$ rpki-client -vvf rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft File: 8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft (raw, json) Hash identifier: 3AYZCOKUSc28ac+BOcJRrG726dFDBMuGxiozZQ/fA6g= Subject key identifier: EC:DD:9A:B4:2C:8A:A1:70:37:FA:CD:01:E1:46:73:36:43:FF:E6:E7 Authority key identifier: 8D:E5:4B:0B:23:A5:AE:C0:28:1A:FC:60:99:5B:BC:E1:13:A9:24:23 Certificate issuer: /CN=8DE54B0B23A5AEC0281AFC60995BBCE113A92423 Certificate serial: 3D873833D4A010D79AB2C9785E8796B4C196B00E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.cer Subject info access: rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft Manifest number: 012C Signing time: Fri 20 Jun 2025 07:41:09 +0000 Manifest this update: Fri 20 Jun 2025 07:36:09 +0000 Manifest next update: Sat 21 Jun 2025 10:42:09 +0000 Files and hashes: 1: 323830343a323531303a3a2f33322d3438203d3e20323634323537.roa (hash: 7+9JpTlOdX5WWhuoXEU4WpS4Vicz1YrSvaK8YyhDjzk=) 2: 3133382e3131382e3130382e302f32322d3234203d3e20323634323537.roa (hash: 3gxw4SiWxURznpq3E6uuIdJzj7mJOa6Ji3jsUCCvCuQ=) 3: 8DE54B0B23A5AEC0281AFC60995BBCE113A92423.crl (hash: I5V/SbCjUmUzGBHLEhgLWSzM3gfuncUVJS/iEc5TTGY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.crl rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 10:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:87:38:33:d4:a0:10:d7:9a:b2:c9:78:5e:87:96:b4:c1:96:b0:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DE54B0B23A5AEC0281AFC60995BBCE113A92423 Validity Not Before: Jun 20 07:36:09 2025 GMT Not After : Jun 21 10:42:09 2025 GMT Subject: CN=ECDD9AB42C8AA17037FACD01E146733643FFE6E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:af:97:c3:fe:64:21:00:f4:24:b9:9e:9c:b8: df:87:37:8b:b9:5d:06:5c:ba:35:07:2a:37:51:b5: 53:67:79:cb:cb:2f:6e:4e:50:ae:48:c5:f2:15:54: 94:b3:54:27:1e:40:67:67:14:bf:0a:70:cc:59:33: 87:e2:0f:3d:29:df:b0:86:31:fa:14:53:d4:0b:5f: 25:73:d5:27:61:1e:5b:1f:76:e7:1f:71:ae:6e:79: 24:f1:93:03:11:02:df:71:d3:40:2d:e2:c1:a4:43: 1a:5a:2a:91:55:c6:5a:39:67:65:e7:82:eb:8e:f3: cf:1f:4d:b3:4a:a1:87:56:1b:8e:7d:64:bf:63:d7: 7f:82:65:91:69:65:08:59:ac:37:b1:48:a4:4c:21: b0:79:f2:fa:44:af:04:3c:20:6f:ba:d3:8c:97:97: 13:0b:be:6a:35:08:10:c3:5b:21:36:d8:dc:0b:92: fb:ba:2e:62:39:ea:cc:51:f2:1f:96:84:ab:18:c0: 87:5d:6c:e9:f1:e2:c3:5a:32:bc:11:81:1e:67:60: d1:ca:ed:b2:d5:a9:f1:ba:4c:d8:aa:cd:c7:65:01: 47:fe:2c:bd:c3:00:11:4d:85:87:d7:61:be:4b:9e: fc:12:6c:78:ed:f7:40:fc:ee:a3:20:50:de:9d:24: 9d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DD:9A:B4:2C:8A:A1:70:37:FA:CD:01:E1:46:73:36:43:FF:E6:E7 X509v3 Authority Key Identifier: keyid:8D:E5:4B:0B:23:A5:AE:C0:28:1A:FC:60:99:5B:BC:E1:13:A9:24:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/1/8DE54B0B23A5AEC0281AFC60995BBCE113A92423.