$ rpki-client -vvf rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft File: DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft (raw, json) Hash identifier: OvEeXrCO2b+3PUchBuwxwSbyR42eakMIQ7Q9gJBY8WA= Subject key identifier: 1F:5B:F7:8F:AC:FD:9B:96:24:32:19:5B:C9:20:87:15:AC:53:51:99 Authority key identifier: DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7 Certificate issuer: /CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7 Certificate serial: 5A0C41EA03B6BE2EE4528F9934080B10D0D92CAF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer Subject info access: rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft Manifest number: 024D Signing time: Wed 02 Jul 2025 07:15:39 +0000 Manifest this update: Wed 02 Jul 2025 07:10:39 +0000 Manifest next update: Thu 03 Jul 2025 10:05:39 +0000 Files and hashes: 1: DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl (hash: d82vaRlMA/Vqq/ohoKVqmMlNZ4Mb25axQgIGv27NB/s=) 2: 3139312e3234332e34382e302f32322d3234203d3e20323633343935.roa (hash: 9SsdRo7F/WQKm+zUuXydKWyuBOs8eQuYsJD3wiY7ifQ=) 3: 323830343a313262633a3a2f33322d3438203d3e20323633343935.roa (hash: lJamWfGsgdftwb6MoUAW/t7o12xx87lvoGqpZkx6hgI=) 4: 3137302e3233332e37362e302f32322d3234203d3e20323633343935.roa (hash: Gwy9zblG706ghCX5/JVGDiaxPqAmIwnXEqUmjq1gI0c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 10:05:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:0c:41:ea:03:b6:be:2e:e4:52:8f:99:34:08:0b:10:d0:d9:2c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7 Validity Not Before: Jul 2 07:10:39 2025 GMT Not After : Jul 3 10:05:39 2025 GMT Subject: CN=1F5BF78FACFD9B962432195BC9208715AC535199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0e:82:6a:fa:43:8a:bd:2f:b4:96:f6:b1:4b: 9e:ac:b0:8a:53:54:d2:0a:22:1d:6d:68:99:11:65: 04:a7:95:a9:68:c7:c4:c2:9f:3b:dd:8f:f7:9b:b1: 0e:73:9c:10:fc:e8:4b:4b:85:85:ca:d5:9c:55:54: 1a:a8:cd:a9:d8:bf:46:73:b4:fc:35:ff:12:89:45: ab:55:de:71:e2:41:86:b9:88:a2:58:10:37:93:d7: 46:34:0e:76:fa:f7:90:bd:7e:42:be:90:72:7d:70: c9:5c:2f:2d:2a:df:ba:4e:5f:95:f1:9c:4a:6b:53: 38:f9:54:3b:7a:51:eb:49:ef:73:e6:54:a0:c2:54: 31:63:38:22:43:78:a5:0d:49:8a:e4:f0:a6:6d:ec: fa:25:65:52:3f:df:ec:6f:be:94:8a:41:6a:04:7d: e6:32:3a:0d:93:68:40:28:03:ed:be:c9:47:a1:83: 66:01:0f:1f:e9:25:18:e1:08:61:e8:8d:c1:93:82: 2d:08:6b:c0:ac:d5:c3:61:49:db:c7:6c:63:1f:30: 22:3c:fb:3e:b5:d8:1d:c8:3d:f8:42:c6:16:55:c5: 9b:6a:e4:28:4d:9a:28:ca:73:2d:ba:52:8b:c9:74: 7d:66:3f:f2:52:05:d2:8d:4b:83:1f:6a:6d:f6:4c: 1f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5B:F7:8F:AC:FD:9B:96:24:32:19:5B:C9:20:87:15:AC:53:51:99 X509v3 