$ rpki-client -vvf rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft File: CBED8B77145C146C6E2002637F70D52E41B65B78.mft (raw, json) Hash identifier: jHBfEW+WuRqh6x6JsI0k/YOd31S0D6ktE/xKmyhqz08= Subject key identifier: 36:BB:8F:8B:AB:74:B2:29:DE:15:BD:71:62:65:F6:D5:22:D8:32:D7 Authority key identifier: CB:ED:8B:77:14:5C:14:6C:6E:20:02:63:7F:70:D5:2E:41:B6:5B:78 Certificate issuer: /CN=CBED8B77145C146C6E2002637F70D52E41B65B78 Certificate serial: 2155DCB2120EE503A3A15EA3DF6AF955FAF26E2E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer Subject info access: rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft Manifest number: 0252 Signing time: Sun 22 Jun 2025 04:09:10 +0000 Manifest this update: Sun 22 Jun 2025 04:04:10 +0000 Manifest next update: Mon 23 Jun 2025 05:35:10 +0000 Files and hashes: 1: CBED8B77145C146C6E2002637F70D52E41B65B78.crl (hash: PZViJ3zhxmpP7EvAK1RJXBOc9hlEwy+PjDHfbmDt4Wc=) 2: 323830343a383632633a3a2f33322d3335203d3e20323732363236.roa (hash: u3QX0Sw01r5zWK9SI7e/zZteNQlDp6bzw/sy4KdIv84=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.crl rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Jun 2025 05:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:55:dc:b2:12:0e:e5:03:a3:a1:5e:a3:df:6a:f9:55:fa:f2:6e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBED8B77145C146C6E2002637F70D52E41B65B78 Validity Not Before: Jun 22 04:04:10 2025 GMT Not After : Jun 23 05:35:10 2025 GMT Subject: CN=36BB8F8BAB74B229DE15BD716265F6D522D832D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a8:23:24:c2:4b:b2:53:52:a7:b6:3a:5f:7d: c2:db:7a:f5:21:94:04:8d:95:c4:9e:21:2e:6a:39: 6f:82:3a:00:e8:03:98:d5:e4:d1:b5:e6:4a:ea:8f: f0:47:96:8f:40:e9:77:fe:6b:be:d3:b9:ef:73:d1: d0:e3:ef:da:51:a2:71:57:b8:50:46:b1:b7:54:9e: aa:e4:54:9b:b1:fb:9a:7a:03:18:dc:26:a4:05:2c: b1:9b:4d:4d:17:dd:d4:fa:a5:be:ab:cb:98:1b:a8: 67:bf:b5:fa:70:87:44:b9:fa:55:3b:ad:86:f6:0b: 7f:83:ac:e7:9e:27:bd:9b:38:8b:eb:64:57:6f:c6: 02:f7:3d:bc:59:51:d3:b1:6e:c2:79:4f:4c:9b:39: 49:bd:d1:b5:91:cd:40:95:bc:e2:b1:ed:01:14:6c: be:11:d8:a6:59:07:55:3b:eb:12:3d:86:f6:13:0a: 8f:46:3a:9b:af:03:67:74:bb:fe:2a:3f:7c:1c:df: 44:93:fb:6a:00:1c:ea:6b:f0:8f:fb:5a:a3:e3:e7: e8:66:d0:a3:8f:bb:fb:07:7f:72:ce:09:c5:b8:a6: 27:4b:b5:c4:ac:9a:d9:27:1a:48:8c:bb:90:01:1a: d9:04:ad:d2:cb:e2:17:ee:32:a9:58:9c:41:bf:7a: 40:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BB:8F:8B:AB:74:B2:29:DE:15:BD:71:62:65:F6:D5:22:D8:32:D7 X509v3 Authority Key Identifier: keyid:CB:ED:8B:77:14:5C:14:6C:6E:20:02:63:7F:70:D5:2E:41:B6:5B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBED8B77145C146C6E2002637F70D52E41B65B78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2EVjA57QYDThTZMwwGpkmZExrfu4rVBYwuQautjYkYr/1/CBED8B77145C146C6E2002637F70D52E41B65B78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:5d:29:fd:64:0d:4f:3f:bd:7a:55:59:55:8f:df:68:2a:58: c3:3c:2f:c3:d0:44:c9:78:83:71:07:24:35:a4:55:d2:92:a9: de:ba:8f:9c:05:5d:cc:af:58:e3:fd:7b:d8:37:d1:c6:4d:3b: e8:bd:28:77:c2:a2:fc:23:dc:0f:05:f1:8d:7b:9e:34:d2:01: f7:f1:ca:84:55:0c:af:af:50:09:08:b9:b0:22:58:43:38:2e: ec:82:6e:e3:09:74:af:d7:b4:31:b4:92:0c:ef:63:2b:42:d8: 93:a4:36:39:71:df:6b:74:ef:f9:94:3d:41:b6:4b:e1:ee:c9: 19:d4:6b:7d:ed:ac:b0:74:1c:aa:ff:01:64:fa:7a:71:61:4d: d2:97:25:78:d1:75:12:b8:4a:b6:c9:8a:e3:67:21:9f:78:6d: c1:4e:7c:0f:04:c7:0a:5d:4c:5b:b9:52:fd:ed:08:a5:25:6c: db:e6:e1:30:e6:30:f4:2a:20:23:18:13:f1:1c:ce:ad:5e:64: 2c:a3:f5:ff:c7:3e:c2:62:7f:82:2f:03:dd:cf:8e:2c:35:91: d2:7f:b6:f3:18:ae:7c:fb:ce:a6:4f:dc:71:62:7a:9f:5c:e4: bc:b7:da:ba:f6:d8:75:ec:0e:f4:79:f2:48:c4:95:51:86:ce: 36:f4:c6:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIVXcshIO5QOjoV6j32r5Vfrybi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JFRDhCNzcxNDVDMTQ2QzZFMjAwMjYzN0Y3MEQ1MkU0 MUI2NUI3ODAeFw0yNTA2MjIwNDA0MTBaFw0yNTA2MjMwNTM1MTBaMDMxMTAvBgNV BAMTKDM2QkI4RjhCQUI3NEIyMjlERTE1QkQ3MTYyNjVGNkQ1MjJEODMyRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhqCMkwkuyU1KntjpffcLbevUh lASNlcSeIS5qOW+COgDoA5jV5NG15krqj/BHlo9A6Xf+a77Tue9z0dDj79pRonFX uFBGsbdUnqrkVJux+5p6AxjcJqQFLLGbTU0X3dT6pb6ry5gbqGe/tfpwh0S5+lU7 rYb2C3+DrOeeJ72bOIvrZFdvxgL3PbxZUdOxbsJ5T0ybOUm90bWRzUCVvOKx7QEU bL4R2KZZB1U76xI9hvYTCo9GOpuvA2d0u/4qP3wc30ST+2oAHOpr8I/7WqPj5+hm 0KOPu/sHf3LOCcW4pidLtcSsmtknGkiMu5ABGtkErdLL4hfuMqlYnEG/ekBVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNruPi6t0sineFb1xYmX21SLYMtcwHwYDVR0j BBgwFoAUy+2LdxRcFGxuIAJjf3DVLkG2W3gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzJFVmpBNTdRWURUaFRaTXd3R3BrbVpFeHJmdTRyVkJZd3VRYXV0allr WXIvMS9DQkVEOEI3NzE0NUMxNDZDNkUyMDAyNjM3RjcwRDUyRTQxQjY1Qjc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCRUQ4Qjc3MTQ1QzE0NkM2 RTIwMDI2MzdGNzBENTJFNDFCNjVCNzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzJFVmpBNTdRWURUaFRaTXd3R3BrbVpFeHJmdTRyVkJZd3VRYXV0allrWXIvMS9D QkVEOEI3NzE0NUMxNDZDNkUyMDAyNjM3RjcwRDUyRTQxQjY1Qjc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn10p/WQNTz+9elVZVY/faCpYwzwvw9BEyXiDcQckNaRV0pKp3rqPnAVdzK9Y 4/172DfRxk076L0od8Ki/CPcDwXxjXueNNIB9/HKhFUMr69QCQi5sCJYQzgu7IJu 4wl0r9e0MbSSDO9jK0LYk6Q2OXHfa3Tv+ZQ9QbZL4e7JGdRrfe2ssHQcqv8BZPp6 cWFN0pcleNF1ErhKtsmK42chn3htwU58DwTHCl1MW7lS/e0IpSVs2+bhMOYw9Cog IxgT8RzOrV5kLKP1/8c+wmJ/gi8D3c+OLDWR0n+28xiufPvOpk/ccWJ6n1zkvLfa uvbYdewO9HnySMSVUYbONvTG+w== -----END CERTIFICATE-----Generated at Sun Jun 22 08:59:06 2025 by rpki-client