$ rpki-client -vvf rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft File: 203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft (raw, json) Hash identifier: 2Bo96jyk/IGzN5AKNiOBbPUr2/ImNhxyHl/+z9vuYZQ= Subject key identifier: 33:50:B0:E3:E5:51:BF:B7:C2:CE:82:04:0A:78:73:FB:03:AD:7A:5A Authority key identifier: 20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7 Certificate issuer: /CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7 Certificate serial: 4A63C97AABB45830F22D26CDC78A7C94F56F2819 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer Subject info access: rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft Manifest number: 025D Signing time: Mon 30 Jun 2025 17:31:55 +0000 Manifest this update: Mon 30 Jun 2025 17:26:55 +0000 Manifest next update: Tue 01 Jul 2025 21:13:55 +0000 Files and hashes: 1: 3137372e35342e3234302e302f32312d3234203d3e20323632323939.roa (hash: zzuAYXVxZSPy90ckTABafh3wBDFSIA6yCF8t1bKcPTw=) 2: 3137372e35342e3234382e302f32312d3234203d3e20323632323939.roa (hash: J9JKS/uOVSTf4lxE2/X712ak1j9CChp3U8mi1+Az2NM=) 3: 203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl (hash: BDTy5qLbLlowRHVwtffbELq7k1OowsI4Ulu7yy5UtNw=) 4: 323830343a6138633a3a2f33322d3438203d3e20323632323939.roa (hash: EeO9rj+ZkVIkb2Nu0/KE+IFQ8hNAOE0eB+Vu/g/K8/8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 21:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:63:c9:7a:ab:b4:58:30:f2:2d:26:cd:c7:8a:7c:94:f5:6f:28:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7 Validity Not Before: Jun 30 17:26:55 2025 GMT Not After : Jul 1 21:13:55 2025 GMT Subject: CN=3350B0E3E551BFB7C2CE82040A7873FB03AD7A5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b7:3d:1b:31:dd:6b:8b:4a:1a:9b:4d:ca:9b: 1b:70:66:2c:7f:cc:a4:0f:a8:66:e1:de:97:fa:b9: c9:42:14:4d:7b:92:56:a2:45:7a:a3:2f:ac:8f:58: e9:20:65:21:18:82:ea:84:ac:14:3e:75:bd:2e:41: 7f:48:99:d5:75:32:12:ed:b8:1f:dc:b7:3c:5c:40: 05:c5:30:e9:31:de:81:60:0d:f8:37:c4:f5:ae:ca: 9e:28:92:d7:cd:5b:15:16:12:9a:ad:33:96:b6:1f: 4b:1d:0c:a2:fd:6c:f2:5e:e0:29:c2:2e:96:d3:c8: 58:82:74:90:f6:d0:4c:75:a7:52:4e:4e:a1:db:25: 44:46:ed:0e:d3:82:93:c3:7c:37:f6:75:5c:19:da: 68:ea:41:ee:19:02:ac:b3:e9:3e:f1:41:42:c1:a3: d1:5c:a1:91:68:a0:7f:87:f6:5c:b2:a9:18:07:20: 70:cf:b2:e7:fc:82:33:63:75:3b:b6:fa:0d:1b:b5: 74:80:32:42:8e:9b:30:16:08:93:60:1a:1a:3b:45: 0e:b2:46:a0:84:78:10:81:e6:7c:72:17:a2:fa:4c: 94:06:e4:2b:b7:47:02:2d:2f:24:56:10:2f:82:ba: e4:bd:95:27:11:e6:89:7f:4f:0c:d5:30:0f:9b:89: 2e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:50:B0:E3:E5:51:BF:B7:C2:CE:82:04:0A:78:73:FB:03:AD:7A:5A