$ rpki-client -vvf rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.mft File: E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.mft (raw, json) Hash identifier: xA62w+/Pi40AOMBJ39680V8ljbeoH6BA75iEevEe4fQ= Subject key identifier: 0C:9B:9A:EA:BE:BF:53:83:E1:E2:B1:AF:05:42:B3:2C:99:73:49:BC Authority key identifier: E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C Certificate issuer: /CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C Certificate serial: 2966EFC19C0D845ADDAA99633B7615D088B56323 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer Subject info access: rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.mft Manifest number: F3 Signing time: Sun 29 Jun 2025 18:41:25 +0000 Manifest this update: Sun 29 Jun 2025 18:36:25 +0000 Manifest next update: Mon 30 Jun 2025 21:25:25 +0000 Files and hashes: 1: 323830343a376162343a3a2f33322d3332203d3e20323731333837.roa (hash: Ad1hesPC8dEzad8p0V4OqqewgDp9POZhp/8izwVbIk0=) 2: E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.crl (hash: cOt/l/+VXfxPmwOfZa1SseJqL5eESWNZGhYVhhJ/8Ek=) 3: 323830343a376162343a3a2f33322d3333203d3e20323731333837.roa (hash: asf2oCfVX1jx9E70fmK0nnkdUp9Sy/vpc9XM5wjRccg=) 4: 3230302e3231352e3232342e302f32322d3234203d3e20323731333837.roa (hash: YTM1XAv/OD93SsILdnNzUKEpAbR74AZ07GJy8WCe/qU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.crl rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 21:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:66:ef:c1:9c:0d:84:5a:dd:aa:99:63:3b:76:15:d0:88:b5:63:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C Validity Not Before: Jun 29 18:36:25 2025 GMT Not After : Jun 30 21:25:25 2025 GMT Subject: CN=0C9B9AEABEBF5383E1E2B1AF0542B32C997349BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b5:cd:bb:db:dc:e1:5d:b9:d0:85:64:ff:76: d0:63:4c:10:0e:b3:68:77:88:3a:0c:fe:51:83:20: fe:89:64:a4:1b:26:66:d6:61:ef:ff:77:a3:dd:6f: 37:43:b9:3c:63:ac:e0:a2:03:f3:8b:8e:c6:33:64: dc:a3:54:7a:20:d4:c8:5a:f8:c3:5c:fd:d0:b0:2b: 00:9b:72:aa:ec:64:4c:49:d3:6a:92:0e:eb:4f:79: 51:bc:d1:90:c8:1f:58:e8:a8:b4:af:7a:78:cc:95: f9:72:65:66:95:2a:2f:e7:21:2b:45:e0:d3:41:7c: 36:82:d3:84:8e:d5:e3:6c:d8:06:21:de:b3:b6:fa: 6d:89:0b:38:b1:19:5c:e3:24:49:bc:cb:bc:82:77: 69:5a:6a:68:71:1d:e1:3b:3b:cc:6b:64:40:c3:07: d9:fd:fc:2e:ff:5e:a7:71:c5:fd:2f:bc:81:a3:b3: 49:04:b8:a7:9d:3e:5f:d1:72:95:b3:79:37:52:15: f9:e7:f4:9b:6f:31:15:4e:1f:96:0a:78:15:c0:dd: fd:f4:dc:65:72:f1:04:bd:0a:b3:6b:9c:3b:bc:c3: 03:6b:c6:3b:7d:45:cb:e2:74:39:39:b0:a4:64:08: 2d:c5:cd:a0:eb:1e:f2:bf:81:f1:1e:6c:fd:74:b1: a9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9B:9A:EA:BE:BF:53:83:E1:E2:B1:AF:05:42:B3:2C:99:73:49:BC