$ rpki-client -vvf rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft File: B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft (raw, json) Hash identifier: Z7NQb4u1htOofC4vI6tETrQh5gxDWMrdSWDGfR1oS5k= Subject key identifier: 64:BC:4E:95:93:6D:D3:33:FA:EF:25:60:5C:03:5A:E2:44:1E:08:72 Authority key identifier: B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69 Certificate issuer: /CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369 Certificate serial: 59192A5A0C8296B6E08D408269D522EE64EAD9BD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer Subject info access: rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft Manifest number: 0107 Signing time: Tue 01 Jul 2025 14:22:36 +0000 Manifest this update: Tue 01 Jul 2025 14:17:36 +0000 Manifest next update: Wed 02 Jul 2025 15:17:36 +0000 Files and hashes: 1: 3138372e3130392e3131382e302f32342d3234203d3e20323635393238.roa (hash: KszOIxvzdb2byYIAkB/jo2J14kAdHgZWkp71wd+hZKU=) 2: B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl (hash: G6U3ANm81TJa/5csS50KblCVfS2HczbRGQINpC5igeU=) 3: 3133312e3139362e3133322e302f32322d3234203d3e20323635393238.roa (hash: Orbb6MeNodxx3916UDCrBEg7Fpk2zV0yU2VrzE/g0s8=) 4: 323830343a343030343a3a2f33322d3438203d3e20323635393238.roa (hash: XcxDfu5Dk/JfCL8RQs0hAY0KSxIgVRPmT1tOWH4+b4g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 15:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:19:2a:5a:0c:82:96:b6:e0:8d:40:82:69:d5:22:ee:64:ea:d9:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369 Validity Not Before: Jul 1 14:17:36 2025 GMT Not After : Jul 2 15:17:36 2025 GMT Subject: CN=64BC4E95936DD333FAEF25605C035AE2441E0872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:de:2d:49:aa:d6:7b:3f:65:d9:d8:ec:ca:47: ef:69:06:b2:68:99:af:9a:74:75:59:c3:2e:e1:8f: 04:15:75:20:15:a9:1f:b4:35:a4:5a:08:0b:13:46: dc:20:fb:96:c9:d2:3f:46:fc:49:43:d7:d5:d4:50: fa:df:c0:69:28:3c:25:3e:5a:cb:8c:2a:4c:3e:4c: 47:ce:4a:7a:7e:3f:57:6b:be:39:ff:bb:0a:d9:38: b6:c1:77:32:53:03:cb:97:b7:95:e5:e6:a6:fd:6c: ca:99:2b:0d:0a:35:ec:bc:1d:c8:da:46:a0:3c:d9: 96:01:68:9d:6e:d8:4c:6e:a7:8f:9c:28:32:3b:80: ac:fc:59:0a:f8:4a:93:fe:d1:d3:a3:f7:25:ed:ed: 7a:36:31:28:ff:b8:f0:58:3b:26:87:9d:e1:c5:c6: b4:77:e6:cd:2a:2f:71:d3:8d:77:22:ff:bd:b1:19: 72:8f:96:af:d0:e5:3b:12:67:bc:3d:06:76:df:e0: 9b:b1:10:24:67:4c:b5:2e:ec:11:8a:8f:a4:09:61: 5a:7e:ce:de:a4:ce:26:f4:15:37:fc:b6:88:a3:fd: 71:da:0c:b0:1f:6a:7b:2c:75:d3:ff:60:e4:03:49: 8c:c7:2d:d1:71:5f:65:2f:18:f0:b4:e8:2e:47:36: 87:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BC:4E:95:93:6D:D3:33:FA:EF:25:60:5C:03:5A:E2:44:1E:08:72 X509v3 Authority Key Identifier: keyid:B8:D5:9F:4B:56:BB:54:FC:31:CD:9B:F1:C7:FD:DD:A1:9D:3B:03:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/B8D59F4B56BB54FC31CD9BF1C7FDDDA19D3B0369.