$ rpki-client -vvf rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft File: 8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft (raw, json) Hash identifier: up9hUW5y38Dcv33pf9b8HYW/TmJ2geC/yii8LA9kRo8= Subject key identifier: BC:C9:42:BD:69:7C:89:CC:AE:9C:F9:36:98:1E:EF:B3:8E:86:1C:5D Authority key identifier: 8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4 Certificate issuer: /CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4 Certificate serial: 61961F70FC19001F6E92A184AFB8E7EA52C4A069 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer Subject info access: rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft Manifest number: 0255 Signing time: Tue 01 Jul 2025 13:42:16 +0000 Manifest this update: Tue 01 Jul 2025 13:37:16 +0000 Manifest next update: Wed 02 Jul 2025 13:57:16 +0000 Files and hashes: 1: 3137372e3132392e36382e302f32322d3332203d3e203238363339.roa (hash: mqYkp/M5f+kccLNtX9h2J9BSkR7/JgMayBLUCzNiahs=) 2: 8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl (hash: g1hZdEIdePTQMhKFHCegLBCti3ts5sX0RBhRo/uBZI0=) 3: 323830343a6464303a3a2f33322d313238203d3e203238363339.roa (hash: WQoboyImui1okPybhUmMkwRTPTqA4Wr/K4QTuEd2D6g=) 4: 3139312e362e3233322e302f32312d3332203d3e203238363339.roa (hash: lAWXcHvJQEUJBKmNh5txL8VNqKKsnauGkIpzuQASyX0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 13:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:96:1f:70:fc:19:00:1f:6e:92:a1:84:af:b8:e7:ea:52:c4:a0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4 Validity Not Before: Jul 1 13:37:16 2025 GMT Not After : Jul 2 13:57:16 2025 GMT Subject: CN=BCC942BD697C89CCAE9CF936981EEFB38E861C5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:79:90:9b:8b:11:be:78:04:b3:62:9b:c0:20: 5c:74:26:b0:ac:4d:19:6c:44:d9:ea:9b:0b:f5:ed: 16:58:5b:02:1e:34:a2:36:09:d3:36:a7:7c:f0:88: aa:a6:fd:a3:d5:d2:f6:88:b1:b4:06:82:e5:70:36: 2d:41:7e:a5:5b:62:81:68:f5:43:41:bc:87:5c:9a: 35:b7:c8:21:81:da:5b:01:92:6c:25:5b:00:f7:48: 34:bd:dc:3b:f0:9b:58:ba:2b:92:00:f4:5d:00:39: 09:c8:fc:19:ae:d7:97:23:6f:35:69:b2:03:3e:11: ac:b1:73:07:77:b4:97:d4:59:69:a5:ab:99:00:99: 07:97:94:50:f4:b0:ec:92:1c:26:51:35:15:88:80: da:59:9c:9c:0f:24:ac:a7:90:5b:e3:69:38:13:6d: b9:bc:96:19:07:c7:09:94:8a:bb:8d:a3:26:66:78: 19:f0:87:f8:dc:94:2f:74:12:35:0c:74:dc:79:06: 70:ce:a9:9f:26:54:d0:5c:8b:ef:78:16:02:e2:0d: 8f:cd:d1:8b:41:06:51:73:0b:34:c1:4c:11:2b:d5: 30:89:58:de:93:2f:d0:cd:82:76:e6:c3:ea:07:18: 8e:29:68:49:6a:96:2e:7f:45:1b:46:d7:e8:95:30: 79:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C9:42:BD:69:7C:89:CC:AE:9C:F9:36:98:1E:EF:B3:8E:86:1C:5D X509v3 Authority