$ rpki-client -vvf rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft File: 87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft (raw, json) Hash identifier: NotFS/ooC7rnVjIRbB/N3oM4flD42rm9hH8wtM0ESTU= Subject key identifier: 00:CF:28:6D:31:0B:5B:04:EF:6D:D6:BE:8C:D3:A7:08:2D:9A:49:0A Authority key identifier: 87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88 Certificate issuer: /CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88 Certificate serial: 70325287923189073ED911BD8A4CB55A0CFD1571 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer Subject info access: rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft Manifest number: 8B Signing time: Tue 01 Jul 2025 12:42:56 +0000 Manifest this update: Tue 01 Jul 2025 12:37:56 +0000 Manifest next update: Wed 02 Jul 2025 13:20:56 +0000 Files and hashes: 1: 34352e3138352e3130352e302f32342d3234203d3e20323639333735.roa (hash: 8VJcKEqv8e2Tu0UhAjiMptR5U9IhVleiKUHk7Ndb67c=) 2: 34352e3138352e3130342e302f32322d3232203d3e20323639333735.roa (hash: +sNenIhVPHPzNEjIlSdczqKykJ1F6OVtxAmahgGAIR8=) 3: 323830343a363361383a3a2f33322d3332203d3e20323639333735.roa (hash: AaZvRo1Gvb8ehjQqNPJyt+YSjKNO902zr4a+9F5QLy4=) 4: 34352e3138352e3130372e302f32342d3234203d3e20323639333735.roa (hash: E7PEVvRvng2uOsiRhVeUjei4pitJ5GoJken0emdnfsg=) 5: 87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl (hash: LsoAD98HVk2VsszWBvQxr8hGw3Helrij0YlW1HzpYeQ=) 6: 34352e3138352e3130362e302f32342d3234203d3e20323639333735.roa (hash: azYb7n2AhoMfnq11Pg2Qjpcr2bkrMTcbjmZ5g/ma4F8=) 7: 34352e3138352e3130362e302f32332d3233203d3e20323639333735.roa (hash: PD33t9dvfUs1NQhXuL3Xie0KcybW7wj9PNJerbegWf4=) 8: 34352e3138352e3130342e302f32332d3233203d3e20323639333735.roa (hash: X0k+OEr8tLPrBAoKgoUkicfgVlQuwd4zoHl0bGDYL7E=) 9: 34352e3138352e3130342e302f32342d3234203d3e20323639333735.roa (hash: Cj+XZApZwEyDBIz0YbaEcUyGeZaj4bZtMyXONedMytI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 13:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:32:52:87:92:31:89:07:3e:d9:11:bd:8a:4c:b5:5a:0c:fd:15:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A54CD68F9B764BD3E7FEC33B928C02D25F8D88 Validity Not Before: Jul 1 12:37:56 2025 GMT Not After : Jul 2 13:20:56 2025 GMT Subject: CN=00CF286D310B5B04EF6DD6BE8CD3A7082D9A490A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d6:af:a8:74:fd:2e:98:8e:4d:0f:75:81:13: 4a:fe:5d:f6:4e:d5:55:32:6a:a1:d3:36:c8:c2:66: d9:e3:d9:b7:d5:2d:b9:0f:21:27:50:fa:57:63:b7: 2f:96:98:cb:7b:94:85:be:2e:b8:82:66:33:09:92: cc:41:55:ec:54:09:e5:40:5f:6d:90:56:2f:9d:e0: a5:5e:5c:f2:fa:25:33:e5:6c:90:d5:2e:42:e4:36: 3a:c5:91:cf:16:74:fb:97:00:f7:a5:ce:06:83:7e: c1:0d:80:4f:ad:cd:92:41:0d:f9:94:f2:89:00:c3: 94:fe:53:03:9a:0f:d6:eb:69:d6:0b:b7:c5:fc:ba: c8:b9:9f:c4:cf:4d:c6:bd:b2:45:32:73:e5:19:7b: 49:c0:29:b9:c2:73:32:e3:a5:25:41:6c:7a:12:12: 34:46:b2:4d:51:9b:fb:5d:3f:8f:7c:4a:fc:2f:e4: a0:65:8d:f6:68:71:13:3d:12:73:d8:7e:a3:ed:31: f7:df:8a:67:af:e9:f0:4d:3c:4a:d1:76:d7:af:ee: 93:42:fd:d4:cc:65:40:2c:44:b7:3f:49:93:c3:cd: b6:2a:be:5a:80:08:28:63:37:7e:40:9c:f5:71:f8: 34:b8:07:20:05:16:99:2f:cf:0a:a9:fa:01:6e:b6: 1d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CF:28:6D:31:0B:5B:04:EF:6D:D6:BE:8C:D3:A7:08:2D:9A:49:0A X509v3 Authority Key Identifier: keyid:87:A5:4C:D6:8F:9B:76:4B:D3:E7:FE:C3:3B:92:8C:02:D2:5F:8D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XXg6yWYEBNEjqPkqcpo1AWxTAmZznEpCdbuWk5yzheD/0/87A54CD68F9B764BD3E7FEC33B928C02D25F8D88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:e7:0e:d0:74:af:24:7a:5e:6a:88:3d:f9:c2:1d:78:1f:66: c3:a6:6d:20:3e:18:c5:e6:9c:3e:bd:8b:ef:f9:d0:97:10:47: 95:68:52:42:9c:1b:b4:d8:bf:bf:92:92:3d:4f:27:2b:0b:9c: 63:78:f0:37:12:c4:25:c7:9e:d6:af:f1:66:b8:02:67:ff:32: 90:0f:75:c4:db:11:44:94:37:54:e7:21:7c:d5:97:8f:84:c6: 09:44:55:5a:c5:ac:af:74:4c:b1:79:ca:b9:55:50:d1:d3:27: 0e:fd:db:b9:20:15:60:db:e7:da:15:7f:1b:ca:f9:f8:4b:c1: 17:e4:f2:b1:82:1b:d3:9d:ae:c8:24:0b:b4:e7:59:d4:e8:a1: a1:55:45:1c:73:20:88:b9:a9:59:f3:d0:42:5e:c4:b1:cf:f8: 4f:58:73:56:2d:a7:7f:cb:35:0d:1f:2e:2a:47:9b:9b:98:fa: ee:53:de:db:14:4b:ae:38:9f:e6:d3:7f:61:35:71:f7:1c:5c: ff:5b:de:46:08:c3:6d:8c:41:2c:14:93:df:ef:e4:a2:ce:47: 0a:e4:44:ac:ac:d8:46:ea:ac:80:47:3e:2a:88:b6:1f:25:f5: ae:80:8e:7f:67:3c:e9:0b:6e:39:98:92:b1:bf:f8:08:81:63: 49:02:d6:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcDJSh5IxiQc+2RG9iky1Wgz9FXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNTRDRDY4RjlCNzY0QkQzRTdGRUMzM0I5MjhDMDJE MjVGOEQ4ODAeFw0yNTA3MDExMjM3NTZaFw0yNTA3MDIxMzIwNTZaMDMxMTAvBgNV BAMTKDAwQ0YyODZEMzEwQjVCMDRFRjZERDZCRThDRDNBNzA4MkQ5QTQ5MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN1q+odP0umI5ND3WBE0r+XfZO 1VUyaqHTNsjCZtnj2bfVLbkPISdQ+ldjty+WmMt7lIW+LriCZjMJksxBVexUCeVA X22QVi+d4KVeXPL6JTPlbJDVLkLkNjrFkc8WdPuXAPelzgaDfsENgE+tzZJBDfmU 8okAw5T+UwOaD9bradYLt8X8usi5n8TPTca9skUyc+UZe0nAKbnCczLjpSVBbHoS EjRGsk1Rm/tdP498Svwv5KBljfZocRM9EnPYfqPtMfffimev6fBNPErRdtev7pNC /dTMZUAsRLc/SZPDzbYqvlqACChjN35AnPVx+DS4ByAFFpkvzwqp+gFuth2FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAM8obTELWwTvbda+jNOnCC2aSQowHwYDVR0j BBgwFoAUh6VM1o+bdkvT5/7DO5KMAtJfjYgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFhYZzZ5V1lFQk5FanFQa3FjcG8xQVd4VEFtWnpuRXBDZGJ1V2s1eXpo ZUQvMC84N0E1NENENjhGOUI3NjRCRDNFN0ZFQzMzQjkyOEMwMkQyNUY4RDg4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QTU0Q0Q2OEY5Qjc2NEJE M0U3RkVDMzNCOTI4QzAyRDI1RjhEODguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFhYZzZ5V1lFQk5FanFQa3FjcG8xQVd4VEFtWnpuRXBDZGJ1V2s1eXpoZUQvMC84 N0E1NENENjhGOUI3NjRCRDNFN0ZFQzMzQjkyOEMwMkQyNUY4RDg4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwOcO0HSvJHpeaog9+cIdeB9mw6ZtID4YxeacPr2L7/nQlxBHlWhSQpwbtNi/ v5KSPU8nKwucY3jwNxLEJcee1q/xZrgCZ/8ykA91xNsRRJQ3VOchfNWXj4TGCURV WsWsr3RMsXnKuVVQ0dMnDv3buSAVYNvn2hV/G8r5+EvBF+TysYIb052uyCQLtOdZ 1OihoVVFHHMgiLmpWfPQQl7Esc/4T1hzVi2nf8s1DR8uKkebm5j67lPe2xRLrjif 5tN/YTVx9xxc/1veRgjDbYxBLBST3+/kos5HCuRErKzYRuqsgEc+Koi2HyX1roCO f2c86QtuOZiSsb/4CIFjSQLWmg== -----END CERTIFICATE-----Generated at Tue Jul 1 14:44:36 2025 by rpki-client