$ rpki-client -vvf rpki-repo.registro.br/repo/FHCfynanNa7C7Gz5ZMU4ofoFM77pmzuwktRCTUYYxaXv/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.mft File: EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.mft (raw, json) Hash identifier: i6IRn+yrdoji95WWavGT/0OZ5Ahu5TTJb+JOSUjmwqA= Subject key identifier: 9C:90:44:C7:0E:74:CB:3F:2A:28:7F:C1:17:C7:7A:C6:55:D1:6E:61 Authority key identifier: EE:8B:AF:E7:16:B0:EC:43:1F:F4:EE:AE:C2:C9:F6:E5:2F:F8:91:44 Certificate issuer: /CN=EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144 Certificate serial: 31343EB4A4F96888DE681BB6F0EF9EE717B15C34 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.cer Subject info access: rsync://rpki-repo.registro.br/repo/FHCfynanNa7C7Gz5ZMU4ofoFM77pmzuwktRCTUYYxaXv/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.mft Manifest number: 024B Signing time: Tue 17 Jun 2025 09:09:05 +0000 Manifest this update: Tue 17 Jun 2025 09:04:05 +0000 Manifest next update: Wed 18 Jun 2025 10:56:05 +0000 Files and hashes: 1: EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.crl (hash: DkZB4495PcDhukrAS/+Nb4uFhV9IzC9lqdsKl+2HGvA=) 2: 323830343a333864343a3a2f33322d313238203d3e20323636353034.roa (hash: 6n7ryY4y1z91T9r/Ximz+yy0TY/CQsjpoXFuqfH3FfY=) 3: 3137302e3234342e3136302e302f32322d3332203d3e20323636353034.roa (hash: 29o87hj2H6zE2iOZa+1/XJ2cfljvyedeELAFzzyYTGI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FHCfynanNa7C7Gz5ZMU4ofoFM77pmzuwktRCTUYYxaXv/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.crl rsync://rpki-repo.registro.br/repo/FHCfynanNa7C7Gz5ZMU4ofoFM77pmzuwktRCTUYYxaXv/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 10:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:34:3e:b4:a4:f9:68:88:de:68:1b:b6:f0:ef:9e:e7:17:b1:5c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144 Validity Not Before: Jun 17 09:04:05 2025 GMT Not After : Jun 18 10:56:05 2025 GMT Subject: CN=9C9044C70E74CB3F2A287FC117C77AC655D16E61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:32:a7:14:76:11:0c:94:f5:00:ac:b8:c4:31: 47:06:94:29:e5:53:cf:ae:e4:33:40:92:87:24:e0: fb:bc:0c:ca:17:89:f1:1d:30:83:ae:b7:b2:e7:65: 6b:17:8c:67:57:6f:2e:1b:61:46:28:51:75:77:e9: 4c:e3:5f:98:6a:84:07:7d:d7:93:21:1a:ec:6b:eb: 2d:2a:a5:cb:7e:1b:b0:82:ce:5f:a8:26:10:ec:6c: bc:26:4f:f3:29:fe:84:df:fe:6e:b5:c0:31:9c:60: 6a:e0:b7:1e:5e:77:32:ee:04:51:cd:68:cb:d8:a6: 79:8c:e7:05:26:be:67:74:25:69:27:12:28:d5:b0: 6d:49:b3:4a:ab:4d:d3:3c:1f:66:ad:65:6b:8d:d6: c2:30:e8:03:5f:8b:6b:d8:ad:75:30:b8:ae:ee:d7: d5:df:b2:f6:44:07:b5:a6:de:a3:86:6a:16:b3:cb: 86:0c:23:b4:cf:72:44:c6:f4:ae:74:de:21:fb:91: f4:76:bc:ae:8e:cb:54:d3:ec:5f:47:8f:21:e8:68: ce:47:0d:46:bd:e6:aa:5d:d7:ae:bb:ba:8b:12:31: 59:5f:60:70:2a:18:9a:8b:cc:7a:11:5d:a3:9f:a2: 05:33:51:a6:93:e2:0f:14:d8:32:f9:52:12:d4:4f: 72:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:90:44:C7:0E:74:CB:3F:2A:28:7F:C1:17:C7:7A:C6:55:D1:6E:61 X509v3 Authority Key Identifier: keyid:EE:8B:AF:E7:16:B0:EC:43:1F:F4:EE:AE:C2:C9:F6:E5:2F:F8:91:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FHCfynanNa7C7Gz5ZMU4ofoFM77pmzuwktRCTUYYxaXv/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHCfynanNa7C7Gz5ZMU4ofoFM77pmzuwktRCTUYYxaXv/1/EE8BAFE716B0EC431FF4EEAEC2C9F6E52FF89144.