$ rpki-client -vvf rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft File: C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft (raw, json) Hash identifier: UkkWYycMdmRI+CnJvBpPIDT8gBt1EODa+MkgiHei5fE= Subject key identifier: AB:CF:E4:32:53:99:7D:A3:FC:BC:C2:CD:03:B9:98:19:10:98:51:D5 Authority key identifier: C1:1F:7C:20:B2:45:6B:A3:6E:BC:C8:92:70:AC:E9:76:DA:CF:C3:5C Certificate issuer: /CN=C11F7C20B2456BA36EBCC89270ACE976DACFC35C Certificate serial: 2C29FA2CC329F8A7207B934DD596581BDB25BCC5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer Subject info access: rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft Manifest number: 01D4 Signing time: Wed 02 Jul 2025 07:20:23 +0000 Manifest this update: Wed 02 Jul 2025 07:15:23 +0000 Manifest next update: Thu 03 Jul 2025 10:08:23 +0000 Files and hashes: 1: 323830343a313234303a3a2f33322d313238203d3e20323633343635.roa (hash: VmhohPCz9KS+aX0cz1omXVFO2DRFWZR9rKAG0HIoc2o=) 2: 3137372e3139302e3232342e302f32302d3332203d3e20323633343635.roa (hash: wKAb1UDvZiPDekR65fEEYenq6zheNgIFDzzMrJdoquA=) 3: C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl (hash: tR9DNk/MREZBq/3OYunaOY3piBZJRyiKjmoEBYI7s7I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 10:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:29:fa:2c:c3:29:f8:a7:20:7b:93:4d:d5:96:58:1b:db:25:bc:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C11F7C20B2456BA36EBCC89270ACE976DACFC35C Validity Not Before: Jul 2 07:15:23 2025 GMT Not After : Jul 3 10:08:23 2025 GMT Subject: CN=ABCFE43253997DA3FCBCC2CD03B99819109851D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cd:1b:2c:a0:8b:44:6f:0a:2e:37:36:d0:35: df:9f:0b:9e:f3:aa:46:28:ae:72:09:5d:76:c5:9b: 4c:f9:6b:9d:12:c4:1b:20:9e:28:ad:35:67:31:d2: 47:e5:1d:d5:02:58:1b:2e:d8:b9:25:85:de:a4:26: 60:66:4e:e9:3b:e1:e1:8d:a3:80:05:79:b4:7c:05: 62:a1:92:e7:bb:c7:87:0d:01:c0:f7:ff:b7:ac:27: ff:b0:93:9e:bc:c8:fd:db:4f:1d:46:2b:56:62:8d: 4b:d5:73:1c:dc:73:f3:51:d9:23:70:8f:b2:a7:dc: 5f:a6:67:18:10:6f:ad:09:41:c5:99:9b:8f:4b:10: 58:d4:5f:0f:72:0f:87:66:b6:da:5f:3d:5f:0f:02: b0:d3:65:0e:61:fe:50:7f:f9:12:7b:09:56:01:e4: 56:55:2d:b6:f0:ca:54:84:ab:37:73:78:f3:e9:81: ec:f0:95:9b:f4:ce:45:9b:7f:cd:1a:22:0b:b2:8b: b1:ab:22:13:56:4f:ab:93:4b:8c:64:24:9e:61:92: 68:e2:71:d4:51:29:88:64:85:6e:fa:ff:be:84:95: d9:ac:71:0d:4e:a1:f7:9c:6b:9b:61:7f:b6:18:05: 31:24:6e:83:31:cd:a4:20:fa:8e:ff:f0:e8:cc:54: 4e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CF:E4:32:53:99:7D:A3:FC:BC:C2:CD:03:B9:98:19:10:98:51:D5 X509v3 Authority Key Identifier: keyid:C1:1F:7C:20:B2:45:6B:A3:6E:BC:C8:92:70:AC:E9:76:DA:CF:C3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:4b:3a:69:89:a5:81:c1:75:8a:aa:de:f2:c1:99:9f:4c:88: 4f:96:c7:8e:13:a7:71:60:70:64:24:19:c9:13:18:f4:0e:91: a1:45:37:4e:cd:6b:85:cf:66:ac:5a:0c:c0:2b:e1:03:53:f2: 06:b0:7a:6a:65:51:30:9f:ee:27:d6:b2:e4:df:8e:b7:1b:ef: 0a:65:1f:1e:f9:b9:fd:7c:58:20:07:4c:61:93:d7:6a:aa:00: 59:ab:f5:3a:d8:0a:32:6c:56:e5:9b:56:1c:ae:95:c8:24:68: df:7a:c6:eb:ca:31:fe:33:7e:0d:8f:fa:73:81:f5:e7:ba:e2: 57:41:6d:ba:c9:ca:05:e3:88:2f:4f:8b:e4:71:4d:fc:a4:de: 85:98:60:93:6d:9e:20:65:23:27:5f:f6:2d:fb:af:51:92:6a: b1:ee:a5:a4:83:f8:9f:8c:5b:87:a5:47:f1:2a:55:42:8e:4d: 37:a9:95:25:1b:51:a2:fb:21:65:d5:c8:02:f7:05:bd:49:b9: 8e:cc:78:5c:f1:dd:53:88:ff:0b:39:d8:f1:9a:e8:47:9a:cc: f9:49:18:f8:61:f9:6e:de:a9:42:f3:00:39:d4:bb:1a:3d:87: 4b:dd:1b:d4:e0:40:84:77:56:61:df:fa:f0:c6:8e:a0:d3:d3: 16:e1:55:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULCn6LMMp+Kcge5NN1ZZYG9slvMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzExRjdDMjBCMjQ1NkJBMzZFQkNDODkyNzBBQ0U5NzZE QUNGQzM1QzAeFw0yNTA3MDIwNzE1MjNaFw0yNTA3MDMxMDA4MjNaMDMxMTAvBgNV BAMTKEFCQ0ZFNDMyNTM5OTdEQTNGQ0JDQzJDRDAzQjk5ODE5MTA5ODUxRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCizRssoItEbwouNzbQNd+fC57z qkYornIJXXbFm0z5a50SxBsgniitNWcx0kflHdUCWBsu2Lklhd6kJmBmTuk74eGN o4AFebR8BWKhkue7x4cNAcD3/7esJ/+wk568yP3bTx1GK1ZijUvVcxzcc/NR2SNw j7Kn3F+mZxgQb60JQcWZm49LEFjUXw9yD4dmttpfPV8PArDTZQ5h/lB/+RJ7CVYB 5FZVLbbwylSEqzdzePPpgezwlZv0zkWbf80aIguyi7GrIhNWT6uTS4xkJJ5hkmji cdRRKYhkhW76/76EldmscQ1Oofeca5thf7YYBTEkboMxzaQg+o7/8OjMVE6JAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUq8/kMlOZfaP8vMLNA7mYGRCYUdUwHwYDVR0j BBgwFoAUwR98ILJFa6NuvMiScKzpdtrPw1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjJqRVNGbTN5QzFYdU4yZnhZNlBQZkJNUUhzcFJEa2dNS3djd1R5aldV MksvMC9DMTFGN0MyMEIyNDU2QkEzNkVCQ0M4OTI3MEFDRTk3NkRBQ0ZDMzVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMUY3QzIwQjI0NTZCQTM2 RUJDQzg5MjcwQUNFOTc2REFDRkMzNUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RjJqRVNGbTN5QzFYdU4yZnhZNlBQZkJNUUhzcFJEa2dNS3djd1R5aldVMksvMC9D MTFGN0MyMEIyNDU2QkEzNkVCQ0M4OTI3MEFDRTk3NkRBQ0ZDMzVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhUs6aYmlgcF1iqre8sGZn0yIT5bHjhOncWBwZCQZyRMY9A6RoUU3Ts1rhc9m rFoMwCvhA1PyBrB6amVRMJ/uJ9ay5N+OtxvvCmUfHvm5/XxYIAdMYZPXaqoAWav1 OtgKMmxW5ZtWHK6VyCRo33rG68ox/jN+DY/6c4H157riV0FtusnKBeOIL0+L5HFN /KTehZhgk22eIGUjJ1/2LfuvUZJqse6lpIP4n4xbh6VH8SpVQo5NN6mVJRtRovsh ZdXIAvcFvUm5jsx4XPHdU4j/CznY8ZroR5rM+UkY+GH5bt6pQvMAOdS7Gj2HS90b 1OBAhHdWYd/68MaOoNPTFuFVYQ== -----END CERTIFICATE-----Generated at Wed Jul 2 19:40:24 2025 by rpki-client