$ rpki-client -vvf rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft File: C37D443ACE2088B9542008EA9127A8D95802391D.mft (raw, json) Hash identifier: KQVwqH2BJ6I06LuDFR2F8hK27k7g8v/k0Pprki4PeI0= Subject key identifier: 5E:60:90:29:C6:7A:9B:54:96:E5:56:12:0C:AE:4C:AD:FD:E4:A1:03 Authority key identifier: C3:7D:44:3A:CE:20:88:B9:54:20:08:EA:91:27:A8:D9:58:02:39:1D Certificate issuer: /CN=C37D443ACE2088B9542008EA9127A8D95802391D Certificate serial: 6856A6A4B8924CE00F06C7FD0B8721C72CD1D201 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer Subject info access: rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft Manifest number: 0149 Signing time: Mon 16 Jun 2025 17:08:41 +0000 Manifest this update: Mon 16 Jun 2025 17:03:41 +0000 Manifest next update: Tue 17 Jun 2025 20:07:41 +0000 Files and hashes: 1: 34352e3137392e3231322e302f32322d3332203d3e20323639313033.roa (hash: bF8jdgP21ds28/Sm19mkH3KFquAJR3FIxHkXVV451es=) 2: 323830343a356637633a3a2f33322d313238203d3e20323639313033.roa (hash: IEQYH61AZNUIPQqaQD7CtYAT9RoDCMuJFawTWAELlFc=) 3: C37D443ACE2088B9542008EA9127A8D95802391D.crl (hash: YoGMLPDew4h7qOBIwWoJQoxrCXPmDOqMBKwaEvSlmpc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.crl rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 20:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:56:a6:a4:b8:92:4c:e0:0f:06:c7:fd:0b:87:21:c7:2c:d1:d2:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C37D443ACE2088B9542008EA9127A8D95802391D Validity Not Before: Jun 16 17:03:41 2025 GMT Not After : Jun 17 20:07:41 2025 GMT Subject: CN=5E609029C67A9B5496E556120CAE4CADFDE4A103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:46:b3:46:c2:56:4d:e9:15:41:12:6c:7f: 3d:dd:e4:f3:6c:d8:2f:3b:10:c1:c4:5f:a8:c9:45: 6c:c9:4d:24:41:c7:8f:85:31:9c:66:60:a1:f7:29: 87:0f:43:4b:d5:8b:2a:92:5d:f3:e9:e9:8e:2a:f4: d7:0f:f9:d4:2f:55:9c:f7:82:fb:20:42:fb:67:14: da:e1:76:2b:00:b4:71:ce:2d:00:cd:21:30:d3:2b: 01:46:db:88:80:1c:32:b0:af:2d:54:32:d9:70:db: d9:96:b2:71:5c:1f:34:65:bf:18:f3:98:30:ae:5d: 62:90:2d:68:9f:4d:f2:0f:15:41:37:d1:2d:c5:32: b2:a3:2c:3a:48:f4:f3:dc:49:ec:31:d2:b3:e2:c6: 4a:51:4e:e8:57:19:6b:78:d5:97:84:66:e3:a7:c2: 4d:06:00:ad:dd:e2:c1:ec:1e:58:24:d4:c7:6d:34: 38:73:e1:67:d3:73:65:0d:df:57:41:a3:3f:02:39: 1b:cc:c3:13:0f:06:f2:e0:09:60:9c:3c:c9:7d:ef: 31:6d:53:8f:8b:f8:78:14:da:6b:d0:a5:79:f9:5e: fd:d1:22:59:40:9b:3d:47:19:5b:a4:ba:ae:f8:e6: 82:f0:96:8e:38:1e:bc:33:da:fe:aa:ea:dc:ff:ce: a7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:60:90:29:C6:7A:9B:54:96:E5:56:12:0C:AE:4C:AD:FD:E4:A1:03 X509v3 Authority Key Identifier: