$ rpki-client -vvf rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.mft File: 23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.mft (raw, json) Hash identifier: lMbtZPnsJCDDl7WZyblBNyBIcw3hIXLCPZB47Ic2AWg= Subject key identifier: D7:69:55:43:9A:6C:FF:A8:F3:B9:D4:7C:EA:3F:9D:06:81:23:3B:72 Authority key identifier: 23:C2:D5:7C:49:C7:C4:0A:3D:25:73:BC:3A:41:D0:88:A1:E8:6C:97 Certificate issuer: /CN=23C2D57C49C7C40A3D2573BC3A41D088A1E86C97 Certificate serial: 69C9B213846ED215AA2330C80916E4903A3C2291 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.cer Subject info access: rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.mft Manifest number: D3 Signing time: Mon 30 Jun 2025 09:22:58 +0000 Manifest this update: Mon 30 Jun 2025 09:17:58 +0000 Manifest next update: Tue 01 Jul 2025 11:50:58 +0000 Files and hashes: 1: 23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.crl (hash: Hz1zJuQZwH/eIVJojRkX7qBZEBqustRqyGCEhVxSbaY=) 2: 3136382e3139372e3232382e302f32322d3332203d3e20323633323532.roa (hash: 4AtHEp888/iGAmenD1pUO5ZkZo5aUmW8rKsPYcqy0q4=) 3: 323830343a313763633a3a2f33322d313238203d3e20323633323532.roa (hash: k+fcDEgAcH19H2ZMeX8Wy3GyjPtollDjfiUOwCete7o=) 4: 3138392e3230312e3233322e302f32312d3332203d3e20323633323532.roa (hash: 6cNuXpM/hVKussaKp8OiKygMcJMioHGg827oNChqSVg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.crl rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 11:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c9:b2:13:84:6e:d2:15:aa:23:30:c8:09:16:e4:90:3a:3c:22:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C2D57C49C7C40A3D2573BC3A41D088A1E86C97 Validity Not Before: Jun 30 09:17:58 2025 GMT Not After : Jul 1 11:50:58 2025 GMT Subject: CN=D76955439A6CFFA8F3B9D47CEA3F9D0681233B72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:28:72:9e:16:71:90:04:6c:4f:00:dc:2b:b0: 15:3b:0c:f1:68:7d:66:9a:63:8d:7a:db:1f:05:70: b2:35:c3:5b:26:11:f7:81:7f:09:b8:c4:37:68:87: 64:9a:57:10:71:be:8c:57:68:74:e0:e3:80:ac:3d: c9:15:38:8a:94:5b:5c:f4:17:e1:d5:1e:0d:83:72: 8c:f1:e5:c1:ad:4e:64:83:f4:e8:0a:94:0c:67:11: 92:10:56:3a:a5:1d:66:49:fd:22:e1:10:ed:e5:10: 65:58:75:72:27:a7:4a:72:33:19:66:bc:be:44:bd: e1:32:08:29:c9:a3:49:5d:90:b5:9d:91:e3:08:d7: 4d:44:4e:2b:28:63:4e:9a:4e:7d:ee:ed:fb:fa:df: 5e:84:b5:e6:bd:44:20:82:d4:94:b4:57:76:e9:61: 21:82:47:dc:d3:b5:19:e7:d3:6a:40:d6:f7:c7:d0: e4:ec:fe:e8:9e:78:11:34:f6:48:0c:0b:2c:4b:ef: a1:fa:48:28:3a:9f:fa:dc:4b:a0:93:1d:3f:f0:9c: 11:34:38:00:0d:55:4a:f4:d2:33:e3:cf:70:78:3f: b2:3b:94:53:cc:7e:99:f8:1e:1d:a4:cd:cd:59:81: 18:16:17:d9:3b:ed:d5:4e:d0:f3:63:d1:ea:74:82: 1e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:69:55:43:9A:6C:FF:A8:F3:B9:D4:7C:EA:3F:9D:06:81:23:3B:72 