$ rpki-client -vvf rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft File: 2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft (raw, json) Hash identifier: zGsYm0rjfZbbEdAkPl7UdmjWf3COgqemZXwd+393H78= Subject key identifier: A2:90:31:64:4E:2F:B7:1E:76:00:D3:A4:29:7F:EA:32:73:36:9B:2A Authority key identifier: 2A:A9:C0:C8:79:5C:1A:DD:1B:EE:9A:6C:17:22:3F:C7:CC:D4:C3:E3 Certificate issuer: /CN=2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3 Certificate serial: 2CBC59269FE8BA6906BA64C419A560FAA1B64135 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.cer Subject info access: rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft Manifest number: E0 Signing time: Mon 30 Jun 2025 08:08:53 +0000 Manifest this update: Mon 30 Jun 2025 08:03:53 +0000 Manifest next update: Tue 01 Jul 2025 11:08:53 +0000 Files and hashes: 1: 2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.crl (hash: 0UnqbW9M22Uj1uwgnZRwGtQc+S/yT1Qyld/sQ3C9zb8=) 2: 323830313a38303a323436303a3a2f34342d313238203d3e20323638343431.roa (hash: ZPSfVx1LgqAUvWD4JVlPK1AKbkJ6+EyPJ3Dbf/KroU0=) 3: 34352e3136302e37362e302f32332d3332203d3e20323638343431.roa (hash: op6z5zv5bXYx/GC1V945At+HHF1/DnboG7Nwmgwomqc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.crl rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 11:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:bc:59:26:9f:e8:ba:69:06:ba:64:c4:19:a5:60:fa:a1:b6:41:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3 Validity Not Before: Jun 30 08:03:53 2025 GMT Not After : Jul 1 11:08:53 2025 GMT Subject: CN=A29031644E2FB71E7600D3A4297FEA3273369B2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:4f:b8:23:f9:00:dc:0a:29:96:91:1b:49: cb:7e:63:92:d4:46:61:af:68:4b:e8:3e:aa:6d:9d: 80:ea:83:98:59:f6:f9:bc:ee:fb:d2:f5:d8:40:c8: 6c:fd:f3:a7:29:10:09:fd:fb:a8:47:9d:c6:11:fb: cc:92:0f:49:c7:2e:2b:cd:d7:8e:ba:03:04:ea:fa: b1:40:6c:81:13:7f:63:2e:bf:25:e1:8a:a3:56:c0: c2:29:57:91:ca:55:96:9e:0f:80:7b:de:53:01:51: bb:a6:51:15:84:d5:37:9a:1f:48:56:47:29:40:35: 02:f4:f6:d5:fc:72:35:f2:2f:e4:ee:9b:7f:2e:a0: e4:31:ed:f1:f6:0e:c8:8d:3b:41:66:17:e6:a9:e5: 4b:b2:58:90:74:75:cd:58:e9:b9:52:47:79:a8:00: 03:91:db:42:fb:71:71:25:2d:3a:0f:9e:3a:dc:bf: f6:6b:03:06:a3:a3:db:40:6c:e9:f3:ec:83:a0:32: 34:00:a7:30:5e:7d:ea:5a:c0:00:dc:38:a3:3a:d9: 91:89:1f:a8:36:17:ca:1c:80:74:8f:f2:15:af:f3: a0:aa:6a:59:80:8b:3e:b4:61:2f:1a:ed:3c:a8:06: 64:83:e4:db:46:de:62:fd:ab:e9:f6:90:3c:28:6e: d7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:90:31:64:4E:2F:B7:1E:76:00:D3:A4:29:7F:EA:32:73:36:9B:2A