$ rpki-client -vvf rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft File: 2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft (raw, json) Hash identifier: et+Ye7CL0G3g3ftDL1f8qyqKl/+fVPoqY4+Nsf8LNok= Subject key identifier: E2:E4:63:6F:A8:77:DA:63:DE:3F:1B:69:08:21:8E:53:8C:56:C9:CD Authority key identifier: 2A:05:AF:2F:A3:BA:BE:EA:ED:BE:E2:63:C2:4F:7F:C1:DA:C3:6C:19 Certificate issuer: /CN=2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19 Certificate serial: 45061258BC0A530B5AD3EA604DB11FA34D2A69EA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer Subject info access: rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft Manifest number: 025A Signing time: Sun 29 Jun 2025 15:16:03 +0000 Manifest this update: Sun 29 Jun 2025 15:11:03 +0000 Manifest next update: Mon 30 Jun 2025 16:51:03 +0000 Files and hashes: 1: 2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.crl (hash: LiTZ5vHFvUc5IEgGto3fZbdd0r9GMz541em6DU4VLyc=) 2: 323830343a336263343a3a2f33322d313238203d3e20323636313639.roa (hash: 8HJEKPfJsJ9cUBPI5dVpHTR/hYHRd/Hg9OtQORwVD/Q=) 3: 34352e362e3138382e302f32322d3332203d3e20323636313639.roa (hash: mLr+uiC6lfZpqhMzaY1jB2Xz68LEez2gkuQCR+mbw+s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.crl rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 16:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:06:12:58:bc:0a:53:0b:5a:d3:ea:60:4d:b1:1f:a3:4d:2a:69:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19 Validity Not Before: Jun 29 15:11:03 2025 GMT Not After : Jun 30 16:51:03 2025 GMT Subject: CN=E2E4636FA877DA63DE3F1B6908218E538C56C9CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8b:8a:a3:a0:f5:91:5c:52:07:82:53:80:3f: 22:66:a2:10:b2:cf:3d:4d:f4:e6:6e:ed:ad:0e:1b: ce:48:91:4a:42:48:da:cb:f8:4c:53:89:95:96:5b: 7a:c4:58:6e:2a:fd:26:34:5e:17:52:ba:16:2a:23: c5:22:f2:34:38:fa:21:fa:e2:0e:04:e9:25:43:9c: d5:c7:29:ff:80:41:22:b7:59:3c:95:0f:62:83:8a: aa:f4:e1:2c:a4:8f:a8:05:54:9d:bd:d8:a3:6d:f9: d6:e0:e3:79:32:ae:37:96:cf:da:4a:3e:ce:c0:13: 33:51:51:55:da:91:06:91:7c:9e:0c:86:c5:3b:8f: 22:8e:0e:9f:3a:7f:9b:21:57:44:c3:2c:09:da:8c: 23:b7:ed:35:fc:a7:f7:78:79:d5:64:ba:f5:10:76: 1f:b8:5d:9b:21:8f:b3:9a:6c:52:d2:6c:6a:ad:cf: 93:17:d3:76:bd:6c:40:94:3c:20:10:f8:3f:dd:96: 42:99:fd:37:9c:99:4e:09:99:8d:a3:f9:1c:77:0e: 4f:5f:d1:07:a1:10:36:86:7f:f1:98:30:4d:a1:e6: 73:87:b6:af:a2:1c:16:2b:f2:2c:e6:f7:6b:45:b7: ca:88:a3:55:e2:c5:94:b3:66:ea:62:7a:35:df:7d: 49:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E4:63:6F:A8:77:DA:63:DE:3F:1B:69:08:21:8E:53:8C:56:C9:CD X509v3 Authority Key Identifier: keyid:2A:05:AF:2F:A3:BA:BE:EA:ED:BE:E2:63:C2:4F:7F:C1:DA:C3:6C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/1/2A05AF2FA3BABEEAEDBEE263C24F7FC1DAC36C19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a9:66:da:a1:29:55:f6:5d:03:24:88:81:16:23:ff:22:95: a9:1a:95:8f:01:49:ef:87:c6:d6:7d:89:9d:2b:51:76:49:c4: 02:f7:5c:69:11:21:0a:b6:e8:41:1c:c7:1b:b0:be:c4:22:25: 5e:0c:ee:47:5b:65:8f:58:78:00:42:81:b2:04:eb:15:af:52: ab:d0:6a:25:79:aa:9e:b9:5f:27:fb:df:d0:ac:48:d9:bb:e7: 53:70:62:0c:ab:1f:5a:96:60:ff:5e:9f:26:92:9d:06:f0:73: 7a:66:94:f7:59:22:42:67:f5:8c:bc:6c:66:eb:ab:11:70:52: 58:17:37:15:89:84:14:19:a0:e7:d7:b7:e6:d2:d0:92:5c:05: 64:8f:43:9a:0d:84:45:6d:ac:64:ce:e4:5a:69:02:55:07:10: c0:a3:82:30:df:8c:fa:5a:94:b9:27:e1:94:55:c7:fe:45:a2: 7d:64:06:cd:8a:e9:fa:26:e1:fe:73:c0:b9:50:15:df:4b:2a: 5d:5e:76:57:52:c4:1b:48:56:8c:32:92:d5:04:7d:ec:9b:1d: 3b:02:a8:64:30:e2:26:f5:74:76:b5:ff:55:b6:46:9a:b2:8c: 5b:2b:03:d9:60:10:be:5f:bc:93:1e:3f:1c:5b:7d:0c:43:0b: c0:3d:41:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURQYSWLwKUwta0+pgTbEfo00qaeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwNUFGMkZBM0JBQkVFQUVEQkVFMjYzQzI0RjdGQzFE QUMzNkMxOTAeFw0yNTA2MjkxNTExMDNaFw0yNTA2MzAxNjUxMDNaMDMxMTAvBgNV BAMTKEUyRTQ2MzZGQTg3N0RBNjNERTNGMUI2OTA4MjE4RTUzOEM1NkM5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVi4qjoPWRXFIHglOAPyJmohCy zz1N9OZu7a0OG85IkUpCSNrL+ExTiZWWW3rEWG4q/SY0XhdSuhYqI8Ui8jQ4+iH6 4g4E6SVDnNXHKf+AQSK3WTyVD2KDiqr04Sykj6gFVJ292KNt+dbg43kyrjeWz9pK Ps7AEzNRUVXakQaRfJ4MhsU7jyKODp86f5shV0TDLAnajCO37TX8p/d4edVkuvUQ dh+4XZshj7OabFLSbGqtz5MX03a9bECUPCAQ+D/dlkKZ/TecmU4JmY2j+Rx3Dk9f 0QehEDaGf/GYME2h5nOHtq+iHBYr8izm92tFt8qIo1XixZSzZupiejXffUljAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4uRjb6h32mPePxtpCCGOU4xWyc0wHwYDVR0j BBgwFoAUKgWvL6O6vurtvuJjwk9/wdrDbBkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzNzRlZSN1hRQ2c4czNMd1lnQWdZM0FDbXJrSFp0RmFOSEthVW9kanNx MW0vMS8yQTA1QUYyRkEzQkFCRUVBRURCRUUyNjNDMjRGN0ZDMURBQzM2QzE5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBMDVBRjJGQTNCQUJFRUFF REJFRTI2M0MyNEY3RkMxREFDMzZDMTkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NzNzRlZSN1hRQ2c4czNMd1lnQWdZM0FDbXJrSFp0RmFOSEthVW9kanNxMW0vMS8y QTA1QUYyRkEzQkFCRUVBRURCRUUyNjNDMjRGN0ZDMURBQzM2QzE5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlalm2qEpVfZdAySIgRYj/yKVqRqVjwFJ74fG1n2JnStRdknEAvdcaREhCrbo QRzHG7C+xCIlXgzuR1tlj1h4AEKBsgTrFa9Sq9BqJXmqnrlfJ/vf0KxI2bvnU3Bi DKsfWpZg/16fJpKdBvBzemaU91kiQmf1jLxsZuurEXBSWBc3FYmEFBmg59e35tLQ klwFZI9Dmg2ERW2sZM7kWmkCVQcQwKOCMN+M+lqUuSfhlFXH/kWifWQGzYrp+ibh /nPAuVAV30sqXV52V1LEG0hWjDKS1QR97JsdOwKoZDDiJvV0drX/VbZGmrKMWysD 2WAQvl+8kx4/HFt9DEMLwD1B8g== -----END CERTIFICATE-----Generated at Mon Jun 30 05:17:31 2025 by rpki-client