$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft File: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft (raw, json) Hash identifier: WUhJavGI5SAjZ858zyEXFm9r19sLIPebM/JX0rP/sLQ= Subject key identifier: AF:DB:C5:0B:DE:64:2D:BD:94:9F:C7:5B:6F:9D:CD:B6:79:0F:0F:3D Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 Certificate issuer: /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Certificate serial: 4926BA1C952A84663418E5D53E442CF6A8F1FE3B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject info access: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft Manifest number: 0227 Signing time: Wed 02 Jul 2025 15:06:41 +0000 Manifest this update: Wed 02 Jul 2025 15:01:41 +0000 Manifest next update: Thu 03 Jul 2025 16:04:41 +0000 Files and hashes: 1: 323830343a326432383a3a2f33322d313238203d3e20323635323634.roa (hash: 0xs1tTdh2Qke0fip6d1TEfj28igzF6NdDvyXj3IPtmI=) 2: 3136382e39302e34382e302f32322d3332203d3e20323635323634.roa (hash: Bv6Lyj5+VhdPqvZ/TGH9M1sdk0ISaNwfb7BbI7c/FPE=) 3: 653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl (hash: AQms8KQ8CZwznPf1ghBhI+eAGnOfh16ZAyoZe9pswls=) 4: 3138372e39352e3132382e302f32322d3332203d3e20323635323634.roa (hash: WqEYa1LHKO/TdU02rXFXLwns464zC4VFuzHF7wOxsfA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 16:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:26:ba:1c:95:2a:84:66:34:18:e5:d5:3e:44:2c:f6:a8:f1:fe:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2 Validity Not Before: Jul 2 15:01:41 2025 GMT Not After : Jul 3 16:04:41 2025 GMT Subject: CN=AFDBC50BDE642DBD949FC75B6F9DCDB6790F0F3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2b:d3:26:06:26:bf:61:c1:8a:14:c2:5b:54: 30:ac:59:92:62:92:87:a5:9b:ee:07:47:d6:08:e8: 08:bb:53:72:20:05:9c:0f:f0:e9:2b:8b:bf:f8:95: be:ce:af:1b:3a:d5:a6:fc:a6:b6:dd:ce:bc:19:68: 09:f2:ab:41:3b:92:43:e2:3b:4d:08:01:27:c3:1c: cd:2e:74:da:aa:f0:30:81:03:d1:60:15:c5:fe:9a: 49:e0:8e:57:d8:f8:71:d4:4d:9e:00:10:26:be:6e: 9f:5e:79:a4:4a:bb:36:be:55:cb:59:b8:c9:60:31: b2:05:19:a8:ec:50:c5:cb:d1:20:5c:5a:9e:d0:4a: 79:20:51:25:dc:f7:06:de:74:29:83:c1:19:99:d2: 99:ef:18:62:27:e4:f3:76:28:b6:0f:af:67:34:cc: a1:79:29:74:0f:3e:7a:a5:46:26:42:c3:67:19:9a: 4c:5d:0f:b9:cb:6d:6a:49:b4:2c:47:34:1c:92:4c: b7:1e:47:19:dd:74:e0:10:5d:f8:2c:f3:1e:c4:2d: 76:a6:60:c4:e3:53:62:97:a8:a6:32:c9:7d:bc:9d: 25:25:b8:78:b3:99:76:d0:ff:46:3f:61:12:29:84: 05:33:79:c3:34:06:76:26:53:a2:02:3b:1a:65:8e: 8d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DB:C5:0B:DE:64:2D:BD:94:9F:C7:5B:6F:9D:CD:B6:79:0F:0F:3D