$ rpki-client -vvf rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft File: 8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft (raw, json) Hash identifier: zDCCoKsOdqG7mV+7Sf0dElKxeJcL2mqb/eq2QRqNoss= Subject key identifier: 4F:4F:3B:FB:7C:10:CB:AB:59:0D:E7:A7:05:B0:BD:E9:76:82:CF:50 Authority key identifier: 8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5 Certificate issuer: /CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5 Certificate serial: 4A7CE3EC51EF51D2FF68E2A7969A349E7C6BF6BE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer Subject info access: rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft Manifest number: 0252 Signing time: Sun 22 Jun 2025 15:28:31 +0000 Manifest this update: Sun 22 Jun 2025 15:23:31 +0000 Manifest next update: Mon 23 Jun 2025 19:26:31 +0000 Files and hashes: 1: 3133312e302e34342e302f32322d3234203d3e20323632363231.roa (hash: 0Ek7QSABbX1hxlww4eo8kRpq1DnlPtP++8bb1A/727Y=) 2: 8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl (hash: hMLR896RYJ/sQJAwhefVHZibqedOuv9ZyU9Au3pkGq4=) 3: 3137372e38362e33322e302f32322d3234203d3e20323632363231.roa (hash: xKLrG/AO8ce4eep3uuETd57cPc6b1MP2a+DWkx2KnwU=) 4: 323830343a3732303a3a2f33322d3438203d3e20323632363231.roa (hash: mltDu46I6weMY5jZx2cVC8KWeJwKWTe757nY2EBwNLU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Jun 2025 19:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:7c:e3:ec:51:ef:51:d2:ff:68:e2:a7:96:9a:34:9e:7c:6b:f6:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6FD73B7E24E707712EC0060471D46EDDC1D0A5 Validity Not Before: Jun 22 15:23:31 2025 GMT Not After : Jun 23 19:26:31 2025 GMT Subject: CN=4F4F3BFB7C10CBAB590DE7A705B0BDE97682CF50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ce:26:e6:dc:4a:ee:a1:87:87:12:2a:84:30: 7c:5b:44:ee:45:ce:79:ef:8f:6e:f7:0d:20:c2:c8: a8:fb:b1:5a:3e:c2:0b:1b:28:05:3e:83:46:ff:0a: c4:f8:05:1d:88:f4:9d:e0:94:80:db:8f:ef:bf:a0: 24:1a:c1:e6:87:2f:b2:eb:22:f0:82:82:d1:f7:60: 87:98:9a:4a:b5:c2:88:9e:b6:8d:21:04:28:32:8c: 84:80:23:6b:e6:8e:d1:63:52:9b:6d:6a:c5:d5:f0: 40:83:f1:bc:e6:c1:e8:dd:fa:40:88:45:16:95:e6: f3:a6:44:ab:70:0f:84:54:3d:26:5e:d9:9f:e5:61: 79:6a:e4:fc:63:be:49:76:10:16:39:ec:be:6e:56: 36:d7:fc:6a:aa:75:9e:cb:b2:7a:66:5c:e7:85:19: 5e:71:89:f2:41:32:77:50:7c:d7:d3:b0:f5:0b:db: c0:d5:a2:5c:d8:bb:ad:34:c4:e0:88:3b:83:c3:04: a2:c8:9e:f4:e7:75:1c:cb:c9:d6:70:57:a0:45:c8: 09:b3:13:02:12:a0:90:c2:8f:b0:aa:e3:ca:05:4c: 90:d8:b1:4c:86:b5:da:5a:f3:ee:f7:25:e8:19:3e: e0:c3:e1:74:c8:f6:14:f0:79:e2:d6:63:0f:13:00: fb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4F:3B:FB:7C:10:CB:AB:59:0D:E7:A7:05:B0:BD:E9:76:82:CF:50 X509v3 Authority Key Identifier: keyid:8C:6F:D7:3B:7E:24:E7:07:71:2E:C0:06:04:71:D4:6E:DD:C1:D0:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/1/8C6FD73B7E24E707712EC0060471D46EDDC1D0A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:89:bc:e6:c0:94:f8:92:40:cf:b0:bd:ab:c4:65:6d:d1:d4: 14:40:a1:ee:4c:39:9b:9e:97:e1:35:06:a5:09:35:44:3d:5e: fb:c4:d5:ac:6b:4e:d7:b9:d4:bb:aa:48:48:c3:c5:df:9b:35: f2:71:12:c9:d5:f9:c6:e9:62:68:55:ba:1c:4d:bd:b6:54:18: 94:fe:a9:3a:f6:8a:2c:5a:c4:7a:41:8a:3e:53:9a:28:26:b2: 11:d9:ac:e4:af:4c:47:86:f7:45:c8:fc:47:54:1a:09:f9:ef: 9e:98:27:b3:02:1b:e9:4d:05:51:95:9a:95:f7:03:a1:4b:55: 37:c1:fb:ed:90:33:3b:6f:ba:f2:73:64:12:30:9d:b3:ec:0d: 03:c4:f7:66:f4:3d:f5:23:a4:d0:68:04:7a:e8:fd:83:9c:f7: c4:f0:e2:c6:a3:f4:a3:c2:db:ba:74:c6:84:ed:09:10:36:b4: 8c:7a:8b:9b:7d:e4:91:09:bd:08:34:4a:6a:37:c5:35:ba:a2: 16:4c:a1:9d:29:78:d8:cc:5b:e4:2e:2b:71:c4:9c:f3:ca:61: 5c:d8:34:40:fc:70:3d:1f:80:f5:26:0f:f5:31:6e:72:cc:4a: 8d:88:43:65:39:02:88:f4:18:cb:7b:dc:8d:fb:a1:a5:35:0d: d6:83:22:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSnzj7FHvUdL/aOKnlpo0nnxr9r4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2RkQ3M0I3RTI0RTcwNzcxMkVDMDA2MDQ3MUQ0NkVE REMxRDBBNTAeFw0yNTA2MjIxNTIzMzFaFw0yNTA2MjMxOTI2MzFaMDMxMTAvBgNV BAMTKDRGNEYzQkZCN0MxMENCQUI1OTBERTdBNzA1QjBCREU5NzY4MkNGNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIzibm3EruoYeHEiqEMHxbRO5F znnvj273DSDCyKj7sVo+wgsbKAU+g0b/CsT4BR2I9J3glIDbj++/oCQaweaHL7Lr IvCCgtH3YIeYmkq1woieto0hBCgyjISAI2vmjtFjUpttasXV8ECD8bzmwejd+kCI RRaV5vOmRKtwD4RUPSZe2Z/lYXlq5Pxjvkl2EBY57L5uVjbX/GqqdZ7LsnpmXOeF GV5xifJBMndQfNfTsPUL28DVolzYu600xOCIO4PDBKLInvTndRzLydZwV6BFyAmz EwISoJDCj7Cq48oFTJDYsUyGtdpa8+73JegZPuDD4XTI9hTweeLWYw8TAPt9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUT087+3wQy6tZDeenBbC96XaCz1AwHwYDVR0j BBgwFoAUjG/XO34k5wdxLsAGBHHUbt3B0KUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR1hoaWtpclJFS0xtZlNqamRFZnJ5U2RVb2JoVTJYVHV2c1hqUHI3dmlN OGUvMS84QzZGRDczQjdFMjRFNzA3NzEyRUMwMDYwNDcxRDQ2RUREQzFEMEE1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDNkZENzNCN0UyNEU3MDc3 MTJFQzAwNjA0NzFENDZFRERDMUQwQTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R1hoaWtpclJFS0xtZlNqamRFZnJ5U2RVb2JoVTJYVHV2c1hqUHI3dmlNOGUvMS84 QzZGRDczQjdFMjRFNzA3NzEyRUMwMDYwNDcxRDQ2RUREQzFEMEE1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARYm85sCU+JJAz7C9q8RlbdHUFECh7kw5m56X4TUGpQk1RD1e+8TVrGtO17nU u6pISMPF35s18nESydX5xuliaFW6HE29tlQYlP6pOvaKLFrEekGKPlOaKCayEdms 5K9MR4b3Rcj8R1QaCfnvnpgnswIb6U0FUZWalfcDoUtVN8H77ZAzO2+68nNkEjCd s+wNA8T3ZvQ99SOk0GgEeuj9g5z3xPDixqP0o8LbunTGhO0JEDa0jHqLm33kkQm9 CDRKajfFNbqiFkyhnSl42Mxb5C4rccSc88phXNg0QPxwPR+A9SYP9TFucsxKjYhD ZTkCiPQYy3vcjfuhpTUN1oMiaA== -----END CERTIFICATE-----Generated at Mon Jun 23 03:13:48 2025 by rpki-client