$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft File: D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft (raw, json) Hash identifier: GMUySPXKgk/1SoBI3sudz0dUd14lim71Fv4gUNk/C1M= Subject key identifier: 3E:C1:E9:F7:71:B7:2C:F9:7A:C0:D0:6B:08:21:13:90:ED:45:08:E2 Authority key identifier: D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B Certificate issuer: /CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B Certificate serial: 5C5CD7EAE72E6B356DB16036198CEF825852746A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft Manifest number: FF Signing time: Wed 02 Jul 2025 12:59:17 +0000 Manifest this update: Wed 02 Jul 2025 12:54:17 +0000 Manifest next update: Thu 03 Jul 2025 13:15:17 +0000 Files and hashes: 1: D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl (hash: YE01JMnMC5Wh8FKbFKqYh5loCbtBxXzRaUdAnI59wl0=) 2: 3137372e37332e36302e302f32322d3234203d3e20323633343638.roa (hash: ojNYwHHCihvNSk2FkbyfGPhui+Fo/NptmXx53NBSpaQ=) 3: 323830343a313234633a3a2f33322d3438203d3e20323633343638.roa (hash: T2k3XHzj+R5PWM1PAn1IiRXkMkZU+kzdLTKOTB9BdPU=) 4: 3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa (hash: mQl+DqMitEfto4sm/J239pDInofAJ055830zO5LsIjU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 13:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5c:d7:ea:e7:2e:6b:35:6d:b1:60:36:19:8c:ef:82:58:52:74:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B Validity Not Before: Jul 2 12:54:17 2025 GMT Not After : Jul 3 13:15:17 2025 GMT Subject: CN=3EC1E9F771B72CF97AC0D06B08211390ED4508E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a9:16:37:21:81:78:09:dc:b6:50:c4:73:34: 23:c9:bf:b9:1a:bf:1c:92:e3:4e:7a:71:25:dc:da: f1:f8:09:63:60:bd:2c:d1:ef:15:bd:81:26:34:e5: cb:3c:2c:c2:7d:8d:d1:a4:55:8a:25:36:d1:94:19: b7:bc:32:de:c9:4e:f1:bc:45:c8:2c:31:5b:23:01: 6c:6d:38:c5:09:ed:0e:25:69:3e:97:c9:5d:12:a6: d8:82:3c:19:b6:59:3c:18:7d:f1:02:0c:05:72:76: 6a:a3:43:20:1d:31:60:a9:7f:c6:0e:90:c6:be:7b: 45:84:74:17:31:65:d2:5e:de:bf:c8:1e:10:ce:50: 3d:0f:1c:cc:8b:b3:09:cc:d1:fe:d6:35:8e:86:04: b7:0c:a7:b1:20:90:b0:dc:ba:f7:c4:75:50:47:91: 64:c1:19:ca:46:3f:29:3e:0c:33:6d:c0:dd:c0:c0: 42:31:f9:f8:16:9c:46:66:18:33:3a:ef:f5:62:49: 2a:4c:8e:27:61:6a:67:3f:6b:4d:f1:a7:70:b3:c1: 2b:c8:f1:7a:88:38:d2:f9:f9:56:23:55:90:88:38: 51:2e:3f:31:ee:52:71:25:a6:90:be:9d:7f:45:66: 37:eb:9a:33:da:e2:27:a1:56:f7:98:09:6d:e0:e4: 04:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C1:E9:F7:71:B7:2C:F9:7A:C0:D0:6B:08:21:13:90:ED:45:08:E2 X509v3 