$ rpki-client -vvf rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft File: 2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft (raw, json) Hash identifier: mbRWGwtLyWcEmbjssKuQ9qT3DkWQW0ZcDIExeTeSO4c= Subject key identifier: 91:3E:AD:DE:F0:57:2F:D9:C3:0F:B8:56:8F:99:5E:EE:0F:6D:D3:8B Authority key identifier: 2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47 Certificate issuer: /CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647 Certificate serial: 120333FDE2BC09012AAECC267699E078EF3356E8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer Subject info access: rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft Manifest number: 020E Signing time: Mon 30 Jun 2025 05:06:36 +0000 Manifest this update: Mon 30 Jun 2025 05:01:36 +0000 Manifest next update: Tue 01 Jul 2025 08:30:36 +0000 Files and hashes: 1: 2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl (hash: dST3DPAo3G/5FqxF0EWGSed+794FqjWU2xGNDWS824o=) 2: 3230302e33392e34392e302f32342d3234203d3e20323731353234.roa (hash: KleVsHAqtvWr8k2742HawWCdXqH/hhdJzyliz+AilX4=) 3: 3230302e33392e34382e302f32322d3232203d3e20323731353234.roa (hash: Vp+ej4dQx+65lyUdgAHuPgBaf+ucorRNSBDiDndfVME=) 4: 3230302e33392e35312e302f32342d3234203d3e20323731353234.roa (hash: 1IV3WY/QEAW1n1IWjg0tOjW5dO+ggc66oTNHEIV7TWI=) 5: 3230302e33392e34382e302f32342d3234203d3e20323731353234.roa (hash: 3Ffp5JJCiBJxBl96vfAKZjO3HJm6sYK5tARVTWZSBow=) 6: 323830343a376365303a3a2f33322d3333203d3e20323731353234.roa (hash: cexwvQVo5HooQieHGBIwzXZEIQLA1g0ov7qJ1ITQWNQ=) 7: 3230302e33392e35302e302f32342d3234203d3e20323731353234.roa (hash: z6AxAeBvuZkF2Hv3TgcmR5cniDfzlrMjmqRXv6n3fBs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 08:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:03:33:fd:e2:bc:09:01:2a:ae:cc:26:76:99:e0:78:ef:33:56:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647 Validity Not Before: Jun 30 05:01:36 2025 GMT Not After : Jul 1 08:30:36 2025 GMT Subject: CN=913EADDEF0572FD9C30FB8568F995EEE0F6DD38B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:14:49:d3:55:32:87:d5:0d:dc:92:57:c3:fc: f0:b8:72:87:11:54:8b:44:2f:9b:63:92:4a:d5:3b: 1b:e0:3a:f1:0b:78:22:8e:35:9c:56:f6:95:64:e4: 46:6c:75:19:27:d1:a5:c4:c9:c5:77:a9:df:e7:ca: 29:15:7a:e3:c1:b6:43:e2:ad:13:98:2d:da:17:92: a2:14:73:4d:bb:43:69:1f:a7:39:71:74:b7:0e:76: ab:1e:f6:08:f0:24:8b:e4:14:47:1e:34:3f:87:4b: d1:64:99:7b:c6:e0:99:6c:ef:5d:35:57:26:8a:f8: 50:09:12:33:3c:7e:d6:6d:fe:80:14:30:a0:a0:89: 85:17:a9:0f:b7:56:b2:52:91:31:3b:b1:56:ef:b1: 61:89:18:1e:52:24:6a:9b:7a:d7:58:fa:d7:21:be: cc:b6:3e:85:d7:80:c7:af:e4:0c:aa:5d:66:88:29: 5c:49:c3:40:18:30:8b:7c:cf:e5:6b:74:a1:ed:6b: f2:20:2a:28:12:a5:aa:5e:19:ff:b7:21:0f:6c:98: 5a:84:d7:a7:d1:00:12:ff:cb:aa:a9:5a:95:27:88: 39:be:fd:f4:d7:3f:19:ed:78:20:dd:4b:98:5b:53: 