$ rpki-client -vvf rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.mft File: 45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.mft (raw, json) Hash identifier: FC2zNcuIarKG6Hf++tuHnHxpSGmLNSKe4kJcmzzMchg= Subject key identifier: 79:5D:41:75:1E:BF:E9:FD:04:F9:1F:D0:41:0B:75:1C:F9:3C:47:70 Authority key identifier: 45:EE:BB:52:4C:BB:A5:D2:2E:E7:BF:9A:51:D7:D9:50:D3:DF:6A:7C Certificate issuer: /CN=45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C Certificate serial: 2B3B62543C84F157F09489F1C7AB6F480E71DD16 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.cer Subject info access: rsync://rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.mft Manifest number: 35 Signing time: Thu 19 Jun 2025 15:21:38 +0000 Manifest this update: Thu 19 Jun 2025 15:16:38 +0000 Manifest next update: Fri 20 Jun 2025 15:37:38 +0000 Files and hashes: 1: 45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.crl (hash: B46hYVrdd0Qb9rL+XLZUurpVZmwst3WL3bxHGYmYRlM=) 2: 323830343a393161383a3a2f33322d3332203d3e20323734363536.roa (hash: 6qDxUECRAScksj+GEBI9zkSb2amXhzD4b5VuK7DY2Bk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.crl rsync://rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 15:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:3b:62:54:3c:84:f1:57:f0:94:89:f1:c7:ab:6f:48:0e:71:dd:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C Validity Not Before: Jun 19 15:16:38 2025 GMT Not After : Jun 20 15:37:38 2025 GMT Subject: CN=795D41751EBFE9FD04F91FD0410B751CF93C4770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:be:23:44:51:e8:69:85:30:10:8b:7f:c7:5d: 04:00:93:c5:3b:34:4a:18:67:c0:e1:5f:66:3f:a5: f0:20:bf:79:5e:dc:86:60:2a:00:61:de:0e:ac:69: 76:48:29:8b:8e:6f:dd:e7:50:1a:01:2d:ed:20:fc: 9e:ef:3b:8a:76:b2:95:42:97:44:11:ff:4e:2a:14: fe:02:e5:58:4b:4d:36:dc:9f:ab:2b:53:10:f4:de: e3:9a:b1:37:bc:5e:11:ea:fc:0d:4e:e0:b4:15:a2: 4b:7c:f9:70:b9:7b:c0:04:58:86:c3:8a:f4:b7:a2: 7b:50:43:8f:d1:2a:22:27:c7:66:76:4a:50:45:ed: 74:ba:b0:41:60:67:40:ee:5f:00:f7:df:1b:8b:56: 05:44:4e:ce:55:0d:1d:55:87:43:b4:13:1c:d8:88: 26:80:31:0a:1d:d5:c5:d1:ef:7c:82:5b:ba:06:e1: 00:e3:f9:7b:cd:ac:67:1e:50:a1:3a:fa:d6:17:40: 93:20:6f:9c:9f:89:13:48:f2:45:5d:9a:94:85:27: 38:26:bd:fa:56:e6:9f:79:b0:a4:b2:f2:b7:54:73: f0:4e:51:08:f2:eb:69:4f:0c:57:49:dc:44:80:6b: 5f:e2:d1:c7:9a:c1:9b:37:6a:f7:a0:16:1e:87:9d: b1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5D:41:75:1E:BF:E9:FD:04:F9:1F:D0:41:0B:75:1C:F9:3C:47:70 X509v3 Authority Key Identifier: keyid:45:EE:BB:52:4C:BB:A5:D2:2E:E7:BF:9A:51:D7:D9:50:D3:DF:6A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZVAXha5bmZQJf5sRjcBLrD2PR3whNjBUahnBpoqYCCc/0/45EEBB524CBBA5D22EE7BF9A51D7D950D3DF6A7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:88:0b:5c:50:60:4a:d0:02:c1:41:20:3d:30:8b:6b:5f:b4: f7:1e:54:64:9e:8d:3d:63:88:e6:11:67:d6:e7:6a:32:5e:ec: cf:8e:60:52:44:14:fc:36:ee:7d:65:2e:71:62:3d:09:90:64: 5a:fc:aa:ce:bb:bb:af:0f:09:ba:5c:cf:7b:a2:3b:9b:55:69: f5:29:82:d2:42:0d:88:e3:20:73:32:e2:9d:6c:d4:8a:b8:62: 12:ea:2e:f0:08:2f:4f:99:7d:13:cd:28:66:2e:99:dd:56:11: ac:a6:a3:93:5e:90:17:ef:f8:71:a6:00:26:9a:21:83:72:97: 61:19:99:bb:5d:09:4e:9d:dd:cc:55:9d:62:e4:be:31:31:7e: ff:a6:06:4f:d1:44:70:bf:0c:ac:da:21:af:a8:4f:7a:75:a1: 0a:99:c7:81:41:ca:cc:b3:32:ad:a8:73:70:0b:e5:9c:d1:24: 64:69:74:a3:f8:2e:71:13:05:97:da:45:c0:0b:b2:66:da:9c: fd:49:40:f4:67:fb:9c:ed:d4:c0:cd:9f:41:13:a9:64:ea:ac: 5e:29:d9:2d:91:b9:30:08:a5:e3:db:df:4e:2b:22:d9:b1:7b: e4:bb:32:0a:3c:b6:64:b5:d1:2e:8d:43:e3:ca:c8:c0:75:20: 4b:d5:51:7d -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUKztiVDyE8VfwlInxx6tvSA5x3RYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFRUJCNTI0Q0JCQTVEMjJFRTdCRjlBNTFEN0Q5NTBE M0RGNkE3QzAeFw0yNTA2MTkxNTE2MzhaFw0yNTA2MjAxNTM3MzhaMDMxMTAvBgNV BAMTKDc5NUQ0MTc1MUVCRkU5RkQwNEY5MUZEMDQxMEI3NTFDRjkzQzQ3NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmviNEUehphTAQi3/HXQQAk8U7 NEoYZ8DhX2Y/pfAgv3le3IZgKgBh3g6saXZIKYuOb93nUBoBLe0g/J7vO4p2spVC l0QR/04qFP4C5VhLTTbcn6srUxD03uOasTe8XhHq/A1O4LQVokt8+XC5e8AEWIbD ivS3ontQQ4/RKiInx2Z2SlBF7XS6sEFgZ0DuXwD33xuLVgVETs5VDR1Vh0O0ExzY iCaAMQod1cXR73yCW7oG4QDj+XvNrGceUKE6+tYXQJMgb5yfiRNI8kVdmpSFJzgm vfpW5p95sKSy8rdUc/BOUQjy62lPDFdJ3ESAa1/i0ceawZs3avegFh6HnbGjAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUeV1BdR6/6f0E+R/QQQt1HPk8R3AwHwYDVR0j BBgwFoAURe67Uky7pdIu57+aUdfZUNPfanwwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9aVkFYaGE1Ym1aUUpmNXNSamNCTHJEMlBSM3doTmpCVWFobkJwb3FZQ0Nj LzAvNDVFRUJCNTI0Q0JCQTVEMjJFRTdCRjlBNTFEN0Q5NTBEM0RGNkE3Qy5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80NUVFQkI1MjRDQkJBNUQyMkVF N0JGOUE1MUQ3RDk1MEQzREY2QTdDLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1pW QVhoYTVibVpRSmY1c1JqY0JMckQyUFIzd2hOakJVYWhuQnBvcVlDQ2MvMC80NUVF QkI1MjRDQkJBNUQyMkVFN0JGOUE1MUQ3RDk1MEQzREY2QTdDLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA GIgLXFBgStACwUEgPTCLa1+09x5UZJ6NPWOI5hFn1udqMl7sz45gUkQU/DbufWUu cWI9CZBkWvyqzru7rw8JulzPe6I7m1Vp9SmC0kINiOMgczLinWzUirhiEuou8Agv T5l9E80oZi6Z3VYRrKajk16QF+/4caYAJpohg3KXYRmZu10JTp3dzFWdYuS+MTF+ /6YGT9FEcL8MrNohr6hPenWhCpnHgUHKzLMyrahzcAvlnNEkZGl0o/gucRMFl9pF wAuyZtqc/UlA9Gf7nO3UwM2fQROpZOqsXinZLZG5MAil49vfTisi2bF75LsyCjy2 ZLXRLo1D48rIwHUgS9VRfQ== -----END CERTIFICATE-----Generated at Thu Jun 19 18:16:39 2025 by rpki-client