$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft File: 11CAB655737FE08C031052B869B67F7F82CCE9CC.mft (raw, json) Hash identifier: ZS5Q6eFLYdScoZm3eItuv7Lc+O2fb/Mb9WaESSm/SqI= Subject key identifier: 83:72:A3:02:44:89:3D:75:44:61:30:98:A9:C3:72:EA:5F:51:DF:58 Authority key identifier: 11:CA:B6:55:73:7F:E0:8C:03:10:52:B8:69:B6:7F:7F:82:CC:E9:CC Certificate issuer: /CN=11CAB655737FE08C031052B869B67F7F82CCE9CC Certificate serial: 48B9365E82E8EA24F917F44E546FC082CD2FF62C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft Manifest number: DA Signing time: Tue 01 Jul 2025 19:41:13 +0000 Manifest this update: Tue 01 Jul 2025 19:36:13 +0000 Manifest next update: Wed 02 Jul 2025 21:18:13 +0000 Files and hashes: 1: 323830343a343031343a3a2f33322d313238203d3e20323635393333.roa (hash: s5G6Z9jrVoevflU84bZ+yzQEF2Gyexpuwo5a+N4Yd7w=) 2: 34352e342e38302e302f32322d3332203d3e20323635393333.roa (hash: Hjx5RjpzokA4knJgq0k249DxnjzKzpITikPCcGMUtr8=) 3: 11CAB655737FE08C031052B869B67F7F82CCE9CC.crl (hash: XA5QYQoyYqRGFlvmEGXaRHWZU0eIa2iV2cMC1lSeCpQ=) 4: 3136342e3136332e302e302f32322d3332203d3e20323635393333.roa (hash: GHvq9r74x2Xc9pO/newiw9yIkLQrbVGTcJbcBnLLpsk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.crl rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 21:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b9:36:5e:82:e8:ea:24:f9:17:f4:4e:54:6f:c0:82:cd:2f:f6:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11CAB655737FE08C031052B869B67F7F82CCE9CC Validity Not Before: Jul 1 19:36:13 2025 GMT Not After : Jul 2 21:18:13 2025 GMT Subject: CN=8372A30244893D7544613098A9C372EA5F51DF58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:96:9b:26:5e:66:19:8a:b5:37:6f:56:49:64: 5b:bc:48:01:15:58:63:01:77:83:cf:c2:9d:a3:19: b7:c0:93:d0:f4:1a:4c:cf:97:3c:61:8a:e4:f9:b3: 76:b1:8c:9e:b3:46:ee:7b:47:71:eb:c9:1b:85:de: ec:9c:dc:e2:a0:84:e2:23:d3:49:e5:0f:1c:22:a7: 6f:b8:82:ea:52:4b:6d:c5:a0:e3:33:02:57:bd:86: a3:cc:53:52:c6:89:39:40:14:5a:e5:13:ec:a7:6c: 18:2b:9f:43:df:a2:76:88:e8:ee:f0:99:5c:66:75: b3:3e:dc:63:34:33:1a:1d:bc:48:b8:37:22:82:74: c6:6b:f9:af:d2:ac:b2:6e:ff:36:00:51:76:c0:24: f9:02:c0:18:d6:61:96:56:5a:65:57:12:78:c2:45: a0:3b:79:aa:55:bf:d0:f0:10:78:3c:a4:55:f9:a6: ac:80:02:e6:ce:42:76:0e:8a:5c:61:78:cd:33:8a: 95:fa:15:34:42:67:ce:7c:c9:52:f4:a5:54:9d:4e: 70:2a:cd:8a:ec:64:56:d0:42:fa:e0:57:c5:46:59: c9:9b:45:12:2d:e9:27:01:a5:62:91:ae:d8:90:32: 21:3c:84:81:9f:02:24:a8:1d:e4:f0:10:0e:42:81: d9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:72:A3:02:44:89:3D:75:44:61:30:98:A9:C3:72:EA:5F:51:DF:58 X509v3 Authority Key Identifier: