$ rpki-client -vvf rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.mft File: 8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.mft (raw, json) Hash identifier: 87BR6YQhxKsTNCkaMnV+YJQcYqEr0Fp464xXdKKvJm8= Subject key identifier: 5D:12:52:91:BD:F8:17:DC:28:EC:4B:AD:C8:47:8A:22:5C:3E:9D:CB Authority key identifier: 83:70:E8:F5:BE:86:E6:36:B7:4F:2E:9A:87:B5:ED:E5:DE:C4:F8:A2 Certificate issuer: /CN=8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2 Certificate serial: 25C89665D2CB33DC4C26D70365BDF6A6BF31E952 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.mft Manifest number: 4D Signing time: Wed 18 Jun 2025 18:03:52 +0000 Manifest this update: Wed 18 Jun 2025 17:58:52 +0000 Manifest next update: Thu 19 Jun 2025 20:21:52 +0000 Files and hashes: 1: 8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.crl (hash: gacTlK6u0Lom4YlRvdRdaZPVvQfGiC1edNZPPRn8GB0=) 2: 3138372e3130392e3139322e302f32302d3332203d3e203533313135.roa (hash: 0HcgdqpyYZdO1kT85oLc8qbGHD0Si8hR53JWoDDa1Sg=) 3: 3138372e3130392e3139322e302f32302d3332203d3e20313938393439.roa (hash: q5Amp+E/tcUmn90F1ijcwUIXjRA9aziUd/48DxQys4Q=) 4: 323830343a346434383a3a2f33322d313238203d3e203533313135.roa (hash: NsqfA1cm2Mr4ExKmzOQ0rIy+kX/qCmm9bdGogjKFsHA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.crl rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Jun 2025 20:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c8:96:65:d2:cb:33:dc:4c:26:d7:03:65:bd:f6:a6:bf:31:e9:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2 Validity Not Before: Jun 18 17:58:52 2025 GMT Not After : Jun 19 20:21:52 2025 GMT Subject: CN=5D125291BDF817DC28EC4BADC8478A225C3E9DCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:75:0d:ad:03:da:ce:1b:f3:45:93:c4:2c:fc: 73:34:93:34:52:98:ae:6a:f2:01:7e:d6:d3:12:b6: 04:62:aa:c4:2f:4e:6e:93:f2:7e:1b:83:97:17:7d: 48:3e:e5:92:25:49:d0:c5:6f:d9:dc:2a:6f:94:89: 88:17:fc:9f:59:68:3f:62:4c:87:a8:aa:cd:b2:6a: b4:26:38:a6:84:19:ad:56:fc:f3:5b:99:22:2c:c8: 7d:3a:bb:21:82:2a:49:f3:4b:9c:4a:e5:1b:e6:90: a8:17:80:cb:41:91:6e:21:79:ec:f8:03:d7:f8:d8: a4:d4:1f:ba:98:33:2f:8e:5f:24:f5:b3:8c:a3:07: 5e:1d:1a:d7:a6:b7:ed:85:22:e7:ac:73:37:01:95: 01:00:f3:ca:2e:51:d3:0a:51:7e:03:bf:9a:d5:19: 4e:e0:bf:71:89:a8:c1:b1:fa:55:50:e4:97:83:6f: 95:73:27:2c:69:a9:3d:b8:29:b8:0f:2a:0c:de:30: c1:99:f7:a6:32:9d:e7:ba:45:fe:e1:bd:e2:f0:be: d5:bf:c0:70:9f:f8:d0:a2:4e:68:bc:3f:e7:8f:b1: 9e:23:93:84:c7:8c:2c:b2:33:47:42:e4:39:62:85: dd:5e:b4:61:31:68:e3:77:b8:26:3f:71:74:65:07: 39:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:12:52:91:BD:F8:17:DC:28:EC:4B:AD:C8:47:8A:22:5C:3E:9D:CB X509v3 Authority Key Identifier: