$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.mft File: 5EF817C4D35ABBC698DD971253BD6455131E483B.mft (raw, json) Hash identifier: 2BwJ83Zv1QaptASJvUsEtY3N+u4kkJXIGX0/C151q8A= Subject key identifier: 65:83:B5:34:2F:AA:4D:69:FF:10:CA:15:A6:0F:26:58:E3:63:D2:FD Authority key identifier: 5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B Certificate issuer: /CN=5EF817C4D35ABBC698DD971253BD6455131E483B Certificate serial: 1801DE40FB7B673F6CF4BC02A2496D3BD1B585F1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer Subject info access: rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.mft Manifest number: 0230 Signing time: Tue 01 Jul 2025 22:10:22 +0000 Manifest this update: Tue 01 Jul 2025 22:05:22 +0000 Manifest next update: Thu 03 Jul 2025 00:42:22 +0000 Files and hashes: 1: 323830343a326537383a3a2f33322d3438203d3e203238323133.roa (hash: ZfdhKo7FDwxVxWSNoiUB8qvu+9qJLm0TqnQFJQkJFVQ=) 2: 3138392e3131332e3131322e302f32302d3234203d3e203238323133.roa (hash: qpKp+nkdU1sYirO+sypCebZtQucNEJ1zhRwWfXOxp7M=) 3: 3136382e3138312e342e302f32322d3234203d3e203238323133.roa (hash: mhKQf0tVj2nX404NyqZNwvLoIZAIZDHwuTotBIRU8b4=) 4: 5EF817C4D35ABBC698DD971253BD6455131E483B.crl (hash: 8D44MfmvpDCGrSYRvvd4bL2Ukcu3ak2zfRxC28qaz5Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 00:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:01:de:40:fb:7b:67:3f:6c:f4:bc:02:a2:49:6d:3b:d1:b5:85:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EF817C4D35ABBC698DD971253BD6455131E483B Validity Not Before: Jul 1 22:05:22 2025 GMT Not After : Jul 3 00:42:22 2025 GMT Subject: CN=6583B5342FAA4D69FF10CA15A60F2658E363D2FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8b:d2:71:f4:33:cb:a8:a3:3e:ef:9e:dc:38: 12:be:d1:e5:94:62:09:80:6a:4f:cf:79:60:5a:36: a5:90:37:c0:d4:9c:52:db:f0:55:32:44:9c:aa:1d: 35:59:29:88:00:94:f1:77:36:bc:f4:db:a2:c9:8b: f1:7e:f2:66:77:21:fa:16:c9:8e:95:45:6b:c8:af: f3:e1:a9:a4:87:45:22:42:06:c1:ff:b7:a1:7b:8b: ea:85:65:97:01:9e:64:19:54:a6:8c:31:0d:4b:1f: bf:23:7a:4e:8d:b3:ba:ce:55:a6:79:d4:74:ff:5d: e8:35:64:ab:56:b3:8c:3d:0c:1e:ad:0c:b9:93:da: 99:cf:23:a7:ec:18:fd:ea:30:90:cf:4d:5f:25:30: b5:a4:ed:4b:74:90:2b:83:41:07:c9:5f:00:a3:33: c6:76:42:3f:fb:23:f3:9f:8f:ee:e7:8f:c5:d6:73: 7b:8f:5a:16:59:03:60:39:44:21:8e:ad:ad:f8:f3: f4:5d:8c:ea:24:2d:e6:77:18:6b:22:fc:53:8a:62: 95:a9:11:93:36:f3:3d:78:f0:13:25:91:25:91:c7: 3e:2d:47:c2:f8:26:55:5c:40:75:dc:2b:c3:a3:df: 8d:a0:7a:21:32:27:88:11:c5:e2:51:1c:d5:d9:95: d4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:83:B5:34:2F:AA:4D:69:FF:10:CA:15:A6:0F:26:58:E3:63:D2:FD X509v3 Authority Key