$ rpki-client -vvf rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft File: 89B059C223BA0AD41E99D2508292698CA59D4D51.mft (raw, json) Hash identifier: Jhta/qJugWePzb+bW2fDba69qqQ59aoxe9ccWamR+o4= Subject key identifier: 33:E5:5B:96:73:CA:AA:14:05:9E:EC:44:91:FC:A7:80:F2:E9:24:E8 Authority key identifier: 89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51 Certificate issuer: /CN=89B059C223BA0AD41E99D2508292698CA59D4D51 Certificate serial: 67AAB379D2F5DD2D427238ABCAD241DFA2EB85E9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer Subject info access: rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft Manifest number: 0248 Signing time: Mon 16 Jun 2025 12:09:02 +0000 Manifest this update: Mon 16 Jun 2025 12:04:02 +0000 Manifest next update: Tue 17 Jun 2025 14:01:02 +0000 Files and hashes: 1: 3138362e3139332e302e302f32302d3234203d3e203533313334.roa (hash: /70Xr3zykjbquC5V98sp30trWq/8fdvVv+jPi4H5f5s=) 2: 89B059C223BA0AD41E99D2508292698CA59D4D51.crl (hash: l3zMIuekFuw1/7Oca2p+TluAPscoRhNdtNh9mHiUN5w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 14:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:aa:b3:79:d2:f5:dd:2d:42:72:38:ab:ca:d2:41:df:a2:eb:85:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B059C223BA0AD41E99D2508292698CA59D4D51 Validity Not Before: Jun 16 12:04:02 2025 GMT Not After : Jun 17 14:01:02 2025 GMT Subject: CN=33E55B9673CAAA14059EEC4491FCA780F2E924E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c7:69:d6:96:1f:89:5a:f4:6b:1e:91:9a:4c: 9d:6d:75:79:45:c2:de:e6:ea:83:bc:5a:cf:de:80: d8:d0:49:6d:ea:6f:be:0e:4e:dd:fa:76:05:9a:c9: fc:3a:1e:74:d3:c2:a5:31:a4:1e:60:e6:df:15:e7: 0f:4b:0f:e9:17:6c:48:9e:06:53:80:ce:bc:b5:27: 82:45:10:49:56:df:c9:7c:b5:f0:9b:d6:48:02:0b: ca:13:d0:d3:4b:6f:a7:6e:b5:58:13:3c:bd:88:2f: 24:f7:71:b0:32:6e:b6:f1:f9:79:9a:ca:be:ac:02: 28:dc:b8:51:7f:f7:a2:09:70:59:79:b6:27:a7:3d: 0b:b2:5a:c9:04:08:c6:95:79:17:ab:5b:b0:54:bd: 4f:06:28:a5:62:80:23:b3:aa:17:ed:58:cc:e8:c7: 92:e2:60:96:1c:74:87:dd:2b:ae:81:09:71:73:bf: dc:27:2c:ad:0c:3a:ba:fd:fd:81:04:56:06:74:59: ba:12:2a:9f:09:0e:ea:aa:81:b3:c8:f0:96:6d:fa: f0:3d:9f:db:31:b6:1c:dc:e2:d0:0a:f9:38:5b:9d: bd:46:b4:bf:9a:1c:80:0d:df:3a:3d:3f:6a:54:02: 6c:26:fd:81:69:8b:ce:dc:52:aa:41:8a:60:8d:df: c7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E5:5B:96:73:CA:AA:14:05:9E:EC:44:91:FC:A7:80:F2:E9:24:E8 X509v3 Authority Key Identifier: keyid:89:B0:59:C2:23:BA:0A:D4:1E:99:D2:50:82:92:69:8C:A5:9D:4D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89B059C223BA0AD41E99D2508292698CA59D4D51.