$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/A8A952B21604B5039520204827A8ABA0842CBF36.mft File: A8A952B21604B5039520204827A8ABA0842CBF36.mft (raw, json) Hash identifier: Ie1NopnzFHmjcY31UyqRH0mZgQyHfmPNMelNC930Wso= Subject key identifier: 20:DF:D1:52:2D:E5:63:BA:2D:7E:33:63:D3:B2:65:E0:B2:5E:B6:3A Authority key identifier: A8:A9:52:B2:16:04:B5:03:95:20:20:48:27:A8:AB:A0:84:2C:BF:36 Certificate issuer: /CN=A8A952B21604B5039520204827A8ABA0842CBF36 Certificate serial: 59BE050461391EBFFBC0CD153067821372418A9E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8A952B21604B5039520204827A8ABA0842CBF36.cer Subject info access: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/A8A952B21604B5039520204827A8ABA0842CBF36.mft Manifest number: 46 Signing time: Thu 19 Jun 2025 11:07:24 +0000 Manifest this update: Thu 19 Jun 2025 11:02:24 +0000 Manifest next update: Fri 20 Jun 2025 14:37:24 +0000 Files and hashes: 1: A8A952B21604B5039520204827A8ABA0842CBF36.crl (hash: eSdHlaTKrQ5CyKIwygFXaMjAQB05xgNVcSyKCyFQJ/k=) 2: 3136382e3139362e3230342e302f32322d3332203d3e20323638373836.roa (hash: u1IHllSD2QawQgT0Zi5ND4d3sCezC0RAHNgrGNvLD54=) 3: 323830343a356161343a3a2f33322d313238203d3e20323638373836.roa (hash: 7XEW13QW/0ZR8K2lHMWCWLO5uByz+9LZry6MpiWpwCk=) 4: 34352e3137322e3136382e302f32322d3332203d3e20323638373836.roa (hash: 7MWKoNAkeyhLtPZNgzciZUGiI/QMPAG9fUEUFOWKjwU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/A8A952B21604B5039520204827A8ABA0842CBF36.crl rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/A8A952B21604B5039520204827A8ABA0842CBF36.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8A952B21604B5039520204827A8ABA0842CBF36.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 12:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:be:05:04:61:39:1e:bf:fb:c0:cd:15:30:67:82:13:72:41:8a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8A952B21604B5039520204827A8ABA0842CBF36 Validity Not Before: Jun 19 11:02:24 2025 GMT Not After : Jun 20 14:37:24 2025 GMT Subject: CN=20DFD1522DE563BA2D7E3363D3B265E0B25EB63A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8d:bb:e7:25:52:be:1d:69:dd:29:cf:4a:40: 02:ff:78:bc:5b:57:49:33:aa:1b:1a:e6:bf:86:2e: 0a:4b:e4:0c:fe:bb:41:d0:02:e5:3d:18:87:87:48: 12:56:78:0a:03:2a:55:1e:e2:45:0e:12:05:0a:a4: 8f:81:f4:72:bd:e7:3b:ef:6c:d7:2b:a1:73:22:f4: 74:ac:e3:f6:e1:fd:f8:98:d4:6f:99:53:76:33:9a: c5:18:5f:01:64:7c:bd:f5:59:67:49:55:d4:43:f2: 6d:97:13:75:3a:65:c0:83:cc:04:0e:ed:85:93:4d: 07:46:95:49:d5:da:67:ba:23:94:59:c4:29:6c:51: a0:3b:93:4e:67:26:8d:5b:38:6d:ff:80:06:c9:0f: 36:ba:e9:81:f8:4b:8d:73:f5:75:bb:39:cf:74:4b: e7:a2:c3:05:4d:f1:41:6f:a9:41:12:9a:bb:f2:d4: 5b:99:da:3a:e6:ec:54:78:a2:b4:57:07:68:58:d6: c1:22:e5:e3:02:95:f9:68:17:18:c8:0e:49:fd:54: 15:b5:80:d9:51:0e:ec:0b:38:47:e6:a7:af:a8:cc: 59:96:35:a2:4e:2c:ae:bf:87:28:67:02:a6:e0:23: 99:12:38:6f:57:48:97:be:81:a4:7d:3e:63:4b:39: 9e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DF:D1:52:2D:E5:63:BA:2D:7E:33:63:D3:B2:65:E0:B2:5E:B6:3A X509v3 Authority Key Identifier: keyid:A8:A9:52:B2:16:04:B5:03:95:20:20:48:27:A8:AB:A0:84:2C:BF:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/A8A952B21604B5039520204827A8ABA0842CBF36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8A952B21604B5039520204827A8ABA0842CBF36.