$ rpki-client -vvf rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft File: 2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft (raw, json) Hash identifier: MwOJ2hEunt40d9AtCLQeE3uCvK3SQdBRxpqzR0eQDoM= Subject key identifier: 59:F8:FB:75:E9:12:F3:66:1D:09:62:CD:C3:35:49:E6:E3:CB:F5:B2 Authority key identifier: 2D:9C:53:D6:4D:9C:12:AB:17:AC:A8:6E:DB:3E:8D:34:8B:07:27:50 Certificate issuer: /CN=2D9C53D64D9C12AB17ACA86EDB3E8D348B072750 Certificate serial: 1F5B701BDCC71830C0C448843D78EB80798044FD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer Subject info access: rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft Manifest number: 59 Signing time: Wed 02 Jul 2025 15:53:24 +0000 Manifest this update: Wed 02 Jul 2025 15:48:24 +0000 Manifest next update: Thu 03 Jul 2025 17:52:24 +0000 Files and hashes: 1: 2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.crl (hash: X8Jo/ykC03lb4gxtACTKTRmmyBMbGg9iY3LS2CIp8vs=) 2: 323830343a373761343a3a2f33322d3332203d3e20323731313930.roa (hash: qsRafcjJj+s2kDsDgJnWZ0Q5nBOrLVcx6L+RmAUGULI=) 3: 3137392e34322e3132302e302f32322d3232203d3e20323731313930.roa (hash: TfAMHSXwbY24vrtPxRXAwD74fc6KDbIbnLsDTfBZHJM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.crl rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 17:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:5b:70:1b:dc:c7:18:30:c0:c4:48:84:3d:78:eb:80:79:80:44:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D9C53D64D9C12AB17ACA86EDB3E8D348B072750 Validity Not Before: Jul 2 15:48:24 2025 GMT Not After : Jul 3 17:52:24 2025 GMT Subject: CN=59F8FB75E912F3661D0962CDC33549E6E3CBF5B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6b:cb:18:95:2f:5d:f6:c5:ab:1a:0c:ac:33: 6c:d0:79:1a:61:91:13:2b:16:8f:7c:63:14:be:ba: 22:1c:81:d8:aa:79:e8:d2:ac:2e:c5:fb:5a:87:2e: ee:e7:f0:72:05:77:b6:84:72:17:3d:25:ba:32:f9: 07:e2:3d:33:66:a1:91:ca:fc:bd:14:87:a3:7d:59: 82:5e:72:d5:36:72:a0:1c:6a:c2:35:ea:ac:89:32: d7:7a:85:eb:b9:38:92:17:46:62:87:47:24:6c:3f: a9:77:52:0a:e9:92:4e:82:a4:0e:b7:d9:06:bd:a6: 90:10:c1:e5:7d:60:c6:5f:dd:eb:c4:24:c1:b1:a1: 6d:61:c1:a8:8e:38:00:f0:f5:40:a1:66:ad:02:dd: c4:9b:32:8d:8f:aa:02:77:8c:fe:73:94:34:6f:ee: 5f:38:84:ee:f7:a0:0c:c6:d2:b1:62:25:ae:50:8b: 7e:1b:f4:be:a5:d8:ac:5a:c6:98:4d:9e:af:0a:04: 1a:e7:d4:0d:5f:77:4b:86:da:3c:e5:22:9d:60:15: f1:c9:0b:a2:aa:3a:af:91:f0:ca:e2:f1:a5:65:0b: bd:14:d2:99:ca:ef:9f:3b:5d:16:4e:2c:f0:a0:a5: ce:d9:d5:bf:f0:64:73:c2:42:3b:38:55:86:f7:c2: c9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F8:FB:75:E9:12:F3:66:1D:09:62:CD:C3:35:49:E6:E3:CB:F5:B2 X509v3 Authority Key Identifier: