$ rpki-client -vvf rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.mft File: 8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.mft (raw, json) Hash identifier: sy6efyEjaXNeIBA/oQqW/KT6P7FQ2UgDfmGBe/QQxm4= Subject key identifier: CB:A2:56:F0:4C:AC:80:64:A8:44:5A:C2:B9:71:78:DD:35:6F:31:5E Authority key identifier: 83:70:E8:F5:BE:86:E6:36:B7:4F:2E:9A:87:B5:ED:E5:DE:C4:F8:A2 Certificate issuer: /CN=8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2 Certificate serial: 288E8EE33C99C22999EFCF0A86E28E879A55841B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.mft Manifest number: 5D Signing time: Tue 01 Jul 2025 07:04:07 +0000 Manifest this update: Tue 01 Jul 2025 06:59:07 +0000 Manifest next update: Wed 02 Jul 2025 10:29:07 +0000 Files and hashes: 1: 3138372e3130392e3139322e302f32302d3332203d3e20313938393439.roa (hash: q5Amp+E/tcUmn90F1ijcwUIXjRA9aziUd/48DxQys4Q=) 2: 8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.crl (hash: 2PfO6tB6FRq/rtpiULhXt1r5dg/vOYn+gfFufI0fyS8=) 3: 3138372e3130392e3139322e302f32302d3332203d3e203533313135.roa (hash: 0HcgdqpyYZdO1kT85oLc8qbGHD0Si8hR53JWoDDa1Sg=) 4: 323830343a346434383a3a2f33322d313238203d3e203533313135.roa (hash: NsqfA1cm2Mr4ExKmzOQ0rIy+kX/qCmm9bdGogjKFsHA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.crl rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 10:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:8e:8e:e3:3c:99:c2:29:99:ef:cf:0a:86:e2:8e:87:9a:55:84:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2 Validity Not Before: Jul 1 06:59:07 2025 GMT Not After : Jul 2 10:29:07 2025 GMT Subject: CN=CBA256F04CAC8064A8445AC2B97178DD356F315E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:d5:81:6a:18:be:7b:07:b6:c1:0b:33:bc: e9:b6:20:93:45:cd:40:ca:97:50:c2:6a:ee:3e:a2: 3d:4d:cb:f1:c9:11:9b:7b:27:34:91:a5:ce:50:1d: e1:ad:97:96:af:97:f3:b3:8d:63:37:84:36:c8:b3: 53:40:43:5b:5e:8f:1a:a6:a2:10:c6:52:01:d7:13: f9:fe:ba:94:76:3c:7a:c8:4a:79:2c:81:0f:e6:99: b0:89:03:6b:4b:8a:60:f0:c6:ac:29:f4:7d:d4:fb: 82:5f:0c:ad:25:48:39:41:16:70:6d:fc:95:db:93: e5:95:bb:d3:81:9f:16:6c:04:30:1d:27:54:ba:c2: 94:da:08:54:4c:50:8a:4b:7e:31:a9:9c:4a:25:08: 0d:e9:56:aa:6b:a9:b2:f1:fa:54:94:eb:92:1a:e4: 33:57:1c:88:b4:0f:c1:e2:ae:d2:57:6e:2e:da:03: db:04:dd:13:4a:1c:5e:d9:05:a6:c8:2a:6f:79:2d: 83:f6:1e:57:f7:0c:ea:d9:29:22:54:66:74:bd:7b: 13:c0:5f:f3:29:89:72:1e:64:d1:f5:cb:49:de:2c: 42:b2:98:d5:ab:61:b4:d4:0c:05:30:0b:51:b5:0c: 8c:b0:6f:6c:7f:96:12:ff:df:2b:9a:b1:9a:b7:74: 2e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A2:56:F0:4C:AC:80:64:A8:44:5A:C2:B9:71:78:DD:35:6F:31:5E X509v3 Authority Key Identifier: