$ rpki-client -vvf rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft File: D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft (raw, json) Hash identifier: hrnICZRNcBzX7WAeHtm+anGqOSeI2Qg1lGzRl6DGu1o= Subject key identifier: 1D:4F:3D:68:87:B6:FD:14:AD:FA:97:A9:AD:12:6A:DD:17:3D:79:A7 Authority key identifier: D6:30:86:E4:2E:9B:AB:A0:28:DC:D8:D6:5C:FF:50:CE:EF:BD:78:DC Certificate issuer: /CN=D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC Certificate serial: 227287B920B09B4F01BFD119BA9951A6E327B235 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer Subject info access: rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft Manifest number: 025A Signing time: Sun 29 Jun 2025 13:14:13 +0000 Manifest this update: Sun 29 Jun 2025 13:09:13 +0000 Manifest next update: Mon 30 Jun 2025 14:06:13 +0000 Files and hashes: 1: 3139312e362e3134342e302f32312d3234203d3e20323633303731.roa (hash: 3z/seUfwbtY8VHvQVEp/hjesW7X+hzHuxNmo8T4n9yI=) 2: 323830343a3934633a3a2f33322d3438203d3e20323633303731.roa (hash: a+ZxC/aVIvRBiL+9b6UmCNXG86FPx17UdrDq464ohKI=) 3: 3137372e37332e35362e302f32322d3234203d3e20323633303731.roa (hash: 0DCCZJbrhxGS3fKPi1a5Yh23caoQ1m2nGZ+Ls0nr36Y=) 4: 3138362e3233322e3138382e302f32322d3234203d3e20323633303731.roa (hash: QZ++cLr6ePWgalsSJXAkh2lAerAWd1JhyTtP73I1+S8=) 5: D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl (hash: nttp3WpcSDPSqLZ0k3cxI1wYBxXnxYN+7zxmTLhwmvY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 14:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:72:87:b9:20:b0:9b:4f:01:bf:d1:19:ba:99:51:a6:e3:27:b2:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC Validity Not Before: Jun 29 13:09:13 2025 GMT Not After : Jun 30 14:06:13 2025 GMT Subject: CN=1D4F3D6887B6FD14ADFA97A9AD126ADD173D79A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9d:26:44:90:6c:13:33:a1:41:f5:17:d4:8f: 95:1b:40:79:46:d0:2c:f8:17:f2:1d:3c:e6:1d:7d: fc:df:9c:d2:e0:a4:2b:b6:ef:75:6c:10:e1:e3:fd: 44:15:c2:4d:63:f9:d1:a0:fb:fc:57:bc:87:f7:6f: f6:97:e6:82:20:30:bc:3d:93:c4:15:7b:9d:c6:d8: 0d:65:d1:69:e8:5b:f7:4e:8e:73:d8:d8:1a:68:b8: eb:bd:ba:1a:7c:92:0d:bd:4f:ba:d2:cb:f9:fc:d3: 45:c0:b2:b0:71:b8:18:6f:6a:77:2c:9f:44:20:9b: 0d:f0:b7:09:1c:30:ab:67:7e:38:f9:15:dc:1a:13: bb:77:52:40:d1:9e:35:0b:87:32:31:21:45:8b:38: 81:5a:1b:d5:63:59:d2:ed:91:1e:31:14:c8:e7:19: 6c:32:c0:5c:49:eb:7d:2f:70:e8:0f:03:45:50:d1: 68:85:9e:50:63:c9:7d:51:50:f9:89:65:c1:92:e8: 3f:96:43:10:b8:66:a6:fd:50:8a:d0:70:d6:d6:d9: 93:05:62:be:8c:74:c1:b0:11:8e:cf:79:ed:59:29: 8b:25:b2:bb:fd:b4:79:05:0f:91:26:c6:a4:f9:e4: 9b:d0:55:73:7e:a3:c8:f7:b1:7f:cd:e5:5e:b9:24: 50:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4F:3D:68:87:B6:FD:14:AD:FA:97:A9:AD:12:6A:DD:17:3D:79:A7 X509v3 Authority Key Identifier: keyid:D6:30:86:E4:2E:9B:AB:A0:28:DC:D8:D6:5C:FF:50:CE:EF:BD:78:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2QrZbQL8vmDvr2Gf1NNqSYDXJ8oAqCwgBa1231HneSM/1/D63086E42E9BABA028DCD8D65CFF50CEEFBD78DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:60:5b:bd:81:bb:09:21:9e:e2:cb:e8:51:f5:13:1f:04:d1: 3e:7a:3e:1e:d7:c6:7c:a2:cf:4b:2c:13:09:cc:fc:84:bf:70: 25:fe:8b:16:92:51:2d:0a:d3:20:b9:f6:eb:43:6c:37:ac:a4: d8:e7:5f:14:03:b7:72:79:6c:36:e4:a8:b2:90:f3:06:29:86: 14:a5:c0:8c:75:63:4a:7c:83:8c:f1:1d:52:77:0d:a6:94:31: 36:64:4d:56:cb:86:ce:61:64:3b:cd:c3:16:10:c5:12:bd:e0: 3d:b8:24:1e:2d:ab:82:d4:ec:2d:f5:5c:bf:e7:b8:be:65:71: 42:a4:6c:a4:83:67:05:31:13:fd:a4:1b:3d:e0:ca:89:2b:bf: a8:59:e2:f4:90:57:f0:92:09:d2:10:a5:22:61:b4:b7:49:ad: d4:65:3d:cb:84:e9:9a:e8:7c:5d:fe:08:4e:0c:2d:45:6d:64: 47:e9:c6:a3:0c:f8:69:c0:ff:6d:1b:77:32:40:e1:c4:92:df: 85:91:8b:e3:33:b4:16:11:b4:b2:20:3c:31:6b:dc:6c:d1:73: 31:6a:8b:70:29:8d:20:e9:df:64:cb:c6:bf:5a:50:70:27:1d: f5:db:ec:90:1b:24:e6:f5:15:92:16:5e:72:d2:af:91:74:51: f7:52:17:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUInKHuSCwm08Bv9EZuplRpuMnsjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYzMDg2RTQyRTlCQUJBMDI4RENEOEQ2NUNGRjUwQ0VF RkJENzhEQzAeFw0yNTA2MjkxMzA5MTNaFw0yNTA2MzAxNDA2MTNaMDMxMTAvBgNV BAMTKDFENEYzRDY4ODdCNkZEMTRBREZBOTdBOUFEMTI2QUREMTczRDc5QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdnSZEkGwTM6FB9RfUj5UbQHlG 0Cz4F/IdPOYdffzfnNLgpCu273VsEOHj/UQVwk1j+dGg+/xXvIf3b/aX5oIgMLw9 k8QVe53G2A1l0WnoW/dOjnPY2BpouOu9uhp8kg29T7rSy/n800XAsrBxuBhvancs n0Qgmw3wtwkcMKtnfjj5FdwaE7t3UkDRnjULhzIxIUWLOIFaG9VjWdLtkR4xFMjn GWwywFxJ630vcOgPA0VQ0WiFnlBjyX1RUPmJZcGS6D+WQxC4Zqb9UIrQcNbW2ZMF Yr6MdMGwEY7Pee1ZKYslsrv9tHkFD5EmxqT55JvQVXN+o8j3sX/N5V65JFATAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHU89aIe2/RSt+peprRJq3Rc9eacwHwYDVR0j BBgwFoAU1jCG5C6bq6Ao3NjWXP9Qzu+9eNwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzJRclpiUUw4dm1EdnIyR2YxTk5xU1lEWEo4b0FxQ3dnQmExMjMxSG5l U00vMS9ENjMwODZFNDJFOUJBQkEwMjhEQ0Q4RDY1Q0ZGNTBDRUVGQkQ3OERDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2MzA4NkU0MkU5QkFCQTAy OERDRDhENjVDRkY1MENFRUZCRDc4REMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzJRclpiUUw4dm1EdnIyR2YxTk5xU1lEWEo4b0FxQ3dnQmExMjMxSG5lU00vMS9E NjMwODZFNDJFOUJBQkEwMjhEQ0Q4RDY1Q0ZGNTBDRUVGQkQ3OERDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZWBbvYG7CSGe4svoUfUTHwTRPno+HtfGfKLPSywTCcz8hL9wJf6LFpJRLQrT ILn260NsN6yk2OdfFAO3cnlsNuSospDzBimGFKXAjHVjSnyDjPEdUncNppQxNmRN VsuGzmFkO83DFhDFEr3gPbgkHi2rgtTsLfVcv+e4vmVxQqRspINnBTET/aQbPeDK iSu/qFni9JBX8JIJ0hClImG0t0mt1GU9y4Tpmuh8Xf4ITgwtRW1kR+nGowz4acD/ bRt3MkDhxJLfhZGL4zO0FhG0siA8MWvcbNFzMWqLcCmNIOnfZMvGv1pQcCcd9dvs kBsk5vUVkhZectKvkXRR91IXLg== -----END CERTIFICATE-----Generated at Mon Jun 30 04:49:32 2025 by rpki-client