$ rpki-client -vvf rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft File: 8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft (raw, json) Hash identifier: lPrAqMq62CSRAb6rEV8YjRja4ITr7/A3r0GgzrnKMAs= Subject key identifier: A5:01:FE:5D:54:4A:63:DC:90:1F:26:DA:44:BC:D2:DD:0F:F4:58:58 Authority key identifier: 8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F Certificate issuer: /CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F Certificate serial: 1B2E6F69CE0DAAC0AA1F9725CEB6110C92BB6717 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer Subject info access: rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft Manifest number: 48 Signing time: Wed 02 Jul 2025 23:00:38 +0000 Manifest this update: Wed 02 Jul 2025 22:55:38 +0000 Manifest next update: Thu 03 Jul 2025 23:07:38 +0000 Files and hashes: 1: 8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl (hash: 8fB2rsA7mxvpxeStyNPB7hOAc8tWpT6qqzkX2Rksv14=) 2: 323830343a323836303a3a2f33322d313238203d3e20323633393539.roa (hash: oVXD5VaDUqeD9Go0IkrJ158heEh4rOl0USTusw94FRI=) 3: 3137302e3233382e3234382e302f32322d3332203d3e20323633393539.roa (hash: 9vkM44Why6sGQcMypDT8T8Q9VtBz4wbE97cshJxXhpQ=) 4: 3133382e3235352e37322e302f32322d3332203d3e20323633393539.roa (hash: waEFhBe+SjRSqQswDzUJGqZm7m+XO9yIfZZm4YTlyYw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 23:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:2e:6f:69:ce:0d:aa:c0:aa:1f:97:25:ce:b6:11:0c:92:bb:67:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F Validity Not Before: Jul 2 22:55:38 2025 GMT Not After : Jul 3 23:07:38 2025 GMT Subject: CN=A501FE5D544A63DC901F26DA44BCD2DD0FF45858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:25:25:d0:02:f6:c6:e0:9f:d2:38:bc:80:1f: 85:93:9f:a7:f7:a4:1b:bb:b3:c8:80:70:6e:6b:c2: 1c:3f:2f:f7:d8:0d:fc:6e:4b:66:c3:94:be:71:ba: 2a:98:71:fd:4d:3b:9f:ee:b8:36:a4:96:23:fa:6f: 8a:47:72:ef:88:78:e2:ee:07:ce:eb:39:1e:f3:11: 20:fb:b6:bf:02:0a:0e:31:6e:88:2b:19:c7:a0:34: e5:c3:5e:4e:03:68:ec:56:3e:c7:7c:bb:76:6f:89: 95:10:35:1e:1a:4e:24:93:e3:e4:2c:f1:1b:96:28: cc:b9:70:b1:7d:ad:d2:1d:44:de:35:f3:39:72:fe: ae:8d:71:cc:b8:f0:40:50:8e:7c:e2:68:21:5e:b4: 85:99:f2:b4:c6:a7:b1:14:ea:45:f1:1c:36:f9:21: b5:69:4a:50:ee:6f:dc:18:89:a5:ba:cc:5f:03:ad: 2d:f7:15:01:e4:46:a5:e6:7f:d4:3d:cf:e4:73:08: db:c3:30:05:7e:a1:2a:a6:63:2d:e1:39:49:81:5d: 72:8c:18:85:6a:a0:e1:90:cf:4d:5d:ab:63:7b:44: cc:94:83:51:bb:c2:9f:26:f6:e5:78:21:8f:7d:5f: 5c:83:87:a3:e7:6a:13:00:22:74:00:94:42:17:11: fc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:01:FE:5D:54:4A:63:DC:90:1F:26:DA:44:BC:D2:DD:0F:F4:58:58 X509v3 