Authority Key Identifier: keyid:D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:94:05:7b:15:bb:18:f9:03:d9:7e:fd:73:0f:d8:48:93:94: 10:17:64:cb:fb:1a:a3:6f:67:aa:77:1b:23:14:0d:f6:70:a1: fd:aa:1a:bc:c9:56:58:78:08:c1:8b:06:c8:83:cc:d6:6b:d3: d1:ac:7e:4c:5a:76:b8:18:0a:8b:24:16:11:95:15:dd:5a:01: 4e:38:79:6f:c0:92:12:98:25:e7:96:85:18:cd:33:7d:2c:ea: f2:d1:e5:fa:b8:9b:d8:77:1b:d8:ad:f1:fa:79:ce:1c:cd:03: 0e:87:41:8a:55:70:f0:7e:a1:00:bd:dd:86:68:db:eb:74:d8: ce:ce:37:9e:c2:5f:90:04:41:1b:69:34:30:10:5a:b7:08:8e: c9:df:e1:33:0d:15:28:d9:2a:cd:3a:47:bb:24:62:eb:16:94: 6b:3b:37:9e:1d:66:2b:44:c0:18:e0:8f:ce:6f:3f:78:e2:84: ca:8a:15:34:fa:f0:2b:b9:3d:65:cd:50:db:79:6d:ed:1e:d3: 38:fa:4d:df:6e:24:71:f7:17:50:fe:6a:13:7e:ac:c3:0f:35: 8c:c6:e2:a2:70:60:59:50:a5:3e:b7:24:90:a4:fc:ac:e0:ec: 9e:ca:c2:39:83:ba:dc:70:4a:5b:39:0e:5c:df:2f:f2:10:f2: 8d:08:32:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXFzX6ucuazVtsWA2GYzvglhSdGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM3NEY1NDI4MEZDOUNGN0U5MDY4QzZGRjc0NEZBNUFE MTQ5RDcxQjAeFw0yNTA3MDIxMjU0MTdaFw0yNTA3MDMxMzE1MTdaMDMxMTAvBgNV BAMTKDNFQzFFOUY3NzFCNzJDRjk3QUMwRDA2QjA4MjExMzkwRUQ0NTA4RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZqRY3IYF4Cdy2UMRzNCPJv7ka vxyS4056cSXc2vH4CWNgvSzR7xW9gSY05cs8LMJ9jdGkVYolNtGUGbe8Mt7JTvG8 RcgsMVsjAWxtOMUJ7Q4laT6XyV0SptiCPBm2WTwYffECDAVydmqjQyAdMWCpf8YO kMa+e0WEdBcxZdJe3r/IHhDOUD0PHMyLswnM0f7WNY6GBLcMp7EgkLDcuvfEdVBH kWTBGcpGPyk+DDNtwN3AwEIx+fgWnEZmGDM67/ViSSpMjidhamc/a03xp3CzwSvI 8XqIONL5+VYjVZCIOFEuPzHuUnElppC+nX9FZjfrmjPa4iehVveYCW3g5AQ5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPsHp93G3LPl6wNBrCCETkO1FCOIwHwYDVR0j BBgwFoAU03T1QoD8nPfpBoxv90T6WtFJ1xswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0Vh blkvMC9EMzc0RjU0MjgwRkM5Q0Y3RTkwNjhDNkZGNzQ0RkE1QUQxNDlENzFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNzRGNTQyODBGQzlDRjdF OTA2OEM2RkY3NDRGQTVBRDE0OUQ3MUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0VhblkvMC9E Mzc0RjU0MjgwRkM5Q0Y3RTkwNjhDNkZGNzQ0RkE1QUQxNDlENzFCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASJQFexW7GPkD2X79cw/YSJOUEBdky/sao29nqncbIxQN9nCh/aoavMlWWHgI wYsGyIPM1mvT0ax+TFp2uBgKiyQWEZUV3VoBTjh5b8CSEpgl55aFGM0zfSzq8tHl +rib2Hcb2K3x+nnOHM0DDodBilVw8H6hAL3dhmjb63TYzs43nsJfkARBG2k0MBBa twiOyd/hMw0VKNkqzTpHuyRi6xaUazs3nh1mK0TAGOCPzm8/eOKEyooVNPrwK7k9 Zc1Q23lt7R7TOPpN324kcfcXUP5qE36sww81jMbionBgWVClPrckkKT8rODsnsrC OYO63HBKWzkOXN8v8hDyjQgygA== -----END CERTIFICATE-----Generated at Wed Jul 2 20:08:52 2025 by rpki-client