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:cb:7c:f7:98:04:d5:fa:51:75:49:25:18:ae:69:7d:f0:af: be:2c:21:fa:a1:ab:e7:44:89:4c:12:fd:0b:e3:6e:e6:7c:48: e7:f0:b4:d9:45:41:f1:04:df:02:a7:1d:3a:1c:09:fb:59:c4: 9b:c3:c0:37:35:89:54:87:7c:0b:89:e4:3e:7b:c5:fe:37:65: f1:50:3c:ed:42:a2:38:17:74:ff:4f:bf:8f:4c:3b:af:35:5b: 8b:47:e8:93:06:69:5b:a0:97:50:5d:16:7f:4a:38:d6:4b:5c: 93:ff:d2:2e:06:71:43:89:99:5b:db:72:b8:ee:fc:cc:d9:af: fa:21:7d:b5:39:ff:27:b7:84:9c:e7:4f:ef:b0:b8:e9:15:56: cc:42:69:40:09:32:10:23:ee:59:5e:88:bb:0e:43:3a:89:ea: 0c:ef:0f:60:45:c2:7a:ce:b8:51:8d:aa:d3:67:26:af:7b:7e: 24:2a:a1:03:b1:ea:12:73:d2:25:1b:41:1b:1a:7e:b9:d1:39: 14:29:3c:91:48:00:48:16:11:81:c6:47:2f:e2:ce:68:d6:88: 09:f1:7e:39:a0:45:39:6c:82:e7:a9:84:fd:4a:21:83:44:d7: e8:34:90:85:00:01:63:f3:8d:e6:5b:20:db:fc:fa:fe:86:96: 39:aa:0a:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWRkqWgyClrbgjUCCadUi7mTq2b0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENTlGNEI1NkJCNTRGQzMxQ0Q5QkYxQzdGREREQTE5 RDNCMDM2OTAeFw0yNTA3MDExNDE3MzZaFw0yNTA3MDIxNTE3MzZaMDMxMTAvBgNV BAMTKDY0QkM0RTk1OTM2REQzMzNGQUVGMjU2MDVDMDM1QUUyNDQxRTA4NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj3i1JqtZ7P2XZ2OzKR+9pBrJo ma+adHVZwy7hjwQVdSAVqR+0NaRaCAsTRtwg+5bJ0j9G/ElD19XUUPrfwGkoPCU+ WsuMKkw+TEfOSnp+P1drvjn/uwrZOLbBdzJTA8uXt5Xl5qb9bMqZKw0KNey8Hcja RqA82ZYBaJ1u2Exup4+cKDI7gKz8WQr4SpP+0dOj9yXt7Xo2MSj/uPBYOyaHneHF xrR35s0qL3HTjXci/72xGXKPlq/Q5TsSZ7w9Bnbf4JuxECRnTLUu7BGKj6QJYVp+ zt6kzib0FTf8toij/XHaDLAfanssddP/YOQDSYzHLdFxX2UvGPC06C5HNod1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZLxOlZNt0zP67yVgXANa4kQeCHIwHwYDVR0j BBgwFoAUuNWfS1a7VPwxzZvxx/3doZ07A2kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNkhaQkZrWUpSamNIdDhCYUp3aldHOXB3VVRaREs1cEd6NFFKVHFaRlNa SmkvMC9COEQ1OUY0QjU2QkI1NEZDMzFDRDlCRjFDN0ZERERBMTlEM0IwMzY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4RDU5RjRCNTZCQjU0RkMz MUNEOUJGMUM3RkREREExOUQzQjAzNjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NkhaQkZrWUpSamNIdDhCYUp3aldHOXB3VVRaREs1cEd6NFFKVHFaRlNaSmkvMC9C OEQ1OUY0QjU2QkI1NEZDMzFDRDlCRjFDN0ZERERBMTlEM0IwMzY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvct895gE1fpRdUklGK5pffCvviwh+qGr50SJTBL9C+Nu5nxI5/C02UVB8QTf AqcdOhwJ+1nEm8PANzWJVId8C4nkPnvF/jdl8VA87UKiOBd0/0+/j0w7rzVbi0fo kwZpW6CXUF0Wf0o41ktck//SLgZxQ4mZW9tyuO78zNmv+iF9tTn/J7eEnOdP77C4 6RVWzEJpQAkyECPuWV6Iuw5DOonqDO8PYEXCes64UY2q02cmr3t+JCqhA7HqEnPS JRtBGxp+udE5FCk8kUgASBYRgcZHL+LOaNaICfF+OaBFOWyC56mE/Uohg0TX6DSQ hQABY/ON5lsg2/z6/oaWOaoK+Q== -----END CERTIFICATE-----Generated at Wed Jul 2 07:29:35 2025 by rpki-client