keyid:2D:9C:53:D6:4D:9C:12:AB:17:AC:A8:6E:DB:3E:8D:34:8B:07:27:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:70:13:26:e6:a1:f6:e7:86:81:23:f7:8f:c9:8c:8b:f8:4a: 45:e9:0a:08:da:c5:4b:c3:4c:09:35:ef:1f:f2:53:34:bd:33: d1:6c:a0:89:fe:bc:dd:38:fb:15:62:fe:46:88:12:36:73:5b: c7:f2:1d:8a:97:c9:cb:04:05:1a:e7:66:8d:aa:2f:ca:11:d1: c7:dd:f8:e1:ac:fc:ed:32:ae:18:5c:f1:da:34:aa:47:4c:6a: 07:a0:35:69:e9:26:28:25:3c:db:a4:a7:b3:f5:b4:d9:12:12: 29:56:98:e8:14:c0:e0:0d:9e:34:93:c2:41:95:f0:b3:32:fa: 4a:8b:32:31:91:7c:c9:70:05:06:9e:9c:be:a7:2c:6b:95:0e: 94:80:92:7d:0e:43:47:38:28:93:c4:1c:cd:7e:b1:2d:12:4a: bc:1d:95:14:bc:5e:34:eb:9e:20:09:f6:45:be:47:33:d9:40: f9:64:bd:3e:8f:1b:bd:d8:cf:43:a2:bf:83:6a:b6:5b:0a:d1: 86:47:84:6d:47:53:56:5b:4d:56:2a:5f:76:6f:55:b1:67:de: e6:32:37:aa:50:ef:08:8e:8d:35:8c:a7:51:b8:7b:c9:e8:1d: a9:07:02:e6:6c:d9:47:71:72:00:38:45:3f:39:11:8a:64:8e: eb:2e:b4:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUH1twG9zHGDDAxEiEPXjrgHmARP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ5QzUzRDY0RDlDMTJBQjE3QUNBODZFREIzRThEMzQ4 QjA3Mjc1MDAeFw0yNTA3MDIxNTQ4MjRaFw0yNTA3MDMxNzUyMjRaMDMxMTAvBgNV BAMTKDU5RjhGQjc1RTkxMkYzNjYxRDA5NjJDREMzMzU0OUU2RTNDQkY1QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDia8sYlS9d9sWrGgysM2zQeRph kRMrFo98YxS+uiIcgdiqeejSrC7F+1qHLu7n8HIFd7aEchc9Jboy+QfiPTNmoZHK /L0Uh6N9WYJectU2cqAcasI16qyJMtd6heu5OJIXRmKHRyRsP6l3Ugrpkk6CpA63 2Qa9ppAQweV9YMZf3evEJMGxoW1hwaiOOADw9UChZq0C3cSbMo2PqgJ3jP5zlDRv 7l84hO73oAzG0rFiJa5Qi34b9L6l2KxaxphNnq8KBBrn1A1fd0uG2jzlIp1gFfHJ C6KqOq+R8Mri8aVlC70U0pnK7587XRZOLPCgpc7Z1b/wZHPCQjs4VYb3wsk/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWfj7dekS82YdCWLNwzVJ5uPL9bIwHwYDVR0j BBgwFoAULZxT1k2cEqsXrKhu2z6NNIsHJ1AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHF6Qjc2UkFHcGNRZnZwTDhKYlRKSlBZc3lBZTZVcHhSbWhTYzRFSlVa bncvMC8yRDlDNTNENjREOUMxMkFCMTdBQ0E4NkVEQjNFOEQzNDhCMDcyNzUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEOUM1M0Q2NEQ5QzEyQUIx N0FDQTg2RURCM0U4RDM0OEIwNzI3NTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHF6Qjc2UkFHcGNRZnZwTDhKYlRKSlBZc3lBZTZVcHhSbWhTYzRFSlVabncvMC8y RDlDNTNENjREOUMxMkFCMTdBQ0E4NkVEQjNFOEQzNDhCMDcyNzUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALnATJuah9ueGgSP3j8mMi/hKRekKCNrFS8NMCTXvH/JTNL0z0Wygif683Tj7 FWL+RogSNnNbx/IdipfJywQFGudmjaovyhHRx9344az87TKuGFzx2jSqR0xqB6A1 aekmKCU826Sns/W02RISKVaY6BTA4A2eNJPCQZXwszL6SosyMZF8yXAFBp6cvqcs a5UOlICSfQ5DRzgok8QczX6xLRJKvB2VFLxeNOueIAn2Rb5HM9lA+WS9Po8bvdjP Q6K/g2q2WwrRhkeEbUdTVltNVipfdm9VsWfe5jI3qlDvCI6NNYynUbh7yegdqQcC 5mzZR3FyADhFPzkRimSO6y60/g== -----END CERTIFICATE-----Generated at Wed Jul 2 19:10:57 2025 by rpki-client