$ rpki-client -vvf rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft File: D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft (raw, json) Hash identifier: zOEP5406C4nqiKv+j9amCT+gyHrhRdR37+AQ4nnOHxw= Subject key identifier: 48:FF:84:90:0C:A6:A0:34:99:C4:8E:84:EF:16:2F:08:2A:83:EF:7A Authority key identifier: D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8 Certificate issuer: /CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8 Certificate serial: 09F37468D1A891465618B20E6406AB784ACC3B35 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer Subject info access: rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft Manifest number: 025B Signing time: Mon 30 Jun 2025 06:42:25 +0000 Manifest this update: Mon 30 Jun 2025 06:37:25 +0000 Manifest next update: Tue 01 Jul 2025 09:57:25 +0000 Files and hashes: 1: 3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa (hash: HehrNIzW8YIj50NZzvz1VRN/ThMuVHcdZYg24/SmLgI=) 2: D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl (hash: bqabUBCRkCdUDlhtYMFichtilx9faMe4nPjzsR8C45Q=) 3: 3138362e3231392e3136332e302f32342d3234203d3e20323632373534.roa (hash: lpESvqoVhwYOSjN4Vj1yVDNhsu54LQTMAxhBhXWO+2I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 09:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:f3:74:68:d1:a8:91:46:56:18:b2:0e:64:06:ab:78:4a:cc:3b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8 Validity Not Before: Jun 30 06:37:25 2025 GMT Not After : Jul 1 09:57:25 2025 GMT Subject: CN=48FF84900CA6A03499C48E84EF162F082A83EF7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:51:11:8e:a8:9f:0e:c6:fe:07:53:f7:96:6c: 9c:86:0b:d8:14:13:08:4e:70:b9:aa:6a:e5:66:5f: 26:60:cd:cc:0b:f6:cb:7a:7f:5e:f8:97:92:0a:e2: a7:9f:4a:3d:05:c8:b7:37:f5:d1:10:6a:b3:82:cf: fe:07:1e:be:f8:62:35:ed:81:72:a9:5c:0d:08:9b: 61:68:c3:32:c5:e3:3b:67:ef:c3:1d:07:43:96:7b: 75:dd:45:24:a8:4d:75:12:1e:3b:3a:c0:cf:c2:0d: f7:7a:b6:24:8f:9a:c3:89:6f:a3:c9:ef:51:3f:f2: 9d:df:f9:92:80:d5:e8:35:83:67:12:40:f3:db:22: ef:24:56:86:b0:41:fc:6f:47:ac:4d:17:b4:6a:d2: 5f:85:af:11:ab:98:ad:74:4d:42:bc:cf:d1:90:09: 7d:99:73:19:1f:fd:bb:ed:84:b8:95:83:33:63:68: 5a:80:0e:6e:b0:eb:86:3c:89:ef:88:31:08:66:59: 76:dc:70:c1:3a:7d:1c:ff:87:f6:e1:c2:2a:b6:8e: ef:f5:d4:a8:17:00:6e:db:6f:8d:88:dd:70:04:91: 58:cd:8d:eb:98:c9:08:c9:e0:4d:69:6c:2d:a3:2b: 99:21:19:80:7f:6e:bd:2f:f0:2e:ec:b1:0f:62:89: 8d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FF:84:90:0C:A6:A0:34:99:C4:8E:84:EF:16:2F:08:2A:83:EF:7A X509v3 Authority Key Identifier: keyid:D4:BA:5C:CF:B7:BF:E0:94:FC:3A:4A:6A:E7:D5:27:D3:8F:C6:08:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/1/D4BA5CCFB7BFE094FC3A4A6AE7D527D38FC608D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:b9:d8:5f:94:04:c7:64:bc:34:77:ff:ba:23:bb:5e:0b:73: f3:92:c9:f9:f5:ed:27:8e:87:5e:1c:a7:8f:99:a8:12:91:8e: 5a:c0:c2:73:da:41:35:28:be:58:3e:1b:f1:99:8a:cd:8f:21: 55:7f:a5:01:8b:a9:5c:4d:f7:55:94:b9:7d:d8:7c:eb:cb:15: 34:27:39:25:d4:d8:15:81:da:fc:13:bd:70:45:9b:30:f9:da: 65:52:32:ad:4b:1b:34:4f:0a:b1:40:12:76:18:60:26:50:97: 76:87:60:c9:86:b1:6c:98:b1:58:3c:07:63:71:a9:0a:78:91: 7c:d6:5f:aa:c8:5a:3c:a2:97:c8:bc:45:bc:bf:a3:6f:6c:b0: c8:06:50:74:b0:46:67:8f:df:53:2b:0c:48:b7:31:d1:a7:65: 86:89:cf:ff:fc:ce:01:ff:fc:cb:f0:e2:4c:4b:df:39:27:5a: 64:98:90:49:de:c6:cb:f3:f5:31:7d:e6:69:66:c6:53:ee:53: 63:6f:a7:6f:b1:3c:e9:1a:7b:1f:dd:4e:ba:e7:af:ca:17:c3: 36:fd:40:21:d9:28:c7:8c:9e:c1:a7:08:ab:20:52:05:c4:4b: da:11:a7:49:e7:61:2c:f3:49:29:8c:f3:c6:17:15:96:f1:e2: d5:eb:fd:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCfN0aNGokUZWGLIOZAareErMOzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRCQTVDQ0ZCN0JGRTA5NEZDM0E0QTZBRTdENTI3RDM4 RkM2MDhEODAeFw0yNTA2MzAwNjM3MjVaFw0yNTA3MDEwOTU3MjVaMDMxMTAvBgNV BAMTKDQ4RkY4NDkwMENBNkEwMzQ5OUM0OEU4NEVGMTYyRjA4MkE4M0VGN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpURGOqJ8Oxv4HU/eWbJyGC9gU EwhOcLmqauVmXyZgzcwL9st6f174l5IK4qefSj0FyLc39dEQarOCz/4HHr74YjXt gXKpXA0Im2FowzLF4ztn78MdB0OWe3XdRSSoTXUSHjs6wM/CDfd6tiSPmsOJb6PJ 71E/8p3f+ZKA1eg1g2cSQPPbIu8kVoawQfxvR6xNF7Rq0l+FrxGrmK10TUK8z9GQ CX2Zcxkf/bvthLiVgzNjaFqADm6w64Y8ie+IMQhmWXbccME6fRz/h/bhwiq2ju/1 1KgXAG7bb42I3XAEkVjNjeuYyQjJ4E1pbC2jK5khGYB/br0v8C7ssQ9iiY0NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSP+EkAymoDSZxI6E7xYvCCqD73owHwYDVR0j BBgwFoAU1Lpcz7e/4JT8Okpq59Un04/GCNgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHZMRVIzQXBpbkpMRWRUOXB5UFdRYlAzbVZmQmlDc1ljZkZnc1NucXpI M2kvMS9ENEJBNUNDRkI3QkZFMDk0RkMzQTRBNkFFN0Q1MjdEMzhGQzYwOEQ4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0QkE1Q0NGQjdCRkUwOTRG QzNBNEE2QUU3RDUyN0QzOEZDNjA4RDguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHZMRVIzQXBpbkpMRWRUOXB5UFdRYlAzbVZmQmlDc1ljZkZnc1NucXpIM2kvMS9E NEJBNUNDRkI3QkZFMDk0RkMzQTRBNkFFN0Q1MjdEMzhGQzYwOEQ4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAornYX5QEx2S8NHf/uiO7Xgtz85LJ+fXtJ46HXhynj5moEpGOWsDCc9pBNSi+ WD4b8ZmKzY8hVX+lAYupXE33VZS5fdh868sVNCc5JdTYFYHa/BO9cEWbMPnaZVIy rUsbNE8KsUASdhhgJlCXdodgyYaxbJixWDwHY3GpCniRfNZfqshaPKKXyLxFvL+j b2ywyAZQdLBGZ4/fUysMSLcx0adlhonP//zOAf/8y/DiTEvfOSdaZJiQSd7Gy/P1 MX3maWbGU+5TY2+nb7E86Rp7H91OuuevyhfDNv1AIdkox4yewacIqyBSBcRL2hGn SedhLPNJKYzzxhcVlvHi1ev9cg== -----END CERTIFICATE-----Generated at Mon Jun 30 19:54:20 2025 by rpki-client