Identifier: keyid:5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f0:c3:02:b8:f4:22:5f:20:c6:d3:8a:b5:bf:27:55:ab:61: 1f:da:a8:43:09:86:af:9b:a1:8c:48:b1:d5:08:47:55:82:8f: cb:3e:74:f0:97:13:a2:c3:65:4a:d4:77:79:f2:ba:f9:69:e9: 83:2a:45:d9:a0:c8:6f:0c:02:bb:62:20:85:3e:c3:bf:bc:85: 20:dc:ba:1c:5c:a2:81:7c:3b:1e:f5:67:c3:5c:5f:a5:40:01: b1:94:8c:8b:0f:88:7a:9d:6b:bc:fd:c4:dd:ac:83:56:be:d6: 3f:2d:64:a2:6e:ef:04:9c:2a:0d:a5:ac:6a:55:76:b2:24:a7: c0:d9:18:d5:f4:9b:b7:4c:e0:6b:73:ca:f6:26:93:9b:1a:c8: f0:ab:de:30:d0:d0:0d:49:9a:31:c7:17:3c:74:e6:9d:08:7d: b2:ae:e2:bd:8e:38:a3:2e:04:f3:60:a2:fe:25:72:27:43:77: 44:09:b3:b5:46:34:d0:b3:10:81:01:53:1d:88:53:9f:b6:bf: b9:95:c6:75:68:5f:3c:66:24:00:85:fb:b8:cc:37:1a:8f:47: a7:43:ca:59:01:16:7a:9c:90:1a:ed:c9:3b:62:3a:c0:aa:1b: 21:1a:74:20:83:d3:5a:0a:0c:91:00:45:55:5a:7e:21:6b:cf: 92:cf:10:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGAHeQPt7Zz9s9LwCokltO9G1hfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVGODE3QzREMzVBQkJDNjk4REQ5NzEyNTNCRDY0NTUx MzFFNDgzQjAeFw0yNTA3MDEyMjA1MjJaFw0yNTA3MDMwMDQyMjJaMDMxMTAvBgNV BAMTKDY1ODNCNTM0MkZBQTRENjlGRjEwQ0ExNUE2MEYyNjU4RTM2M0QyRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDai9Jx9DPLqKM+757cOBK+0eWU YgmAak/PeWBaNqWQN8DUnFLb8FUyRJyqHTVZKYgAlPF3Nrz026LJi/F+8mZ3IfoW yY6VRWvIr/PhqaSHRSJCBsH/t6F7i+qFZZcBnmQZVKaMMQ1LH78jek6Ns7rOVaZ5 1HT/Xeg1ZKtWs4w9DB6tDLmT2pnPI6fsGP3qMJDPTV8lMLWk7Ut0kCuDQQfJXwCj M8Z2Qj/7I/Ofj+7nj8XWc3uPWhZZA2A5RCGOra348/RdjOokLeZ3GGsi/FOKYpWp EZM28z148BMlkSWRxz4tR8L4JlVcQHXcK8Oj342geiEyJ4gRxeJRHNXZldThAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZYO1NC+qTWn/EMoVpg8mWONj0v0wHwYDVR0j BBgwFoAUXvgXxNNau8aY3ZcSU71kVRMeSDswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0wxNTh6VW5HQ0JDTml0b1FZYVpHakRydzJqcW5zcUQ3TnlTeDlUZ2VM UnUvMS81RUY4MTdDNEQzNUFCQkM2OThERDk3MTI1M0JENjQ1NTEzMUU0ODNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFRjgxN0M0RDM1QUJCQzY5 OEREOTcxMjUzQkQ2NDU1MTMxRTQ4M0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0wxNTh6VW5HQ0JDTml0b1FZYVpHakRydzJqcW5zcUQ3TnlTeDlUZ2VMUnUvMS81 RUY4MTdDNEQzNUFCQkM2OThERDk3MTI1M0JENjQ1NTEzMUU0ODNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgfDDArj0Il8gxtOKtb8nVathH9qoQwmGr5uhjEix1QhHVYKPyz508JcTosNl StR3efK6+WnpgypF2aDIbwwCu2IghT7Dv7yFINy6HFyigXw7HvVnw1xfpUABsZSM iw+Iep1rvP3E3ayDVr7WPy1kom7vBJwqDaWsalV2siSnwNkY1fSbt0zga3PK9iaT mxrI8KveMNDQDUmaMccXPHTmnQh9sq7ivY44oy4E82Ci/iVyJ0N3RAmztUY00LMQ gQFTHYhTn7a/uZXGdWhfPGYkAIX7uMw3Go9Hp0PKWQEWepyQGu3JO2I6wKobIRp0 IIPTWgoMkQBFVVp+IWvPks8QZg== -----END CERTIFICATE-----Generated at Wed Jul 2 16:36:02 2025 by rpki-client