$ rpki-client -vvf rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/2F0B79B6E473982D91807611066BFFF4312B1B2D.mft File: 2F0B79B6E473982D91807611066BFFF4312B1B2D.mft (raw, json) Hash identifier: PFzniz5Zuu5S5Vz6H8HBSsq4aDkVD6yyaCpe6RMFhmU= Subject key identifier: 2A:A0:88:17:60:32:8E:92:05:86:D7:19:49:7D:79:ED:09:33:06:EF Authority key identifier: 2F:0B:79:B6:E4:73:98:2D:91:80:76:11:06:6B:FF:F4:31:2B:1B:2D Certificate issuer: /CN=2F0B79B6E473982D91807611066BFFF4312B1B2D Certificate serial: 5892499C5643C5C1D6B9580CB7B07AA05E8D3C48 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0B79B6E473982D91807611066BFFF4312B1B2D.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/2F0B79B6E473982D91807611066BFFF4312B1B2D.mft Manifest number: 4E Signing time: Wed 02 Jul 2025 00:40:21 +0000 Manifest this update: Wed 02 Jul 2025 00:35:21 +0000 Manifest next update: Thu 03 Jul 2025 02:51:21 +0000 Files and hashes: 1: 2F0B79B6E473982D91807611066BFFF4312B1B2D.crl (hash: OJhcaZs93LhdcuvqA40v91hgShqx9SMNQE/EueZTwhQ=) 2: 3133312e3136312e32382e302f32322d3232203d3e20323634333630.roa (hash: nJSKrF1O5sutGN5IIo+q1uyxDotn2c68iJbq3dfzMFE=) 3: 323830343a316435303a3a2f33322d3332203d3e20323634333630.roa (hash: 73Fw42pwexn9BGzeAZ+QOti9q8ZzZFPJUAMO0xg+z+4=) 4: 3133382e3235352e3133322e302f32322d3232203d3e20323634333630.roa (hash: rRGyeLkkZuthE73bllO+NEZbYPu/R/x5wjW0rvXTOBM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/2F0B79B6E473982D91807611066BFFF4312B1B2D.crl rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/2F0B79B6E473982D91807611066BFFF4312B1B2D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0B79B6E473982D91807611066BFFF4312B1B2D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 02:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:92:49:9c:56:43:c5:c1:d6:b9:58:0c:b7:b0:7a:a0:5e:8d:3c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0B79B6E473982D91807611066BFFF4312B1B2D Validity Not Before: Jul 2 00:35:21 2025 GMT Not After : Jul 3 02:51:21 2025 GMT Subject: CN=2AA0881760328E920586D719497D79ED093306EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:68:0f:05:b0:70:c6:21:fc:86:36:8c:a1:68: 24:74:a0:40:2e:aa:fe:ef:81:e6:8c:40:50:40:cc: 8b:eb:6e:c3:0d:e5:b1:6f:3b:5d:b6:9d:38:81:d1: be:6d:3f:2d:52:36:b3:89:66:9b:e5:6d:af:91:05: 21:48:f2:21:9b:1c:c5:54:8e:ed:d9:bc:9d:de:b9: 6d:d6:fc:82:33:f1:fd:34:cf:5a:9d:51:c1:68:1f: 9d:d8:72:8c:e4:c1:67:58:f6:e1:fc:88:af:82:d9: cc:86:ae:fa:83:9f:5a:46:05:14:ae:1e:db:75:23: 01:2b:4c:56:1f:1d:65:b5:44:d3:8b:2d:f7:9b:9a: fb:f8:58:f6:0f:46:ca:7e:15:fc:e5:fd:b0:c0:63: 48:be:44:37:b9:0c:c1:7b:2d:4f:48:0b:f4:f9:c1: ed:98:07:9a:0d:5e:23:1b:2b:04:9d:21:17:87:80: e3:17:6a:28:70:15:69:b5:a4:9c:3b:52:f5:9c:1e: 8c:39:d8:f9:dc:bd:87:ad:58:05:da:60:10:45:c4: 07:e3:f1:47:df:f7:e5:d8:43:c6:37:c4:a3:31:fc: b9:8d:5c:bd:c6:56:33:f8:17:c6:fc:6f:5c:c2:56: 99:00:01:93:f6:2d:6f:4d:14:42:60:5b:40:3f:f0: 1b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A0:88:17:60:32:8E:92:05:86:D7:19:49:7D:79:ED:09:33:06:EF