$ rpki-client -vvf rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.mft File: 0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.mft (raw, json) Hash identifier: Ojh6xZ5eazzz1ut+N/Hxs+5fLEbF8K1c+RMDMxJYU7g= Subject key identifier: 47:1B:31:E8:84:D5:9B:3F:1F:3D:6C:6A:B8:AE:DF:E3:D7:55:3B:F5 Authority key identifier: 0C:65:DE:B6:7B:30:70:5A:31:3E:F8:FA:D7:A0:D6:E2:BE:22:D1:84 Certificate issuer: /CN=0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184 Certificate serial: 179B929A2E00C5CF6F71F2775D9AD34CD4FA03D4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer Subject info access: rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.mft Manifest number: 0244 Signing time: Thu 19 Jun 2025 09:39:52 +0000 Manifest this update: Thu 19 Jun 2025 09:34:52 +0000 Manifest next update: Fri 20 Jun 2025 10:58:52 +0000 Files and hashes: 1: 3137392e34392e3135322e302f32322d3332203d3e20323634343533.roa (hash: 6zWBxGgnR8yeZa3HrQNd3oimHrg81pFPY8BbXU6axQQ=) 2: 3133322e3235352e35362e302f32322d3234203d3e20323634343533.roa (hash: +Gmqh79lvmySNz6dHaJ3K5K8fN0hpHOysD/HtCqHnCE=) 3: 323830343a316565383a3a2f33322d3438203d3e20323634343533.roa (hash: Xguks/9wbl6T7AQmZ0HipeG5Bo5EBk43axD8s6h0hLw=) 4: 0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.crl (hash: entaLFPveQWM3rGu2ngwzswx7soTbSsLgpwxcoSEHrw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.crl rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 08:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:9b:92:9a:2e:00:c5:cf:6f:71:f2:77:5d:9a:d3:4c:d4:fa:03:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184 Validity Not Before: Jun 19 09:34:52 2025 GMT Not After : Jun 20 10:58:52 2025 GMT Subject: CN=471B31E884D59B3F1F3D6C6AB8AEDFE3D7553BF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:7e:39:59:eb:fe:f8:d6:5a:8b:d4:8b:b0: 6a:e1:c5:0b:cd:2a:99:59:c9:13:d1:dd:53:73:2a: 0c:75:63:e5:0a:a7:57:cc:57:93:96:cf:7d:9f:34: f0:b7:d6:75:e4:67:5a:4d:14:35:b6:e6:ef:b9:64: 50:b0:17:4a:03:a6:f4:28:c7:49:e6:d2:22:c8:b9: d6:92:37:3c:96:aa:65:c7:da:b9:b5:da:ca:ce:46: eb:ad:f1:0c:2d:63:54:7c:4a:dd:ff:05:b0:a0:9b: 2e:bd:90:82:fa:b4:1d:d4:53:f9:59:8a:ba:97:19: 0b:87:88:9d:f6:18:21:b2:1a:70:27:a9:53:53:14: 6b:8c:42:8c:dd:1a:e5:fd:ad:44:b7:86:03:87:c8: 21:00:7e:dc:79:92:b3:04:a9:14:9c:ac:fe:8a:0f: 57:59:fb:40:bf:88:08:6c:ca:f7:fc:4f:d1:ed:84: 40:a5:f6:a5:7b:a6:dc:e1:60:f8:44:a8:4a:3c:42: c9:99:78:89:9e:bd:55:8e:d9:2c:48:96:7d:72:97: 0d:bf:f0:4b:9e:20:a2:f7:e9:7b:2e:a4:e6:ea:ab: 0f:7d:58:4c:04:b8:81:47:85:ec:be:78:99:3f:c9: 9f:ee:e2:98:ad:32:33:ee:ec:71:4d:49:c8:e5:23: 9d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1B:31:E8:84:D5:9B:3F:1F:3D:6C:6A:B8:AE:DF:E3:D7:55:3B:F5 