keyid:11:CA:B6:55:73:7F:E0:8C:03:10:52:B8:69:B6:7F:7F:82:CC:E9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:88:dc:22:79:8e:8c:b0:b9:43:32:3e:b9:72:d0:d9:3c:8f: d2:f8:5a:df:9e:3f:b0:2e:35:ac:4f:2d:f2:47:77:6f:aa:86: 0e:fb:3c:69:c0:1f:a3:ca:cc:a9:4c:a3:b1:b6:1a:c4:c6:63: 01:a5:6c:96:b9:7e:b0:b6:f0:55:ec:bd:4b:ed:ce:4b:43:49: 0b:7a:f1:35:6a:d8:c1:30:11:fd:88:a3:be:0c:67:a1:d6:32: 91:66:b1:d5:45:cf:ce:81:24:91:ae:48:90:08:47:93:6f:37: 9b:02:36:10:e9:1b:5c:d2:86:f3:ca:13:46:58:c2:6c:5e:e5: 45:f2:58:d7:f7:70:3a:7b:1e:8f:51:4a:f2:a8:c2:0a:04:29: b0:70:f6:22:cb:b4:03:04:ca:39:53:3a:68:7b:ca:ad:a1:4b: a3:50:71:c2:d0:be:4a:e5:44:ab:41:e5:cf:56:59:80:14:65: 91:87:ae:d1:24:5e:45:ec:61:ba:60:e0:d3:ba:bd:ed:76:7e: 9f:c9:d3:98:6c:a8:bd:c2:3c:16:49:9d:37:f0:6a:90:67:b1: 59:2a:a5:c9:5b:03:59:f1:e4:32:6c:37:23:5d:e9:8e:cc:84: 4f:25:04:0b:ce:31:96:15:06:48:f8:66:14:fe:9f:80:90:3f: 32:fc:78:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSLk2XoLo6iT5F/ROVG/Ags0v9iwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFDQUI2NTU3MzdGRTA4QzAzMTA1MkI4NjlCNjdGN0Y4 MkNDRTlDQzAeFw0yNTA3MDExOTM2MTNaFw0yNTA3MDIyMTE4MTNaMDMxMTAvBgNV BAMTKDgzNzJBMzAyNDQ4OTNENzU0NDYxMzA5OEE5QzM3MkVBNUY1MURGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGlpsmXmYZirU3b1ZJZFu8SAEV WGMBd4PPwp2jGbfAk9D0GkzPlzxhiuT5s3axjJ6zRu57R3HryRuF3uyc3OKghOIj 00nlDxwip2+4gupSS23FoOMzAle9hqPMU1LGiTlAFFrlE+ynbBgrn0PfonaI6O7w mVxmdbM+3GM0MxodvEi4NyKCdMZr+a/SrLJu/zYAUXbAJPkCwBjWYZZWWmVXEnjC RaA7eapVv9DwEHg8pFX5pqyAAubOQnYOilxheM0zipX6FTRCZ858yVL0pVSdTnAq zYrsZFbQQvrgV8VGWcmbRRIt6ScBpWKRrtiQMiE8hIGfAiSoHeTwEA5CgdmTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUg3KjAkSJPXVEYTCYqcNy6l9R31gwHwYDVR0j BBgwFoAUEcq2VXN/4IwDEFK4abZ/f4LM6cwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFlOblF1QTVNR1lqMUpXcEVQeFVUS0hZOWZHaWl2ZHQ3WWJDeWFCaW50 RHEvMC8xMUNBQjY1NTczN0ZFMDhDMDMxMDUyQjg2OUI2N0Y3RjgyQ0NFOUNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQ0FCNjU1NzM3RkUwOEMw MzEwNTJCODY5QjY3RjdGODJDQ0U5Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFlOblF1QTVNR1lqMUpXcEVQeFVUS0hZOWZHaWl2ZHQ3WWJDeWFCaW50RHEvMC8x MUNBQjY1NTczN0ZFMDhDMDMxMDUyQjg2OUI2N0Y3RjgyQ0NFOUNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwojcInmOjLC5QzI+uXLQ2TyP0vha354/sC41rE8t8kd3b6qGDvs8acAfo8rM qUyjsbYaxMZjAaVslrl+sLbwVey9S+3OS0NJC3rxNWrYwTAR/YijvgxnodYykWax 1UXPzoEkka5IkAhHk283mwI2EOkbXNKG88oTRljCbF7lRfJY1/dwOnsej1FK8qjC CgQpsHD2Isu0AwTKOVM6aHvKraFLo1BxwtC+SuVEq0Hlz1ZZgBRlkYeu0SReRexh umDg07q97XZ+n8nTmGyovcI8FkmdN/BqkGexWSqlyVsDWfHkMmw3I13pjsyETyUE C84xlhUGSPhmFP6fgJA/Mvx44A== -----END CERTIFICATE-----Generated at Wed Jul 2 05:24:30 2025 by rpki-client