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/A8A952B21604B5039520204827A8ABA0842CBF36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:99:f9:24:c1:40:ca:54:93:6a:92:49:04:89:b8:e5:60:e7: aa:06:56:94:52:c3:fd:b7:b0:59:12:09:49:c8:30:ff:1a:fd: a0:17:a9:71:16:b4:dc:ec:04:87:a1:c4:59:ff:cb:45:61:29: 00:b2:a8:69:a6:42:74:cd:13:1d:59:48:96:3c:03:9d:3a:b6: 3c:00:ca:da:4b:3a:66:31:cb:91:c3:e8:1d:48:51:56:54:17: a3:a1:12:b5:ca:76:0b:02:42:a1:d6:9a:7e:f1:30:87:32:96: 26:d3:1b:cc:6c:c9:d8:f1:6f:14:4e:fe:d4:ac:6c:c4:8f:c9: 48:00:5b:85:33:f0:5d:0f:04:b5:1e:ed:6f:d3:54:81:b9:b1: da:20:42:a2:6b:50:48:91:d9:5a:b6:c7:8e:a2:3b:c8:b2:b9: 67:9d:f0:9d:5f:be:01:ae:5a:6e:38:4e:09:a2:56:01:04:1d: 8a:59:e7:c9:bb:ea:b5:19:e9:64:23:1e:8a:0b:ac:39:63:b9: a0:28:0c:6f:7a:c6:be:9d:81:e1:59:70:30:ef:6e:f3:ab:cb: a5:b2:50:76:5c:ed:89:dc:28:a3:f7:a8:94:3f:8b:14:91:f3: f1:52:c2:2b:f9:42:f5:12:a2:53:bd:19:17:06:9c:f5:93:02: b9:8e:fa:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWb4FBGE5Hr/7wM0VMGeCE3JBip4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThBOTUyQjIxNjA0QjUwMzk1MjAyMDQ4MjdBOEFCQTA4 NDJDQkYzNjAeFw0yNTA2MTkxMTAyMjRaFw0yNTA2MjAxNDM3MjRaMDMxMTAvBgNV BAMTKDIwREZEMTUyMkRFNTYzQkEyRDdFMzM2M0QzQjI2NUUwQjI1RUI2M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqjbvnJVK+HWndKc9KQAL/eLxb V0kzqhsa5r+GLgpL5Az+u0HQAuU9GIeHSBJWeAoDKlUe4kUOEgUKpI+B9HK95zvv bNcroXMi9HSs4/bh/fiY1G+ZU3YzmsUYXwFkfL31WWdJVdRD8m2XE3U6ZcCDzAQO 7YWTTQdGlUnV2me6I5RZxClsUaA7k05nJo1bOG3/gAbJDza66YH4S41z9XW7Oc90 S+eiwwVN8UFvqUESmrvy1FuZ2jrm7FR4orRXB2hY1sEi5eMClfloFxjIDkn9VBW1 gNlRDuwLOEfmp6+ozFmWNaJOLK6/hyhnAqbgI5kSOG9XSJe+gaR9PmNLOZ4tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIN/RUi3lY7otfjNj07Jl4LJetjowHwYDVR0j BBgwFoAUqKlSshYEtQOVICBIJ6iroIQsvzYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHgzcXh3N0NoUnJlcERFN1hFVEtTd1cxa1FSZFlmTXZVckp4VmZ4U1Z3 aDEvMC9BOEE5NTJCMjE2MDRCNTAzOTUyMDIwNDgyN0E4QUJBMDg0MkNCRjM2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4QTk1MkIyMTYwNEI1MDM5 NTIwMjA0ODI3QThBQkEwODQyQ0JGMzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHgzcXh3N0NoUnJlcERFN1hFVEtTd1cxa1FSZFlmTXZVckp4VmZ4U1Z3aDEvMC9B OEE5NTJCMjE2MDRCNTAzOTUyMDIwNDgyN0E4QUJBMDg0MkNCRjM2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbJn5JMFAylSTapJJBIm45WDnqgZWlFLD/bewWRIJScgw/xr9oBepcRa03OwE h6HEWf/LRWEpALKoaaZCdM0THVlIljwDnTq2PADK2ks6ZjHLkcPoHUhRVlQXo6ES tcp2CwJCodaafvEwhzKWJtMbzGzJ2PFvFE7+1KxsxI/JSABbhTPwXQ8EtR7tb9NU gbmx2iBComtQSJHZWrbHjqI7yLK5Z53wnV++Aa5abjhOCaJWAQQdilnnybvqtRnp ZCMeigusOWO5oCgMb3rGvp2B4VlwMO9u86vLpbJQdlztidwoo/eolD+LFJHz8VLC K/lC9RKiU70ZFwac9ZMCuY76gg== -----END CERTIFICATE-----Generated at Thu Jun 19 14:27:34 2025 by rpki-client