$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft File: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft (raw, json) Hash identifier: fC+HTEvzO6/cQ/y0Izn6K7wMANHRdogyQ0WzyMNhcF0= Subject key identifier: 36:90:5F:D1:AB:67:BD:9D:49:4B:8A:91:B9:CD:62:5E:E3:A8:52:DC Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE Certificate issuer: /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Certificate serial: 5D9FB3413B0CEBD5FAB171935CE018BE5B2C8279 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft Manifest number: 0257 Signing time: Fri 04 Jul 2025 02:04:41 +0000 Manifest this update: Fri 04 Jul 2025 01:59:41 +0000 Manifest next update: Sat 05 Jul 2025 03:41:41 +0000 Files and hashes: 1: 3137302e302e3230382e302f32322d3234203d3e20323633393139.roa (hash: daKi2XN6iI/5shlbC2ws+WpCE+eRSaaM95sbtBClTTE=) 2: 3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa (hash: 9lrgdFqXcmk1aveRypR0nwRoxN6RAu5lewGudgo7m5A=) 3: 323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (hash: o5soZhe+dlhemRC6K331qQOeiYKJedndqQuOLBx6nRk=) 4: 8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl (hash: RnDOp8i8Q0yyfb6baH/Q5I+Jrv9289S6auZpjVrigdA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Jul 2025 00:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:9f:b3:41:3b:0c:eb:d5:fa:b1:71:93:5c:e0:18:be:5b:2c:82:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE Validity Not Before: Jul 4 01:59:41 2025 GMT Not After : Jul 5 03:41:41 2025 GMT Subject: CN=36905FD1AB67BD9D494B8A91B9CD625EE3A852DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:05:ba:6d:df:52:4f:b9:e8:b3:2e:4a:33:cf: 6d:b8:48:dc:bb:08:94:86:74:c4:4c:75:75:a5:88: 0b:19:98:ac:d3:5c:08:dc:cb:9c:80:f3:2f:63:fe: d0:e0:6f:7d:1a:43:85:b1:35:08:35:06:fd:2c:b3: ea:3d:0a:f4:71:fa:04:0d:a3:97:63:10:0c:46:97: d0:ea:93:dc:de:81:ba:26:e3:78:14:de:33:9e:34: fc:d1:93:f5:58:85:8e:e1:ce:4a:0e:00:91:ba:f8: ef:1f:fe:c1:eb:ce:05:6a:47:98:3d:a1:a6:2a:8b: f2:ab:5c:db:91:4a:96:13:44:36:60:25:48:51:24: e6:08:e6:db:f9:6f:ad:79:b2:b1:e6:b4:b3:90:51: 45:cd:f8:c3:a6:a8:2c:93:92:6c:44:78:b9:55:01: e0:e8:2f:a3:16:6c:b0:58:77:eb:e5:32:71:48:e4: 7a:f9:d1:32:89:69:10:7e:86:37:fe:ff:89:63:77: 8c:c3:fd:ae:ad:37:73:1a:d2:9f:52:d0:7b:1e:e8: 3d:9a:d8:33:64:a8:81:71:27:82:20:3a:58:3a:6f: ce:21:ca:1e:fa:bb:16:e8:ce:10:c8:26:9e:11:71: a1:cf:41:e6:58:03:33:9f:cf:fd:ab:78:5f:4e:f7: d6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:90:5F:D1:AB:67:BD:9D:49:4B:8A:91:B9:CD:62:5E:E3:A8:52:DC X509v3 Authority Key