$ rpki-client -vvf rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.mft File: B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.mft (raw, json) Hash identifier: Ll3sNA6opOIZHLTjkiK1PjtUGfjJUkGnS6BnDnk7uX4= Subject key identifier: 90:7F:4E:F9:A3:2B:40:77:7E:0F:B1:AA:A2:C0:78:C1:D9:8E:92:4F Authority key identifier: B8:C4:22:F4:E7:DE:B2:2B:F8:44:9A:48:96:DA:5B:60:58:DF:65:AD Certificate issuer: /CN=B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD Certificate serial: 098CBF705DE911DF190D9AA6316941AB7AA1AE94 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer Subject info access: rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.mft Manifest number: 4C Signing time: Tue 17 Jun 2025 04:30:46 +0000 Manifest this update: Tue 17 Jun 2025 04:25:46 +0000 Manifest next update: Wed 18 Jun 2025 05:55:46 +0000 Files and hashes: 1: 3230302e3139362e3134302e302f32322d3232203d3e203532373930.roa (hash: x6OSJB6bgqwXMFZEXQ3qdVQ6Ta+0uRuQxjMAdMhL/q4=) 2: B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.crl (hash: EL7sE4Sn2jpQlMuxvHnibOAj0ThtHR3VCGPGCUt0LyU=) 3: 3137372e33392e31322e302f32322d3232203d3e203532373930.roa (hash: R93deM5pmTBvtnA92QRBJS2cI4mjyJ9HU+H0pOwXvNE=) 4: 323830343a313864633a3a2f33322d3332203d3e203532373930.roa (hash: 4Y9caAt8f2u8Wrat75/HoRSEJ6bRLUMrPrsyvoGwf+0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.crl rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 05:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:8c:bf:70:5d:e9:11:df:19:0d:9a:a6:31:69:41:ab:7a:a1:ae:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD Validity Not Before: Jun 17 04:25:46 2025 GMT Not After : Jun 18 05:55:46 2025 GMT Subject: CN=907F4EF9A32B40777E0FB1AAA2C078C1D98E924F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d3:06:7f:5b:cf:b8:96:72:34:aa:0a:b5:51: 41:e9:ed:58:c9:7e:f8:39:f5:1b:4e:0e:b9:ce:f8: d2:86:16:ac:97:9b:9e:a4:e9:db:8b:64:73:c0:e5: 4e:c7:96:2b:3c:43:3a:04:75:ab:61:8d:2a:aa:0e: 8c:32:6a:f2:2f:5b:47:d5:31:34:d5:64:eb:12:b2: e0:f9:80:49:5a:41:a7:2f:2a:88:16:ff:51:41:95: 5b:e1:15:e1:f8:b0:0f:76:e2:ec:26:22:cd:33:e4: 4a:2d:69:4c:e1:34:b7:12:aa:8b:20:e2:71:d8:31: 6f:46:1a:5f:6e:80:83:61:2b:f0:9d:e5:b4:85:c4: f2:bc:64:27:b4:25:e8:54:96:5b:8c:d4:92:13:f0: fd:53:65:11:31:06:5f:40:74:66:34:61:10:fc:db: 25:5c:6e:18:f4:d5:31:be:c0:e6:4f:28:c7:ac:33: 7a:1a:19:95:25:e9:43:54:52:ed:a7:25:96:9a:ae: 9b:ae:d2:34:93:28:75:af:54:79:e1:24:ce:77:07: 2c:05:04:3d:ea:47:42:ed:6d:47:af:14:c2:f7:65: 24:f9:13:0b:33:0b:8c:66:ee:0a:27:51:1d:72:27: a2:32:e1:53:ad:54:b9:d5:58:95:ff:7c:66:f7:3e: e0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7F:4E:F9:A3:2B:40:77:7E:0F:B1:AA:A2:C0:78:C1:D9:8E:92:4F