keyid:83:70:E8:F5:BE:86:E6:36:B7:4F:2E:9A:87:B5:ED:E5:DE:C4:F8:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:6c:d1:f3:d0:60:23:7d:73:ef:c4:cb:b4:40:38:c9:d0:b9: de:46:68:97:27:01:58:9a:ac:a0:0c:31:2d:66:a7:02:49:8c: 72:32:95:ec:3a:81:59:91:29:f5:d6:fa:90:42:07:6b:a9:a1: 47:e8:44:e4:38:ea:5d:e1:7b:6a:fc:06:ba:a5:5a:d5:20:54: fa:ad:df:60:40:5e:f3:85:b0:98:11:07:2e:0c:a0:68:24:3b: 5b:92:3c:52:fd:89:a8:45:55:41:8c:ac:7e:41:17:23:c6:d2: 76:12:92:cf:75:a1:86:49:9f:6e:df:86:43:98:5a:62:79:1d: 02:48:be:b2:41:e7:57:8f:0d:37:35:30:c2:2f:c4:38:9d:55: 92:91:c1:44:4e:14:b9:c9:45:a7:ba:87:14:a2:9a:3d:bc:e8: 70:c9:37:89:b3:e4:88:59:e1:f1:5b:8b:54:b2:c0:10:e8:78: 77:0c:62:9f:1b:86:f7:e8:d1:b8:19:ba:fd:8b:c2:e0:ff:8c: b7:b9:e4:87:34:46:a2:5d:2b:24:cf:97:d1:fb:55:8a:2f:8c: ca:b6:b7:e9:32:95:81:f8:4c:97:67:a3:1b:ef:c9:02:26:dd: ef:80:95:19:29:32:2e:7d:15:ec:2b:96:72:f1:5c:2a:a7:94: f5:cc:e1:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJciWZdLLM9xMJtcDZb32pr8x6VIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODM3MEU4RjVCRTg2RTYzNkI3NEYyRTlBODdCNUVERTVE RUM0RjhBMjAeFw0yNTA2MTgxNzU4NTJaFw0yNTA2MTkyMDIxNTJaMDMxMTAvBgNV BAMTKDVEMTI1MjkxQkRGODE3REMyOEVDNEJBREM4NDc4QTIyNUMzRTlEQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUdQ2tA9rOG/NFk8Qs/HM0kzRS mK5q8gF+1tMStgRiqsQvTm6T8n4bg5cXfUg+5ZIlSdDFb9ncKm+UiYgX/J9ZaD9i TIeoqs2yarQmOKaEGa1W/PNbmSIsyH06uyGCKknzS5xK5RvmkKgXgMtBkW4heez4 A9f42KTUH7qYMy+OXyT1s4yjB14dGtemt+2FIuesczcBlQEA88ouUdMKUX4Dv5rV GU7gv3GJqMGx+lVQ5JeDb5VzJyxpqT24KbgPKgzeMMGZ96Yynee6Rf7hveLwvtW/ wHCf+NCiTmi8P+ePsZ4jk4THjCyyM0dC5Dlihd1etGExaON3uCY/cXRlBzlHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXRJSkb34F9wo7EutyEeKIlw+ncswHwYDVR0j BBgwFoAUg3Do9b6G5ja3Ty6ah7Xt5d7E+KIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRVE5U2hZaUZINXlrc2ZRVmVtaXFNOFRFUVVrOHVqdWd2eExOYndDdUN2 RUQvMC84MzcwRThGNUJFODZFNjM2Qjc0RjJFOUE4N0I1RURFNURFQzRGOEEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzNzBFOEY1QkU4NkU2MzZC NzRGMkU5QTg3QjVFREU1REVDNEY4QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RVE5U2hZaUZINXlrc2ZRVmVtaXFNOFRFUVVrOHVqdWd2eExOYndDdUN2RUQvMC84 MzcwRThGNUJFODZFNjM2Qjc0RjJFOUE4N0I1RURFNURFQzRGOEEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgmzR89BgI31z78TLtEA4ydC53kZolycBWJqsoAwxLWanAkmMcjKV7DqBWZEp 9db6kEIHa6mhR+hE5DjqXeF7avwGuqVa1SBU+q3fYEBe84WwmBEHLgygaCQ7W5I8 Uv2JqEVVQYysfkEXI8bSdhKSz3Whhkmfbt+GQ5haYnkdAki+skHnV48NNzUwwi/E OJ1VkpHBRE4UuclFp7qHFKKaPbzocMk3ibPkiFnh8VuLVLLAEOh4dwxinxuG9+jR uBm6/YvC4P+Mt7nkhzRGol0rJM+X0ftVii+Myra36TKVgfhMl2ejG+/JAibd74CV GSkyLn0V7CuWcvFcKqeU9czhYA== -----END CERTIFICATE-----Generated at Thu Jun 19 14:22:24 2025 by rpki-client