyid:B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a1:f9:4f:a8:51:af:62:d2:90:c6:fe:93:c9:0b:1b:02:cb: 1a:7a:46:6f:78:b3:5f:a0:49:cb:a8:8a:91:fd:f4:3b:dd:7c: 48:a2:f7:26:2e:cf:fe:22:71:5d:15:61:3d:70:8d:db:2a:0a: 3f:2f:e6:eb:8c:30:95:99:10:85:10:95:c4:81:97:0b:f3:7d: 7d:b0:31:dd:be:7d:c5:0f:07:60:e1:7b:16:ee:5c:fb:8e:6a: 79:91:37:6e:d7:3b:fb:c6:64:9c:a8:3a:b3:89:dd:e1:0f:18: 47:59:41:55:77:ee:68:e2:04:63:2a:ca:a5:b1:dd:e6:1c:19: 9c:3d:4a:82:19:9e:20:39:7d:56:5c:b7:fc:19:2c:c9:55:a4: 82:c2:3b:f0:04:b1:5d:32:ce:24:f6:11:e7:f1:ae:83:a1:17: 93:0a:e4:65:04:69:a4:f3:97:cd:12:a3:0e:ad:b8:1e:b0:17: b1:00:ca:37:88:26:1b:55:5c:4f:9f:33:9c:a1:4d:0e:71:e8: 59:c1:ed:c0:c2:48:f1:9e:f7:45:19:97:df:b2:0a:28:98:ef: 57:4d:c4:e5:ed:22:17:f5:6f:c3:2c:74:a2:90:4f:d9:94:fa: 4a:d8:83:87:9a:97:85:b2:d2:31:73:90:1b:6b:b3:9c:89:26: e5:9e:f7:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUU11Blk/o703hMjv/XLRhMlFHaTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENTlGNEI1NkJCNTRGQzMxQ0Q5QkYxQzdGREREQTE5 RDNCMDM2OTAeFw0yNTA2MTkwMzIwMThaFw0yNTA2MjAwNzAyMThaMDMxMTAvBgNV BAMTKEJFRkE5RjlGMEVBQzdCQjg5RkMxRkRERDMxQzJGQjk3ODc4OTI1QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFx9DTIZvSCZNHEKLRccNrLqfZ veoFw3Qsswx9KCl449y2AyZI3LOOiWdJxSImoeWXOEOuTa7S7eihq89JIeXqHp2K yXLfAEBEP1ck7rIBw5w9EbEgld3wcWjA4wiZ2VXxguYivGFYeE/FgBJexMw351gD kXpa8Zw6p27vS9QqgiiIpHi24xVksFAAE78mQ94DTjteSIeIx0vn2CDh6Nehx1pu DBI15lg9Ywidtn1WqW4VbVo7BAOqL8gGJ+S/7CCHLc/eHgrzfbZ3BscS6Tqy4R9q pvtAfTquS8czv9qFIIiJqm0NIzVnm3r/Hw/LEWH9Sy1gXYiG4v0e95TIGmhRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvvqfnw6se7ifwf3dMcL7l4eJJbswHwYDVR0j BBgwFoAUuNWfS1a7VPwxzZvxx/3doZ07A2kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkhaQkZrWUpSamNIdDhCYUp3aldHOXB3VVRaREs1cEd6NFFKVHFaRlNa SmkvMC9COEQ1OUY0QjU2QkI1NEZDMzFDRDlCRjFDN0ZERERBMTlEM0IwMzY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4RDU5RjRCNTZCQjU0RkMz MUNEOUJGMUM3RkREREExOUQzQjAzNjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NkhaQkZrWUpSamNIdDhCYUp3aldHOXB3VVRaREs1cEd6NFFKVHFaRlNaSmkvMC9C OEQ1OUY0QjU2QkI1NEZDMzFDRDlCRjFDN0ZERERBMTlEM0IwMzY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGKH5T6hRr2LSkMb+k8kLGwLLGnpGb3izX6BJy6iKkf30O918SKL3Ji7P/iJx XRVhPXCN2yoKPy/m64wwlZkQhRCVxIGXC/N9fbAx3b59xQ8HYOF7Fu5c+45qeZE3 btc7+8ZknKg6s4nd4Q8YR1lBVXfuaOIEYyrKpbHd5hwZnD1KghmeIDl9Vly3/Bks yVWkgsI78ASxXTLOJPYR5/Gug6EXkwrkZQRppPOXzRKjDq24HrAXsQDKN4gmG1Vc T58znKFNDnHoWcHtwMJI8Z73RRmX37IKKJjvV03E5e0iF/Vvwyx0opBP2ZT6StiD h5qXhbLSMXOQG2uznIkm5Z73yg== -----END CERTIFICATE-----Generated at Thu Jun 19 19:21:16 2025 by rpki-client