$ rpki-client -vvf rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft File: 23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft (raw, json) Hash identifier: CGA1jY1bo3BhUh3GqZaQucm3Sxsr13wKrSkdWpFTLSI= Subject key identifier: 0F:FC:70:B4:6A:A9:51:96:33:41:90:6E:38:AB:98:5F:11:24:0C:21 Authority key identifier: 23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1 Certificate issuer: /CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1 Certificate serial: 296775BC984F1FCC8E371427B51AB45161527B12 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer Subject info access: rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft Manifest number: 02A9 Signing time: Sun 29 Jun 2025 20:40:00 +0000 Manifest this update: Sun 29 Jun 2025 20:35:00 +0000 Manifest next update: Mon 30 Jun 2025 20:40:00 +0000 Files and hashes: 1: 23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl (hash: I9DChC0twmha+Mrx/QzYWYhW7dgOnG2wpL8Qd+e44cE=) 2: 3139322e3134312e3136332e302f32342d3234203d3e20323637343839.roa (hash: CSH5Kqa0MaU1ZDO/gzNbFA7PEwyWlG0nbaFiIb2W4g0=) 3: 323830343a343234343a3a2f33322d3335203d3e20323637343839.roa (hash: kfOAlEuTV7YUgllyaQimHZqDnsN1E6oP+7UEeK4GKtc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 20:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:67:75:bc:98:4f:1f:cc:8e:37:14:27:b5:1a:b4:51:61:52:7b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1 Validity Not Before: Jun 29 20:35:00 2025 GMT Not After : Jun 30 20:40:00 2025 GMT Subject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ubject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:27:0d:93:fd:29:be:6b:bf:2e:55:7a:37: 63:d2:84:3f:21:80:b0:78:25:a1:2c:c1:06:16:48: a4:49:41:d0:73:a0:ea:b8:6b:86:15:6f:0f:ae:2d: 8a:48:18:6d:90:3a:45:eb:3e:d4:7d:82:04:6a:0c: 2d:b5:74:21:83:d8:0e:b7:51:95:64:66:b7:ea:0d: 18:6f:e8:dc:ef:ca:73:a4:7b:8b:0d:17:95:4c:58: 72:e4:31:9a:1e:d8:51:ac:0a:37:83:7a:55:cc:e5: 83:98:25:8b:89:d9:7d:13:36:79:c8:38:ae:21:d0: fc:68:84:e8:40:df:63:e0:69:08:2c:c9:ac:68:20: e7:28:a5:5d:0e:0f:4b:91:7d:78:19:be:22:7c:07: f0:98:5a:ea:ce:f9:13:21:b5:9b:9c:84:c3:c7:48: 72:3a:6b:a3:92:8f:85:bd:95:eb:ba:cd:b8:51:c0: 0e:eb:0c:94:d4:06:88:a1:ef:39:4c:62:db:7d:2e: bf:94:58:f2:ec:84:9b:ae:55:3e:3d:38:f3:bf:17: 06:45:06:6a:68:3f:a7:d5:e4:03:fe:85:ec:8b:13: 49:c1:43:57:1c:bf:71:d5:94:ec:46:02:92:60:1a: 03:55:a7:b8:d3:74:fe:d2:ef:24:1f:25:7a:fa:58: d2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FC:70:B4:6A:A9:51:96:33:41:90:6E:38:AB:98:5F:11:24:0C:21 X509v3 Authority Key Identifier: keyid:23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:d1:1f:33:fd:eb:ea:bc:d1:2e:ea:49:1d:1b:95:cc:67:62: 04:01:0c:fd:b6:ab:46:7b:97:69:07:16:a0:3a:bd:48:06:35: 2a:9d:a0:d2:1f:16:a0:3e:53:b2:15:0c:7e:bb:83:bf:88:33: c5:0e:6b:9b:4e:35:42:9a:9b:33:94:be:bb:c9:bc:9d:ed:35: f1:8e:c3:74:94:6e:3e:50:5c:c4:93:e6:0a:44:ee:1c:f1:9a: 5a:be:e7:cf:d0:c7:db:b1:b5:53:11:38:c1:39:d5:ab:ee:08: b7:9b:ba:da:06:9c:81:5f:7c:20:85:ec:d9:2c:9e:bb:1f:b0: b1:a1:80:d4:a3:4a:15:db:f3:a8:28:d7:7d:61:d2:9b:45:05: 0c:d3:f6:ce:eb:60:71:c4:96:bf:5c:f1:71:ac:3d:90:f0:fc: 37:fd:56:ef:97:90:dd:ed:0b:34:4d:bb:04:61:5e:d6:d2:51: 38:3c:96:8e:6d:ac:13:7a:99:38:22:0b:e0:ac:1c:e0:50:f8: 7e:76:97:19:f1:b7:9d:cc:c3:e0:a7:cf:eb:dd:b5:42:a4:4a: 95:93:06:55:7d:8d:2f:3d:d3:6f:d4:b8:d8:1d:60:a8:c6:b1: 01:b4:43:6c:25:e8:e7:77:16:0a:ad:14:c9:af:47:0a:1e:aa: ed:a8:bb:e3 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUKWd1vJhPH8yONxQntRq0UWFSexIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNFQ0Q0RDFBRjg4Q0UyRTFCM0RGNkRGODdGQzc2Q0Mx NTdBMDdDMTAeFw0yNTA2MjkyMDM1MDBaFw0yNTA2MzAyMDQwMDBaMIICLTGCAikw ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUZEMTI3MEQ5M0ZEMjlCRTZC QkYyRTU1N0EzNzYzRDI4NDNGMjE4MEIwNzgyNUExMkNDMTA2MTY0OEE0NDk0MUQw NzNBMEVBQjg2Qjg2MTU2RjBGQUUyRDhBNDgxODZEOTAzQTQ1RUIzRUQ0N0Q4MjA0 NkEwQzJEQjU3NDIxODNEODBFQjc1MTk1NjQ2NkI3RUEwRDE4NkZFOERDRUZDQTcz QTQ3QjhCMEQxNzk1NEM1ODcyRTQzMTlBMUVEODUxQUMwQTM3ODM3QTU1Q0NFNTgz OTgyNThCODlEOTdEMTMzNjc5QzgzOEFFMjFEMEZDNjg4NEU4NDBERjYzRTA2OTA4 MkNDOUFDNjgyMEU3MjhBNTVEMEUwRjRCOTE3RDc4MTlCRTIyN0MwN0YwOTg1QUVB Q0VGOTEzMjFCNTlCOUM4NEMzQzc0ODcyM0E2QkEzOTI4Rjg1QkQ5NUVCQkFDREI4 NTFDMDBFRUIwQzk0RDQwNjg4QTFFRjM5NEM2MkRCN0QyRUJGOTQ1OEYyRUM4NDlC QUU1NTNFM0QzOEYzQkYxNzA2NDUwNjZBNjgzRkE3RDVFNDAzRkU4NUVDOEIxMzQ5 QzE0MzU3MUNCRjcxRDU5NEVDNDYwMjkyNjAxQTAzNTVBN0I4RDM3NEZFRDJFRjI0 MUYyNTdBRkE1OEQyODkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAr9EnDZP9Kb5rvy5Vejdj0oQ/IYCweCWhLMEGFkikSUHQc6DquGuG FW8Pri2KSBhtkDpF6z7UfYIEagwttXQhg9gOt1GVZGa36g0Yb+jc78pzpHuLDReV TFhy5DGaHthRrAo3g3pVzOWDmCWLidl9EzZ5yDiuIdD8aIToQN9j4GkILMmsaCDn KKVdDg9LkX14Gb4ifAfwmFrqzvkTIbWbnITDx0hyOmujko+FvZXrus24UcAO6wyU 1AaIoe85TGLbfS6/lFjy7ISbrlU+PTjzvxcGRQZqaD+n1eQD/oXsixNJwUNXHL9x 1ZTsRgKSYBoDVae403T+0u8kHyV6+ljSiQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE FA/8cLRqqVGWM0GQbjirmF8RJAwhMB8GA1UdIwQYMBaAFCPs1NGviM4uGz3234f8 dswVegfBMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg1czF4QkV0eDhCR1N2 NndQSE5wYnlyMkxwWFhwUENHa3RIaUp2WXV4Mjd0LzEvMjNFQ0Q0RDFBRjg4Q0Uy RTFCM0RGNkRGODdGQzc2Q0MxNTdBMDdDMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p Y2JyX3JlcG8vMS8yM0VDRDREMUFGODhDRTJFMUIzREY2REY4N0ZDNzZDQzE1N0Ew N0MxLmNlcjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzov L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg1czF4QkV0eDhCR1N2NndQSE5w YnlyMkxwWFhwUENHa3RIaUp2WXV4Mjd0LzEvMjNFQ0Q0RDFBRjg4Q0UyRTFCM0RG NkRGODdGQzc2Q0MxNTdBMDdDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADHRHzP96+q80S7qSR0blcxn YgQBDP22q0Z7l2kHFqA6vUgGNSqdoNIfFqA+U7IVDH67g7+IM8UOa5tONUKamzOU vrvJvJ3tNfGOw3SUbj5QXMST5gpE7hzxmlq+58/Qx9uxtVMROME51avuCLebutoG nIFffCCF7NksnrsfsLGhgNSjShXb86go131h0ptFBQzT9s7rYHHElr9c8XGsPZDw /Df9Vu+XkN3tCzRNuwRhXtbSUTg8lo5trBN6mTgiC+CsHOBQ+H52lxnxt53Mw+Cn z+vdtUKkSpWTBlV9jS8902/UuNgdYKjGsQG0Q2wl6Od3FgqtFMmvRwoequ2ou+M= -----END CERTIFICATE-----Generated at Mon Jun 30 05:04:43 2025 by rpki-client