X509v3 Authority Key Identifier: keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:35:b5:92:f9:13:53:e1:ae:bc:2d:dd:ca:83:66:9d:8d:ed: 0b:4b:2d:58:10:1b:8f:ae:61:2e:b0:89:d6:db:3f:dd:bf:bb: d8:48:ca:de:23:6c:f8:25:f2:a0:18:9d:eb:ba:64:e9:45:04: 70:47:a0:01:5a:b3:82:0f:11:47:a5:d8:dd:8b:66:c5:81:54: 1b:bc:4b:09:61:7e:e4:f4:4f:e4:9e:fa:26:1d:e7:8b:97:7b: fb:b4:9a:ac:65:df:13:04:b3:2a:00:9d:de:24:11:2c:6a:aa: 19:5e:00:ff:15:56:bd:f0:10:0a:35:97:64:70:8c:9d:a1:47: 83:66:cb:f4:ee:81:21:1c:55:d9:b4:ed:b4:fc:d4:71:a4:3c: 07:a0:7d:b9:19:0b:fa:69:8f:3b:4d:60:a9:a9:c0:a1:bf:30: 2e:a2:08:6e:54:39:8c:2e:0c:84:35:05:44:29:cf:ac:3d:a3: e2:fd:c3:a6:91:7e:bf:31:59:a7:59:b0:73:13:0d:41:b3:d1: 15:e9:9a:2a:ee:06:cf:d8:74:88:b7:e7:77:2b:44:b1:b1:8e: fe:bd:73:94:43:22:59:4a:09:61:b7:2d:ec:2f:65:2e:0f:a4: 8e:4b:eb:b6:bd:0f:41:c8:69:12:41:e1:8f:78:73:ee:65:70: 98:60:84:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSSa6HJUqhGY0GOXVPkQs9qjx/jswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzODM3RDdFQ0ExRkUxMTQ1RDBDRTE1RTBCRjg5NUVF MDZBMjdFMjAeFw0yNTA3MDIxNTAxNDFaFw0yNTA3MDMxNjA0NDFaMDMxMTAvBgNV BAMTKEFGREJDNTBCREU2NDJEQkQ5NDlGQzc1QjZGOURDREI2NzkwRjBGM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTK9MmBia/YcGKFMJbVDCsWZJi koelm+4HR9YI6Ai7U3IgBZwP8Okri7/4lb7Orxs61ab8prbdzrwZaAnyq0E7kkPi O00IASfDHM0udNqq8DCBA9FgFcX+mkngjlfY+HHUTZ4AECa+bp9eeaRKuza+VctZ uMlgMbIFGajsUMXL0SBcWp7QSnkgUSXc9wbedCmDwRmZ0pnvGGIn5PN2KLYPr2c0 zKF5KXQPPnqlRiZCw2cZmkxdD7nLbWpJtCxHNBySTLceRxnddOAQXfgs8x7ELXam YMTjU2KXqKYyyX28nSUluHizmXbQ/0Y/YRIphAUzecM0BnYmU6ICOxpljo3jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUr9vFC95kLb2Un8dbb53NtnkPDz0wHwYDVR0j BBgwFoAUZTg31+yh/hFF0M4V4L+JXuBqJ+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZl UFMvMC82NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MzgzN0Q3RUNBMUZFMTE0 NUQwQ0UxNUUwQkY4OTVFRTA2QTI3RTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUxwZUpHOWZmVDVDbmhEYmhuN0FkdXl1TGJFQTlBaFdXNXdpUG9IYUZlUFMvMC82 NTM4MzdEN0VDQTFGRTExNDVEMENFMTVFMEJGODk1RUUwNkEyN0UyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANzW1kvkTU+GuvC3dyoNmnY3tC0stWBAbj65hLrCJ1ts/3b+72EjK3iNs+CXy oBid67pk6UUEcEegAVqzgg8RR6XY3YtmxYFUG7xLCWF+5PRP5J76Jh3ni5d7+7Sa rGXfEwSzKgCd3iQRLGqqGV4A/xVWvfAQCjWXZHCMnaFHg2bL9O6BIRxV2bTttPzU caQ8B6B9uRkL+mmPO01gqanAob8wLqIIblQ5jC4MhDUFRCnPrD2j4v3DppF+vzFZ p1mwcxMNQbPRFemaKu4Gz9h0iLfndytEsbGO/r1zlEMiWUoJYbct7C9lLg+kjkvr tr0PQchpEkHhj3hz7mVwmGCEpQ== -----END CERTIFICATE-----Generated at Thu Jul 3 01:00:29 2025 by rpki-client