$ rpki-client -vvf rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft File: C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft (raw, json) Hash identifier: 9l0Y3BUqlIBBsxsnZDkMrHC5ssKfivzZwqE5yjJmTHA= Subject key identifier: 04:B0:54:A7:4A:47:9F:F8:C8:85:2A:8A:8A:3A:BC:87:C8:2A:40:AD Authority key identifier: C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88 Certificate issuer: /CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88 Certificate serial: 1050628C7495D0B5427965FFFA39DA5AB693FB54 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer Subject info access: rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft Manifest number: 0209 Signing time: Tue 01 Jul 2025 00:03:41 +0000 Manifest this update: Mon 30 Jun 2025 23:58:41 +0000 Manifest next update: Wed 02 Jul 2025 03:57:41 +0000 Files and hashes: 1: 34352e3136312e3133362e302f32322d3234203d3e20323638353433.roa (hash: +UWLRPcrCNkkl3d7+jayjTCSeAxunhCr55Vu+UR33iY=) 2: C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl (hash: fo/MLNj3dUpPLglbJRu7Q+7ny8vQkCexLluzNvboLe8=) 3: 323830343a353264303a3a2f33322d3438203d3e20323638353433.roa (hash: Qrd0JpxRdK63UXPHTnI5YXQzpZ6Yil2JDfrC15kjcbA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 03:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:50:62:8c:74:95:d0:b5:42:79:65:ff:fa:39:da:5a:b6:93:fb:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88 Validity Not Before: Jun 30 23:58:41 2025 GMT Not After : Jul 2 03:57:41 2025 GMT Subject: CN=04B054A74A479FF8C8852A8A8A3ABC87C82A40AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:04:c0:e1:82:5c:15:45:a7:09:94:74:f2:c9: c8:82:7f:71:9f:9a:70:e2:90:3e:96:bd:95:0b:67: ae:63:38:7b:69:ec:ab:b0:99:9a:4b:aa:6e:5d:1b: 35:39:4c:e1:bd:87:5a:a0:d2:61:bc:66:39:c7:08: 6a:f4:59:5f:66:98:9f:1d:d6:9d:ca:9e:ff:54:78: 6b:c3:b7:4e:09:a0:ff:14:bf:42:12:15:9c:ce:7b: 0d:bf:20:90:c8:18:73:49:b4:65:dd:02:d8:85:f0: 43:dc:a7:eb:5e:60:df:d0:ca:e9:53:85:2a:24:9d: b3:4f:76:08:48:f4:59:7f:6b:61:81:0b:ea:01:f7: 35:5b:2c:9c:5e:4a:01:1d:47:34:73:a5:3c:49:25: 2e:62:b5:ae:06:4c:2d:9b:82:86:70:a8:6f:06:6f: 8f:7b:91:e2:61:1e:4d:d1:47:74:a3:ad:44:ed:45: 45:be:b0:a5:ec:b6:54:65:22:db:13:f9:a4:01:a8: 5e:61:11:02:b3:eb:8e:9e:37:89:8d:c7:8a:6c:af: ae:1d:f0:ad:a3:94:15:f6:18:e3:56:b4:91:47:8a: 54:f4:c9:60:82:4f:64:b8:08:b4:23:30:8a:9e:34: 89:b0:a2:d6:dc:b0:19:12:34:6c:40:8f:54:2f:84: bf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B0:54:A7:4A:47:9F:F8:C8:85:2A:8A:8A:3A:BC:87:C8:2A:40:AD X509v3 Authority Key Identifier: keyid:C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:03:29:db:a5:12:47:b2:0a:53:8a:d4:11:6e:d4:88:97:13: c7:43:d8:18:c4:85:30:f9:66:20:70:43:de:b4:31:62:aa:3d: 12:ee:40:88:47:09:01:95:f4:9f:ed:41:7a:e0:59:37:b9:28: 5e:14:69:06:08:5b:04:2d:ca:bf:df:61:74:c8:0a:23:d6:b8: da:97:14:04:49:db:7f:be:7f:05:8c:f5:e2:7c:69:94:82:84: 0f:cf:d6:b3:b8:ab:42:6e:8e:52:c5:9d:1f:c5:b0:54:1f:f5: aa:30:52:be:e3:4a:b8:c7:52:00:4c:e3:1b:bd:29:67:28:0d: 5e:0d:17:5d:7b:97:a2:7c:f0:48:fd:3d:e8:e8:82:56:ac:af: b5:4a:22:7e:cb:f4:c1:76:3a:ac:94:df:e0:ae:5e:78:95:89: 3e:b1:ca:f9:81:5e:cd:74:8a:0e:8c:f9:16:b6:0b:02:3f:ad: 10:dd:09:9e:6f:00:30:98:71:24:7f:be:06:9a:3a:3f:25:65: fc:a1:71:30:6b:ee:86:12:fa:bc:66:54:37:8c:57:77:32:cf: b2:12:cf:52:57:87:9b:0d:86:33:60:6a:60:14:3e:91:36:98: de:9e:65:e1:4d:5e:84:d8:8c:c1:fe:ab:aa:0f:29:ad:40:c4: eb:65:b1:a1 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUEFBijHSV0LVCeWX/+jnaWraT+1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQjdDMUE1MkU3NUMwRDRCMzk0RTA5RkM2M0VBQ0ZG RDY5MkQ4ODAeFw0yNTA2MzAyMzU4NDFaFw0yNTA3MDIwMzU3NDFaMDMxMTAvBgNV BAMTKDA0QjA1NEE3NEE0NzlGRjhDODg1MkE4QThBM0FCQzg3QzgyQTQwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmBMDhglwVRacJlHTyyciCf3Gf mnDikD6WvZULZ65jOHtp7KuwmZpLqm5dGzU5TOG9h1qg0mG8ZjnHCGr0WV9mmJ8d 1p3Knv9UeGvDt04JoP8Uv0ISFZzOew2/IJDIGHNJtGXdAtiF8EPcp+teYN/QyulT hSoknbNPdghI9Fl/a2GBC+oB9zVbLJxeSgEdRzRzpTxJJS5ita4GTC2bgoZwqG8G b497keJhHk3RR3SjrUTtRUW+sKXstlRlItsT+aQBqF5hEQKz646eN4mNx4psr64d 8K2jlBX2GONWtJFHilT0yWCCT2S4CLQjMIqeNImwotbcsBkSNGxAj1QvhL/TAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUBLBUp0pHn/jIhSqKijq8h8gqQK0wHwYDVR0j BBgwFoAUwst8GlLnXA1LOU4J/GPqz/1pLYgwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby84V3RoTnNhcHRCc1BFRWU4YUxmeEhBeWFTeEFublQ5eXVXZWdIU2RITVZN LzAvQzJDQjdDMUE1MkU3NUMwRDRCMzk0RTA5RkM2M0VBQ0ZGRDY5MkQ4OC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DMkNCN0MxQTUyRTc1QzBENEIz OTRFMDlGQzYzRUFDRkZENjkyRDg4LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhX dGhOc2FwdEJzUEVFZThhTGZ4SEF5YVN4QW5uVDl5dVdlZ0hTZEhNVk0vMC9DMkNC N0MxQTUyRTc1QzBENEIzOTRFMDlGQzYzRUFDRkZENjkyRDg4Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA WQMp26USR7IKU4rUEW7UiJcTx0PYGMSFMPlmIHBD3rQxYqo9Eu5AiEcJAZX0n+1B euBZN7koXhRpBghbBC3Kv99hdMgKI9a42pcUBEnbf75/BYz14nxplIKED8/Ws7ir Qm6OUsWdH8WwVB/1qjBSvuNKuMdSAEzjG70pZygNXg0XXXuXonzwSP096OiCVqyv tUoifsv0wXY6rJTf4K5eeJWJPrHK+YFezXSKDoz5FrYLAj+tEN0Jnm8AMJhxJH++ Bpo6PyVl/KFxMGvuhhL6vGZUN4xXdzLPshLPUleHmw2GM2BqYBQ+kTaY3p5l4U1e hNiMwf6rqg8prUDE62WxoQ== -----END CERTIFICATE-----Generated at Tue Jul 1 20:14:07 2025 by rpki-client