$ rpki-client -vvf rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.mft File: CE5B1C22F785931FD04E35B0D10299499369B6B2.mft (raw, json) Hash identifier: l5+pHQX54RTVT6+2/x5QBHhaVnUXHi2f2DrQ/9aAuFs= Subject key identifier: 51:E9:BC:21:CA:C2:DC:9A:05:D8:A4:38:92:13:FC:9F:1D:A5:BE:1E Authority key identifier: CE:5B:1C:22:F7:85:93:1F:D0:4E:35:B0:D1:02:99:49:93:69:B6:B2 Certificate issuer: /CN=CE5B1C22F785931FD04E35B0D10299499369B6B2 Certificate serial: 78C042959A3FE007CBEC3D32ED0BE2855595665B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5B1C22F785931FD04E35B0D10299499369B6B2.cer Subject info access: rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.mft Manifest number: E4 Signing time: Wed 18 Jun 2025 14:52:48 +0000 Manifest this update: Wed 18 Jun 2025 14:47:48 +0000 Manifest next update: Thu 19 Jun 2025 17:17:48 +0000 Files and hashes: 1: 34352e3138352e3231362e302f32322d3234203d3e20323639333934.roa (hash: xvr6WcI45paGyB/m/RZmcH8whbfAYZMaTmhPpuc3n4I=) 2: 3133382e33362e382e302f32322d3234203d3e20323639333934.roa (hash: tij9FKzC91VBHN0WPcLYiVs8GFhUSdRjTx2luDLCvSs=) 3: 323830343a363366343a3a2f33322d3438203d3e20323639333934.roa (hash: UBu5Y7FkfT84tG4S64OaB++UzchsBiP2H+xlWG2/Pfw=) 4: CE5B1C22F785931FD04E35B0D10299499369B6B2.crl (hash: TzhPz/UJpV1NEmQyH4f2hDl2oiINOvwK8fA/VFUWUqQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.crl rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5B1C22F785931FD04E35B0D10299499369B6B2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Jun 2025 17:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c0:42:95:9a:3f:e0:07:cb:ec:3d:32:ed:0b:e2:85:55:95:66:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE5B1C22F785931FD04E35B0D10299499369B6B2 Validity Not Before: Jun 18 14:47:48 2025 GMT Not After : Jun 19 17:17:48 2025 GMT Subject: CN=51E9BC21CAC2DC9A05D8A4389213FC9F1DA5BE1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1c:38:ac:ea:de:6b:40:88:8d:b4:7b:f0:61: ea:f8:db:c7:02:e0:80:80:bf:7b:67:ad:b9:81:50: 97:c9:f2:9f:fb:94:c3:ff:11:d9:26:35:ee:f7:81: 07:b8:b6:44:f6:97:6e:d9:c1:0c:ac:4d:4f:55:5d: e7:66:5d:0a:a7:e6:21:f6:6c:ff:c6:d6:f2:6e:6b: 4e:c0:86:a8:bb:a1:8d:b0:93:14:71:db:33:a5:41: ed:99:72:48:b4:02:39:3b:25:82:1b:80:94:85:d5: df:f3:f1:9d:17:c0:77:f5:13:59:4b:b8:84:50:7f: 24:62:20:c3:84:d5:ba:c2:e0:4d:26:93:cd:67:65: d3:e7:a3:99:8e:5c:7f:6b:33:06:9f:ce:e3:d3:c5: 21:08:7b:d8:36:cf:ec:9d:d0:17:43:b3:dd:59:c1: a4:63:12:40:52:8c:10:cd:63:37:84:da:a3:c2:a3: 79:06:20:3d:4f:64:14:ec:8e:4f:e7:ab:e1:15:8a: 33:6f:42:4c:69:cf:99:95:b5:7c:a9:76:df:26:d4: 17:ee:c1:4f:6b:6f:ec:4e:ef:52:09:98:80:dc:bc: 5a:a9:97:b9:6f:c0:80:40:18:4c:ed:c1:19:ab:d5: 5a:49:bc:cd:f1:74:e9:4c:35:cb:b5:bb:0a:d6:88: 7b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E9:BC:21:CA:C2:DC:9A:05:D8:A4:38:92:13:FC:9F:1D:A5:BE:1E X509v3 Authority Key Identifier: keyid:CE:5B:1C:22:F7:85:93:1F:D0:4E:35:B0:D1:02:99:49:93:69:B6:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE5B1C22F785931FD04E35B0D10299499369B6B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/CE5B1C22F785931FD04E35B0D10299499369B6B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ba:6a:6d:e3:3f:a7:bf:14:84:b7:f1:e2:5c:86:73:d8:8e: 22:b8:82:06:b6:2f:fa:89:e7:eb:d6:7f:09:7f:ff:58:86:f1: 92:55:22:73:09:b7:77:af:40:4d:15:92:83:47:02:15:3e:f0: 61:13:1e:61:cd:e7:c5:46:ad:f4:54:a1:78:9b:16:69:fd:fd: 8e:22:73:b6:c0:b0:11:90:3d:48:53:9e:fa:fb:bd:2f:9e:c8: 20:23:0a:6a:07:38:32:39:37:3d:32:65:d1:0d:56:eb:77:13: 2e:9e:77:28:80:da:44:01:e3:06:52:66:1a:9b:0c:10:37:65: ad:bd:d4:7f:d3:b7:fd:af:cb:0c:74:14:24:e7:1a:10:af:6e: d1:33:29:4b:99:91:98:94:d9:f0:29:4e:f8:04:1e:36:76:12: e6:4d:0b:e4:e6:05:46:79:83:30:51:06:ec:01:d0:d7:ed:65: 72:64:b7:ee:d8:97:da:d7:b4:37:97:0a:0e:87:ab:55:87:79: 7b:c8:a7:a9:77:85:d4:a4:24:5f:bb:cf:04:a5:5e:90:1c:a0: 44:d9:93:86:f3:e2:ea:7e:52:0f:52:bf:63:f7:ee:68:de:a7: c9:6a:37:a6:03:77:f3:97:5d:49:35:9d:43:c6:1c:8c:18:26: d9:82:63:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeMBClZo/4AfL7D0y7QvihVWVZlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U1QjFDMjJGNzg1OTMxRkQwNEUzNUIwRDEwMjk5NDk5 MzY5QjZCMjAeFw0yNTA2MTgxNDQ3NDhaFw0yNTA2MTkxNzE3NDhaMDMxMTAvBgNV BAMTKDUxRTlCQzIxQ0FDMkRDOUEwNUQ4QTQzODkyMTNGQzlGMURBNUJFMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPHDis6t5rQIiNtHvwYer428cC 4ICAv3tnrbmBUJfJ8p/7lMP/EdkmNe73gQe4tkT2l27ZwQysTU9VXedmXQqn5iH2 bP/G1vJua07Ahqi7oY2wkxRx2zOlQe2Zcki0Ajk7JYIbgJSF1d/z8Z0XwHf1E1lL uIRQfyRiIMOE1brC4E0mk81nZdPno5mOXH9rMwafzuPTxSEIe9g2z+yd0BdDs91Z waRjEkBSjBDNYzeE2qPCo3kGID1PZBTsjk/nq+EVijNvQkxpz5mVtXypdt8m1Bfu wU9rb+xO71IJmIDcvFqpl7lvwIBAGEztwRmr1VpJvM3xdOlMNcu1uwrWiHvzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUem8IcrC3JoF2KQ4khP8nx2lvh4wHwYDVR0j BBgwFoAUzlscIveFkx/QTjWw0QKZSZNptrIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOThVeGFkblJib2dEeEgzMzhNVmhkcDZ0aXZYaThSRHpSTDhuejhkYnU0 MmcvMC9DRTVCMUMyMkY3ODU5MzFGRDA0RTM1QjBEMTAyOTk0OTkzNjlCNkIyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNUIxQzIyRjc4NTkzMUZE MDRFMzVCMEQxMDI5OTQ5OTM2OUI2QjIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OThVeGFkblJib2dEeEgzMzhNVmhkcDZ0aXZYaThSRHpSTDhuejhkYnU0MmcvMC9D RTVCMUMyMkY3ODU5MzFGRDA0RTM1QjBEMTAyOTk0OTkzNjlCNkIyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJrpqbeM/p78UhLfx4lyGc9iOIriCBrYv+onn69Z/CX//WIbxklUicwm3d69A TRWSg0cCFT7wYRMeYc3nxUat9FSheJsWaf39jiJztsCwEZA9SFOe+vu9L57IICMK agc4Mjk3PTJl0Q1W63cTLp53KIDaRAHjBlJmGpsMEDdlrb3Uf9O3/a/LDHQUJOca EK9u0TMpS5mRmJTZ8ClO+AQeNnYS5k0L5OYFRnmDMFEG7AHQ1+1lcmS37tiX2te0 N5cKDoerVYd5e8inqXeF1KQkX7vPBKVekBygRNmThvPi6n5SD1K/Y/fuaN6nyWo3 pgN385ddSTWdQ8YcjBgm2YJjXQ== -----END CERTIFICATE-----Generated at Thu Jun 19 05:54:38 2025 by rpki-client