$ rpki-client -vvf rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.mft File: 0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.mft (raw, json) Hash identifier: vKhW1CN0lWMRenJkTWe0jr245q40uw4fcS1vV8xmPAQ= Subject key identifier: FD:1A:0B:29:D4:AE:AC:45:E8:55:B9:9B:12:6D:82:FB:CC:D5:CC:0B Authority key identifier: 03:90:EE:C2:B0:EA:80:04:D4:BC:F7:E7:34:A7:D5:97:D3:0C:52:AF Certificate issuer: /CN=0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF Certificate serial: 74900F306393108A809A7A976203F88ED0A11DA5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.cer Subject info access: rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.mft Manifest number: 0100 Signing time: Fri 20 Jun 2025 12:51:38 +0000 Manifest this update: Fri 20 Jun 2025 12:46:38 +0000 Manifest next update: Sat 21 Jun 2025 13:31:38 +0000 Files and hashes: 1: 3138392e3132372e3135302e302f32342d3234203d3e20323730373035.roa (hash: cJyjuSJvWpOgqRiNPMmpUnTD4GWTFOACN48W78BpNKY=) 2: 323830343a373031383a3a2f33322d3438203d3e20323730373035.roa (hash: HASGDeLgNzVETEVXw/fM5Lje0k/ttvuMCt0df+QhHJw=) 3: 0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.crl (hash: g9xhAq6Z1OW4LjU9ibRZKGqd0K/Lth0CaL76haBtKi0=) 4: 3138392e3132372e3134382e302f32332d3234203d3e20323730373035.roa (hash: HEdd0Kno62unwjnnOpJqQkdLQvYtUkhA/Y6Id8i29+A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.crl rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 13:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:90:0f:30:63:93:10:8a:80:9a:7a:97:62:03:f8:8e:d0:a1:1d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF Validity Not Before: Jun 20 12:46:38 2025 GMT Not After : Jun 21 13:31:38 2025 GMT Subject: CN=FD1A0B29D4AEAC45E855B99B126D82FBCCD5CC0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b2:db:44:72:03:5f:d7:c6:26:74:41:13:c2: 17:39:b0:19:f8:56:e2:6c:1e:7b:ef:c9:90:fc:bc: 47:eb:5c:7f:84:56:89:28:1c:98:81:57:aa:60:7e: 8b:d6:ea:a6:20:b8:52:f4:dc:47:a5:8d:b5:6a:21: a2:c3:5b:15:84:ce:0b:a3:c4:33:de:33:94:f6:da: 49:f0:7b:ce:80:2c:85:2d:0a:ce:73:a1:5d:b0:d0: 1f:e8:1f:ae:b6:b7:2a:ac:a0:04:5a:04:5e:a3:48: 6f:f8:35:c0:8f:55:83:3d:e0:88:20:78:e2:0e:62: 88:f2:f8:5e:7e:34:c9:e3:07:9d:1d:23:1d:43:a3: 59:69:c6:81:be:6d:7d:1f:8f:e3:0d:5c:c2:11:45: 09:40:b2:a2:10:f6:6e:29:45:6c:b6:12:21:14:7d: 66:3f:f1:a5:15:06:6b:cd:52:07:63:bb:31:d5:3d: 22:c7:83:c2:c6:18:46:bc:82:7d:b1:92:3f:ed:a8: 2b:ae:c5:ad:5f:05:b3:de:9f:67:f8:ac:50:04:66: f6:da:7b:00:44:43:7e:6d:9f:49:6b:5f:5e:aa:df: a2:ec:d9:d5:56:1c:3a:88:e7:56:8d:b2:4d:60:6f: 3e:66:d7:09:c6:87:24:1c:e1:eb:2d:dd:ba:1b:be: f7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1A:0B:29:D4:AE:AC:45:E8:55:B9:9B:12:6D:82:FB:CC:D5:CC:0B X509v3 Authority Key Identifier: keyid:03:90:EE:C2:B0:EA:80:04:D4:BC:F7:E7:34:A7:D5:97:D3:0C:52:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SiqKYL1KfpUrxQE23uNkuUGhf7j3qCfr2jy4oFXsTrB/1/0390EEC2B0EA8004D4BCF7E734A7D597D30C52AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:23:b6:e7:b3:66:f3:4f:b5:47:13:bb:ae:41:fb:d8:45:78: 9e:5b:1c:38:25:d6:5a:74:a7:0b:3f:cb:4d:cf:7e:03:19:95: d9:d0:85:8c:17:58:24:22:f4:4c:23:bc:41:3c:dc:df:11:59: 60:4e:23:af:f5:fb:a3:23:b4:39:3d:68:bd:a3:01:14:3d:5d: e2:9f:0b:5a:38:b2:cd:4b:a1:09:54:9c:53:39:67:32:5b:34: b1:e2:cc:7a:91:89:7d:8a:9d:cb:c4:99:46:60:4a:49:d3:78: 86:ab:08:5b:cc:92:dc:b0:62:aa:b2:8d:f1:85:75:f4:bb:b2: 46:72:68:13:47:f0:65:22:f4:71:54:f3:95:fa:be:b3:c1:54: fa:7d:7d:c3:96:2a:17:26:56:4a:cd:d0:8e:1a:82:75:ce:fa: 5c:93:b5:15:70:e4:44:05:15:1a:73:da:6d:df:70:57:a0:f6: 3e:47:87:a9:a2:e6:72:6d:d8:e0:58:01:b4:9e:25:ba:b8:79: 05:4e:8f:82:76:9b:60:b4:8d:93:c3:54:01:97:24:2f:92:8d: 12:55:53:5f:6c:be:61:55:5f:1e:8b:65:1e:b9:0f:bc:20:ec: bc:65:cb:8e:33:34:08:c1:2a:30:35:57:e0:c4:87:96:32:62: f4:61:ef:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdJAPMGOTEIqAmnqXYgP4jtChHaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM5MEVFQzJCMEVBODAwNEQ0QkNGN0U3MzRBN0Q1OTdE MzBDNTJBRjAeFw0yNTA2MjAxMjQ2MzhaFw0yNTA2MjExMzMxMzhaMDMxMTAvBgNV BAMTKEZEMUEwQjI5RDRBRUFDNDVFODU1Qjk5QjEyNkQ4MkZCQ0NENUNDMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRsttEcgNf18YmdEETwhc5sBn4 VuJsHnvvyZD8vEfrXH+EVokoHJiBV6pgfovW6qYguFL03EeljbVqIaLDWxWEzguj xDPeM5T22knwe86ALIUtCs5zoV2w0B/oH662tyqsoARaBF6jSG/4NcCPVYM94Igg eOIOYojy+F5+NMnjB50dIx1Do1lpxoG+bX0fj+MNXMIRRQlAsqIQ9m4pRWy2EiEU fWY/8aUVBmvNUgdjuzHVPSLHg8LGGEa8gn2xkj/tqCuuxa1fBbPen2f4rFAEZvba ewBEQ35tn0lrX16q36Ls2dVWHDqI51aNsk1gbz5m1wnGhyQc4est3bobvvddAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/RoLKdSurEXoVbmbEm2C+8zVzAswHwYDVR0j BBgwFoAUA5DuwrDqgATUvPfnNKfVl9MMUq8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFNpcUtZTDFLZnBVcnhRRTIzdU5rdVVHaGY3ajNxQ2ZyMmp5NG9GWHNU ckIvMS8wMzkwRUVDMkIwRUE4MDA0RDRCQ0Y3RTczNEE3RDU5N0QzMEM1MkFGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzOTBFRUMyQjBFQTgwMDRE NEJDRjdFNzM0QTdENTk3RDMwQzUyQUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFNpcUtZTDFLZnBVcnhRRTIzdU5rdVVHaGY3ajNxQ2ZyMmp5NG9GWHNUckIvMS8w MzkwRUVDMkIwRUE4MDA0RDRCQ0Y3RTczNEE3RDU5N0QzMEM1MkFGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZyO257Nm80+1RxO7rkH72EV4nlscOCXWWnSnCz/LTc9+AxmV2dCFjBdYJCL0 TCO8QTzc3xFZYE4jr/X7oyO0OT1ovaMBFD1d4p8LWjiyzUuhCVScUzlnMls0seLM epGJfYqdy8SZRmBKSdN4hqsIW8yS3LBiqrKN8YV19LuyRnJoE0fwZSL0cVTzlfq+ s8FU+n19w5YqFyZWSs3QjhqCdc76XJO1FXDkRAUVGnPabd9wV6D2PkeHqaLmcm3Y 4FgBtJ4lurh5BU6PgnabYLSNk8NUAZckL5KNElVTX2y+YVVfHotlHrkPvCDsvGXL jjM0CMEqMDVX4MSHljJi9GHvDQ== -----END CERTIFICATE-----Generated at Sat Jun 21 01:08:40 2025 by rpki-client