Authority Key Identifier: keyid:DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:bf:dc:35:25:d5:08:a3:af:9f:c2:82:4f:99:df:20:3c:ca: 4d:6c:4d:82:49:13:f9:ab:22:48:a7:3e:1d:b0:a7:a9:c7:59: ac:4d:a7:fa:a9:79:74:0b:44:11:38:f7:25:c9:18:63:d9:a4: c2:00:25:d0:f1:11:c3:d2:93:20:a3:d2:da:40:b0:2a:3d:6e: 9e:38:09:35:4e:84:46:ef:9f:1e:80:c9:d8:0a:3d:c3:31:fa: cc:a7:59:a9:94:4f:4f:b0:42:2e:03:f9:d1:e6:12:d5:df:b1: ec:27:a0:03:b6:8b:d8:9c:ff:8e:71:22:f8:6c:99:1b:61:28: 60:5f:cf:5d:fc:14:7b:a7:fc:b6:60:d9:af:11:07:c8:94:79: 3b:32:f5:53:44:27:fa:91:96:60:0c:04:59:fc:96:fc:c8:ec: ba:ea:2e:96:d8:ff:d5:88:c4:4b:f4:c3:2e:11:9c:53:e4:11: c0:2c:8d:51:bc:4d:58:db:7e:1b:fb:15:57:f8:ea:2e:df:d9: 64:93:b0:07:b2:30:ea:34:d6:66:b5:f5:0f:d0:2d:94:89:17: 6d:b6:12:30:4a:e7:7b:be:3b:da:bb:2c:01:2f:8a:34:32:d8: 05:51:b9:70:7a:4f:df:45:76:f3:d7:5f:99:c9:70:76:7c:cc: 9e:53:22:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWgxB6gO2vi7kUo+ZNAgLENDZLK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RkM1NjgwNUM3NjY3RTE4MDE4NTRCM0M3N0FEQ0I2 NEE2M0RENzAeFw0yNTA3MDIwNzEwMzlaFw0yNTA3MDMxMDA1MzlaMDMxMTAvBgNV BAMTKDFGNUJGNzhGQUNGRDlCOTYyNDMyMTk1QkM5MjA4NzE1QUM1MzUxOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiDoJq+kOKvS+0lvaxS56ssIpT VNIKIh1taJkRZQSnlalox8TCnzvdj/ebsQ5znBD86EtLhYXK1ZxVVBqozanYv0Zz tPw1/xKJRatV3nHiQYa5iKJYEDeT10Y0Dnb695C9fkK+kHJ9cMlcLy0q37pOX5Xx nEprUzj5VDt6UetJ73PmVKDCVDFjOCJDeKUNSYrk8KZt7PolZVI/3+xvvpSKQWoE feYyOg2TaEAoA+2+yUehg2YBDx/pJRjhCGHojcGTgi0Ia8Cs1cNhSdvHbGMfMCI8 +z612B3IPfhCxhZVxZtq5ChNmijKcy26UovJdH1mP/JSBdKNS4Mfam32TB/BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUH1v3j6z9m5YkMhlbySCHFaxTUZkwHwYDVR0j BBgwFoAU3k/FaAXHZn4YAYVLPHety2SmPdcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3VpeUJYV3BQVUhKenpQWjFCRWJTazZZQzJ1dEhOQWlTNXJFb1Vtb2Zp U1kvMC9ERTRGQzU2ODA1Qzc2NjdFMTgwMTg1NEIzQzc3QURDQjY0QTYzREQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFNEZDNTY4MDVDNzY2N0Ux ODAxODU0QjNDNzdBRENCNjRBNjNERDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3VpeUJYV3BQVUhKenpQWjFCRWJTazZZQzJ1dEhOQWlTNXJFb1Vtb2ZpU1kvMC9E RTRGQzU2ODA1Qzc2NjdFMTgwMTg1NEIzQzc3QURDQjY0QTYzREQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALb/cNSXVCKOvn8KCT5nfIDzKTWxNgkkT+asiSKc+HbCnqcdZrE2n+ql5dAtE ETj3JckYY9mkwgAl0PERw9KTIKPS2kCwKj1unjgJNU6ERu+fHoDJ2Ao9wzH6zKdZ qZRPT7BCLgP50eYS1d+x7CegA7aL2Jz/jnEi+GyZG2EoYF/PXfwUe6f8tmDZrxEH yJR5OzL1U0Qn+pGWYAwEWfyW/Mjsuuoultj/1YjES/TDLhGcU+QRwCyNUbxNWNt+ G/sVV/jqLt/ZZJOwB7Iw6jTWZrX1D9AtlIkXbbYSMErne7472rssAS+KNDLYBVG5 cHpP30V289dfmclwdnzMnlMiwA== -----END CERTIFICATE-----Generated at Wed Jul 2 21:22:23 2025 by rpki-client