$ rpki-client -vvf rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft File: 52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft (raw, json) Hash identifier: 8fzgNoz2mpKUS/XbtahRqdCyxmt79ZYbc+TrsdQNJn0= Subject key identifier: CC:E9:AD:F5:50:DB:CE:17:81:8E:78:C7:EA:C2:26:8F:83:20:A1:14 Authority key identifier: 52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E Certificate issuer: /CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E Certificate serial: 2978FDA29F41210DBBB890DD5A483561292B6119 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer Subject info access: rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft Manifest number: 15 Signing time: Mon 16 Jun 2025 14:16:43 +0000 Manifest this update: Mon 16 Jun 2025 14:11:43 +0000 Manifest next update: Tue 17 Jun 2025 16:53:43 +0000 Files and hashes: 1: 323830343a386538633a3a2f33322d3332203d3e20323733343333.roa (hash: GKQiZSRTggPaFx/yFhowb4IhNVU02HJ7y8OaPzs+f/0=) 2: 52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl (hash: DAYd1V7BI9EaH8SAK6+rJKiBRp93i4BCQunnSiG1sHs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 16:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:78:fd:a2:9f:41:21:0d:bb:b8:90:dd:5a:48:35:61:29:2b:61:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E Validity Not Before: Jun 16 14:11:43 2025 GMT Not After : Jun 17 16:53:43 2025 GMT Subject: CN=CCE9ADF550DBCE17818E78C7EAC2268F8320A114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ab:9b:8d:70:25:13:54:c7:1c:bf:a9:2a:de: d4:f0:8a:51:04:4d:5c:ef:59:11:d4:9d:fa:6d:93: f6:16:7f:26:72:40:fc:31:2f:9f:9c:0c:47:42:2f: af:67:c8:c9:73:48:71:bd:1a:2d:8b:94:2a:27:60: e9:1a:90:d3:02:06:26:3e:64:a9:44:e2:62:e0:ef: d3:2e:d3:a2:44:e3:75:fc:a6:22:31:89:0d:c2:3c: 68:91:ba:da:fa:1b:33:45:02:d9:ba:7b:4d:1c:d6: 27:22:42:53:d2:d9:df:48:2d:64:23:d6:c3:31:74: 27:1a:3e:e0:b9:4d:30:23:59:74:14:fd:ac:14:f8: de:85:c5:51:24:94:59:ed:a9:bc:49:46:63:97:ab: f0:87:3e:25:8a:71:80:44:de:13:dd:de:57:ac:de: e6:92:c1:4d:3f:16:6a:7b:be:74:33:1b:04:1c:0c: 49:e3:83:11:3a:59:09:90:cc:31:41:86:87:ae:dc: 42:17:b7:b6:a8:6b:d7:2d:5a:85:08:b8:35:23:cf: 6e:a3:5b:20:56:8e:79:56:77:df:ac:37:23:40:70: 5c:3b:91:2d:4e:20:30:05:98:f9:34:c7:18:b8:5c: 28:2c:eb:8f:c3:f5:a1:f2:5c:d9:60:56:c1:7d:04: 0b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E9:AD:F5:50:DB:CE:17:81:8E:78:C7:EA:C2:26:8F:83:20:A1:14 X509v3 Authority Key Identifier: keyid:52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7e:c3:3d:04:c0:0f:9f:72:29:e3:34:88:07:19:5d:23:12: 