X509v3 Authority Key Identifier: keyid:23:C2:D5:7C:49:C7:C4:0A:3D:25:73:BC:3A:41:D0:88:A1:E8:6C:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:64:57:1f:04:c8:ed:94:9b:c7:8e:15:f5:fe:9a:fb:af:9e: 48:64:30:b7:73:30:ae:81:2d:5e:ea:a7:a9:45:66:6a:c6:97: ad:9d:b6:23:54:75:ab:f9:b0:9a:d9:3b:59:0e:80:cf:5e:da: 7e:7f:24:7c:fb:f4:59:be:1a:dd:58:ee:bd:7f:33:b0:ec:22: 04:0d:41:12:fe:cb:e8:5f:af:1d:95:45:28:64:1f:21:54:15: 06:1f:3f:b6:b4:60:57:71:aa:76:68:40:d2:90:ad:3e:2e:5d: a1:d4:76:44:b2:69:91:51:b1:45:41:59:80:c2:e5:bb:26:f0: 8b:d4:f6:57:52:fc:39:e0:ce:7c:7c:50:8d:7f:de:14:bf:14: 05:f1:b7:7b:c7:73:28:15:cb:94:d1:0c:ea:ea:a4:e8:1b:d6: 1d:fc:fd:1d:d4:e9:37:86:5a:47:83:97:cf:9a:94:d4:12:86: 6e:b7:e9:29:79:5d:c3:c7:72:9a:6f:24:fd:ab:5c:9f:39:6a: fc:46:9c:d5:d1:aa:02:4d:ad:7e:de:d9:4c:f4:ab:83:4a:68: bd:45:1b:13:9e:1b:24:c8:54:fa:29:2f:32:29:79:cf:da:e2: 8b:46:bf:90:0a:12:d7:fd:17:b2:54:05:eb:dd:de:84:33:e3: 64:4f:3d:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUacmyE4Ru0hWqIzDICRbkkDo8IpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDMkQ1N0M0OUM3QzQwQTNEMjU3M0JDM0E0MUQwODhB MUU4NkM5NzAeFw0yNTA2MzAwOTE3NThaFw0yNTA3MDExMTUwNThaMDMxMTAvBgNV BAMTKEQ3Njk1NTQzOUE2Q0ZGQThGM0I5RDQ3Q0VBM0Y5RDA2ODEyMzNCNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmKHKeFnGQBGxPANwrsBU7DPFo fWaaY4162x8FcLI1w1smEfeBfwm4xDdoh2SaVxBxvoxXaHTg44CsPckVOIqUW1z0 F+HVHg2Dcozx5cGtTmSD9OgKlAxnEZIQVjqlHWZJ/SLhEO3lEGVYdXInp0pyMxlm vL5EveEyCCnJo0ldkLWdkeMI101ETisoY06aTn3u7fv6316Etea9RCCC1JS0V3bp YSGCR9zTtRnn02pA1vfH0OTs/uieeBE09kgMCyxL76H6SCg6n/rcS6CTHT/wnBE0 OAANVUr00jPjz3B4P7I7lFPMfpn4Hh2kzc1ZgRgWF9k77dVO0PNj0ep0gh6jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU12lVQ5ps/6jzudR86j+dBoEjO3IwHwYDVR0j BBgwFoAUI8LVfEnHxAo9JXO8OkHQiKHobJcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnFvc0VGSFZRYmVRdnk4aWt0ZE56cFdOSEtjQjF6ZVY0bVNkNkYxZWEx V04vMC8yM0MyRDU3QzQ5QzdDNDBBM0QyNTczQkMzQTQxRDA4OEExRTg2Qzk3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzQzJENTdDNDlDN0M0MEEz RDI1NzNCQzNBNDFEMDg4QTFFODZDOTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnFvc0VGSFZRYmVRdnk4aWt0ZE56cFdOSEtjQjF6ZVY0bVNkNkYxZWExV04vMC8y M0MyRDU3QzQ5QzdDNDBBM0QyNTczQkMzQTQxRDA4OEExRTg2Qzk3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjmRXHwTI7ZSbx44V9f6a+6+eSGQwt3MwroEtXuqnqUVmasaXrZ22I1R1q/mw mtk7WQ6Az17afn8kfPv0Wb4a3VjuvX8zsOwiBA1BEv7L6F+vHZVFKGQfIVQVBh8/ trRgV3GqdmhA0pCtPi5dodR2RLJpkVGxRUFZgMLluybwi9T2V1L8OeDOfHxQjX/e FL8UBfG3e8dzKBXLlNEM6uqk6BvWHfz9HdTpN4ZaR4OXz5qU1BKGbrfpKXldw8dy mm8k/atcnzlq/Eac1dGqAk2tft7ZTPSrg0povUUbE54bJMhU+ikvMil5z9rii0a/ kAoS1/0XslQF693ehDPjZE89CA== -----END CERTIFICATE-----Generated at Mon Jun 30 16:08:45 2025 by rpki-client