Key Identifier: keyid:8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f6:ed:f0:75:1a:57:86:0b:ec:68:5c:08:20:f6:46:df:ee: 2d:05:4e:96:22:92:bf:5c:3a:79:5c:00:d5:dc:7c:53:21:70: 0d:e5:3a:58:d9:aa:4c:cd:84:f0:da:94:ab:d0:d0:71:46:0c: 0f:14:44:73:af:2f:39:86:76:15:0c:a0:54:f5:fe:44:ef:f7: 8d:eb:4c:66:d3:1c:d7:bf:cc:d6:55:14:ab:e8:48:36:72:c6: 9d:d4:ed:53:df:aa:5e:60:56:cf:e8:2c:dc:a8:a9:46:7d:50: 95:e2:9d:1e:96:c5:96:2c:7c:d2:97:ef:14:4e:05:aa:44:58: ea:a9:1b:3c:69:78:30:bd:ef:76:37:63:c9:33:8b:d9:64:0f: 68:97:fe:67:a8:ac:6d:c0:bb:67:39:05:80:7f:72:d0:af:0c: 62:bf:4b:50:69:37:39:0c:95:6b:f7:30:06:bd:6e:b1:72:bb: a5:6f:bb:21:84:70:22:b9:71:16:ef:d5:13:31:f3:f3:f8:a3: b1:7d:0f:84:6b:76:03:90:5c:54:e5:48:e3:45:19:d0:33:ca: 29:9a:57:f5:f4:d9:2e:d5:ab:0c:6f:e0:26:3a:3c:3f:bb:49: 90:38:6a:72:74:38:c7:dc:f9:94:43:6f:31:d7:c0:e6:f9:6c: 49:5a:03:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYZYfcPwZAB9ukqGEr7jn6lLEoGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU3MzE2Q0E5MDdGM0Q0NjkyOUFGRjZEREY1NjU1REJC NTNBQkRDNDAeFw0yNTA3MDExMzM3MTZaFw0yNTA3MDIxMzU3MTZaMDMxMTAvBgNV BAMTKEJDQzk0MkJENjk3Qzg5Q0NBRTlDRjkzNjk4MUVFRkIzOEU4NjFDNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDieZCbixG+eASzYpvAIFx0JrCs TRlsRNnqmwv17RZYWwIeNKI2CdM2p3zwiKqm/aPV0vaIsbQGguVwNi1BfqVbYoFo 9UNBvIdcmjW3yCGB2lsBkmwlWwD3SDS93Dvwm1i6K5IA9F0AOQnI/Bmu15cjbzVp sgM+Eayxcwd3tJfUWWmlq5kAmQeXlFD0sOySHCZRNRWIgNpZnJwPJKynkFvjaTgT bbm8lhkHxwmUiruNoyZmeBnwh/jclC90EjUMdNx5BnDOqZ8mVNBci+94FgLiDY/N 0YtBBlFzCzTBTBEr1TCJWN6TL9DNgnbmw+oHGI4paElqli5/RRtG1+iVMHn3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvMlCvWl8icyunPk2mB7vs46GHF0wHwYDVR0j BBgwFoAUjnMWypB/PUaSmv9t31ZV27U6vcQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXlEMWVEeDZxS3hFY1VqOHJ1YThRTUs4QmZ2dkFqU25zV1JRcDN1clBO WGovMS84RTczMTZDQTkwN0YzRDQ2OTI5QUZGNkRERjU2NTVEQkI1M0FCREM0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFNzMxNkNBOTA3RjNENDY5 MjlBRkY2RERGNTY1NURCQjUzQUJEQzQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXlEMWVEeDZxS3hFY1VqOHJ1YThRTUs4QmZ2dkFqU25zV1JRcDN1clBOWGovMS84 RTczMTZDQTkwN0YzRDQ2OTI5QUZGNkRERjU2NTVEQkI1M0FCREM0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH/bt8HUaV4YL7GhcCCD2Rt/uLQVOliKSv1w6eVwA1dx8UyFwDeU6WNmqTM2E 8NqUq9DQcUYMDxREc68vOYZ2FQygVPX+RO/3jetMZtMc17/M1lUUq+hINnLGndTt U9+qXmBWz+gs3KipRn1QleKdHpbFlix80pfvFE4FqkRY6qkbPGl4ML3vdjdjyTOL 2WQPaJf+Z6isbcC7ZzkFgH9y0K8MYr9LUGk3OQyVa/cwBr1usXK7pW+7IYRwIrlx Fu/VEzHz8/ijsX0PhGt2A5BcVOVI40UZ0DPKKZpX9fTZLtWrDG/gJjo8P7tJkDhq cnQ4x9z5lENvMdfA5vlsSVoDXQ== -----END CERTIFICATE-----Generated at Tue Jul 1 22:17:49 2025 by rpki-client