$ rpki-client -vvf rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft File: BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft (raw, json) Hash identifier: 37jprqDZCHiLZBVYOQ07BXgY/TjWwVnDQdo+Bfy8TJw= Subject key identifier: 8C:DF:3F:55:A5:E8:3B:A7:0C:4E:AC:84:27:6D:38:33:52:D1:56:CA Authority key identifier: BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4 Certificate issuer: /CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4 Certificate serial: 4415F6017560B7F73E8128812653FD315FDEA228 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer Subject info access: rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft Manifest number: 0240 Signing time: Tue 01 Jul 2025 03:23:17 +0000 Manifest this update: Tue 01 Jul 2025 03:18:17 +0000 Manifest next update: Wed 02 Jul 2025 05:23:17 +0000 Files and hashes: 1: 323830343a353738303a3a2f33322d3438203d3e20323632373334.roa (hash: 6PmjmTg0qFj+Vpl+t8ICe23yuGtZx6ZXcO49cR71Yp8=) 2: 3138362e3139352e302e302f32302d3234203d3e20323632373334.roa (hash: DhRxrtfQjT4NB8Bt8sfdP4LqhknKF3f3iI3zG7ssbkg=) 3: BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl (hash: vTLrQtOBdAfyAt1syJ5zXOp5gooBZIzZ+M2j5JHLEr8=) 4: 3138392e38342e3130362e302f32332d3234203d3e20323632373334.roa (hash: viidz0SzCgYo+ia6nn8hDFdjIUuWSnTz3zW/AEiDL+c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 05:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:15:f6:01:75:60:b7:f7:3e:81:28:81:26:53:fd:31:5f:de:a2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4 Validity Not Before: Jul 1 03:18:17 2025 GMT Not After : Jul 2 05:23:17 2025 GMT Subject: CN=8CDF3F55A5E83BA70C4EAC84276D383352D156CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:39:8a:a6:4b:51:ef:df:c4:03:20:76:16:1b: e5:c2:ee:57:50:4a:c0:8d:a4:a2:93:b2:3b:45:56: 15:47:fd:2d:5e:ae:a1:d4:71:23:49:ca:c0:57:82: 2b:25:ad:3c:32:45:eb:2e:91:da:10:61:9f:38:78: 71:88:46:e0:4d:28:4a:32:04:f0:4e:c0:44:cc:f3: 15:4b:94:71:11:0c:b6:73:4c:85:ad:23:aa:b9:5b: 1e:13:b5:2f:eb:90:b6:1c:9e:2f:29:46:a6:e8:8e: 93:65:f1:e2:91:56:24:4f:26:32:20:ee:46:ce:1c: 70:0f:c1:93:0e:f2:ea:89:f2:86:ce:0f:b2:49:87: d7:38:2a:b4:08:c9:be:7a:45:1c:6d:38:82:12:30: 86:3f:1e:5b:5d:47:d9:18:91:14:03:21:e5:99:be: 86:37:f5:0b:24:99:19:63:4d:15:66:3f:23:a9:60: ea:17:9b:28:b4:e7:7a:9b:5c:24:c3:1f:05:59:a2: bd:36:73:3b:a7:74:e3:76:fa:2b:0b:0b:f9:09:ac: bf:2d:4f:a8:70:c6:f1:7c:3d:eb:a8:3a:31:3a:91: 69:e9:09:70:90:b9:67:2c:8b:81:07:9e:c2:02:09: ea:28:0b:42:a0:5f:46:a8:a1:10:29:1b:9c:82:94: 79:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DF:3F:55:A5:E8:3B:A7:0C:4E:AC:84:27:6D:38:33:52:D1:56:CA X509v3 Authority Key Identifier: keyid:BD:EA:3E:14:C3:2F:29:AC:82:ED:A1:5B:2D:4E:D1:AD:25:04:FF:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5axz5h3iCqtCsN2Eu8sjLGDKDwX9hRhQ2stM2MN2EuQA/0/BDEA3E14C32F29AC82EDA15B2D4ED1AD2504FFA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:72:cb:d3:11:73:37:88:da:48:ba:d4:84:47:8b:60:76:d7: e6:75:fb:b6:bc:40:7c:b4:8c:5e:76:72:88:f6:f8:24:69:83: 95:19:39:30:21:e0:cf:c6:e1:42:e9:f7:8d:a1:65:04:63:97: 4b:39:92:ce:88:bb:79:e7:99:ab:da:ce:04:03:6f:fc:21:a8: 70:76:75:64:de:f9:56:7b:26:6d:b6:ef:76:88:be:b5:20:1a: 97:b4:b7:b6:91:11:08:e2:12:3f:c1:06:d7:4e:7d:c5:71:1d: f7:6a:0e:0c:ba:ce:b9:d8:a9:1a:9a:d9:1b:f6:24:70:93:ae: 4d:ad:1e:88:aa:eb:1c:59:fc:81:fe:5d:1a:cc:5e:d3:c9:0f: e0:c8:d4:ad:41:a7:3f:52:4a:11:64:53:0e:b5:6e:69:b3:21: 4b:43:e3:0e:ed:5c:39:a8:21:79:f4:27:27:5d:b2:8e:3f:0c: 45:7e:e7:80:0b:79:ba:d8:1b:57:61:aa:58:ee:3c:2f:a8:ff: a4:18:00:60:88:63:2d:70:f8:fc:a4:f3:94:7e:fe:2d:02:d8: 9b:03:dd:4a:7c:62:72:d3:6a:31:6d:fa:36:ef:31:24:22:18: 67:20:6e:73:32:e7:6a:a2:4b:98:ab:ca:b5:3e:ac:38:07:bf: cd:50:9b:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURBX2AXVgt/c+gSiBJlP9MV/eoigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRFQTNFMTRDMzJGMjlBQzgyRURBMTVCMkQ0RUQxQUQy NTA0RkZBNDAeFw0yNTA3MDEwMzE4MTdaFw0yNTA3MDIwNTIzMTdaMDMxMTAvBgNV BAMTKDhDREYzRjU1QTVFODNCQTcwQzRFQUM4NDI3NkQzODMzNTJEMTU2Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLOYqmS1Hv38QDIHYWG+XC7ldQ SsCNpKKTsjtFVhVH/S1erqHUcSNJysBXgislrTwyResukdoQYZ84eHGIRuBNKEoy BPBOwETM8xVLlHERDLZzTIWtI6q5Wx4TtS/rkLYcni8pRqbojpNl8eKRViRPJjIg 7kbOHHAPwZMO8uqJ8obOD7JJh9c4KrQIyb56RRxtOIISMIY/HltdR9kYkRQDIeWZ voY39QskmRljTRVmPyOpYOoXmyi053qbXCTDHwVZor02czundON2+isLC/kJrL8t T6hwxvF8PeuoOjE6kWnpCXCQuWcsi4EHnsICCeooC0KgX0aooRApG5yClHlDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjN8/VaXoO6cMTqyEJ204M1LRVsowHwYDVR0j BBgwFoAUveo+FMMvKayC7aFbLU7RrSUE/6QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNWF4ejVoM2lDcXRDc04yRXU4c2pMR0RLRHdYOWhSaFEyc3RNMk1OMkV1 UUEvMC9CREVBM0UxNEMzMkYyOUFDODJFREExNUIyRDRFRDFBRDI1MDRGRkE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERUEzRTE0QzMyRjI5QUM4 MkVEQTE1QjJENEVEMUFEMjUwNEZGQTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NWF4ejVoM2lDcXRDc04yRXU4c2pMR0RLRHdYOWhSaFEyc3RNMk1OMkV1UUEvMC9C REVBM0UxNEMzMkYyOUFDODJFREExNUIyRDRFRDFBRDI1MDRGRkE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJHLL0xFzN4jaSLrUhEeLYHbX5nX7trxAfLSMXnZyiPb4JGmDlRk5MCHgz8bh Qun3jaFlBGOXSzmSzoi7eeeZq9rOBANv/CGocHZ1ZN75Vnsmbbbvdoi+tSAal7S3 tpERCOISP8EG1059xXEd92oODLrOudipGprZG/YkcJOuTa0eiKrrHFn8gf5dGsxe 08kP4MjUrUGnP1JKEWRTDrVuabMhS0PjDu1cOaghefQnJ12yjj8MRX7ngAt5utgb V2GqWO48L6j/pBgAYIhjLXD4/KTzlH7+LQLYmwPdSnxictNqMW36Nu8xJCIYZyBu czLnaqJLmKvKtT6sOAe/zVCbxg== -----END CERTIFICATE-----Generated at Tue Jul 1 09:13:03 2025 by rpki-client