$ rpki-client -vvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft File: 0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft (raw, json) Hash identifier: 368FMRkp9Eej1T0m1CCw4B+MB69ZqbVb/cMMeWEEha8= Subject key identifier: DB:44:73:88:BE:56:90:31:8B:20:4E:DE:F2:6F:DF:39:A4:93:19:E7 Authority key identifier: 0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8 Certificate issuer: /CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8 Certificate serial: 24A90C968F0D2BA54006680A7C3C4D3A07FD9FBC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer Subject info access: rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft Manifest number: 0253 Signing time: Fri 20 Jun 2025 02:23:52 +0000 Manifest this update: Fri 20 Jun 2025 02:18:52 +0000 Manifest next update: Sat 21 Jun 2025 03:24:52 +0000 Files and hashes: 1: 0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl (hash: /xTbb1CZtqzVUc5W5b83QsB9IxKzJsBK86pCZMolHp8=) 2: 323830343a323936633a3a2f33322d3438203d3e20323634303134.roa (hash: QNFyXkDjYxtjAY+XGMe5tcCI6hXOc6k0U04RR0wk06M=) 3: 3134332e302e3136342e302f32322d3234203d3e20323634303134.roa (hash: NAlyE1gP5eEm2QCzZwWb0ZvOj7kmRHCKooa9+7IETXo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 03:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a9:0c:96:8f:0d:2b:a5:40:06:68:0a:7c:3c:4d:3a:07:fd:9f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A5BFC449BC0AE94F260C50A31DCBFBC318391E8 Validity Not Before: Jun 20 02:18:52 2025 GMT Not After : Jun 21 03:24:52 2025 GMT Subject: CN=DB447388BE5690318B204EDEF26FDF39A49319E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:03:f0:6a:06:f8:8f:30:68:0d:4b:80:20: 6a:c1:bc:23:41:10:ce:ff:a3:ec:4f:b8:f7:f2:4f: 9d:7d:4f:27:ea:04:53:c9:af:47:73:c0:29:4f:8d: a7:ed:ae:8a:e0:c2:a6:6c:d0:62:d4:21:3a:7c:21: d4:78:e9:b4:9a:7a:a2:d7:ef:ad:a6:76:2b:67:53: cd:dc:2f:e1:b8:cb:1c:15:07:f3:ec:43:69:87:81: 1e:57:8b:6d:45:a7:4d:6f:d2:07:bd:eb:3e:11:d3: 73:0e:40:21:c0:d5:d7:26:ac:98:a5:4f:17:ba:d1: 29:fa:3b:87:60:7c:a3:3b:7d:33:fe:ad:fb:0a:db: bf:e1:8a:a6:49:9b:88:23:73:45:a1:b0:3d:90:9f: f9:f7:1a:61:a1:9d:4e:6d:f7:68:c8:d1:bd:ed:a0: 49:7a:a6:aa:5d:b2:2d:c9:e9:c6:30:8f:4d:a2:54: 10:4f:e0:99:22:eb:2f:28:a9:e4:e1:b7:77:45:e7: f4:13:29:2d:b7:73:0c:cc:53:08:50:b6:3a:ad:43: 0e:77:c7:1c:f5:60:72:9a:59:de:83:4a:f6:57:da: 89:7d:46:99:bb:0e:0e:c3:a8:98:0b:de:57:6a:4d: fa:62:d2:05:88:38:a8:24:45:24:61:f4:dc:99:1f: 8e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:44:73:88:BE:56:90:31:8B:20:4E:DE:F2:6F:DF:39:A4:93:19:E7 X509v3 Authority Key Identifier: