$ rpki-client -vvf rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft File: A5455EE25C6FEB15A12789F15E975474289CE800.mft (raw, json) Hash identifier: fq0hkuOuBmWwuYXh7xEXWDB4eCnYyShYQCtZAxgXZ9k= Subject key identifier: 49:95:5D:EA:80:5D:62:FB:4F:EF:49:E7:C6:8D:24:D5:03:30:AF:48 Authority key identifier: A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00 Certificate issuer: /CN=A5455EE25C6FEB15A12789F15E975474289CE800 Certificate serial: 73904834A1509466126CE9577C9CE4B0A606F280 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer Subject info access: rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft Manifest number: 024D Signing time: Tue 17 Jun 2025 08:40:56 +0000 Manifest this update: Tue 17 Jun 2025 08:35:56 +0000 Manifest next update: Wed 18 Jun 2025 10:05:56 +0000 Files and hashes: 1: 3137372e3132362e3132382e302f32302d3234203d3e20323632333433.roa (hash: wyF0GJjDX5YnWfr20u0CwT3kDZX//zWud8hjzCmqbF4=) 2: A5455EE25C6FEB15A12789F15E975474289CE800.crl (hash: 70AFFtj0eWEQXC3OQcjXo+yHXYVzfWaWqnj9iKdhptE=) 3: 323830343a3830633a3a2f33322d3438203d3e20323632333433.roa (hash: WkDXinBlhSpzEvUc/HOjtx0nayVUYKfHQ1jGnnUDwSE=) 4: 3134332e3235352e3132342e302f32322d3234203d3e20323632333433.roa (hash: Q2JymKQF6NmDOXMRSwyKq2Je2bjCMsxjvwq3vjHVwnE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.crl rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 10:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:90:48:34:a1:50:94:66:12:6c:e9:57:7c:9c:e4:b0:a6:06:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5455EE25C6FEB15A12789F15E975474289CE800 Validity Not Before: Jun 17 08:35:56 2025 GMT Not After : Jun 18 10:05:56 2025 GMT Subject: CN=49955DEA805D62FB4FEF49E7C68D24D50330AF48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ed:41:fb:21:6b:06:bd:10:69:06:62:a1:b4: 82:a3:0c:44:56:cf:42:bf:ff:3e:86:bc:c0:ba:e9: cc:32:e4:f1:af:50:11:db:4f:46:bd:31:e1:b5:36: 19:8c:02:52:af:49:10:b1:32:a2:ad:46:28:aa:e1: b2:96:04:d5:e5:0c:b9:19:27:b8:e2:4e:7d:1e:2f: 2d:d8:1d:a5:be:14:a1:f0:21:a1:f8:66:b5:a6:b1: be:28:08:30:a3:b2:df:b1:af:41:f9:53:fa:8e:fe: a4:9e:4d:aa:49:6e:35:a8:b3:64:62:0a:e4:aa:78: 1a:e3:d6:cb:39:ba:b9:76:10:a7:29:91:92:86:80: 12:10:b6:bc:fa:2e:d0:0d:15:9e:ef:ae:d1:6b:02: 33:23:fc:a1:0f:bc:51:17:3c:cc:a0:c9:8f:23:83: ec:6b:3c:7d:f2:23:f9:d5:80:f0:fc:7a:ca:80:e1: 9a:a4:e1:69:92:5f:fc:36:d8:72:31:d4:ea:4c:27: d7:78:8e:47:ca:98:b4:2b:8c:16:8f:7f:69:6f:c6: 91:a6:b8:f9:a1:5f:41:b0:54:47:02:38:85:08:4d: 84:d5:07:af:8b:bd:aa:42:a8:23:57:b9:61:b1:5e: 54:27:d1:b8:34:3b:36:57:c9:e9:26:6b:b8:b4:f7: e7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:95:5D:EA:80:5D:62:FB:4F:EF:49:E7:C6:8D:24:D5:03:30:AF:48 