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:d1:ff:7f:cd:36:96:a8:b3:57:d1:1b:a4:d1:8a:06:4a:0c: 2b:4d:71:a3:f0:f1:c8:69:c1:f9:42:bd:d9:1c:90:ee:b7:90: 29:43:f6:73:a6:ba:cc:b9:ed:d8:ad:53:75:99:70:9c:ab:03: cf:cc:9f:41:aa:4d:28:a7:d8:b2:9b:df:a9:2b:63:94:88:31: f5:de:35:b9:e7:6a:38:96:d6:16:ab:64:36:38:51:85:bb:0c: df:35:3a:55:a0:f1:44:8c:26:84:5e:a6:a2:f5:d5:62:9f:7d: ba:ca:7d:4a:85:55:9a:74:e0:b1:7d:44:90:1d:61:e4:43:4d: 3d:04:75:3d:4c:59:0a:97:9f:77:8d:88:6f:bf:2f:f3:7f:b6: 68:ce:cf:be:1a:e4:ef:fd:0a:4d:1c:e2:66:d5:b4:19:09:0d: cb:ed:e6:d7:fb:a2:84:c9:be:ae:2f:1f:c9:5f:80:54:ac:21: 70:97:65:b2:03:ba:91:b8:6a:40:39:6c:69:08:9f:58:48:92: 04:b1:fb:0f:5b:0f:25:10:43:bf:2c:93:cb:75:cc:7f:45:1a: e5:8c:ee:36:20:13:6e:2d:16:a9:bf:06:53:35:eb:c9:75:2c: 37:51:27:18:07:38:78:93:70:86:df:c9:b1:95:55:bb:50:e1: e5:a7:66:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMTQ+tKT5aIjeaBu28O+e5xexXDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU4QkFGRTcxNkIwRUM0MzFGRjRFRUFFQzJDOUY2RTUy RkY4OTE0NDAeFw0yNTA2MTcwOTA0MDVaFw0yNTA2MTgxMDU2MDVaMDMxMTAvBgNV BAMTKDlDOTA0NEM3MEU3NENCM0YyQTI4N0ZDMTE3Qzc3QUM2NTVEMTZFNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9MqcUdhEMlPUArLjEMUcGlCnl U8+u5DNAkock4Pu8DMoXifEdMIOut7LnZWsXjGdXby4bYUYoUXV36UzjX5hqhAd9 15MhGuxr6y0qpct+G7CCzl+oJhDsbLwmT/Mp/oTf/m61wDGcYGrgtx5edzLuBFHN aMvYpnmM5wUmvmd0JWknEijVsG1Js0qrTdM8H2atZWuN1sIw6ANfi2vYrXUwuK7u 19XfsvZEB7Wm3qOGahazy4YMI7TPckTG9K503iH7kfR2vK6Oy1TT7F9HjyHoaM5H DUa95qpd1667uosSMVlfYHAqGJqLzHoRXaOfogUzUaaT4g8U2DL5UhLUT3IBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnJBExw50yz8qKH/BF8d6xlXRbmEwHwYDVR0j BBgwFoAU7ouv5xaw7EMf9O6uwsn25S/4kUQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkhDZnluYW5OYTdDN0d6NVpNVTRvZm9GTTc3cG16dXdrdFJDVFVZWXhh WHYvMS9FRThCQUZFNzE2QjBFQzQzMUZGNEVFQUVDMkM5RjZFNTJGRjg5MTQ0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFOEJBRkU3MTZCMEVDNDMx RkY0RUVBRUMyQzlGNkU1MkZGODkxNDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkhDZnluYW5OYTdDN0d6NVpNVTRvZm9GTTc3cG16dXdrdFJDVFVZWXhhWHYvMS9F RThCQUZFNzE2QjBFQzQzMUZGNEVFQUVDMkM5RjZFNTJGRjg5MTQ0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApNH/f802lqizV9EbpNGKBkoMK01xo/DxyGnB+UK92RyQ7reQKUP2c6a6zLnt 2K1TdZlwnKsDz8yfQapNKKfYspvfqStjlIgx9d41uedqOJbWFqtkNjhRhbsM3zU6 VaDxRIwmhF6movXVYp99usp9SoVVmnTgsX1EkB1h5ENNPQR1PUxZCpefd42Ib78v 83+2aM7Pvhrk7/0KTRziZtW0GQkNy+3m1/uihMm+ri8fyV+AVKwhcJdlsgO6kbhq QDlsaQifWEiSBLH7D1sPJRBDvyyTy3XMf0Ua5YzuNiATbi0Wqb8GUzXryXUsN1En GAc4eJNwht/JsZVVu1Dh5admtg== -----END CERTIFICATE-----Generated at Tue Jun 17 20:15:11 2025 by rpki-client