$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft File: 2D59905C3FCA5BDA34D7101B088D80451D026C47.mft (raw, json) Hash identifier: Rhl9qQZWmoOIrt6FZH9s6SGwKSF3+BOC63LRJp1GS7I= Subject key identifier: 45:24:8D:42:12:8D:51:8E:2B:69:CD:2C:D4:DD:DA:ED:4D:12:CF:9C Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 Certificate issuer: /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Certificate serial: 525DFD78E64DA1E3DC4ED0ABCC9FEF6116A7CD64 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer Subject info access: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft Manifest number: 025A Signing time: Mon 30 Jun 2025 00:40:31 +0000 Manifest this update: Mon 30 Jun 2025 00:35:31 +0000 Manifest next update: Tue 01 Jul 2025 00:49:31 +0000 Files and hashes: 1: 2D59905C3FCA5BDA34D7101B088D80451D026C47.crl (hash: 0WiofZmb5sprZgYtkadvqGbNZjUNz5DCzLYAPHksRYU=) 2: 323830343a323439633a3a2f33322d3438203d3e20323634323333.roa (hash: NawnnPEHbMCtTiXRZuqs51ycbe695zSEZpiIfj2SEO8=) 3: 3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa (hash: zTSSMFG/lgVqOaFeXf9pCktuzCsj0jIoIIi1uaEYa0I=) 4: 3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa (hash: GZELRNfuplahvPNzTKoCXKCGe7m/TvcDFJFlJBobK9k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 00:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:5d:fd:78:e6:4d:a1:e3:dc:4e:d0:ab:cc:9f:ef:61:16:a7:cd:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Validity Not Before: Jun 30 00:35:31 2025 GMT Not After : Jul 1 00:49:31 2025 GMT Subject: CN=45248D42128D518E2B69CD2CD4DDDAED4D12CF9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8b:8e:86:7c:c2:67:1e:17:6e:97:60:2e:9c: 26:32:fd:b4:4d:61:33:3e:26:e0:6d:ab:ab:c0:a7: 75:dc:32:9e:7d:67:fa:e0:b0:73:76:ee:29:2e:d2: 79:0e:53:b8:8a:a4:bd:e8:eb:87:c3:36:7b:26:b3: b8:f8:8d:f3:57:26:26:5b:dd:dc:9f:95:a5:28:2b: 82:42:13:d0:cb:15:87:a8:82:d0:de:84:5f:76:0f: 25:20:02:21:cd:8f:41:af:15:c0:fa:b8:47:a5:fa: 52:61:75:a0:0e:3b:d4:65:ad:ee:14:53:44:fb:42: 74:5e:00:c3:a7:67:ec:ff:8e:cb:38:c0:e8:ea:fc: 8f:31:c6:de:d4:60:94:4c:e4:e1:05:69:f0:02:30: 69:2f:51:8d:b7:e7:c8:6a:a8:12:6a:7a:4d:c4:5b: 74:bc:1a:60:55:d7:1a:3b:b5:e8:0f:f9:78:fb:a6: 4d:6a:f4:1c:f1:cb:4d:10:78:9b:0d:76:07:87:18: ac:b8:2a:20:81:46:21:48:30:db:49:e9:3e:29:69: 97:d0:0d:6b:0c:6e:e2:4c:12:e4:38:cb:24:68:be: 28:1b:55:4b:f6:b1:db:d8:74:77:a5:3b:b9:4e:72: 79:11:b3:1a:c1:1e:07:64:e1:ab:cc:bb:5e:3c:f4: fa:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:24:8D:42:12:8D:51:8E:2B:69:CD:2C:D4:DD:DA:ED:4D:12:CF:9C