X509v3 Authority Key Identifier: keyid:A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f9:07:42:5e:7f:d3:eb:aa:da:1d:f8:18:f6:b7:60:9e:b8: 44:11:1a:fe:3e:40:67:1c:fb:65:aa:d7:3c:62:7a:cd:48:77: c1:b3:27:a2:2d:66:d4:41:b2:92:ad:59:3c:16:a0:a1:d0:b4: 3c:7a:1e:91:1c:a6:ae:5f:f8:e6:89:e9:a4:ce:e5:56:22:ec: 8d:4b:00:4a:32:da:b4:85:1a:34:dd:2c:0e:e2:c5:43:a3:56: 03:98:eb:b1:9c:10:a0:62:f2:3d:60:60:52:73:6d:a3:ac:2f: dc:37:07:e5:25:60:54:31:23:28:95:0f:7a:74:ea:7a:cf:3f: c2:1a:a4:f8:66:1b:a2:97:32:62:73:5c:2d:20:c1:98:23:35: 2e:d7:5a:80:96:53:b5:e9:0d:59:12:6f:fd:d7:7b:fb:c1:cd: 3b:0f:f1:35:6e:d8:58:2b:f3:bb:4b:7c:2f:64:52:6b:8d:48: a8:2a:8e:4a:9b:63:45:57:ea:2f:68:fb:e0:7e:75:c2:a9:67: 64:ba:f6:60:21:92:b1:09:6d:8f:15:28:88:a0:94:4c:b0:8b: 78:34:9c:c7:ca:90:6d:fb:78:3e:5f:db:bd:03:4e:7a:b9:07: 33:38:74:7b:e1:67:96:d2:80:04:d4:8c:16:db:61:b3:73:01: 4d:2f:b7:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUc5BINKFQlGYSbOlXfJzksKYG8oAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU0NTVFRTI1QzZGRUIxNUExMjc4OUYxNUU5NzU0NzQy ODlDRTgwMDAeFw0yNTA2MTcwODM1NTZaFw0yNTA2MTgxMDA1NTZaMDMxMTAvBgNV BAMTKDQ5OTU1REVBODA1RDYyRkI0RkVGNDlFN0M2OEQyNEQ1MDMzMEFGNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw7UH7IWsGvRBpBmKhtIKjDERW z0K//z6GvMC66cwy5PGvUBHbT0a9MeG1NhmMAlKvSRCxMqKtRiiq4bKWBNXlDLkZ J7jiTn0eLy3YHaW+FKHwIaH4ZrWmsb4oCDCjst+xr0H5U/qO/qSeTapJbjWos2Ri CuSqeBrj1ss5url2EKcpkZKGgBIQtrz6LtANFZ7vrtFrAjMj/KEPvFEXPMygyY8j g+xrPH3yI/nVgPD8esqA4Zqk4WmSX/w22HIx1OpMJ9d4jkfKmLQrjBaPf2lvxpGm uPmhX0GwVEcCOIUITYTVB6+LvapCqCNXuWGxXlQn0bg0OzZXyekma7i09+f7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSZVd6oBdYvtP70nnxo0k1QMwr0gwHwYDVR0j BBgwFoAUpUVe4lxv6xWhJ4nxXpdUdCic6AAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGszNHhnNUFZak5uMXZTZlo3enc0S3J5d3paRDh2NllFN3lvMzR2S3BX b2ovMi9BNTQ1NUVFMjVDNkZFQjE1QTEyNzg5RjE1RTk3NTQ3NDI4OUNFODAwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NDU1RUUyNUM2RkVCMTVB MTI3ODlGMTVFOTc1NDc0Mjg5Q0U4MDAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGszNHhnNUFZak5uMXZTZlo3enc0S3J5d3paRDh2NllFN3lvMzR2S3BXb2ovMi9B NTQ1NUVFMjVDNkZFQjE1QTEyNzg5RjE1RTk3NTQ3NDI4OUNFODAwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABPkHQl5/0+uq2h34GPa3YJ64RBEa/j5AZxz7ZarXPGJ6zUh3wbMnoi1m1EGy kq1ZPBagodC0PHoekRymrl/45onppM7lViLsjUsASjLatIUaNN0sDuLFQ6NWA5jr sZwQoGLyPWBgUnNto6wv3DcH5SVgVDEjKJUPenTqes8/whqk+GYbopcyYnNcLSDB mCM1LtdagJZTtekNWRJv/dd7+8HNOw/xNW7YWCvzu0t8L2RSa41IqCqOSptjRVfq L2j74H51wqlnZLr2YCGSsQltjxUoiKCUTLCLeDScx8qQbft4Pl/bvQNOerkHMzh0 e+FnltKABNSMFtths3MBTS+3VA== -----END CERTIFICATE-----Generated at Tue Jun 17 16:21:09 2025 by rpki-client