$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft File: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft (raw, json) Hash identifier: wi8rGZJmdmS2scQY0gEWoA1k+p0Rgprik9oWv/gIZ7c= Subject key identifier: 4D:6B:61:CD:F5:40:D0:1B:B7:C3:29:9C:8B:4D:F2:B9:02:92:55:A1 Authority key identifier: D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA Certificate issuer: /CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Certificate serial: 2B2AE86B798DD3C4B2D8E324607B85BBC354A51C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft Manifest number: 0250 Signing time: Wed 02 Jul 2025 15:40:11 +0000 Manifest this update: Wed 02 Jul 2025 15:35:11 +0000 Manifest next update: Thu 03 Jul 2025 17:35:11 +0000 Files and hashes: 1: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl (hash: PqYlfmSF7MTVtZ1CCHVEMjWwYaLnBjrHeFFK+qKb470=) 2: 3138372e3130392e38302e302f32302d3234203d3e203533313339.roa (hash: IQvjHctOgbHfUkTO0U34ErrEutSrCbjo/UK2hA9NLGA=) 3: 323830343a333164343a3a2f33322d3438203d3e203533313339.roa (hash: Tny32eTDORgq/MtVMRE6pvmeZrpwE0nT6BNCMfyIuNM=) 4: 3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa (hash: sPenw571n896sllNaEQg92EoBX7mLS0ivDvfDaPaky8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 17:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:2a:e8:6b:79:8d:d3:c4:b2:d8:e3:24:60:7b:85:bb:c3:54:a5:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Validity Not Before: Jul 2 15:35:11 2025 GMT Not After : Jul 3 17:35:11 2025 GMT Subject: CN=4D6B61CDF540D01BB7C3299C8B4DF2B9029255A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ad:f5:28:bd:29:73:4c:1a:33:f2:ec:09:92: 95:46:d5:14:d2:f6:77:1c:cb:0c:32:0d:bf:d9:2e: b4:0b:5c:be:02:0d:e7:99:1a:fd:40:89:b1:35:e9: 0c:34:8c:97:4d:64:35:e0:b6:61:04:88:35:83:7a: 98:fd:2b:4a:ed:79:07:56:4a:e2:bf:49:e7:8a:6d: 9f:d6:ac:c4:6f:55:a5:da:ee:6e:6a:d5:e3:4e:c5: 67:05:9f:8b:86:99:50:7a:a6:7a:49:c2:0f:f1:05: a0:ef:41:72:1b:77:55:e6:55:46:ab:a7:8f:0c:bb: c1:af:38:46:f0:d6:84:6d:7e:9d:27:8b:6a:b7:be: 70:36:62:29:df:5c:f1:68:4c:f9:c8:df:96:09:2d: 13:b5:05:8f:18:dd:5b:48:48:0a:08:09:fe:ed:16: da:bc:42:f1:93:6a:5c:7f:15:29:cc:f3:48:cb:61: bd:d9:34:f5:de:05:0f:f2:36:23:e5:41:af:a6:c2: 01:90:1b:c7:b3:cb:a3:31:3c:e6:c7:55:4c:20:bf: 2f:09:39:a2:c3:78:47:6d:c4:5d:f3:0a:2d:41:66: 0f:80:0e:1e:31:aa:a5:fb:8f:75:a1:77:77:f9:10: 02:f4:7e:a5:c0:9d:e3:7f:16:36:68:a9:90:63:d1: 5d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6B:61:CD:F5:40:D0:1B:B7:C3:29:9C:8B:4D:F2:B9:02:92:55:A1 