X509v3 Authority Key Identifier: keyid:20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c0:26:ac:bc:e7:63:0a:e9:05:e8:aa:91:03:2f:c8:36:5d: 24:09:41:97:b3:ec:7f:58:17:cc:a3:d1:81:86:03:34:ba:5d: eb:3e:7c:0b:2e:a3:28:74:9a:4d:fc:09:a3:60:04:ae:4d:53: ed:27:fd:b8:52:7e:bb:91:34:ab:06:e2:0c:90:d8:37:55:8c: 62:e7:af:0a:22:46:f0:dd:ae:9d:64:73:83:fb:6c:90:e4:9d: 95:1d:78:e3:de:ab:14:b5:00:08:6d:e4:3a:20:7d:15:fb:08: 67:ff:1e:cd:7a:3a:e3:86:65:fb:ba:05:cd:b0:92:6b:8c:f3: ae:f1:ed:13:c9:30:c5:46:9f:88:00:b8:91:9e:da:22:94:c8: 16:ff:8c:a3:5c:1e:62:0c:3c:f8:2a:33:3e:ff:e3:a4:35:4d: a4:2d:47:72:5a:27:ff:d4:c6:e3:9a:87:91:fc:2a:b4:52:b0: 50:96:6f:12:d7:d0:75:7d:76:64:1a:15:a3:40:e1:e0:a6:bd: dd:47:05:47:eb:1e:b3:5d:29:16:4e:59:4b:8c:ae:99:17:38: 7c:cd:87:7f:64:cc:99:60:ab:44:2b:b9:6d:01:43:90:fb:bd: 6d:9b:af:06:d9:b4:36:08:98:a9:12:e5:2c:04:b9:68:e0:b6: 19:32:b8:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSmPJequ0WDDyLSbNx4p8lPVvKBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAzRENDQTdERTc5QzhDNERBQkFBMTBBNkNBOUU5M0VB N0QzOURGNzAeFw0yNTA2MzAxNzI2NTVaFw0yNTA3MDEyMTEzNTVaMDMxMTAvBgNV BAMTKDMzNTBCMEUzRTU1MUJGQjdDMkNFODIwNDBBNzg3M0ZCMDNBRDdBNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwtz0bMd1ri0oam03KmxtwZix/ zKQPqGbh3pf6uclCFE17klaiRXqjL6yPWOkgZSEYguqErBQ+db0uQX9ImdV1MhLt uB/ctzxcQAXFMOkx3oFgDfg3xPWuyp4oktfNWxUWEpqtM5a2H0sdDKL9bPJe4CnC LpbTyFiCdJD20Ex1p1JOTqHbJURG7Q7TgpPDfDf2dVwZ2mjqQe4ZAqyz6T7xQULB o9FcoZFooH+H9lyyqRgHIHDPsuf8gjNjdTu2+g0btXSAMkKOmzAWCJNgGho7RQ6y RqCEeBCB5nxyF6L6TJQG5Cu3RwItLyRWEC+CuuS9lScR5ol/TwzVMA+biS6nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUM1Cw4+VRv7fCzoIECnhz+wOtelowHwYDVR0j BBgwFoAUID3Mp955yMTauqEKbKnpPqfTnfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BH U0UvMS8yMDNEQ0NBN0RFNzlDOEM0REFCQUExMEE2Q0E5RTkzRUE3RDM5REY3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwM0RDQ0E3REU3OUM4QzRE QUJBQTEwQTZDQTlFOTNFQTdEMzlERjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BHU0UvMS8y MDNEQ0NBN0RFNzlDOEM0REFCQUExMEE2Q0E5RTkzRUE3RDM5REY3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAMAmrLznYwrpBeiqkQMvyDZdJAlBl7Psf1gXzKPRgYYDNLpd6z58Cy6jKHSa TfwJo2AErk1T7Sf9uFJ+u5E0qwbiDJDYN1WMYuevCiJG8N2unWRzg/tskOSdlR14 496rFLUACG3kOiB9FfsIZ/8ezXo644Zl+7oFzbCSa4zzrvHtE8kwxUafiAC4kZ7a IpTIFv+Mo1weYgw8+CozPv/jpDVNpC1Hclon/9TG45qHkfwqtFKwUJZvEtfQdX12 ZBoVo0Dh4Ka93UcFR+ses10pFk5ZS4yumRc4fM2Hf2TMmWCrRCu5bQFDkPu9bZuv Btm0NgiYqRLlLAS5aOC2GTK4DQ== -----END CERTIFICATE-----Generated at Tue Jul 1 02:34:11 2025 by rpki-client