keyid:0A:5B:FC:44:9B:C0:AE:94:F2:60:C5:0A:31:DC:BF:BC:31:83:91:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/1/0A5BFC449BC0AE94F260C50A31DCBFBC318391E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:fe:92:26:d1:f2:ff:f9:71:0a:d4:74:fe:6c:f1:ce:cc:ee: 76:5b:b2:b6:0b:c5:58:2c:20:04:66:52:b7:68:76:95:f2:b0: c1:63:93:88:3c:92:8e:99:19:14:b9:07:b2:42:dd:0a:f4:3e: b4:e6:cd:6e:78:96:6c:95:75:05:a5:cc:46:87:eb:da:fc:98: 87:75:4f:22:76:f6:c9:ab:74:43:5a:d6:8a:5a:78:09:26:f5: a8:6a:99:41:b2:0c:2f:5f:67:66:fe:fb:d8:f2:f1:0a:97:4d: 2c:3e:b9:60:5d:80:b9:37:75:4b:37:d6:47:e0:ad:41:1d:7b: 61:93:52:98:69:a7:aa:09:e3:df:51:ad:d1:37:07:4b:e7:3a: 07:ed:e3:11:b3:60:c6:05:30:fa:54:f3:93:29:96:e4:a9:72: e0:94:5e:2e:2d:71:96:8a:72:9f:3b:24:54:c1:b4:fa:05:ce: b2:0b:70:dd:a0:2d:c3:30:4d:8c:24:7f:83:d3:59:bf:af:ee: 1f:e0:67:b7:53:a7:ca:a8:26:3b:76:80:0c:a5:1b:2c:46:22: eb:e8:5c:61:a4:c8:05:93:81:6e:c3:c0:9d:6e:fd:c9:2f:91: ba:36:97:00:c2:b3:a1:78:bc:bc:33:4d:ca:1a:4c:54:60:b4: 30:6f:b8:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJKkMlo8NK6VABmgKfDxNOgf9n7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE1QkZDNDQ5QkMwQUU5NEYyNjBDNTBBMzFEQ0JGQkMz MTgzOTFFODAeFw0yNTA2MjAwMjE4NTJaFw0yNTA2MjEwMzI0NTJaMDMxMTAvBgNV BAMTKERCNDQ3Mzg4QkU1NjkwMzE4QjIwNEVERUYyNkZERjM5QTQ5MzE5RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zgPwagb4jzBoDUuAIGrBvCNB EM7/o+xPuPfyT519TyfqBFPJr0dzwClPjaftrorgwqZs0GLUITp8IdR46bSaeqLX 762mditnU83cL+G4yxwVB/PsQ2mHgR5Xi21Fp01v0ge96z4R03MOQCHA1dcmrJil Txe60Sn6O4dgfKM7fTP+rfsK27/hiqZJm4gjc0WhsD2Qn/n3GmGhnU5t92jI0b3t oEl6pqpdsi3J6cYwj02iVBBP4Jki6y8oqeTht3dF5/QTKS23cwzMUwhQtjqtQw53 xxz1YHKaWd6DSvZX2ol9Rpm7Dg7DqJgL3ldqTfpi0gWIOKgkRSRh9NyZH47PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU20RziL5WkDGLIE7e8m/fOaSTGecwHwYDVR0j BBgwFoAUClv8RJvArpTyYMUKMdy/vDGDkegwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDRUc0ZIS3VNdmNmWVhUcHJYc1EzNVlXMVJQNkJ5Yk5MRmI3ZDJVN2hu THgvMS8wQTVCRkM0NDlCQzBBRTk0RjI2MEM1MEEzMURDQkZCQzMxODM5MUU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBNUJGQzQ0OUJDMEFFOTRG MjYwQzUwQTMxRENCRkJDMzE4MzkxRTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDRUc0ZIS3VNdmNmWVhUcHJYc1EzNVlXMVJQNkJ5Yk5MRmI3ZDJVN2huTHgvMS8w QTVCRkM0NDlCQzBBRTk0RjI2MEM1MEEzMURDQkZCQzMxODM5MUU4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMv6SJtHy//lxCtR0/mzxzszudluytgvFWCwgBGZSt2h2lfKwwWOTiDySjpkZ FLkHskLdCvQ+tObNbniWbJV1BaXMRofr2vyYh3VPInb2yat0Q1rWilp4CSb1qGqZ QbIML19nZv772PLxCpdNLD65YF2AuTd1SzfWR+CtQR17YZNSmGmnqgnj31Gt0TcH S+c6B+3jEbNgxgUw+lTzkymW5Kly4JReLi1xlopynzskVMG0+gXOsgtw3aAtwzBN jCR/g9NZv6/uH+Bnt1OnyqgmO3aADKUbLEYi6+hcYaTIBZOBbsPAnW79yS+RujaX AMKzoXi8vDNNyhpMVGC0MG+4HQ== -----END CERTIFICATE-----Generated at Fri Jun 20 07:51:15 2025 by rpki-client