X509v3 Authority Key Identifier: keyid:D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d6:bc:99:d2:eb:b8:2a:d9:f2:53:b9:93:ff:0e:86:8f:78: e1:a7:56:32:ba:4e:4a:ed:36:46:21:5c:9f:9b:85:66:57:93: f4:07:61:cc:47:a2:11:f1:c1:b0:39:dd:5a:1d:ea:b2:02:59: 05:63:f5:86:0e:72:93:4b:d5:89:89:1d:ac:23:4a:5e:b4:77: 23:1b:57:8d:2d:db:b9:c8:a4:60:85:ae:e6:de:48:42:22:e9: 52:31:52:9e:fb:eb:70:f7:7a:c7:14:34:e2:c9:20:d9:05:2e: f6:a2:96:89:97:79:03:eb:4d:ab:06:11:ba:6f:42:bd:c9:19: 56:79:a6:bf:93:e4:4f:13:5d:10:41:5a:46:fb:16:5c:5f:7a: 37:b7:cf:b6:58:c1:26:3f:92:58:c8:f9:f5:3e:aa:71:09:2c: 2f:af:45:77:25:9f:cd:c7:92:e9:9f:ab:db:fd:8a:18:4f:ff: 2a:a6:cb:e5:c2:73:d2:91:e5:46:6e:02:1a:82:5b:d7:2d:fa: 38:77:85:bd:e6:be:c0:1d:85:45:83:80:3f:f2:a3:58:c9:f3: 52:ce:a3:25:d8:57:7e:20:49:52:24:60:40:75:56:df:6b:9f: 7f:99:ae:bd:52:ec:39:58:c6:c7:73:e3:6b:71:05:1e:fa:34: c6:ea:b6:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKyroa3mN08Sy2OMkYHuFu8NUpRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNERGRjE5ODIyQzVCMjdDN0JDQzE2QkZEOEJFMkEz ODRGODlBQTAeFw0yNTA3MDIxNTM1MTFaFw0yNTA3MDMxNzM1MTFaMDMxMTAvBgNV BAMTKDRENkI2MUNERjU0MEQwMUJCN0MzMjk5QzhCNERGMkI5MDI5MjU1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzrfUovSlzTBoz8uwJkpVG1RTS 9nccywwyDb/ZLrQLXL4CDeeZGv1AibE16Qw0jJdNZDXgtmEEiDWDepj9K0rteQdW SuK/SeeKbZ/WrMRvVaXa7m5q1eNOxWcFn4uGmVB6pnpJwg/xBaDvQXIbd1XmVUar p48Mu8GvOEbw1oRtfp0ni2q3vnA2YinfXPFoTPnI35YJLRO1BY8Y3VtISAoICf7t Ftq8QvGTalx/FSnM80jLYb3ZNPXeBQ/yNiPlQa+mwgGQG8ezy6MxPObHVUwgvy8J OaLDeEdtxF3zCi1BZg+ADh4xqqX7j3Whd3f5EAL0fqXAneN/FjZoqZBj0V29AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTWthzfVA0Bu3wymci03yuQKSVaEwHwYDVR0j BBgwFoAU0iTf8ZgixbJ8e8wWv9i+KjhPiaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlW QXYvMS9EMjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyMjRERkYxOTgyMkM1QjI3 QzdCQ0MxNkJGRDhCRTJBMzg0Rjg5QUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlWQXYvMS9E MjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ9a8mdLruCrZ8lO5k/8Oho944adWMrpOSu02RiFcn5uFZleT9AdhzEeiEfHB sDndWh3qsgJZBWP1hg5yk0vViYkdrCNKXrR3IxtXjS3bucikYIWu5t5IQiLpUjFS nvvrcPd6xxQ04skg2QUu9qKWiZd5A+tNqwYRum9CvckZVnmmv5PkTxNdEEFaRvsW XF96N7fPtljBJj+SWMj59T6qcQksL69FdyWfzceS6Z+r2/2KGE//KqbL5cJz0pHl Rm4CGoJb1y36OHeFvea+wB2FRYOAP/KjWMnzUs6jJdhXfiBJUiRgQHVW32uff5mu vVLsOVjGx3Pja3EFHvo0xuq2EQ== -----END CERTIFICATE-----Generated at Thu Jul 3 00:13:23 2025 by rpki-client