Identifier: keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:1d:6f:cd:e7:ac:cf:e0:86:8f:bc:2d:10:93:02:50:d1:5e: 8c:4a:15:0e:84:51:6f:f4:5b:b5:4c:ee:44:32:ec:2f:56:9d: f1:e4:df:f6:9c:cd:5f:6d:a3:48:db:d1:dc:5a:f9:6f:50:d0: dd:24:05:ab:25:57:fc:b0:f8:12:36:32:b7:2a:fd:01:0c:67: f2:73:15:30:92:c0:20:ac:a7:10:cb:57:c9:2e:3a:85:b9:33: d0:25:0c:92:3f:70:93:6a:bd:3a:ab:13:bf:26:06:f8:5b:9f: 17:eb:c2:c8:42:1c:f6:69:53:43:53:3a:89:06:c2:64:7b:eb: c5:eb:7f:f8:95:ea:d7:9c:98:5a:05:c2:6f:d3:53:7e:03:db: e5:d5:b5:9d:3d:ff:99:8b:67:b9:77:1c:3d:4a:92:ff:67:44: de:29:5c:5f:56:a8:84:98:b2:48:da:42:bb:1d:41:0a:74:8f: 34:e8:71:61:93:88:64:04:a0:35:e8:1c:c9:c7:c2:57:6d:e5: d3:e6:17:7d:2c:37:e1:18:89:07:bf:6c:2d:b9:5b:76:a3:c4: 4b:f7:1d:9a:59:6c:2f:96:c3:03:d2:2e:0a:7c:fd:8e:e2:db: 63:53:eb:ca:1c:e4:12:33:df:1a:7c:e4:b4:ba:58:f5:79:cc: ef:77:82:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXZ+zQTsM69X6sXGTXOAYvlssgnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRTlDOTBFQkM1MDgyRjgwMjA1NUVGQUE2MzYwQzY2 MUJGODVDRTAeFw0yNTA3MDQwMTU5NDFaFw0yNTA3MDUwMzQxNDFaMDMxMTAvBgNV BAMTKDM2OTA1RkQxQUI2N0JEOUQ0OTRCOEE5MUI5Q0Q2MjVFRTNBODUyREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkBbpt31JPueizLkozz224SNy7 CJSGdMRMdXWliAsZmKzTXAjcy5yA8y9j/tDgb30aQ4WxNQg1Bv0ss+o9CvRx+gQN o5djEAxGl9Dqk9zegbom43gU3jOeNPzRk/VYhY7hzkoOAJG6+O8f/sHrzgVqR5g9 oaYqi/KrXNuRSpYTRDZgJUhRJOYI5tv5b615srHmtLOQUUXN+MOmqCyTkmxEeLlV AeDoL6MWbLBYd+vlMnFI5Hr50TKJaRB+hjf+/4ljd4zD/a6tN3Ma0p9S0Hse6D2a 2DNkqIFxJ4IgOlg6b84hyh76uxbozhDIJp4RcaHPQeZYAzOfz/2reF9O99aDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUNpBf0atnvZ1JS4qRuc1iXuOoUtwwHwYDVR0j BBgwFoAUi66ckOvFCC+AIFXvqmNgxmG/hc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNL ODUvMS84QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCQUU5QzkwRUJDNTA4MkY4 MDIwNTVFRkFBNjM2MEM2NjFCRjg1Q0UuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGNHMm9iRVVZZk1LaFdBWDQ1N25GZ3pvVFhZU3RpTEs0RGFFMzRWRFNLODUvMS84 QkFFOUM5MEVCQzUwODJGODAyMDU1RUZBQTYzNjBDNjYxQkY4NUNFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAR1vzeesz+CGj7wtEJMCUNFejEoVDoRRb/RbtUzuRDLsL1ad8eTf9pzNX22j SNvR3Fr5b1DQ3SQFqyVX/LD4EjYytyr9AQxn8nMVMJLAIKynEMtXyS46hbkz0CUM kj9wk2q9OqsTvyYG+FufF+vCyEIc9mlTQ1M6iQbCZHvrxet/+JXq15yYWgXCb9NT fgPb5dW1nT3/mYtnuXccPUqS/2dE3ilcX1aohJiySNpCux1BCnSPNOhxYZOIZASg NegcycfCV23l0+YXfSw34RiJB79sLblbdqPES/cdmllsL5bDA9IuCnz9juLbY1Pr yhzkEjPfGnzktLpY9XnM73eCJQ== -----END CERTIFICATE-----Generated at Fri Jul 4 07:26:38 2025 by rpki-client