X509v3 Authority Key Identifier: keyid:B8:C4:22:F4:E7:DE:B2:2B:F8:44:9A:48:96:DA:5B:60:58:DF:65:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c9:69:11:56:37:59:70:60:7d:e5:1a:80:d3:61:34:c4:a5: 50:c1:c4:78:51:ed:8c:13:70:a7:f8:7e:40:5b:10:4b:3b:a7: f9:96:77:61:95:8e:1f:d7:b6:e5:97:37:55:f7:80:b3:cc:66: f2:57:5a:62:e3:91:f6:c7:24:85:40:b2:35:06:f9:8e:f3:80: 52:01:cf:33:cc:7d:63:35:de:fe:0e:09:49:7c:4c:c8:42:fd: ea:1d:fd:4a:45:6a:44:27:e0:15:36:d8:fc:97:ea:3c:10:83: de:ca:05:ca:e9:59:0b:65:7a:4c:a1:a7:ee:f4:a0:0d:e1:2a: 12:68:ac:01:4d:1a:e2:18:f8:b9:2d:9a:a7:01:44:37:df:d4: e1:6b:e7:48:e0:94:18:3e:58:0c:9a:e1:9c:9d:07:76:80:1b: 78:7a:2c:77:58:e1:48:76:8e:e4:b9:f4:21:d4:4f:d5:8b:d4: 5f:76:86:94:fc:87:b5:bc:d3:87:8c:08:95:54:e3:bf:53:d2: 27:29:97:74:48:62:41:47:c4:0e:e2:76:55:8c:c9:50:d3:1a: 23:0b:bb:3c:26:5e:d7:cf:aa:ea:28:a7:d7:c3:09:29:e2:57: a7:13:5d:5f:d1:de:ed:da:4d:b7:ee:4c:81:ba:a3:20:f2:b8: 2b:36:bb:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCYy/cF3pEd8ZDZqmMWlBq3qhrpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDNDIyRjRFN0RFQjIyQkY4NDQ5QTQ4OTZEQTVCNjA1 OERGNjVBRDAeFw0yNTA2MTcwNDI1NDZaFw0yNTA2MTgwNTU1NDZaMDMxMTAvBgNV BAMTKDkwN0Y0RUY5QTMyQjQwNzc3RTBGQjFBQUEyQzA3OEMxRDk4RTkyNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa0wZ/W8+4lnI0qgq1UUHp7VjJ fvg59RtODrnO+NKGFqyXm56k6duLZHPA5U7Hlis8QzoEdathjSqqDowyavIvW0fV MTTVZOsSsuD5gElaQacvKogW/1FBlVvhFeH4sA924uwmIs0z5EotaUzhNLcSqosg 4nHYMW9GGl9ugINhK/Cd5bSFxPK8ZCe0JehUlluM1JIT8P1TZRExBl9AdGY0YRD8 2yVcbhj01TG+wOZPKMesM3oaGZUl6UNUUu2nJZaarpuu0jSTKHWvVHnhJM53BywF BD3qR0LtbUevFML3ZST5EwszC4xm7gonUR1yJ6Iy4VOtVLnVWJX/fGb3PuDZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkH9O+aMrQHd+D7GqosB4wdmOkk8wHwYDVR0j BBgwFoAUuMQi9Ofesiv4RJpIltpbYFjfZa0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmJRamZDUHdMb2ZjUHU1VmJ4N0tFZEVzcDF0NVFKRXVyUGN5UGFpWGdj dU4vMC9COEM0MjJGNEU3REVCMjJCRjg0NDlBNDg5NkRBNUI2MDU4REY2NUFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4QzQyMkY0RTdERUIyMkJG ODQ0OUE0ODk2REE1QjYwNThERjY1QUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NmJRamZDUHdMb2ZjUHU1VmJ4N0tFZEVzcDF0NVFKRXVyUGN5UGFpWGdjdU4vMC9C OEM0MjJGNEU3REVCMjJCRjg0NDlBNDg5NkRBNUI2MDU4REY2NUFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJMlpEVY3WXBgfeUagNNhNMSlUMHEeFHtjBNwp/h+QFsQSzun+ZZ3YZWOH9e2 5Zc3VfeAs8xm8ldaYuOR9sckhUCyNQb5jvOAUgHPM8x9YzXe/g4JSXxMyEL96h39 SkVqRCfgFTbY/JfqPBCD3soFyulZC2V6TKGn7vSgDeEqEmisAU0a4hj4uS2apwFE N9/U4WvnSOCUGD5YDJrhnJ0HdoAbeHosd1jhSHaO5Ln0IdRP1YvUX3aGlPyHtbzT h4wIlVTjv1PSJymXdEhiQUfEDuJ2VYzJUNMaIwu7PCZe18+q6iin18MJKeJXpxNd X9He7dpNt+5MgbqjIPK4Kza7aQ== -----END CERTIFICATE-----Generated at Tue Jun 17 11:12:53 2025 by rpki-client