keyid:83:70:E8:F5:BE:86:E6:36:B7:4F:2E:9A:87:B5:ED:E5:DE:C4:F8:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQ9ShYiFH5yksfQVemiqM8TEQUk8ujugvxLNbwCuCvED/0/8370E8F5BE86E636B74F2E9A87B5EDE5DEC4F8A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ce:16:19:ed:43:a3:4a:ea:ba:66:c0:bd:a1:f8:a7:76:da: 6f:22:c0:e2:61:aa:73:40:ab:5b:b1:b0:30:3e:6c:0b:5e:7b: 59:ed:e3:1d:c8:82:80:6d:08:d7:c4:b9:a7:39:38:06:f6:45: f7:33:95:73:e3:d0:c6:ab:e3:7e:ee:57:21:d0:78:39:e0:49: a5:64:0e:74:f7:a5:fe:99:d4:19:a9:56:d9:db:61:8a:cf:3d: 89:3d:a4:41:31:bc:48:b5:41:8f:fe:db:12:a9:38:a9:0b:28: 14:65:9e:1e:cc:98:ff:61:4f:73:8f:1b:c0:2a:7b:86:b7:de: 32:2f:e5:e8:86:cb:d0:60:1a:84:c6:75:8a:00:e9:07:01:2d: 44:40:88:b4:91:6f:26:2e:a7:6b:4a:14:31:34:26:69:41:51: c7:bb:6a:8c:bb:a6:25:a3:10:a8:48:eb:2a:5c:c2:f8:35:53: 51:c5:2d:80:f7:8c:1e:f4:d8:7a:77:53:ee:a3:a3:c3:55:53: ba:db:59:4d:1a:24:1c:99:8d:6f:8f:62:66:da:d8:d8:80:cc: e6:53:fa:f2:07:15:8f:86:27:5e:15:81:91:43:0a:e6:27:c4: c2:2c:d4:eb:87:4e:76:cd:c2:7b:80:80:f9:3f:68:29:ea:1d: 33:63:fe:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKI6O4zyZwimZ788KhuKOh5pVhBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODM3MEU4RjVCRTg2RTYzNkI3NEYyRTlBODdCNUVERTVE RUM0RjhBMjAeFw0yNTA3MDEwNjU5MDdaFw0yNTA3MDIxMDI5MDdaMDMxMTAvBgNV BAMTKENCQTI1NkYwNENBQzgwNjRBODQ0NUFDMkI5NzE3OEREMzU2RjMxNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzMNWBahi+ewe2wQszvOm2IJNF zUDKl1DCau4+oj1Ny/HJEZt7JzSRpc5QHeGtl5avl/OzjWM3hDbIs1NAQ1tejxqm ohDGUgHXE/n+upR2PHrISnksgQ/mmbCJA2tLimDwxqwp9H3U+4JfDK0lSDlBFnBt /JXbk+WVu9OBnxZsBDAdJ1S6wpTaCFRMUIpLfjGpnEolCA3pVqprqbLx+lSU65Ia 5DNXHIi0D8HirtJXbi7aA9sE3RNKHF7ZBabIKm95LYP2Hlf3DOrZKSJUZnS9exPA X/MpiXIeZNH1y0neLEKymNWrYbTUDAUwC1G1DIywb2x/lhL/3yuasZq3dC5RAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUy6JW8EysgGSoRFrCuXF43TVvMV4wHwYDVR0j BBgwFoAUg3Do9b6G5ja3Ty6ah7Xt5d7E+KIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRVE5U2hZaUZINXlrc2ZRVmVtaXFNOFRFUVVrOHVqdWd2eExOYndDdUN2 RUQvMC84MzcwRThGNUJFODZFNjM2Qjc0RjJFOUE4N0I1RURFNURFQzRGOEEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzNzBFOEY1QkU4NkU2MzZC NzRGMkU5QTg3QjVFREU1REVDNEY4QTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RVE5U2hZaUZINXlrc2ZRVmVtaXFNOFRFUVVrOHVqdWd2eExOYndDdUN2RUQvMC84 MzcwRThGNUJFODZFNjM2Qjc0RjJFOUE4N0I1RURFNURFQzRGOEEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoM4WGe1Do0rqumbAvaH4p3babyLA4mGqc0CrW7GwMD5sC157We3jHciCgG0I 18S5pzk4BvZF9zOVc+PQxqvjfu5XIdB4OeBJpWQOdPel/pnUGalW2dthis89iT2k QTG8SLVBj/7bEqk4qQsoFGWeHsyY/2FPc48bwCp7hrfeMi/l6IbL0GAahMZ1igDp BwEtRECItJFvJi6na0oUMTQmaUFRx7tqjLumJaMQqEjrKlzC+DVTUcUtgPeMHvTY endT7qOjw1VTuttZTRokHJmNb49iZtrY2IDM5lP68gcVj4YnXhWBkUMK5ifEwizU 64dOds3Ce4CA+T9oKeodM2P+kw== -----END CERTIFICATE-----Generated at Tue Jul 1 19:07:41 2025 by rpki-client