X509v3 Authority Key Identifier: keyid:2F:0B:79:B6:E4:73:98:2D:91:80:76:11:06:6B:FF:F4:31:2B:1B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/2F0B79B6E473982D91807611066BFFF4312B1B2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0B79B6E473982D91807611066BFFF4312B1B2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/2F0B79B6E473982D91807611066BFFF4312B1B2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:87:3c:a8:00:19:c3:7b:c9:99:46:c1:45:ec:15:db:57:73: 9b:2f:a3:c7:67:b1:68:b2:ff:16:a5:aa:a2:62:11:bb:80:34: d6:7e:25:15:c8:68:04:8b:de:d2:e6:2c:65:28:ce:bb:05:9a: 0d:02:22:83:0a:1c:e7:dd:b3:da:f2:7c:ec:18:ab:b1:49:c8: 58:9b:26:9a:1a:54:28:e7:4c:10:ef:43:76:d0:0b:61:81:14: d9:66:2a:05:21:6f:b3:45:ea:d4:52:81:f6:5d:a7:d5:2f:73: ca:87:15:a0:02:aa:83:a3:f2:07:34:5c:51:0f:3e:b3:72:fc: 1b:85:70:c9:e7:e2:bd:76:de:79:57:d9:0a:b4:ee:de:3d:2e: 72:73:b7:9e:f2:29:e3:eb:b6:b0:b3:46:31:7f:80:f4:dc:76: a0:39:b2:8b:64:c5:7e:9e:05:4b:1b:e6:46:25:c3:98:c6:f5: 8d:49:4a:66:ee:29:ee:87:e6:d7:65:12:4d:c4:17:68:d0:cc: ce:d4:85:0b:a1:00:28:d3:a3:2e:54:dc:41:de:1d:a0:fd:90: 84:6f:09:e0:68:3a:45:d9:fd:6c:74:2d:ae:67:67:53:49:90: 80:35:bd:c5:c9:cb:98:db:e9:ba:f5:77:12:c9:6c:64:a0:95: 95:e0:c5:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWJJJnFZDxcHWuVgMt7B6oF6NPEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYwQjc5QjZFNDczOTgyRDkxODA3NjExMDY2QkZGRjQz MTJCMUIyRDAeFw0yNTA3MDIwMDM1MjFaFw0yNTA3MDMwMjUxMjFaMDMxMTAvBgNV BAMTKDJBQTA4ODE3NjAzMjhFOTIwNTg2RDcxOTQ5N0Q3OUVEMDkzMzA2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuaA8FsHDGIfyGNoyhaCR0oEAu qv7vgeaMQFBAzIvrbsMN5bFvO122nTiB0b5tPy1SNrOJZpvlba+RBSFI8iGbHMVU ju3ZvJ3euW3W/IIz8f00z1qdUcFoH53YcozkwWdY9uH8iK+C2cyGrvqDn1pGBRSu Htt1IwErTFYfHWW1RNOLLfebmvv4WPYPRsp+Ffzl/bDAY0i+RDe5DMF7LU9IC/T5 we2YB5oNXiMbKwSdIReHgOMXaihwFWm1pJw7UvWcHow52PncvYetWAXaYBBFxAfj 8Uff9+XYQ8Y3xKMx/LmNXL3GVjP4F8b8b1zCVpkAAZP2LW9NFEJgW0A/8Bv3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKqCIF2AyjpIFhtcZSX157QkzBu8wHwYDVR0j BBgwFoAULwt5tuRzmC2RgHYRBmv/9DErGy0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0tMNGI0S2s4UFFjbzZYb3NQNGdHY3hZMnNiZGl5UGZKRER6UzF2UnNh THUvMC8yRjBCNzlCNkU0NzM5ODJEOTE4MDc2MTEwNjZCRkZGNDMxMkIxQjJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGMEI3OUI2RTQ3Mzk4MkQ5 MTgwNzYxMTA2NkJGRkY0MzEyQjFCMkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0tMNGI0S2s4UFFjbzZYb3NQNGdHY3hZMnNiZGl5UGZKRER6UzF2UnNhTHUvMC8y RjBCNzlCNkU0NzM5ODJEOTE4MDc2MTEwNjZCRkZGNDMxMkIxQjJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK4c8qAAZw3vJmUbBRewV21dzmy+jx2exaLL/FqWqomIRu4A01n4lFchoBIve 0uYsZSjOuwWaDQIigwoc592z2vJ87BirsUnIWJsmmhpUKOdMEO9DdtALYYEU2WYq BSFvs0Xq1FKB9l2n1S9zyocVoAKqg6PyBzRcUQ8+s3L8G4VwyefivXbeeVfZCrTu 3j0ucnO3nvIp4+u2sLNGMX+A9Nx2oDmyi2TFfp4FSxvmRiXDmMb1jUlKZu4p7ofm 12USTcQXaNDMztSFC6EAKNOjLlTcQd4doP2QhG8J4Gg6Rdn9bHQtrmdnU0mQgDW9 xcnLmNvpuvV3EslsZKCVleDF8A== -----END CERTIFICATE-----Generated at Wed Jul 2 06:32:31 2025 by rpki-client