77:1e:b2:d7:c5:6e:c2:d9:e9:34:97:f3:b6:9e:c3:89:15:12: ab:77:60:ab:22:66:e2:c0:cb:42:f7:1e:33:de:eb:f8:b0:db: f9:18:5c:48:ec:22:4d:9c:7e:1b:9d:ee:69:be:ca:c1:c9:74: 5b:55:66:a0:59:5e:31:bd:bf:66:e4:85:d2:65:4a:69:7d:d0: ca:cb:ff:8d:35:b8:82:5c:d9:21:46:34:c3:5f:d5:32:60:27: c9:99:4d:87:7a:89:82:73:bd:ef:06:6f:a6:f6:e9:94:71:7b: 0a:0b:ce:4e:3a:59:1a:f7:35:26:0f:13:82:3a:26:cd:58:00: d8:7d:d7:fd:10:14:21:19:3c:05:39:d4:d3:14:47:42:29:3d: 47:36:71:f9:00:9f:fb:b2:3b:5e:5f:4d:95:ff:4d:b5:5c:3c: 19:3c:43:e7:ff:b4:19:f5:dd:f8:67:29:ff:d1:d2:ff:83:55: 8f:7f:9d:0a:b9:c2:11:77:d6:d0:12:41:d4:c8:95:e9:99:12: 34:ed:a2:91:73:70:8a:0d:05:42:4c:f5:1a:b5:72:a6:a9:ad: 07:55:fc:90:a3:3d:1f:48:ae:31:aa:48:31:2a:9a:9d:bf:0d: 56:36:2b:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKXj9op9BIQ27uJDdWkg1YSkrYRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGRDM4QzVEMERGMzY1Q0Q4REUzQkQxREQwRTkyQzFB NkI2OUY3RTAeFw0yNTA2MTYxNDExNDNaFw0yNTA2MTcxNjUzNDNaMDMxMTAvBgNV BAMTKENDRTlBREY1NTBEQkNFMTc4MThFNzhDN0VBQzIyNjhGODMyMEExMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbq5uNcCUTVMccv6kq3tTwilEE TVzvWRHUnfptk/YWfyZyQPwxL5+cDEdCL69nyMlzSHG9Gi2LlConYOkakNMCBiY+ ZKlE4mLg79Mu06JE43X8piIxiQ3CPGiRutr6GzNFAtm6e00c1iciQlPS2d9ILWQj 1sMxdCcaPuC5TTAjWXQU/awU+N6FxVEklFntqbxJRmOXq/CHPiWKcYBE3hPd3les 3uaSwU0/Fmp7vnQzGwQcDEnjgxE6WQmQzDFBhoeu3EIXt7aoa9ctWoUIuDUjz26j WyBWjnlWd9+sNyNAcFw7kS1OIDAFmPk0xxi4XCgs64/D9aHyXNlgVsF9BAtJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzOmt9VDbzheBjnjH6sImj4MgoRQwHwYDVR0j BBgwFoAUUv04xdDfNlzY3jvR3Q6Swaa2n34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1lOeGVGVjU2elNOdkthZDR6WnZIeUtiallYd1BLM0NGTFNkWHExVUxn TUovMC81MkZEMzhDNUQwREYzNjVDRDhERTNCRDFERDBFOTJDMUE2QjY5RjdFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyRkQzOEM1RDBERjM2NUNE OERFM0JEMUREMEU5MkMxQTZCNjlGN0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1lOeGVGVjU2elNOdkthZDR6WnZIeUtiallYd1BLM0NGTFNkWHExVUxnTUovMC81 MkZEMzhDNUQwREYzNjVDRDhERTNCRDFERDBFOTJDMUE2QjY5RjdFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfn7DPQTAD59yKeM0iAcZXSMSdx6y18VuwtnpNJfztp7DiRUSq3dgqyJm4sDL QvceM97r+LDb+RhcSOwiTZx+G53uab7Kwcl0W1VmoFleMb2/ZuSF0mVKaX3Qysv/ jTW4glzZIUY0w1/VMmAnyZlNh3qJgnO97wZvpvbplHF7CgvOTjpZGvc1Jg8Tgjom zVgA2H3X/RAUIRk8BTnU0xRHQik9RzZx+QCf+7I7Xl9Nlf9NtVw8GTxD5/+0GfXd +Gcp/9HS/4NVj3+dCrnCEXfW0BJB1MiV6ZkSNO2ikXNwig0FQkz1GrVypqmtB1X8 kKM9H0iuMapIMSqanb8NVjYrDw== -----END CERTIFICATE-----Generated at Mon Jun 16 19:32:07 2025 by rpki-client