03:b0:49:1f:ae:65:11:02:e9:19:c7:12:09:03:bf: c9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3E:AD:DE:F0:57:2F:D9:C3:0F:B8:56:8F:99:5E:EE:0F:6D:D3:8B X509v3 Authority Key Identifier: keyid:2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:97:1a:b4:ae:1f:58:ae:7d:4a:f0:15:5d:2b:65:07:5b:46: 82:74:3f:8f:a2:e9:d1:b4:37:28:82:19:33:20:ef:fc:4a:f3: 71:1c:50:3f:e6:f1:96:e0:65:1e:f7:b6:a8:da:0d:4b:ef:ef: 44:d5:32:b9:b3:e2:6a:cd:e4:d3:dc:8c:4e:45:da:1c:e6:b2: b0:32:42:29:d6:15:f1:1e:3e:4a:fa:25:76:12:65:ca:f9:ec: e6:61:11:f6:ac:29:70:6a:36:7e:95:7e:9c:5b:0c:87:ae:9e: e4:80:5b:0d:61:17:0b:2f:03:96:1b:67:4f:4c:c8:95:6d:aa: de:02:7f:f1:2b:78:fc:3a:44:57:7b:40:08:91:23:95:7a:48: a1:7e:76:8e:65:ad:ee:ba:a9:ab:21:1b:9a:8b:f2:c1:0e:be: 9e:8e:8d:74:c8:50:ef:3c:02:7d:12:f1:96:cb:84:3f:7e:38: d7:6d:10:aa:90:f5:06:27:7c:6a:18:d1:19:3b:49:c1:7d:51: 0b:f3:36:05:16:5d:d6:3b:17:23:83:63:cf:dc:c3:5c:51:ea: bb:e4:13:71:30:21:a7:1a:d6:c4:75:07:bd:97:a2:f3:ef:5d: 57:15:51:bc:dc:be:71:31:c6:5d:06:5c:ea:67:31:62:c8:e6: 0c:74:0f:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEgMz/eK8CQEqrswmdpngeO8zVugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREOTdGNUU4NUQ1QTk1NzhFNzg5NDBDRkQ1QkFFREZC ODJFMDY0NzAeFw0yNTA2MzAwNTAxMzZaFw0yNTA3MDEwODMwMzZaMDMxMTAvBgNV BAMTKDkxM0VBRERFRjA1NzJGRDlDMzBGQjg1NjhGOTk1RUVFMEY2REQzOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6FEnTVTKH1Q3cklfD/PC4cocR VItEL5tjkkrVOxvgOvELeCKONZxW9pVk5EZsdRkn0aXEycV3qd/nyikVeuPBtkPi rROYLdoXkqIUc027Q2kfpzlxdLcOdqse9gjwJIvkFEceND+HS9FkmXvG4Jls7101 VyaK+FAJEjM8ftZt/oAUMKCgiYUXqQ+3VrJSkTE7sVbvsWGJGB5SJGqbetdY+tch vsy2PoXXgMev5AyqXWaIKVxJw0AYMIt8z+VrdKHta/IgKigSpapeGf+3IQ9smFqE 16fRABL/y6qpWpUniDm+/fTXPxnteCDdS5hbUwOwSR+uZREC6RnHEgkDv8ljAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkT6t3vBXL9nDD7hWj5le7g9t04swHwYDVR0j BBgwFoAULdl/XoXVqVeOeJQM/Vuu37guBkcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2ZVVEdxUTI0YmNMcUNjQjkyOE15ZldBYkNrZFVreVV0WFB5RFhlQW0x b0IvMC8yREQ5N0Y1RTg1RDVBOTU3OEU3ODk0MENGRDVCQUVERkI4MkUwNjQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERDk3RjVFODVENUE5NTc4 RTc4OTQwQ0ZENUJBRURGQjgyRTA2NDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2ZVVEdxUTI0YmNMcUNjQjkyOE15ZldBYkNrZFVreVV0WFB5RFhlQW0xb0IvMC8y REQ5N0Y1RTg1RDVBOTU3OEU3ODk0MENGRDVCQUVERkI4MkUwNjQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOZcatK4fWK59SvAVXStlB1tGgnQ/j6Lp0bQ3KIIZMyDv/ErzcRxQP+bxluBl Hve2qNoNS+/vRNUyubPias3k09yMTkXaHOaysDJCKdYV8R4+SvoldhJlyvns5mER 9qwpcGo2fpV+nFsMh66e5IBbDWEXCy8DlhtnT0zIlW2q3gJ/8St4/DpEV3tACJEj lXpIoX52jmWt7rqpqyEbmovywQ6+no6NdMhQ7zwCfRLxlsuEP344120QqpD1Bid8 ahjRGTtJwX1RC/M2BRZd1jsXI4Njz9zDXFHqu+QTcTAhpxrWxHUHvZei8+9dVxVR vNy+cTHGXQZc6mcxYsjmDHQPvQ== -----END CERTIFICATE-----Generated at Mon Jun 30 10:16:10 2025 by rpki-client