keyid:C3:7D:44:3A:CE:20:88:B9:54:20:08:EA:91:27:A8:D9:58:02:39:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C37D443ACE2088B9542008EA9127A8D95802391D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BC8fPfT6MVFmMjwWBP2NB3Lkbo53DK939dYkjnSBM6su/0/C37D443ACE2088B9542008EA9127A8D95802391D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:20:46:3e:47:1b:a9:12:4d:2e:7d:50:76:f9:d5:1f:fa:19: fe:fc:db:9f:2e:e1:80:16:4a:70:7d:c2:13:33:42:fa:af:92: db:84:b7:5c:74:9c:93:90:44:15:be:33:70:a1:50:1a:b3:0f: eb:76:a0:1a:e6:5e:b3:e1:d0:dd:68:14:5a:c9:83:80:ab:fa: de:72:13:8e:78:ae:e2:ef:15:a3:71:d7:de:80:a5:31:25:c0: 72:7b:a8:a8:6e:4d:16:f7:cd:36:78:c7:fb:03:f7:0f:15:d0: e8:d6:66:2e:32:c0:0d:28:8a:49:23:df:44:65:a6:a4:dd:c2: b4:f7:53:1b:09:a1:95:72:11:64:1a:f4:89:23:0c:96:14:ab: d2:e5:05:4a:85:de:4d:36:6e:b8:64:f2:db:61:a0:29:11:b3: 76:35:05:6a:c3:55:c8:49:ab:38:ed:78:d5:41:55:17:13:db: 3e:51:81:2f:dd:9f:97:5a:04:ac:52:39:6d:b0:2f:4a:e5:0d: 72:ef:84:f2:78:7e:a3:2b:5f:86:3d:75:96:b3:c7:81:f2:b2: de:39:08:95:7e:5b:f3:7b:52:e7:ac:39:7d:7e:cf:29:3c:fa: 0e:39:f5:41:3f:91:94:63:06:91:ed:0e:5c:33:e5:1f:67:af: f4:62:06:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaFampLiSTOAPBsf9C4chxyzR0gEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM3RDQ0M0FDRTIwODhCOTU0MjAwOEVBOTEyN0E4RDk1 ODAyMzkxRDAeFw0yNTA2MTYxNzAzNDFaFw0yNTA2MTcyMDA3NDFaMDMxMTAvBgNV BAMTKDVFNjA5MDI5QzY3QTlCNTQ5NkU1NTYxMjBDQUU0Q0FERkRFNEExMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hkazRsJWTekVQRJsfz3d5PNs 2C87EMHEX6jJRWzJTSRBx4+FMZxmYKH3KYcPQ0vViyqSXfPp6Y4q9NcP+dQvVZz3 gvsgQvtnFNrhdisAtHHOLQDNITDTKwFG24iAHDKwry1UMtlw29mWsnFcHzRlvxjz mDCuXWKQLWifTfIPFUE30S3FMrKjLDpI9PPcSewx0rPixkpRTuhXGWt41ZeEZuOn wk0GAK3d4sHsHlgk1MdtNDhz4WfTc2UN31dBoz8CORvMwxMPBvLgCWCcPMl97zFt U4+L+HgU2mvQpXn5Xv3RIllAmz1HGVukuq745oLwlo44Hrwz2v6q6tz/zqffAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXmCQKcZ6m1SW5VYSDK5Mrf3koQMwHwYDVR0j BBgwFoAUw31EOs4giLlUIAjqkSeo2VgCOR0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkM4ZlBmVDZNVkZtTWp3V0JQMk5CM0xrYm81M0RLOTM5ZFlram5TQk02 c3UvMC9DMzdENDQzQUNFMjA4OEI5NTQyMDA4RUE5MTI3QThEOTU4MDIzOTFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzN0Q0NDNBQ0UyMDg4Qjk1 NDIwMDhFQTkxMjdBOEQ5NTgwMjM5MUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkM4ZlBmVDZNVkZtTWp3V0JQMk5CM0xrYm81M0RLOTM5ZFlram5TQk02c3UvMC9D MzdENDQzQUNFMjA4OEI5NTQyMDA4RUE5MTI3QThEOTU4MDIzOTFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVSBGPkcbqRJNLn1QdvnVH/oZ/vzbny7hgBZKcH3CEzNC+q+S24S3XHSck5BE Fb4zcKFQGrMP63agGuZes+HQ3WgUWsmDgKv63nITjniu4u8Vo3HX3oClMSXAcnuo qG5NFvfNNnjH+wP3DxXQ6NZmLjLADSiKSSPfRGWmpN3CtPdTGwmhlXIRZBr0iSMM lhSr0uUFSoXeTTZuuGTy22GgKRGzdjUFasNVyEmrOO141UFVFxPbPlGBL92fl1oE rFI5bbAvSuUNcu+E8nh+oytfhj11lrPHgfKy3jkIlX5b83tS56w5fX7PKTz6Djn1 QT+RlGMGke0OXDPlH2ev9GIGjQ== -----END CERTIFICATE-----Generated at Tue Jun 17 07:46:55 2025 by rpki-client