$ rpki-client -vvf rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.mft File: 812191D8B89140CC7C6B2A5D3CF140116F023979.mft (raw, json) Hash identifier: eawhjpx/YuX1weq6yKpZLyi8QPhGXddzSd9QlFCxV4k= Subject key identifier: F2:45:32:6F:34:7E:1F:40:21:7D:24:26:FF:91:0C:B0:80:CA:D0:8D Authority key identifier: 81:21:91:D8:B8:91:40:CC:7C:6B:2A:5D:3C:F1:40:11:6F:02:39:79 Certificate issuer: /CN=812191D8B89140CC7C6B2A5D3CF140116F023979 Certificate serial: 5F7312A49A219C2F2A10E6C167BE67EBF91D2BC7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/812191D8B89140CC7C6B2A5D3CF140116F023979.cer Subject info access: rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.mft Manifest number: 025D Signing time: Wed 02 Jul 2025 09:52:00 +0000 Manifest this update: Wed 02 Jul 2025 09:47:00 +0000 Manifest next update: Thu 03 Jul 2025 10:13:00 +0000 Files and hashes: 1: 3138372e34392e3230382e302f32302d3234203d3e203238313534.roa (hash: PEyNjR7Wf6ELDeRzXAf4QAoyK6kyXdY3VV/VnYsawJQ=) 2: 323830343a333062383a3a2f33322d3634203d3e203238313534.roa (hash: KqIqLqNqjzlIw0c8M910lgHaUf0mjFb7wR7HsJ7eoX4=) 3: 3137372e35342e36342e302f32302d3234203d3e203238313534.roa (hash: kS6EitLR1FB7A4T6K5x48pQ+aZ5UZrIUeAfQz/7mFvA=) 4: 812191D8B89140CC7C6B2A5D3CF140116F023979.crl (hash: vhVeoUjDMlldQRYrsistx6c2dMk2uKCSrHrrsr0a2Ss=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.crl rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/812191D8B89140CC7C6B2A5D3CF140116F023979.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 10:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:73:12:a4:9a:21:9c:2f:2a:10:e6:c1:67:be:67:eb:f9:1d:2b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=812191D8B89140CC7C6B2A5D3CF140116F023979 Validity Not Before: Jul 2 09:47:00 2025 GMT Not After : Jul 3 10:13:00 2025 GMT Subject: CN=F245326F347E1F40217D2426FF910CB080CAD08D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:a0:4c:e1:7b:9d:d1:94:a0:26:e1:e2:28: 9d:2a:9c:42:0f:ed:16:22:c8:fe:d2:c2:b9:63:ec: ce:2e:7d:2e:92:3d:a4:a0:a5:10:9f:ab:46:3d:74: 07:64:89:08:d6:03:04:91:48:84:db:5f:66:d8:1a: f2:71:25:b2:a2:8d:21:c9:a5:99:fc:ab:cb:21:c0: b9:28:ed:56:21:ac:d4:e5:c4:82:27:5c:d3:5e:24: 88:a0:61:18:81:23:89:b6:54:b9:d2:22:43:a6:ce: 76:dc:0c:49:ca:df:f7:61:ef:62:5e:21:b6:22:31: 40:1d:fd:57:57:b8:9e:50:38:b5:b8:c1:11:f0:ef: 9d:25:02:67:76:6c:49:53:a7:4f:75:ed:c4:13:35: 5d:28:0a:ec:22:7e:9a:cf:34:8a:85:2c:0a:ae:a5: 26:90:b0:54:7a:5c:98:8e:8a:04:d6:0a:7c:e4:2b: 54:06:39:8c:db:62:e5:77:4a:d7:dd:88:61:2a:5f: b8:93:ca:cd:62:66:10:ef:82:0f:92:18:4b:7f:2c: c1:2c:2e:75:0e:be:c6:83:66:5f:62:ac:f8:ff:4d: 05:f8:0a:fc:b9:fe:43:a2:83:4f:00:a7:93:60:bf: 80:5a:85:b7:4a:8c:a2:9a:a8:fa:0e:d3:76:48:95: 63:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:45:32:6F:34:7E:1F:40:21:7D:24:26:FF:91:0C:B0:80:CA:D0:8D X509v3 Authority Key Identifier: keyid:81:21:91:D8:B8:91:40:CC:7C:6B:2A:5D:3C:F1:40:11:6F:02:39:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/812191D8B89140CC7C6B2A5D3CF140116F023979.