X509v3 Authority Key Identifier: keyid:0C:65:DE:B6:7B:30:70:5A:31:3E:F8:FA:D7:A0:D6:E2:BE:22:D1:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:fa:00:f6:b9:8f:a1:ee:28:ea:89:5f:30:eb:af:cd:95:23: b9:bc:d1:d2:1c:81:80:04:23:11:3d:2a:07:84:f2:f8:c3:f9: 79:2c:f9:3d:ed:72:9b:c2:f2:a3:dd:3b:a8:11:73:31:03:58: 9a:b6:e7:1c:1d:4b:1a:cb:cf:5e:a9:2b:17:11:0b:cd:44:bb: 71:f7:a8:c6:d9:1b:ec:2f:4a:fe:da:9e:ab:0b:6c:b4:b2:eb: 29:3e:28:79:4c:96:23:4b:a2:d8:c2:9f:0f:a0:3e:0c:ca:e2: dd:29:cc:71:9d:5b:9c:41:9d:3a:e2:3a:6b:fe:fc:f8:49:03: c9:48:87:12:13:c9:2c:b2:74:72:30:fc:dc:34:5a:3f:da:90: 84:0c:dd:e2:78:4d:3c:54:bb:34:40:ba:23:fd:0f:c2:84:68: ac:ac:04:a4:42:f5:d9:ff:1f:22:ea:c4:4b:51:23:21:d6:18: 21:5f:c2:b7:85:32:72:97:5c:ee:54:06:da:9f:54:d6:60:7f: 40:e0:c7:c4:98:73:d3:4c:2d:d9:a0:61:80:fa:2e:94:8d:03: 40:d7:29:3d:6c:2d:b6:d8:fb:e6:81:0a:32:1c:95:0c:82:74: b0:93:9e:cc:49:42:cf:ce:24:c0:da:6c:de:bd:5f:f8:26:47: 5d:2d:68:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUF5uSmi4Axc9vcfJ3XZrTTNT6A9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEM2NURFQjY3QjMwNzA1QTMxM0VGOEZBRDdBMEQ2RTJC RTIyRDE4NDAeFw0yNTA2MTkwOTM0NTJaFw0yNTA2MjAxMDU4NTJaMDMxMTAvBgNV BAMTKDQ3MUIzMUU4ODRENTlCM0YxRjNENkM2QUI4QUVERkUzRDc1NTNCRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2w345Wev++NZai9SLsGrhxQvN KplZyRPR3VNzKgx1Y+UKp1fMV5OWz32fNPC31nXkZ1pNFDW25u+5ZFCwF0oDpvQo x0nm0iLIudaSNzyWqmXH2rm12srORuut8QwtY1R8St3/BbCgmy69kIL6tB3UU/lZ irqXGQuHiJ32GCGyGnAnqVNTFGuMQozdGuX9rUS3hgOHyCEAftx5krMEqRScrP6K D1dZ+0C/iAhsyvf8T9HthECl9qV7ptzhYPhEqEo8QsmZeImevVWO2SxIln1ylw2/ 8EueIKL36XsupObqqw99WEwEuIFHhey+eJk/yZ/u4pitMjPu7HFNScjlI53dAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURxsx6ITVmz8fPWxquK7f49dVO/UwHwYDVR0j BBgwFoAUDGXetnswcFoxPvj616DW4r4i0YQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGtOM00xdWVRNXdaN212TnR4VU1EcEpKa2Zka1daYUxTYXZRS1dGRGM5 Q1ovMC8wQzY1REVCNjdCMzA3MDVBMzEzRUY4RkFEN0EwRDZFMkJFMjJEMTg0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDNjVERUI2N0IzMDcwNUEz MTNFRjhGQUQ3QTBENkUyQkUyMkQxODQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGtOM00xdWVRNXdaN212TnR4VU1EcEpKa2Zka1daYUxTYXZRS1dGRGM5Q1ovMC8w QzY1REVCNjdCMzA3MDVBMzEzRUY4RkFEN0EwRDZFMkJFMjJEMTg0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbfoA9rmPoe4o6olfMOuvzZUjubzR0hyBgAQjET0qB4Ty+MP5eSz5Pe1ym8Ly o907qBFzMQNYmrbnHB1LGsvPXqkrFxELzUS7cfeoxtkb7C9K/tqeqwtstLLrKT4o eUyWI0ui2MKfD6A+DMri3SnMcZ1bnEGdOuI6a/78+EkDyUiHEhPJLLJ0cjD83DRa P9qQhAzd4nhNPFS7NEC6I/0PwoRorKwEpEL12f8fIurES1EjIdYYIV/Ct4Uycpdc 7lQG2p9U1mB/QODHxJhz00wt2aBhgPoulI0DQNcpPWwtttj75oEKMhyVDIJ0sJOe zElCz84kwNps3r1f+CZHXS1oKg== -----END CERTIFICATE-----Generated at Thu Jun 19 12:13:18 2025 by rpki-client