$ rpki-client -vvf rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft File: 53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft (raw, json) Hash identifier: xkw3/FyjC5wifE0E5WHQaE4p4DIZvBH9b+FQotdX0W0= Subject key identifier: 2B:8B:9D:46:FD:DF:DC:CB:25:28:8B:AF:F1:4B:BB:58:3E:CA:43:E1 Authority key identifier: 53:EC:D4:D1:D2:93:60:3C:EC:43:C0:FB:8C:D7:8D:F9:CF:24:11:AA Certificate issuer: /CN=53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA Certificate serial: 7CE3CB053DA8BF12B24CEE085BB780F032F46CBA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft Manifest number: 023B Signing time: Tue 01 Jul 2025 03:43:33 +0000 Manifest this update: Tue 01 Jul 2025 03:38:33 +0000 Manifest next update: Wed 02 Jul 2025 06:09:33 +0000 Files and hashes: 1: 3137302e37382e3232382e302f32322d3234203d3e20323636323830.roa (hash: jSsiPpdfMJb1jXwIKkDoLy57dvL+Hy33DK8ZFCdBE1w=) 2: 323830343a333535303a3a2f33322d3336203d3e20323636323830.roa (hash: +nL7ybLpICw7PZ+2W5pi76/oLneSgE73RRDZtIzKVsE=) 3: 53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl (hash: Ous4foUl4CDAuGNh9gDy0RM7phn0sl8m5WvhcB7u7wE=) 4: 323830343a333535303a653030303a3a2f33362d3438203d3e20323636323830.roa (hash: //hWMDP3j37ixCtTNQwyZlAnS8v4oi3ZFATjNGsEs2w=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 06:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e3:cb:05:3d:a8:bf:12:b2:4c:ee:08:5b:b7:80:f0:32:f4:6c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA Validity Not Before: Jul 1 03:38:33 2025 GMT Not After : Jul 2 06:09:33 2025 GMT Subject: CN=2B8B9D46FDDFDCCB25288BAFF14BBB583ECA43E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6c:3f:09:a6:36:f4:c3:1f:c9:d7:45:f3:9f: cf:3c:5c:f5:72:db:f9:88:c8:4e:44:e7:55:f8:9f: 4b:81:68:b8:d2:7d:92:26:02:dd:4c:ca:18:67:54: ab:03:f5:20:1c:17:d5:ed:17:2d:e0:a5:0f:5e:bf: a2:6c:5f:63:c4:ac:f3:cd:55:e4:55:46:3d:e9:67: f5:f2:c8:76:64:04:ec:5e:cc:3f:f4:d7:6c:28:4d: 73:c0:9d:38:c6:5b:e1:2c:54:d8:1c:06:4d:2d:69: 62:ad:79:e5:bd:b1:b6:4b:f3:ca:1a:5b:60:70:fb: d9:d4:e7:56:74:d9:14:6e:0d:a9:16:f7:a0:f6:6c: a7:39:17:10:1b:94:50:d6:41:6a:a2:36:81:9a:aa: e6:f5:ce:d5:3d:bf:fd:85:4a:a0:82:1a:3f:ed:7c: 16:4a:25:99:df:02:5e:6c:1c:13:c9:52:7d:77:55: 7f:2d:bd:e8:72:33:b1:08:7d:48:91:a6:57:cd:83: 1e:64:cb:a0:56:aa:17:ab:cc:00:2b:92:1c:fa:fb: 34:7d:26:55:84:bc:cb:39:dd:49:29:eb:06:d9:b8: 74:18:86:e5:93:66:ac:1b:17:f2:ee:5b:56:e5:f1: fd:dd:5c:bf:c8:22:9c:b3:b6:8b:7a:88:22:1c:be: 62:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8B:9D:46:FD:DF:DC:CB:25:28:8B:AF:F1:4B:BB:58:3E:CA:43:E1 X509v3 Authority Key Identifier: keyid:53:EC:D4:D1:D2:93:60:3C:EC:43:C0:FB:8C:D7:8D:F9:CF:24:11:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVBH6GYgKFS7kDhEHF7aYsoFWuPNjj4mRGAR8pDkiw42/0/53ECD4D1D293603CEC43C0FB8CD78DF9CF2411AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6f:17:db:c2:7f:69:d5:90:e0:d9:fe:3f:00:7b:1c:7c:04: fa:12:e2:e9:df:68:f7:25:38:17:56:b0:14:35:8e:f3:98:df: 61:79:81:9a:12:d1:29:29:4b:d3:8f:b3:6c:e3:9d:0b:d6:1d: 83:1a:ce:8c:ad:1e:63:f1:20:9e:ba:6a:46:f2:33:6b:da:e9: 4a:c8:07:00:0e:21:8a:49:8a:4f:a9:cf:fb:72:e0:94:15:12: 70:a7:0d:96:69:14:2b:44:3c:c9:15:04:e1:1b:ad:16:bc:a2: eb:e1:c5:9b:b6:61:37:e7:2b:d9:71:48:17:a6:1e:b5:64:40: aa:c6:19:c1:62:f4:26:4a:06:8f:5b:e7:34:22:0a:10:88:05: 31:ef:2a:ba:9f:5d:3b:e2:2f:cf:c9:fa:e3:d5:e2:f8:02:0e: 08:12:af:46:67:7c:78:a0:0c:aa:0a:84:36:a8:f4:6a:c7:01: 42:48:8e:c9:f2:7d:dd:d2:a3:fa:49:c9:4b:ac:8d:0b:b6:6a: d7:ef:05:ca:af:b4:d8:c7:85:45:f3:04:ae:ca:96:40:23:e1: 25:14:51:da:ae:ef:bf:f6:c0:73:78:a2:d7:ef:dc:62:40:4b: 0d:09:23:2a:ac:b3:83:0d:5d:af:a1:eb:82:c0:3b:9b:31:e6: 50:c5:65:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfOPLBT2ovxKyTO4IW7eA8DL0bLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNFQ0Q0RDFEMjkzNjAzQ0VDNDNDMEZCOENENzhERjlD RjI0MTFBQTAeFw0yNTA3MDEwMzM4MzNaFw0yNTA3MDIwNjA5MzNaMDMxMTAvBgNV BAMTKDJCOEI5RDQ2RkRERkRDQ0IyNTI4OEJBRkYxNEJCQjU4M0VDQTQzRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYbD8Jpjb0wx/J10Xzn888XPVy 2/mIyE5E51X4n0uBaLjSfZImAt1MyhhnVKsD9SAcF9XtFy3gpQ9ev6JsX2PErPPN VeRVRj3pZ/XyyHZkBOxezD/012woTXPAnTjGW+EsVNgcBk0taWKteeW9sbZL88oa W2Bw+9nU51Z02RRuDakW96D2bKc5FxAblFDWQWqiNoGaqub1ztU9v/2FSqCCGj/t fBZKJZnfAl5sHBPJUn13VX8tvehyM7EIfUiRplfNgx5ky6BWqherzAArkhz6+zR9 JlWEvMs53Ukp6wbZuHQYhuWTZqwbF/LuW1bl8f3dXL/IIpyztot6iCIcvmK7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUK4udRv3f3MslKIuv8Uu7WD7KQ+EwHwYDVR0j BBgwFoAUU+zU0dKTYDzsQ8D7jNeN+c8kEaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVZCSDZHWWdLRlM3a0RoRUhGN2FZc29GV3VQTmpqNG1SR0FSOHBEa2l3 NDIvMC81M0VDRDREMUQyOTM2MDNDRUM0M0MwRkI4Q0Q3OERGOUNGMjQxMUFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzRUNENEQxRDI5MzYwM0NF QzQzQzBGQjhDRDc4REY5Q0YyNDExQUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVZCSDZHWWdLRlM3a0RoRUhGN2FZc29GV3VQTmpqNG1SR0FSOHBEa2l3NDIvMC81 M0VDRDREMUQyOTM2MDNDRUM0M0MwRkI4Q0Q3OERGOUNGMjQxMUFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmm8X28J/adWQ4Nn+PwB7HHwE+hLi6d9o9yU4F1awFDWO85jfYXmBmhLRKSlL 04+zbOOdC9YdgxrOjK0eY/EgnrpqRvIza9rpSsgHAA4hikmKT6nP+3LglBUScKcN lmkUK0Q8yRUE4RutFryi6+HFm7ZhN+cr2XFIF6YetWRAqsYZwWL0JkoGj1vnNCIK EIgFMe8qup9dO+Ivz8n649Xi+AIOCBKvRmd8eKAMqgqENqj0ascBQkiOyfJ93dKj +knJS6yNC7Zq1+8Fyq+02MeFRfMErsqWQCPhJRRR2q7vv/bAc3ii1+/cYkBLDQkj Kqyzgw1dr6HrgsA7mzHmUMVleQ== -----END CERTIFICATE-----Generated at Tue Jul 1 16:25:53 2025 by rpki-client