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a1:97:ab:d5:b6:23:a1:e9:ed:85:79:30:2a:3c:51:02:cc: bc:2e:90:88:5c:2f:90:61:0b:50:86:71:54:32:10:b3:54:ae: 4d:5d:31:f9:86:bb:15:fd:1a:1f:f7:5d:75:f7:39:38:86:69: 95:a8:b4:1f:eb:f8:a6:28:9e:84:37:3f:a4:55:8e:0a:81:bb: 5d:ac:5c:b4:c9:aa:ec:e7:20:9b:4b:5f:c0:72:12:90:cd:f9: bc:31:94:04:31:70:27:ce:35:c1:37:db:44:97:d7:38:29:86: ab:86:8d:20:e8:da:c1:42:9d:07:75:d8:eb:55:ca:fc:1c:78: f2:1a:81:a7:16:77:5e:c0:3e:e5:a0:fd:90:84:e3:dc:2f:2b: 5b:c1:71:3d:fb:73:f4:ec:b2:3f:4e:97:ce:a5:31:c5:cc:71: 1a:ef:a5:89:3f:f1:f8:42:45:dd:18:f2:f8:49:e3:91:da:db: b0:76:06:17:9b:fe:80:37:5b:d5:26:85:17:3e:1f:c6:1f:c1: 16:2e:1d:1b:4f:25:c2:c7:0e:92:b7:ae:42:5a:43:e0:e5:16: c5:33:8b:f3:4d:1d:a9:d6:de:2b:e1:57:ab:e0:2d:29:d7:7b: e6:6d:93:d0:83:42:af:b2:3d:d1:6f:5c:dc:80:ca:3e:b6:19: 1c:a2:ea:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUX3MSpJohnC8qEObBZ75n6/kdK8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODEyMTkxRDhCODkxNDBDQzdDNkIyQTVEM0NGMTQwMTE2 RjAyMzk3OTAeFw0yNTA3MDIwOTQ3MDBaFw0yNTA3MDMxMDEzMDBaMDMxMTAvBgNV BAMTKEYyNDUzMjZGMzQ3RTFGNDAyMTdEMjQyNkZGOTEwQ0IwODBDQUQwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBoqBM4Xud0ZSgJuHiKJ0qnEIP 7RYiyP7Swrlj7M4ufS6SPaSgpRCfq0Y9dAdkiQjWAwSRSITbX2bYGvJxJbKijSHJ pZn8q8shwLko7VYhrNTlxIInXNNeJIigYRiBI4m2VLnSIkOmznbcDEnK3/dh72Je IbYiMUAd/VdXuJ5QOLW4wRHw750lAmd2bElTp0917cQTNV0oCuwifprPNIqFLAqu pSaQsFR6XJiOigTWCnzkK1QGOYzbYuV3StfdiGEqX7iTys1iZhDvgg+SGEt/LMEs LnUOvsaDZl9irPj/TQX4Cvy5/kOig08Ap5Ngv4BahbdKjKKaqPoO03ZIlWMTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8kUybzR+H0AhfSQm/5EMsIDK0I0wHwYDVR0j BBgwFoAUgSGR2LiRQMx8aypdPPFAEW8COXkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFN5aU1HeGdtMnZIenVLcVRIRkVpb1F5RlNIQVNlSmpyWWlzVGt6YWdI RzUvMS84MTIxOTFEOEI4OTE0MENDN0M2QjJBNUQzQ0YxNDAxMTZGMDIzOTc5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxMjE5MUQ4Qjg5MTQwQ0M3 QzZCMkE1RDNDRjE0MDExNkYwMjM5NzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFN5aU1HeGdtMnZIenVLcVRIRkVpb1F5RlNIQVNlSmpyWWlzVGt6YWdIRzUvMS84 MTIxOTFEOEI4OTE0MENDN0M2QjJBNUQzQ0YxNDAxMTZGMDIzOTc5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb6GXq9W2I6Hp7YV5MCo8UQLMvC6QiFwvkGELUIZxVDIQs1SuTV0x+Ya7Ff0a H/dddfc5OIZplai0H+v4piiehDc/pFWOCoG7XaxctMmq7Ocgm0tfwHISkM35vDGU BDFwJ841wTfbRJfXOCmGq4aNIOjawUKdB3XY61XK/Bx48hqBpxZ3XsA+5aD9kITj 3C8rW8FxPftz9OyyP06XzqUxxcxxGu+liT/x+EJF3Rjy+EnjkdrbsHYGF5v+gDdb 1SaFFz4fxh/BFi4dG08lwscOkreuQlpD4OUWxTOL800dqdbeK+FXq+AtKdd75m2T 0INCr7I90W9c3IDKPrYZHKLq8A== -----END CERTIFICATE-----Generated at Wed Jul 2 22:20:58 2025 by rpki-client