X509v3 Authority Key Identifier: keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:0a:27:6c:c4:87:ba:80:2a:18:3f:6f:f3:fb:ff:81:7c:27: d0:6c:e4:27:da:30:bf:01:ae:a9:f4:5b:fb:ee:25:53:33:e7: 37:97:a0:ee:4f:76:af:1c:07:68:2f:10:ef:01:ec:a2:4b:11: 7d:32:92:aa:02:09:cb:52:df:44:41:29:79:34:f2:0f:ad:55: bb:9c:02:9f:06:bd:60:0d:2b:87:8a:ac:33:98:3e:fe:2c:43: bd:be:73:2c:c1:38:cc:5d:1b:fb:33:76:9a:5b:ae:df:f5:71: e2:1e:c9:48:bf:34:9e:09:09:0e:85:6f:c2:56:2a:94:8d:f4: be:fe:01:df:15:42:0c:df:fb:39:a2:0b:81:5d:57:03:d9:82: 09:ee:25:44:b0:ea:0a:87:d2:03:99:ef:ca:9b:90:d4:42:69: ad:5f:82:a2:22:c1:6a:62:35:db:38:bf:e6:40:63:3d:d0:7c: e3:dd:c0:ba:93:15:17:c7:39:1b:34:59:5c:16:75:47:8b:fe: a1:4a:23:b1:f5:64:ec:46:68:84:9b:9b:3a:30:12:e3:b9:0f: e0:57:30:e1:37:e6:7b:50:0a:24:7c:f7:d8:d3:ff:4f:50:0a: aa:79:f4:25:0b:7a:8b:be:d0:09:11:4e:0c:7a:b0:bd:ac:e0: c7:a5:e6:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUl39eOZNoePcTtCrzJ/vYRanzWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1OTkwNUMzRkNBNUJEQTM0RDcxMDFCMDg4RDgwNDUx RDAyNkM0NzAeFw0yNTA2MzAwMDM1MzFaFw0yNTA3MDEwMDQ5MzFaMDMxMTAvBgNV BAMTKDQ1MjQ4RDQyMTI4RDUxOEUyQjY5Q0QyQ0Q0REREQUVENEQxMkNGOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4i46GfMJnHhdul2AunCYy/bRN YTM+JuBtq6vAp3XcMp59Z/rgsHN27iku0nkOU7iKpL3o64fDNnsms7j4jfNXJiZb 3dyflaUoK4JCE9DLFYeogtDehF92DyUgAiHNj0GvFcD6uEel+lJhdaAOO9Rlre4U U0T7QnReAMOnZ+z/jss4wOjq/I8xxt7UYJRM5OEFafACMGkvUY2358hqqBJqek3E W3S8GmBV1xo7tegP+Xj7pk1q9Bzxy00QeJsNdgeHGKy4KiCBRiFIMNtJ6T4paZfQ DWsMbuJMEuQ4yyRovigbVUv2sdvYdHelO7lOcnkRsxrBHgdk4avMu1489PrjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURSSNQhKNUY4rac0s1N3a7U0Sz5wwHwYDVR0j BBgwFoAULVmQXD/KW9o01xAbCI2ARR0CbEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5 QUgvMS8yRDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENTk5MDVDM0ZDQTVCREEz NEQ3MTAxQjA4OEQ4MDQ1MUQwMjZDNDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5QUgvMS8y RDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjAonbMSHuoAqGD9v8/v/gXwn0GzkJ9owvwGuqfRb++4lUzPnN5eg7k92rxwH aC8Q7wHsoksRfTKSqgIJy1LfREEpeTTyD61Vu5wCnwa9YA0rh4qsM5g+/ixDvb5z LME4zF0b+zN2mluu3/Vx4h7JSL80ngkJDoVvwlYqlI30vv4B3xVCDN/7OaILgV1X A9mCCe4lRLDqCofSA5nvypuQ1EJprV+CoiLBamI12zi/5kBjPdB8493AupMVF8c5 GzRZXBZ1R4v+oUojsfVk7EZohJubOjAS47kP4Fcw4Tfme1AKJHz32NP/T1AKqnn0 JQt6i77QCRFODHqwvazgx6XmBQ== -----END CERTIFICATE-----Generated at Mon Jun 30 13:44:14 2025 by rpki-client