$ rpki-client -vvf rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft File: CA5EB04FC8DA601024E12F23EF139B499E69972D.mft (raw, json) Hash identifier: TKjZ3dMQEGrNBN+R1JkFm20WXFaNIizgwpWgv8F0G0E= Subject key identifier: 9E:C5:54:D0:66:31:F9:68:14:85:BE:86:EA:31:B3:B8:CE:E9:59:79 Authority key identifier: CA:5E:B0:4F:C8:DA:60:10:24:E1:2F:23:EF:13:9B:49:9E:69:97:2D Certificate issuer: /CN=CA5EB04FC8DA601024E12F23EF139B499E69972D Certificate serial: 1B3FA3E75C9DB9F4026CC99BC1CD58C85CCD5AFB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer Subject info access: rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft Manifest number: 025B Signing time: Sun 29 Jun 2025 21:00:48 +0000 Manifest this update: Sun 29 Jun 2025 20:55:48 +0000 Manifest next update: Mon 30 Jun 2025 23:44:48 +0000 Files and hashes: 1: 323830343a373634383a3a2f33322d3438203d3e20323731313031.roa (hash: 6V0YrvLeMIiLEZTlyxZrdu23I1DIkWgF0T9EpN6P57k=) 2: 3137392e34382e3231362e302f32322d3332203d3e20323731313031.roa (hash: dl2xxNKmpGyFGlF7VUwUzm3hSJXtz/mVLOM/KbR/f88=) 3: CA5EB04FC8DA601024E12F23EF139B499E69972D.crl (hash: EUBOdD9Gfe2F0LbQIJuPa+RFWHgC5xV59uOFwlgAf0c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.crl rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 23:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:3f:a3:e7:5c:9d:b9:f4:02:6c:c9:9b:c1:cd:58:c8:5c:cd:5a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA5EB04FC8DA601024E12F23EF139B499E69972D Validity Not Before: Jun 29 20:55:48 2025 GMT Not After : Jun 30 23:44:48 2025 GMT Subject: CN=9EC554D06631F9681485BE86EA31B3B8CEE95979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e9:10:62:32:e0:3d:bf:f7:db:e6:16:0f:18: 8a:b2:47:66:cd:1b:08:2b:42:01:38:68:c7:66:fe: 1b:71:8c:39:8a:7d:fa:2a:a4:88:f0:8c:d4:1d:62: 1d:02:ac:1f:45:ca:e7:63:a8:86:c3:eb:8e:73:3c: 16:02:c3:ba:ae:c6:c9:ad:61:c9:b6:ee:14:79:8f: 71:d4:35:b8:90:45:b6:20:4a:d8:e1:b5:ab:1b:d2: 69:f8:f9:cf:8d:26:2e:62:7b:c5:e9:08:ea:23:4c: f8:71:7a:b8:f7:f5:9b:b9:e5:c3:64:59:b9:24:79: 10:df:ac:0c:f7:1e:11:14:05:a5:74:12:51:0e:2a: c6:25:e7:07:40:68:1d:1f:ce:5a:90:9d:02:20:ef: c6:8d:1b:99:64:91:92:a9:64:5d:f1:02:23:4a:30: 35:06:93:a1:4d:bf:35:d7:6c:78:52:f5:ed:bb:f6: c3:93:0d:a4:da:3d:89:37:f1:7e:3d:a4:19:a6:e9: 9e:10:24:5f:cc:0e:90:f9:c4:9e:fa:83:b1:15:5b: 93:63:e0:2e:7d:fa:20:b0:f0:e3:56:c6:f0:e9:2c: da:bb:44:ad:cb:07:92:1c:1a:42:ba:1b:a0:06:2b: c3:f6:13:6a:be:75:39:29:65:4a:07:d0:a8:7b:f3: a2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C5:54:D0:66:31:F9:68:14:85:BE:86:EA:31:B3:B8:CE:E9:59:79 X509v3 Authority Key Identifier: keyid:CA:5E:B0:4F:C8:DA:60:10:24:E1:2F:23:EF:13:9B:49:9E:69:97:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/1/CA5EB04FC8DA601024E12F23EF139B499E69972D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:de:56:c1:1e:3f:71:aa:ee:df:fd:c6:75:d5:41:53:7d:72: e6:9c:88:74:40:9a:5e:09:67:9f:0e:36:b6:c4:b6:b0:af:ee: f2:5a:7b:dd:0b:bd:82:4d:14:bf:e0:07:b2:1b:8d:8d:02:e9: 6c:ab:89:a9:c0:7b:7d:7a:29:e3:b0:e6:43:9f:32:78:0b:8a: 72:79:b9:fe:f0:60:9c:1d:e5:5a:9b:91:4a:8d:ff:77:3c:40: 20:fa:f5:7a:95:67:44:b8:51:07:02:ac:2a:5a:dc:88:77:aa: 0c:1d:7b:bd:46:93:05:3d:c2:68:10:7d:1d:e0:e2:39:6c:92: c7:d5:33:81:da:0f:10:1a:93:c0:bd:49:ef:10:9c:ba:83:ad: c1:a0:7d:3b:fd:fb:a4:00:22:36:3f:45:a8:2d:6e:79:1c:e5: 94:64:83:90:50:14:6e:59:fb:24:63:0a:81:d5:5f:22:32:4a: 9b:67:32:2e:c4:7e:fc:dc:5e:1a:ea:bf:41:f5:8c:cd:47:b1: 96:75:84:05:d7:dd:43:42:d4:ca:57:63:30:8f:35:ee:e4:4e: ba:68:78:8a:55:76:a4:ba:91:59:96:ad:85:19:65:63:f4:75: 02:1d:53:5f:1b:22:d5:c5:3b:30:d9:d9:fe:d1:fe:ae:2f:de: dd:0b:2f:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGz+j51ydufQCbMmbwc1YyFzNWvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1RUIwNEZDOERBNjAxMDI0RTEyRjIzRUYxMzlCNDk5 RTY5OTcyRDAeFw0yNTA2MjkyMDU1NDhaFw0yNTA2MzAyMzQ0NDhaMDMxMTAvBgNV BAMTKDlFQzU1NEQwNjYzMUY5NjgxNDg1QkU4NkVBMzFCM0I4Q0VFOTU5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn6RBiMuA9v/fb5hYPGIqyR2bN GwgrQgE4aMdm/htxjDmKffoqpIjwjNQdYh0CrB9FyudjqIbD645zPBYCw7quxsmt Ycm27hR5j3HUNbiQRbYgStjhtasb0mn4+c+NJi5ie8XpCOojTPhxerj39Zu55cNk WbkkeRDfrAz3HhEUBaV0ElEOKsYl5wdAaB0fzlqQnQIg78aNG5lkkZKpZF3xAiNK MDUGk6FNvzXXbHhS9e279sOTDaTaPYk38X49pBmm6Z4QJF/MDpD5xJ76g7EVW5Nj 4C59+iCw8ONWxvDpLNq7RK3LB5IcGkK6G6AGK8P2E2q+dTkpZUoH0Kh786JDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnsVU0GYx+WgUhb6G6jGzuM7pWXkwHwYDVR0j BBgwFoAUyl6wT8jaYBAk4S8j7xObSZ5ply0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDdxNWZZVVZxQXpicmtMUW80UG9ZUzJrR3Y4R1hzS25OOHFBWXc1Ukd4 MkYvMS9DQTVFQjA0RkM4REE2MDEwMjRFMTJGMjNFRjEzOUI0OTlFNjk5NzJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBNUVCMDRGQzhEQTYwMTAy NEUxMkYyM0VGMTM5QjQ5OUU2OTk3MkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NDdxNWZZVVZxQXpicmtMUW80UG9ZUzJrR3Y4R1hzS25OOHFBWXc1Ukd4MkYvMS9D QTVFQjA0RkM4REE2MDEwMjRFMTJGMjNFRjEzOUI0OTlFNjk5NzJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASt5WwR4/caru3/3GddVBU31y5pyIdECaXglnnw42tsS2sK/u8lp73Qu9gk0U v+AHshuNjQLpbKuJqcB7fXop47DmQ58yeAuKcnm5/vBgnB3lWpuRSo3/dzxAIPr1 epVnRLhRBwKsKlrciHeqDB17vUaTBT3CaBB9HeDiOWySx9UzgdoPEBqTwL1J7xCc uoOtwaB9O/37pAAiNj9FqC1ueRzllGSDkFAUbln7JGMKgdVfIjJKm2cyLsR+/Nxe Guq/QfWMzUexlnWEBdfdQ0LUyldjMI817uROumh4ilV2pLqRWZathRllY/R1Ah1T Xxsi1cU7MNnZ/tH+ri/e3QsvgA== -----END CERTIFICATE-----Generated at Mon Jun 30 17:21:44 2025 by rpki-client