$ rpki-client -vvf rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft File: 00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft (raw, json) Hash identifier: Dss1XuT+WOVYHmraDSqVgtIO6G1Xs6Qhcfxxr8fKGgw= Subject key identifier: D7:EB:36:03:3C:D2:37:56:72:20:6B:F3:36:7D:05:D5:B9:34:14:1D Authority key identifier: 00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74 Certificate issuer: /CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74 Certificate serial: 0CAFE82C5824B84D9068D265276ABAFF271C0AEB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer Subject info access: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft Manifest number: 0252 Signing time: Mon 23 Jun 2025 02:23:14 +0000 Manifest this update: Mon 23 Jun 2025 02:18:14 +0000 Manifest next update: Tue 24 Jun 2025 03:52:14 +0000 Files and hashes: 1: 34352e3138302e3134342e302f32322d3332203d3e20323639313337.roa (hash: CQkxTLpB0h8sw9f6HinJ/zgqW1tumRLs+pW63/RGxSA=) 2: 00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl (hash: OlTp713QdRkf5EDlfj4VaDoyRQlUmFA6fSDFcUZmIGk=) 3: 323830343a356666383a3a2f33322d3438203d3e20323639313337.roa (hash: x6rW9jCCge7pgSikdO+N6Nk7UH7lwIZA6/UkvStSYRc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 24 Jun 2025 03:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:af:e8:2c:58:24:b8:4d:90:68:d2:65:27:6a:ba:ff:27:1c:0a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74 Validity Not Before: Jun 23 02:18:14 2025 GMT Not After : Jun 24 03:52:14 2025 GMT Subject: CN=D7EB36033CD2375672206BF3367D05D5B934141D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e6:18:32:d9:33:32:30:2c:a9:67:30:67:70: 36:d2:fd:1e:d7:96:43:73:70:97:4b:76:98:06:a1: c5:e5:6e:68:4d:c2:b7:b0:01:6e:c2:33:42:63:52: 57:04:48:fe:e5:6f:6a:f8:e3:80:f9:7e:e6:20:b8: 38:83:a2:5f:72:aa:5e:cc:07:07:68:a1:1a:19:3d: 65:eb:11:ec:39:c3:06:78:6c:83:43:34:04:62:4b: 68:33:de:f3:ac:67:fc:d4:d1:fc:81:5d:c8:0c:26: a7:e4:1f:73:2d:f0:73:71:b9:5b:6c:cc:23:b4:35: 68:77:90:aa:b7:d7:c7:5f:a1:1c:19:8f:a0:25:b6: af:0b:d5:23:55:3c:de:b4:15:00:2b:5e:01:eb:e8: 24:e6:47:33:97:7c:ba:cf:ce:7d:46:81:42:50:1b: 33:00:3c:74:b2:da:47:ee:f5:ca:c2:a6:2a:4b:26: a8:27:4c:c5:c3:01:6f:1b:fe:4c:d6:aa:3c:8d:26: 75:45:1e:5b:bf:a3:91:08:bb:c1:9d:81:25:52:1b: ab:e4:90:03:20:2c:35:92:ae:57:88:82:c3:6b:83: 50:d8:d4:b4:05:cf:ab:49:0a:95:66:30:72:a3:23: 46:ec:28:29:dc:ff:dc:27:81:bd:72:65:d6:ab:a3: 60:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EB:36:03:3C:D2:37:56:72:20:6B:F3:36:7D:05:D5:B9:34:14:1D X509v3 Authority Key Identifier: keyid:00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:87:b7:59:4c:aa:ed:3e:b9:45:e7:81:2b:dc:fb:45:59:7c: e6:dc:37:67:a9:5f:e9:82:f9:3a:cc:33:fb:10:df:ff:28:0d: 94:4a:54:a4:b0:30:b2:1d:16:08:6f:64:e2:ad:59:ad:e0:31: d5:df:fe:58:ad:74:0f:51:a0:6a:42:43:bb:dd:f5:3d:e1:d7: c1:c5:e0:a3:7a:e0:cc:df:eb:88:cd:0e:50:a2:a0:91:48:d3: 0e:17:52:23:dc:20:95:da:8a:6d:a6:3f:65:d5:2d:75:72:e0: 5d:9d:3d:9b:a4:f9:f2:8c:a7:18:66:44:01:be:06:ba:d1:f6: b1:36:84:90:fb:0c:dc:1d:07:da:62:a1:d7:8f:98:3e:1f:91: 35:62:bd:25:d3:ed:61:08:db:ea:8d:e9:6a:10:61:ed:9a:d4: 2f:94:ff:7b:56:66:20:e9:90:be:d0:72:09:ad:1e:dd:1a:43: 06:6c:63:89:8c:fe:30:81:f9:b6:31:3b:48:4c:4c:d2:e0:28: 16:56:92:20:62:46:c4:cf:2e:8e:e8:8a:67:18:b9:33:20:58: 27:83:f0:5b:f0:06:54:c8:c1:73:0b:af:19:9c:2d:08:69:a0: 59:8c:3f:e1:db:0d:e4:56:d2:81:b3:95:d2:3a:f7:a8:86:47: 55:59:95:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDK/oLFgkuE2QaNJlJ2q6/yccCuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBEOTVBQUI0M0UwMzZEN0E2REUyMjI4RTlEQjEzRkZB Qjc5QkU3NDAeFw0yNTA2MjMwMjE4MTRaFw0yNTA2MjQwMzUyMTRaMDMxMTAvBgNV BAMTKEQ3RUIzNjAzM0NEMjM3NTY3MjIwNkJGMzM2N0QwNUQ1QjkzNDE0MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC05hgy2TMyMCypZzBncDbS/R7X lkNzcJdLdpgGocXlbmhNwrewAW7CM0JjUlcESP7lb2r444D5fuYguDiDol9yql7M BwdooRoZPWXrEew5wwZ4bINDNARiS2gz3vOsZ/zU0fyBXcgMJqfkH3Mt8HNxuVts zCO0NWh3kKq318dfoRwZj6Altq8L1SNVPN60FQArXgHr6CTmRzOXfLrPzn1GgUJQ GzMAPHSy2kfu9crCpipLJqgnTMXDAW8b/kzWqjyNJnVFHlu/o5EIu8GdgSVSG6vk kAMgLDWSrleIgsNrg1DY1LQFz6tJCpVmMHKjI0bsKCnc/9wngb1yZdaro2C1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1+s2AzzSN1ZyIGvzNn0F1bk0FB0wHwYDVR0j BBgwFoAUANlaq0PgNtem3iIo6dsT/6t5vnQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGFQMWk0eWd5eWlyZFl0YzVRUW01OFRKdVFYYWRxVDcxeXlqaDNOTVF5 Q0svMS8wMEQ5NUFBQjQzRTAzNkQ3QTZERTIyMjhFOURCMTNGRkFCNzlCRTc0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwRDk1QUFCNDNFMDM2RDdB NkRFMjIyOEU5REIxM0ZGQUI3OUJFNzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGFQMWk0eWd5eWlyZFl0YzVRUW01OFRKdVFYYWRxVDcxeXlqaDNOTVF5Q0svMS8w MEQ5NUFBQjQzRTAzNkQ3QTZERTIyMjhFOURCMTNGRkFCNzlCRTc0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR4e3WUyq7T65ReeBK9z7RVl85tw3Z6lf6YL5Oswz+xDf/ygNlEpUpLAwsh0W CG9k4q1ZreAx1d/+WK10D1GgakJDu931PeHXwcXgo3rgzN/riM0OUKKgkUjTDhdS I9wgldqKbaY/ZdUtdXLgXZ09m6T58oynGGZEAb4GutH2sTaEkPsM3B0H2mKh14+Y Ph+RNWK9JdPtYQjb6o3pahBh7ZrUL5T/e1ZmIOmQvtByCa0e3RpDBmxjiYz+MIH5 tjE7SExM0uAoFlaSIGJGxM8ujuiKZxi5MyBYJ4PwW/AGVMjBcwuvGZwtCGmgWYw/ 4dsN5FbSgbOV0jr3qIZHVVmVQA== -----END CERTIFICATE-----Generated at Mon Jun 23 09:06:39 2025 by rpki-client