$ rpki-client -vvf rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.mft File: E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.mft (raw, json) Hash identifier: YCbHIeku1fqJ520LUFLVZc8/fU6zmlbWOVbchhnPoOw= Subject key identifier: E7:42:6E:0B:0A:29:16:C8:6A:A7:4F:7C:51:C0:3E:47:4F:50:3B:CC Authority key identifier: E5:2C:FD:D7:9A:BB:4B:9B:26:A8:AA:C3:84:6C:96:32:6A:03:EE:0E Certificate issuer: /CN=E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E Certificate serial: 45BCAD33098EEA906E048EAE23E01E0B395BA2E6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.cer Subject info access: rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.mft Manifest number: BA Signing time: Wed 18 Jun 2025 15:01:20 +0000 Manifest this update: Wed 18 Jun 2025 14:56:20 +0000 Manifest next update: Thu 19 Jun 2025 16:33:20 +0000 Files and hashes: 1: 34352e3138372e3232342e302f32322d3332203d3e20323639353036.roa (hash: QiNgulMEBvrgNySX89zkaKlw5CgByrNT8KCwh/GqcCA=) 2: 34352e3137302e3137362e302f32322d3332203d3e20323639353036.roa (hash: iP0MiFNZ7MB4k+z5LnbGpHmdyCV10L4G21hPIzqxZZE=) 3: 323830343a363561383a3a2f33322d313238203d3e20323639353036.roa (hash: jwmx9tY7aXmGV+BMQW0uL6eUDSmG/T2zxZnlXI4fwOU=) 4: E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.crl (hash: fpJS3v5tKcJvHxUAkgREKUPl6QaniBgU0RmGeyAoAck=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.crl rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Jun 2025 16:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:bc:ad:33:09:8e:ea:90:6e:04:8e:ae:23:e0:1e:0b:39:5b:a2:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E Validity Not Before: Jun 18 14:56:20 2025 GMT Not After : Jun 19 16:33:20 2025 GMT Subject: CN=E7426E0B0A2916C86AA74F7C51C03E474F503BCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fc:ae:94:03:9a:e8:08:52:54:1c:10:8d:02: 79:77:44:5d:8e:d5:b8:4e:da:70:64:a5:69:b8:f3: 74:62:51:b2:35:a7:e4:32:2c:c9:1e:24:05:b0:b6: 85:7b:42:7e:02:6d:9f:af:49:4b:ba:ce:d7:88:8b: 14:63:f8:44:b1:7e:f2:00:fb:cd:62:3c:68:e9:dc: 3d:e9:34:2e:30:bc:a2:85:38:f6:31:8f:27:cf:39: 29:e2:b3:29:28:81:82:1b:88:19:39:0f:b2:12:51: 21:73:dd:d4:38:24:81:f8:c4:01:ce:0b:bd:8d:f8: 4a:60:5e:c3:3b:c8:a7:cf:91:21:55:2c:39:c8:37: 16:96:8d:78:68:86:26:ca:64:a9:26:c1:e1:9a:da: 26:c6:53:94:02:08:8e:33:7e:db:4d:10:94:1c:e3: 6c:89:01:a4:9d:ce:1a:9a:48:4f:c3:89:b2:85:7b: 04:29:4a:7d:49:94:6e:2e:54:ed:10:70:af:cf:e5: d3:cf:8e:e1:04:48:b2:fd:e8:33:4c:87:6d:3a:0b: 49:ce:75:6c:8f:f9:f3:b7:f0:0c:f2:f6:ec:77:d9: b6:4b:64:0b:9c:00:aa:07:b6:0a:3d:98:e7:6b:2d: 26:4d:56:42:4b:f2:64:d5:f8:b3:fe:d9:30:10:9f: 57:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:42:6E:0B:0A:29:16:C8:6A:A7:4F:7C:51:C0:3E:47:4F:50:3B:CC X509v3 Authority Key Identifier: keyid:E5:2C:FD:D7:9A:BB:4B:9B:26:A8:AA:C3:84:6C:96:32:6A:03:EE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H5tmdFeCVbtS41Ga8nNnrw15TrANoD6kXQTe8q42JLK/0/E52CFDD79ABB4B9B26A8AAC3846C96326A03EE0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:69:7d:1b:45:1e:1f:c6:1f:3f:d2:fe:71:6c:ee:62:e7:48: 0b:fb:c4:fd:16:21:be:ff:fb:64:11:87:fb:58:15:ff:b4:38: 99:31:62:1d:0e:05:bd:4c:de:76:0b:4b:db:7d:c2:48:c2:81: 02:30:98:26:c6:85:4b:b2:a5:fe:8b:0b:56:fb:02:06:d7:9e: f0:c5:a1:64:f0:c2:6a:c9:33:59:06:7f:0d:22:99:46:c0:cb: 2e:0f:42:46:da:05:c8:cf:63:6e:aa:24:38:10:a2:81:3a:ad: 33:58:cb:72:54:8d:8b:6c:f0:08:05:9d:e8:35:50:5a:52:a6: 01:4f:ca:4d:f1:99:7f:0e:04:d0:87:e0:42:98:0e:72:f1:6e: ab:df:af:f7:2d:c4:46:6b:18:80:41:bb:aa:1d:7f:2a:13:7d: ad:0b:b6:02:f5:ac:6d:49:24:03:10:60:87:77:f3:91:b5:e2: 51:aa:7a:1f:eb:3e:03:08:50:32:6f:15:0c:62:7a:38:fd:a0: 6a:40:d0:7d:1e:0c:82:e1:d6:30:50:29:52:55:9f:97:e9:fb: 23:2c:f1:7d:e1:88:9a:f9:12:72:16:39:26:6c:fc:58:7b:8b: 82:38:95:b9:65:0f:c9:6c:51:c7:1a:a5:aa:ab:6f:5e:19:5a: 3c:5b:80:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURbytMwmO6pBuBI6uI+AeCzlbouYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUyQ0ZERDc5QUJCNEI5QjI2QThBQUMzODQ2Qzk2MzI2 QTAzRUUwRTAeFw0yNTA2MTgxNDU2MjBaFw0yNTA2MTkxNjMzMjBaMDMxMTAvBgNV BAMTKEU3NDI2RTBCMEEyOTE2Qzg2QUE3NEY3QzUxQzAzRTQ3NEY1MDNCQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq/K6UA5roCFJUHBCNAnl3RF2O 1bhO2nBkpWm483RiUbI1p+QyLMkeJAWwtoV7Qn4CbZ+vSUu6zteIixRj+ESxfvIA +81iPGjp3D3pNC4wvKKFOPYxjyfPOSnisykogYIbiBk5D7ISUSFz3dQ4JIH4xAHO C72N+EpgXsM7yKfPkSFVLDnINxaWjXhohibKZKkmweGa2ibGU5QCCI4zfttNEJQc 42yJAaSdzhqaSE/DibKFewQpSn1JlG4uVO0QcK/P5dPPjuEESLL96DNMh206C0nO dWyP+fO38Azy9ux32bZLZAucAKoHtgo9mOdrLSZNVkJL8mTV+LP+2TAQn1dnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU50JuCwopFshqp098UcA+R09QO8wwHwYDVR0j BBgwFoAU5Sz915q7S5smqKrDhGyWMmoD7g4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEg1dG1kRmVDVmJ0UzQxR2E4bk5ucncxNVRyQU5vRDZrWFFUZThxNDJK TEsvMC9FNTJDRkRENzlBQkI0QjlCMjZBOEFBQzM4NDZDOTYzMjZBMDNFRTBFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U1MkNGREQ3OUFCQjRCOUIy NkE4QUFDMzg0NkM5NjMyNkEwM0VFMEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OEg1dG1kRmVDVmJ0UzQxR2E4bk5ucncxNVRyQU5vRDZrWFFUZThxNDJKTEsvMC9F NTJDRkRENzlBQkI0QjlCMjZBOEFBQzM4NDZDOTYzMjZBMDNFRTBFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAGl9G0UeH8YfP9L+cWzuYudIC/vE/RYhvv/7ZBGH+1gV/7Q4mTFiHQ4FvUze dgtL233CSMKBAjCYJsaFS7Kl/osLVvsCBtee8MWhZPDCaskzWQZ/DSKZRsDLLg9C RtoFyM9jbqokOBCigTqtM1jLclSNi2zwCAWd6DVQWlKmAU/KTfGZfw4E0IfgQpgO cvFuq9+v9y3ERmsYgEG7qh1/KhN9rQu2AvWsbUkkAxBgh3fzkbXiUap6H+s+AwhQ Mm8VDGJ6OP2gakDQfR4MguHWMFApUlWfl+n7IyzxfeGImvkSchY5Jmz8WHuLgjiV uWUPyWxRxxqlqqtvXhlaPFuAbg== -----END CERTIFICATE-----Generated at Thu Jun 19 01:56:36 2025 by rpki-client