Authority Key Identifier: keyid:8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:24:cd:1d:10:ba:78:9f:d1:45:ec:b9:70:a4:7f:bb:72:5f: 51:0d:80:aa:03:ec:2a:e1:23:a1:34:b9:d3:21:61:5e:7d:97: 80:92:27:21:cf:40:a5:9e:9d:a9:a1:eb:91:21:ec:05:1d:61: 13:59:96:2a:85:fb:17:b6:4f:24:84:ea:86:f1:c7:f9:64:64: 75:75:16:5e:01:af:70:5c:43:57:55:94:5a:3d:78:f0:b0:27: bc:5d:c1:6e:7c:d5:0c:69:ea:64:92:85:0e:9a:98:06:84:a5: 2e:09:44:ae:36:4f:18:7f:82:2a:d6:96:54:63:b5:f0:5d:dc: 98:40:fd:50:90:24:85:24:03:de:86:7e:d7:5e:5d:04:11:b5: be:73:a3:45:78:f1:d3:58:2d:f0:ee:30:7d:c2:e7:5e:73:98: 2c:74:a7:7b:9b:23:db:34:36:82:e4:dd:27:ca:79:39:1f:74: db:8c:42:44:3b:f1:2d:83:69:94:da:6e:29:98:12:35:46:90: 7a:90:d9:59:43:2e:8c:fd:aa:ab:1f:f7:80:b2:5f:af:6f:b5: 52:e8:d2:d3:a0:af:9e:c6:8e:29:ce:d9:69:d0:27:93:83:85: 78:38:d7:c0:83:03:ad:a4:3f:47:84:58:c8:bf:b9:55:34:72: 12:c8:9b:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGy5vac4NqsCqH5clzrYRDJK7ZxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCNUEyNTE2RjcxM0NGRkU5RDE1MDRFNzlBNEJEM0I5 QUZCMEEwRjAeFw0yNTA3MDIyMjU1MzhaFw0yNTA3MDMyMzA3MzhaMDMxMTAvBgNV BAMTKEE1MDFGRTVENTQ0QTYzREM5MDFGMjZEQTQ0QkNEMkREMEZGNDU4NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoJSXQAvbG4J/SOLyAH4WTn6f3 pBu7s8iAcG5rwhw/L/fYDfxuS2bDlL5xuiqYcf1NO5/uuDakliP6b4pHcu+IeOLu B87rOR7zESD7tr8CCg4xbogrGcegNOXDXk4DaOxWPsd8u3ZviZUQNR4aTiST4+Qs 8RuWKMy5cLF9rdIdRN418zly/q6Nccy48EBQjnziaCFetIWZ8rTGp7EU6kXxHDb5 IbVpSlDub9wYiaW6zF8DrS33FQHkRqXmf9Q9z+RzCNvDMAV+oSqmYy3hOUmBXXKM GIVqoOGQz01dq2N7RMyUg1G7wp8m9uV4IY99X1yDh6PnahMAInQAlEIXEfz7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpQH+XVRKY9yQHybaRLzS3Q/0WFgwHwYDVR0j BBgwFoAUjLWiUW9xPP/p0VBOeaS9O5r7Cg8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVhGemVkeXJZTExBSG1YQmFmSzdDSzNqcHRNb2ZvN0gxbVNDV1FQUjVN YUMvMC84Q0I1QTI1MTZGNzEzQ0ZGRTlEMTUwNEU3OUE0QkQzQjlBRkIwQTBGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDQjVBMjUxNkY3MTNDRkZF OUQxNTA0RTc5QTRCRDNCOUFGQjBBMEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVhGemVkeXJZTExBSG1YQmFmSzdDSzNqcHRNb2ZvN0gxbVNDV1FQUjVNYUMvMC84 Q0I1QTI1MTZGNzEzQ0ZGRTlEMTUwNEU3OUE0QkQzQjlBRkIwQTBGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfiTNHRC6eJ/RRey5cKR/u3JfUQ2AqgPsKuEjoTS50yFhXn2XgJInIc9ApZ6d qaHrkSHsBR1hE1mWKoX7F7ZPJITqhvHH+WRkdXUWXgGvcFxDV1WUWj148LAnvF3B bnzVDGnqZJKFDpqYBoSlLglErjZPGH+CKtaWVGO18F3cmED9UJAkhSQD3oZ+115d BBG1vnOjRXjx01gt8O4wfcLnXnOYLHSne5sj2zQ2guTdJ8p5OR9024xCRDvxLYNp lNpuKZgSNUaQepDZWUMujP2qqx/3gLJfr2+1UujS06CvnsaOKc7ZadAnk4OFeDjX wIMDraQ/R4RYyL+5VTRyEsibXQ== -----END CERTIFICATE-----Generated at Thu Jul 3 01:15:15 2025 by rpki-client