X509v3 Authority Key Identifier: keyid:E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6e:fa:6c:86:75:1d:61:b5:5f:fb:7c:db:42:95:a1:72:b9: 34:c6:04:05:f6:2c:b3:4f:fd:f7:de:4a:3f:3a:d4:26:92:97: 2b:07:9d:9f:29:e1:6a:5f:6f:a7:59:71:0e:6d:0c:6e:85:08: 0b:8f:7b:a7:3e:72:8f:9c:e2:18:cb:6a:df:3c:4c:f0:3c:5d: aa:35:f7:35:59:bc:fc:c0:3f:55:45:e1:0e:05:52:1d:ed:45: 60:4b:97:b3:39:d2:e4:d9:f4:e7:f1:89:3b:19:6e:b7:07:1c: 5e:45:fd:b2:b6:20:de:eb:29:0c:9e:e0:02:b0:dd:3c:6e:79: e9:de:0b:85:bb:2d:dc:ed:cc:a0:88:24:86:0d:56:be:e9:ac: 69:e2:52:2e:9b:4e:75:14:2b:9d:93:74:0b:4f:89:c8:6c:7d: 32:ba:de:cb:ac:29:bd:d9:77:a3:6f:10:68:f9:0a:9f:d7:2f: 45:88:f9:0a:f7:e3:64:15:12:16:ca:df:c6:7f:fc:ac:84:94: ad:68:4e:90:c3:bc:01:7f:d5:53:9a:73:e8:93:bd:68:67:dc: eb:eb:81:43:18:32:34:1d:94:cd:4e:66:63:d4:30:69:86:59: cb:18:1c:af:8f:95:b3:e0:e8:ee:24:dc:51:d6:8b:46:d2:a5: 55:db:a0:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKWbvwZwNhFrdqpljO3YV0Ii1YyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCQUVFOEM0NzU1NUU3OENBREUxRkFFQUE4MkMxMTg2 Q0RGQzE4QzAeFw0yNTA2MjkxODM2MjVaFw0yNTA2MzAyMTI1MjVaMDMxMTAvBgNV BAMTKDBDOUI5QUVBQkVCRjUzODNFMUUyQjFBRjA1NDJCMzJDOTk3MzQ5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1tc2729zhXbnQhWT/dtBjTBAO s2h3iDoM/lGDIP6JZKQbJmbWYe//d6PdbzdDuTxjrOCiA/OLjsYzZNyjVHog1Mha +MNc/dCwKwCbcqrsZExJ02qSDutPeVG80ZDIH1joqLSvenjMlflyZWaVKi/nIStF 4NNBfDaC04SO1eNs2AYh3rO2+m2JCzixGVzjJEm8y7yCd2laamhxHeE7O8xrZEDD B9n9/C7/Xqdxxf0vvIGjs0kEuKedPl/RcpWzeTdSFfnn9JtvMRVOH5YKeBXA3f30 3GVy8QS9CrNrnDu8wwNrxjt9RcvidDk5sKRkCC3FzaDrHvK/gfEebP10saktAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDJua6r6/U4Ph4rGvBUKzLJlzSbwwHwYDVR0j BBgwFoAU4brujEdVXnjK3h+uqoLBGGzfwYwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1prV01CcW9zbVpid1FRck1SSDduc1k4SDdUaDNDWkJyanQ3NHJIYkhv dEovMC9FMUJBRUU4QzQ3NTU1RTc4Q0FERTFGQUVBQTgyQzExODZDREZDMThDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxQkFFRThDNDc1NTVFNzhD QURFMUZBRUFBODJDMTE4NkNERkMxOEMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1prV01CcW9zbVpid1FRck1SSDduc1k4SDdUaDNDWkJyanQ3NHJIYkhvdEovMC9F MUJBRUU4QzQ3NTU1RTc4Q0FERTFGQUVBQTgyQzExODZDREZDMThDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAW76bIZ1HWG1X/t820KVoXK5NMYEBfYss0/9995KPzrUJpKXKwednynhal9v p1lxDm0MboUIC497pz5yj5ziGMtq3zxM8DxdqjX3NVm8/MA/VUXhDgVSHe1FYEuX sznS5Nn05/GJOxlutwccXkX9srYg3uspDJ7gArDdPG556d4Lhbst3O3MoIgkhg1W vumsaeJSLptOdRQrnZN0C0+JyGx9Mrrey6wpvdl3o28QaPkKn9cvRYj5CvfjZBUS Fsrfxn/8rISUrWhOkMO8AX/VU5pz6JO9aGfc6+uBQxgyNB2UzU5mY9QwaYZZyxgc r4+Vs+Do7iTcUdaLRtKlVdugFg== -----END CERTIFICATE-----Generated at Mon Jun 30 04:51:20 2025 by rpki-client