$ rpki-client -vvf rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft File: 1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft (raw, json) Hash identifier: qgtAIadXZ6CosM7YnNZT5hTtSGcn3ADBvEYxpnRfRso= Subject key identifier: F3:61:7E:E5:E8:74:1E:97:DC:33:32:4D:45:F7:75:57:16:C4:E2:B9 Authority key identifier: 1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD Certificate issuer: /CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD Certificate serial: 61213130BB30CE8C45C81B745148CB86CBDDDD82 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer Subject info access: rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft Manifest number: 01BE Signing time: Tue 01 Jul 2025 16:07:01 +0000 Manifest this update: Tue 01 Jul 2025 16:02:01 +0000 Manifest next update: Wed 02 Jul 2025 19:28:01 +0000 Files and hashes: 1: 323830343a373538383a3a2f33322d3334203d3e20323731303533.roa (hash: nnZxddMxtPYXvLGrokRo727KDyxmpu+gR99v39ppU0Y=) 2: 1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl (hash: 7JeJWTddPgtivfU66FsyOR99bWq+/WChiKA0IMdzxkU=) 3: 3137372e37342e3136342e302f32322d3234203d3e20323731303533.roa (hash: 1ew1bHxThQo4THso1qqJCsLamw7MZPbnuhFWOIDRY9s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 19:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:21:31:30:bb:30:ce:8c:45:c8:1b:74:51:48:cb:86:cb:dd:dd:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD Validity Not Before: Jul 1 16:02:01 2025 GMT Not After : Jul 2 19:28:01 2025 GMT Subject: CN=F3617EE5E8741E97DC33324D45F7755716C4E2B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2a:7b:f5:37:7c:fa:14:8e:71:e8:a3:4f:0a: cd:4b:df:04:4b:96:bd:4e:57:7a:cf:2e:ba:0a:fc: 4c:09:fa:4c:4c:11:75:c7:52:56:7a:44:9d:5c:8f: 5a:0d:c8:ab:42:e4:8e:a3:03:f6:1d:b8:e0:a5:c9: 05:74:69:aa:d8:e0:51:82:d7:99:ed:77:dd:11:b3: 4c:1c:4d:22:ec:45:e7:3d:17:ad:cb:d1:4e:d6:3e: ab:c2:c8:c3:50:f5:20:80:d9:fa:15:9f:0c:3f:7b: cc:39:70:06:d3:2f:02:e6:59:02:1d:b3:f1:da:ba: 03:06:6f:7e:34:24:c9:7e:57:28:91:db:9f:19:6b: ab:1f:d4:d4:04:a2:63:c8:19:42:be:57:b0:e7:70: 86:7e:b1:b0:c7:bc:ab:39:ce:87:2a:05:7c:61:a5: 9d:61:07:99:cd:66:16:32:96:cd:da:63:c1:b3:89: 8e:bd:f2:87:e2:e6:63:89:48:3a:74:fb:88:75:38: 3a:fa:51:d1:d4:7e:d6:69:3f:68:ce:a9:a3:9d:6a: 29:84:bf:de:85:fd:41:09:f1:57:04:ad:b9:42:de: f8:10:aa:a5:75:e0:7b:30:eb:95:6c:22:c1:b1:c5: c3:37:e5:fa:46:ff:71:9a:36:ee:ad:8f:42:2f:60: 67:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:61:7E:E5:E8:74:1E:97:DC:33:32:4D:45:F7:75:57:16:C4:E2:B9 X509v3 Authority Key Identifier: keyid:1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:14:79:28:a2:5f:cd:30:cd:d7:5b:72:cd:cd:07:24:b4:15: 22:23:b9:de:b7:fa:ed:7c:cf:e6:16:62:8f:97:e8:ef:49:4a: 29:bc:77:c0:09:23:f3:e3:37:f7:08:d9:a1:38:8d:4d:65:ad: 7e:ae:6b:fd:6f:8f:e3:77:86:66:9a:c7:fa:c4:7d:17:ab:42: bf:75:db:8a:a9:58:9d:97:23:91:1b:7b:af:e1:8c:5c:c8:ad: 79:2a:2e:80:9e:9d:68:ac:96:7b:66:7a:f9:8d:e6:0a:68:5b: 2f:d8:0c:44:cf:81:c7:09:98:a2:04:18:6b:d4:2c:57:b2:20: 20:49:9b:48:b7:38:2c:89:c2:a8:99:23:e7:4a:3f:86:a6:02: 2c:f6:e8:cd:76:66:6d:60:fb:a4:aa:1c:d4:1d:68:b1:80:ce: 18:7e:c5:36:14:c6:c9:01:6d:cb:5b:c2:f3:50:db:ca:af:7b: 9a:bb:e4:82:42:58:02:13:79:05:a0:8e:c3:2e:5a:11:ac:e8: b7:5c:83:a7:ea:57:2c:c4:90:df:70:1f:5b:f8:43:78:cb:22: cd:02:90:b3:2d:57:90:8c:37:6c:27:6c:d5:cc:0a:72:1d:e3: 32:94:a4:11:64:5c:97:2b:00:39:c4:7b:cd:c0:55:fa:01:e4: c8:2f:5d:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYSExMLswzoxFyBt0UUjLhsvd3YIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGQTUzRkQ3OTI4QzE3NUM3NDMyRTczREQxNDcyOTU1 RTVBMzVGRDAeFw0yNTA3MDExNjAyMDFaFw0yNTA3MDIxOTI4MDFaMDMxMTAvBgNV BAMTKEYzNjE3RUU1RTg3NDFFOTdEQzMzMzI0RDQ1Rjc3NTU3MTZDNEUyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgKnv1N3z6FI5x6KNPCs1L3wRL lr1OV3rPLroK/EwJ+kxMEXXHUlZ6RJ1cj1oNyKtC5I6jA/YduOClyQV0aarY4FGC 15ntd90Rs0wcTSLsRec9F63L0U7WPqvCyMNQ9SCA2foVnww/e8w5cAbTLwLmWQId s/HaugMGb340JMl+VyiR258Za6sf1NQEomPIGUK+V7DncIZ+sbDHvKs5zocqBXxh pZ1hB5nNZhYyls3aY8GziY698ofi5mOJSDp0+4h1ODr6UdHUftZpP2jOqaOdaimE v96F/UEJ8VcErblC3vgQqqV14Hsw65VsIsGxxcM35fpG/3GaNu6tj0IvYGdXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU82F+5eh0HpfcMzJNRfd1VxbE4rkwHwYDVR0j BBgwFoAUHPpT/XkowXXHQy5z3RRylV5aNf0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRmhnU2pLelRQUDN6eW16WWpEZzc0QXR0M2sxUzZpTUpia25zZHdDTnAx bVEvMC8xQ0ZBNTNGRDc5MjhDMTc1Qzc0MzJFNzNERDE0NzI5NTVFNUEzNUZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDRkE1M0ZENzkyOEMxNzVD NzQzMkU3M0REMTQ3Mjk1NUU1QTM1RkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RmhnU2pLelRQUDN6eW16WWpEZzc0QXR0M2sxUzZpTUpia25zZHdDTnAxbVEvMC8x Q0ZBNTNGRDc5MjhDMTc1Qzc0MzJFNzNERDE0NzI5NTVFNUEzNUZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlRR5KKJfzTDN11tyzc0HJLQVIiO53rf67XzP5hZij5fo70lKKbx3wAkj8+M3 9wjZoTiNTWWtfq5r/W+P43eGZprH+sR9F6tCv3XbiqlYnZcjkRt7r+GMXMiteSou gJ6daKyWe2Z6+Y3mCmhbL9gMRM+BxwmYogQYa9QsV7IgIEmbSLc4LInCqJkj50o/ hqYCLPbozXZmbWD7pKoc1B1osYDOGH7FNhTGyQFty1vC81Dbyq97mrvkgkJYAhN5 BaCOwy5aEazot1yDp+pXLMSQ33AfW/hDeMsizQKQsy1XkIw3bCds1cwKch3jMpSk EWRclysAOcR7zcBV+gHkyC9dWQ== -----END CERTIFICATE-----Generated at Tue Jul 1 20:43:12 2025 by rpki-client