$ rpki-client -vvf rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.mft File: B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.mft (raw, json) Hash identifier: a9wZXT269ClouNrGvfHnpjfLPUTqSYETUglVXZf+mHY= Subject key identifier: 81:B9:5D:83:8B:32:88:06:E7:AD:67:2E:1D:19:10:E9:A7:8B:D6:2C Authority key identifier: B8:C4:22:F4:E7:DE:B2:2B:F8:44:9A:48:96:DA:5B:60:58:DF:65:AD Certificate issuer: /CN=B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD Certificate serial: 28F50F0F0F756B109099CB1C5DB8C98133129EBC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer Subject info access: rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.mft Manifest number: 5E Signing time: Mon 30 Jun 2025 12:36:36 +0000 Manifest this update: Mon 30 Jun 2025 12:31:36 +0000 Manifest next update: Tue 01 Jul 2025 14:38:36 +0000 Files and hashes: 1: 3230302e3139362e3134302e302f32322d3232203d3e203532373930.roa (hash: x6OSJB6bgqwXMFZEXQ3qdVQ6Ta+0uRuQxjMAdMhL/q4=) 2: 3137372e33392e31322e302f32322d3232203d3e203532373930.roa (hash: R93deM5pmTBvtnA92QRBJS2cI4mjyJ9HU+H0pOwXvNE=) 3: 323830343a313864633a3a2f33322d3332203d3e203532373930.roa (hash: 4Y9caAt8f2u8Wrat75/HoRSEJ6bRLUMrPrsyvoGwf+0=) 4: B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.crl (hash: YIJk4/lhwgiqQ86+EBMDc9qUM1dv0offfQqx08oRf4s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.crl rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 14:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:f5:0f:0f:0f:75:6b:10:90:99:cb:1c:5d:b8:c9:81:33:12:9e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD Validity Not Before: Jun 30 12:31:36 2025 GMT Not After : Jul 1 14:38:36 2025 GMT Subject: CN=81B95D838B328806E7AD672E1D1910E9A78BD62C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:17:35:30:d3:bb:f3:fd:b4:7e:21:3a:77:76: 51:2e:1c:a8:89:52:af:ea:c9:18:47:c9:62:c9:c9: e5:c6:32:c2:c0:b1:66:e3:da:0e:78:9e:fb:7e:16: 3a:2d:fe:9b:7c:56:a7:3a:60:48:b0:a5:85:54:11: 37:00:0d:c0:ba:ad:e3:88:3b:79:42:73:e1:dc:2d: a5:13:d2:d9:56:07:89:0b:db:7b:66:47:9c:82:2d: 1f:69:b3:eb:1b:0c:fa:ac:dc:a1:6b:f8:8c:a3:f3: f6:e8:83:43:8f:14:05:27:b4:1c:30:8d:9e:57:ee: 23:bc:b9:70:37:df:f7:cd:22:f9:b9:3e:2d:81:f6: 58:fe:b6:7d:b0:3c:79:5c:cd:c7:5b:a7:44:90:ae: 3d:0f:0c:e1:72:a1:de:8f:97:0f:c8:05:05:6e:46: 73:ec:79:21:29:28:5c:63:3c:0f:5e:23:1e:8f:1f: 95:86:3e:5b:e6:69:77:c8:88:8c:fd:65:42:93:11: 1e:bd:c2:f5:e7:21:8e:ba:42:87:ec:8e:2b:04:2d: 46:6c:89:cd:af:83:4a:8e:3b:77:6f:c7:f3:35:ac: be:94:4f:0a:ec:ba:ef:9e:0d:0d:58:0a:a6:d2:8f: 5b:79:0c:55:a3:ee:2f:a0:e4:bd:1b:52:ad:96:fa: c8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B9:5D:83:8B:32:88:06:E7:AD:67:2E:1D:19:10:E9:A7:8B:D6:2C X509v3 Authority Key Identifier: keyid:B8:C4:22:F4:E7:DE:B2:2B:F8:44:9A:48:96:DA:5B:60:58:DF:65:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/B8C422F4E7DEB22BF8449A4896DA5B6058DF65AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f7:dc:26:b2:ad:18:7c:f6:ad:7b:ea:70:2d:68:59:37:8f: ca:19:f9:03:fb:75:09:ba:21:26:7b:30:d4:6a:81:7f:12:fa: 9b:e1:c8:94:ce:8a:e7:87:17:10:60:49:e2:e1:8c:1e:d8:2a: 75:2b:14:ee:96:80:97:64:fc:19:b5:fd:48:9d:c5:cd:2b:1f: 87:f0:20:42:26:86:b5:aa:52:32:78:fb:37:fb:0b:42:09:6c: 25:dc:9b:7a:33:aa:95:13:4a:a1:b8:56:88:41:7a:27:97:39: 45:75:ee:69:6a:c6:cd:c0:7f:97:34:44:fd:3c:35:78:1f:cb: 34:d1:0d:43:90:5f:31:e1:8b:92:45:15:2b:24:90:97:0a:94: c4:8e:d7:c5:d9:60:6e:0a:fe:ad:13:53:99:2b:10:b0:39:3d: 7b:44:df:24:61:3b:a6:a1:cf:b4:8a:9f:2f:27:23:5b:ef:87: b9:ce:46:b5:62:0a:09:8c:ba:cc:19:2e:40:23:bf:9e:73:58: b5:1d:58:47:1b:f1:29:ea:54:de:20:64:ef:ca:07:4f:cc:49: 60:ee:03:0e:f4:ad:36:4c:34:f4:5c:0d:e4:13:39:ed:eb:cf: 22:03:82:8b:eb:a3:54:cf:83:db:03:d2:af:d7:76:bc:ec:fa: 38:f4:b9:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKPUPDw91axCQmcscXbjJgTMSnrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDNDIyRjRFN0RFQjIyQkY4NDQ5QTQ4OTZEQTVCNjA1 OERGNjVBRDAeFw0yNTA2MzAxMjMxMzZaFw0yNTA3MDExNDM4MzZaMDMxMTAvBgNV BAMTKDgxQjk1RDgzOEIzMjg4MDZFN0FENjcyRTFEMTkxMEU5QTc4QkQ2MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGFzUw07vz/bR+ITp3dlEuHKiJ Uq/qyRhHyWLJyeXGMsLAsWbj2g54nvt+Fjot/pt8Vqc6YEiwpYVUETcADcC6reOI O3lCc+HcLaUT0tlWB4kL23tmR5yCLR9ps+sbDPqs3KFr+Iyj8/bog0OPFAUntBww jZ5X7iO8uXA33/fNIvm5Pi2B9lj+tn2wPHlczcdbp0SQrj0PDOFyod6Plw/IBQVu RnPseSEpKFxjPA9eIx6PH5WGPlvmaXfIiIz9ZUKTER69wvXnIY66QofsjisELUZs ic2vg0qOO3dvx/M1rL6UTwrsuu+eDQ1YCqbSj1t5DFWj7i+g5L0bUq2W+shVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgbldg4syiAbnrWcuHRkQ6aeL1iwwHwYDVR0j BBgwFoAUuMQi9Ofesiv4RJpIltpbYFjfZa0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmJRamZDUHdMb2ZjUHU1VmJ4N0tFZEVzcDF0NVFKRXVyUGN5UGFpWGdj dU4vMC9COEM0MjJGNEU3REVCMjJCRjg0NDlBNDg5NkRBNUI2MDU4REY2NUFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4QzQyMkY0RTdERUIyMkJG ODQ0OUE0ODk2REE1QjYwNThERjY1QUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NmJRamZDUHdMb2ZjUHU1VmJ4N0tFZEVzcDF0NVFKRXVyUGN5UGFpWGdjdU4vMC9C OEM0MjJGNEU3REVCMjJCRjg0NDlBNDg5NkRBNUI2MDU4REY2NUFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQPfcJrKtGHz2rXvqcC1oWTePyhn5A/t1CbohJnsw1GqBfxL6m+HIlM6K54cX EGBJ4uGMHtgqdSsU7paAl2T8GbX9SJ3FzSsfh/AgQiaGtapSMnj7N/sLQglsJdyb ejOqlRNKobhWiEF6J5c5RXXuaWrGzcB/lzRE/Tw1eB/LNNENQ5BfMeGLkkUVKySQ lwqUxI7Xxdlgbgr+rRNTmSsQsDk9e0TfJGE7pqHPtIqfLycjW++Huc5GtWIKCYy6 zBkuQCO/nnNYtR1YRxvxKepU3iBk78oHT8xJYO4DDvStNkw09FwN5BM57evPIgOC i+ujVM+D2wPSr9d2vOz6OPS5IA== -----END CERTIFICATE-----Generated at Tue Jul 1 04:13:52 2025 by rpki-client