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ek4i23aVgceGAWNX5BCGdVaDGQfdHS14XtNemENntgxe/1/89B059C223BA0AD41E99D2508292698CA59D4D51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:5b:70:74:64:b2:b9:04:6f:e7:f5:bd:11:ed:94:2e:7c:47: 11:0c:dd:5a:1a:6f:29:ff:04:f1:53:42:40:ac:76:fd:29:88: 41:3b:cc:67:a0:1f:8a:9e:bd:5f:be:1a:f4:9b:cc:7b:9a:ae: 4e:93:8a:c1:c9:af:bd:f0:78:c7:23:86:c5:97:a0:cf:26:91: 5d:c4:26:29:c6:30:b1:6d:c2:2c:ad:fb:55:f1:e0:28:fb:17: 12:5c:83:a5:57:31:82:63:c0:8d:9c:c5:e0:94:23:e8:a4:28: 75:fd:f6:68:89:2e:18:c4:38:df:27:d2:50:ec:5f:af:dd:42: 74:ae:de:88:1d:7e:67:b0:30:18:b3:1e:48:95:ab:7f:48:cf: 30:02:39:f1:ad:14:e9:33:bc:b1:3e:36:2c:06:3d:d0:5c:6f: b7:9d:ae:ee:4b:5d:05:4c:a7:bd:14:a2:aa:8e:3a:a8:bb:8b: f9:23:51:82:75:b1:70:d1:fb:dd:a9:03:64:61:f7:02:52:45: 60:5e:50:dc:8e:be:d4:73:67:f9:2d:06:64:54:9e:23:08:52: 73:c9:8b:1a:7e:e8:46:d2:8e:f0:5f:7a:a4:09:fc:2d:b1:5a: ff:23:d7:53:c7:97:f3:f6:86:e2:8c:b5:9f:d0:b1:d2:5f:8c: f4:da:85:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZ6qzedL13S1CcjirytJB36LrhekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCMDU5QzIyM0JBMEFENDFFOTlEMjUwODI5MjY5OENB NTlENEQ1MTAeFw0yNTA2MTYxMjA0MDJaFw0yNTA2MTcxNDAxMDJaMDMxMTAvBgNV BAMTKDMzRTU1Qjk2NzNDQUFBMTQwNTlFRUM0NDkxRkNBNzgwRjJFOTI0RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsx2nWlh+JWvRrHpGaTJ1tdXlF wt7m6oO8Ws/egNjQSW3qb74OTt36dgWayfw6HnTTwqUxpB5g5t8V5w9LD+kXbEie BlOAzry1J4JFEElW38l8tfCb1kgCC8oT0NNLb6dutVgTPL2ILyT3cbAybrbx+Xma yr6sAijcuFF/96IJcFl5tienPQuyWskECMaVeRerW7BUvU8GKKVigCOzqhftWMzo x5LiYJYcdIfdK66BCXFzv9wnLK0MOrr9/YEEVgZ0WboSKp8JDuqqgbPI8JZt+vA9 n9sxthzc4tAK+Thbnb1GtL+aHIAN3zo9P2pUAmwm/YFpi87cUqpBimCN38c/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUM+VblnPKqhQFnuxEkfyngPLpJOgwHwYDVR0j BBgwFoAUibBZwiO6CtQemdJQgpJpjKWdTVEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRWs0aTIzYVZnY2VHQVdOWDVCQ0dkVmFER1FmZEhTMTRYdE5lbUVObnRn eGUvMS84OUIwNTlDMjIzQkEwQUQ0MUU5OUQyNTA4MjkyNjk4Q0E1OUQ0RDUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5QjA1OUMyMjNCQTBBRDQx RTk5RDI1MDgyOTI2OThDQTU5RDRENTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RWs0aTIzYVZnY2VHQVdOWDVCQ0dkVmFER1FmZEhTMTRYdE5lbUVObnRneGUvMS84 OUIwNTlDMjIzQkEwQUQ0MUU5OUQyNTA4MjkyNjk4Q0E1OUQ0RDUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJVtwdGSyuQRv5/W9Ee2ULnxHEQzdWhpvKf8E8VNCQKx2/SmIQTvMZ6Afip69 X74a9JvMe5quTpOKwcmvvfB4xyOGxZegzyaRXcQmKcYwsW3CLK37VfHgKPsXElyD pVcxgmPAjZzF4JQj6KQodf32aIkuGMQ43yfSUOxfr91CdK7eiB1+Z7AwGLMeSJWr f0jPMAI58a0U6TO8sT42LAY90Fxvt52u7ktdBUynvRSiqo46qLuL+SNRgnWxcNH7 3akDZGH3AlJFYF5Q3I6+1HNn+S0GZFSeIwhSc8mLGn7oRtKO8F96pAn8LbFa/yPX U8eX8/aG4oy1n9Cx0l+M9NqFKw== -----END CERTIFICATE-----Generated at Tue Jun 17 03:29:53 2025 by rpki-client