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:fe:e6:1e:cb:bf:54:8a:ff:a1:90:4c:40:fc:07:5b:e1:a7: bb:76:c4:8a:dc:bf:a4:57:7c:b2:d4:d9:c1:a1:c1:4b:64:9e: dd:b9:da:a4:36:e2:85:5b:04:c6:6d:a1:6a:eb:58:d8:c1:79: bc:4b:4d:1c:0b:10:bd:0c:66:0e:1f:49:7e:c7:7d:92:be:d8: e2:aa:04:79:0f:7b:6d:99:6f:97:51:7d:80:b8:97:dd:17:de: e1:0b:5b:e7:e2:33:7b:3b:a8:10:e0:b9:a3:d7:db:b7:cd:14: 1a:66:34:ff:af:17:39:a4:43:ac:b7:e7:32:16:2b:f6:11:0f: 9c:ec:79:da:13:da:ba:78:0e:2e:30:3f:a4:50:3f:2e:ff:4b: 91:b0:b0:ab:4b:7b:91:24:d8:1a:12:6b:20:fa:b5:9a:bb:2b: 56:32:05:ee:51:66:05:d6:d9:98:68:e9:3d:7a:b1:25:a9:11: 60:63:96:6c:5c:df:07:06:b4:32:be:c7:79:40:42:01:3a:5a: 42:a7:aa:52:f8:bc:ce:3c:8c:1e:41:36:4f:92:c3:e9:6d:63: c2:3b:d4:d2:3e:eb:6c:a8:e0:0e:e4:e4:ac:b5:48:ed:8f:4a: 3e:e6:59:55:21:29:a0:b3:b1:66:5e:e1:ef:10:42:ed:6a:f3: ab:47:57:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPYc4M9SgENeassl4XoeWtMGWsA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERFNTRCMEIyM0E1QUVDMDI4MUFGQzYwOTk1QkJDRTEx M0E5MjQyMzAeFw0yNTA2MjAwNzM2MDlaFw0yNTA2MjExMDQyMDlaMDMxMTAvBgNV BAMTKEVDREQ5QUI0MkM4QUExNzAzN0ZBQ0QwMUUxNDY3MzM2NDNGRkU2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXr5fD/mQhAPQkuZ6cuN+HN4u5 XQZcujUHKjdRtVNnecvLL25OUK5IxfIVVJSzVCceQGdnFL8KcMxZM4fiDz0p37CG MfoUU9QLXyVz1SdhHlsfducfca5ueSTxkwMRAt9x00At4sGkQxpaKpFVxlo5Z2Xn guuO888fTbNKoYdWG459ZL9j13+CZZFpZQhZrDexSKRMIbB58vpErwQ8IG+604yX lxMLvmo1CBDDWyE22NwLkvu6LmI56sxR8h+WhKsYwIddbOnx4sNaMrwRgR5nYNHK 7bLVqfG6TNiqzcdlAUf+LL3DABFNhYfXYb5LnvwSbHjt90D87qMgUN6dJJ1bAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7N2atCyKoXA3+s0B4UZzNkP/5ucwHwYDVR0j BBgwFoAUjeVLCyOlrsAoGvxgmVu84ROpJCMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0RmUnBRZ1NFSmp3Qmc1cEdLOE5wNHg3NzljN0NaQ1pCQUUyNEFQTmlw OFYvMS84REU1NEIwQjIzQTVBRUMwMjgxQUZDNjA5OTVCQkNFMTEzQTkyNDIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhERTU0QjBCMjNBNUFFQzAy ODFBRkM2MDk5NUJCQ0UxMTNBOTI0MjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0RmUnBRZ1NFSmp3Qmc1cEdLOE5wNHg3NzljN0NaQ1pCQUUyNEFQTmlwOFYvMS84 REU1NEIwQjIzQTVBRUMwMjgxQUZDNjA5OTVCQkNFMTEzQTkyNDIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe/7mHsu/VIr/oZBMQPwHW+Gnu3bEity/pFd8stTZwaHBS2Se3bnapDbihVsE xm2hautY2MF5vEtNHAsQvQxmDh9Jfsd9kr7Y4qoEeQ97bZlvl1F9gLiX3Rfe4Qtb 5+IzezuoEOC5o9fbt80UGmY0/68XOaRDrLfnMhYr9hEPnOx52hPaungOLjA/pFA/ Lv9LkbCwq0t7kSTYGhJrIPq1mrsrVjIF7lFmBdbZmGjpPXqxJakRYGOWbFzfBwa0 Mr7HeUBCATpaQqeqUvi8zjyMHkE2T5LD6W1jwjvU0j7rbKjgDuTkrLVI7Y9KPuZZ VSEpoLOxZl7h7xBC7Wrzq0dX4g== -----END CERTIFICATE-----Generated at Fri Jun 20 21:24:39 2025 by rpki-client