X509v3 Authority Key Identifier: keyid:2A:A9:C0:C8:79:5C:1A:DD:1B:EE:9A:6C:17:22:3F:C7:CC:D4:C3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJCusm1LTjde7t7vuR9A5RBQKJ4KDde6mYYUu9zhbtUi/0/2AA9C0C8795C1ADD1BEE9A6C17223FC7CCD4C3E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:52:da:ce:28:3c:a9:6d:ec:1d:37:ad:d3:35:d6:53:7c:13: 96:b9:bf:d0:51:09:45:a9:24:95:29:8b:42:40:fb:71:99:f2: e7:42:c0:e6:95:a7:2e:04:e9:13:3b:6f:bd:55:44:d8:1d:ba: 21:16:79:9c:ad:e5:fe:73:fa:94:23:33:82:37:2f:39:22:38: a5:14:b4:ec:52:58:e2:da:f9:e1:fe:2b:52:b7:3a:5c:c4:1f: d2:55:08:04:58:11:9e:0d:e3:50:f8:16:c6:d6:7a:cd:31:d4: 04:af:3c:71:23:d0:a9:8e:05:70:0d:9b:78:6e:4e:2d:79:56: 71:e0:c5:1b:06:28:79:f3:3a:77:5e:e7:5a:b7:6e:33:02:a7: b9:1d:2d:71:32:6a:f9:fb:b9:3b:5b:ba:44:e6:07:44:00:0c: 23:9f:ee:01:fb:8b:98:c7:ac:22:15:4c:9a:5d:02:32:29:2c: e8:a9:dd:ad:39:86:39:e2:61:00:fb:9f:ff:14:4f:fb:1d:b6: 5d:20:d1:b0:ee:a2:f1:c9:15:ea:82:a6:37:f9:a4:16:e9:34: a6:e2:7e:61:2c:50:68:5d:5b:4f:c7:52:13:ed:b6:21:a5:ee: 81:6e:91:3e:bb:f8:44:45:52:41:b6:75:c3:84:2d:fc:6e:a4: 90:ef:eb:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULLxZJp/oumkGumTEGaVg+qG2QTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBOUMwQzg3OTVDMUFERDFCRUU5QTZDMTcyMjNGQzdD Q0Q0QzNFMzAeFw0yNTA2MzAwODAzNTNaFw0yNTA3MDExMTA4NTNaMDMxMTAvBgNV BAMTKEEyOTAzMTY0NEUyRkI3MUU3NjAwRDNBNDI5N0ZFQTMyNzMzNjlCMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuOE+4I/kA3AoplpEbSct+Y5LU RmGvaEvoPqptnYDqg5hZ9vm87vvS9dhAyGz986cpEAn9+6hHncYR+8ySD0nHLivN 1466AwTq+rFAbIETf2MuvyXhiqNWwMIpV5HKVZaeD4B73lMBUbumURWE1TeaH0hW RylANQL09tX8cjXyL+Tum38uoOQx7fH2DsiNO0FmF+ap5UuyWJB0dc1Y6blSR3mo AAOR20L7cXElLToPnjrcv/ZrAwajo9tAbOnz7IOgMjQApzBefepawADcOKM62ZGJ H6g2F8ocgHSP8hWv86CqalmAiz60YS8a7TyoBmSD5NtG3mL9q+n2kDwobtcDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUopAxZE4vtx52ANOkKX/qMnM2myowHwYDVR0j BBgwFoAUKqnAyHlcGt0b7ppsFyI/x8zUw+MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0pDdXNtMUxUamRlN3Q3dnVSOUE1UkJRS0o0S0RkZTZtWVlVdTl6aGJ0 VWkvMC8yQUE5QzBDODc5NUMxQUREMUJFRTlBNkMxNzIyM0ZDN0NDRDRDM0UzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQTlDMEM4Nzk1QzFBREQx QkVFOUE2QzE3MjIzRkM3Q0NENEMzRTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0pDdXNtMUxUamRlN3Q3dnVSOUE1UkJRS0o0S0RkZTZtWVlVdTl6aGJ0VWkvMC8y QUE5QzBDODc5NUMxQUREMUJFRTlBNkMxNzIyM0ZDN0NDRDRDM0UzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAplLazig8qW3sHTet0zXWU3wTlrm/0FEJRakklSmLQkD7cZny50LA5pWnLgTp EztvvVVE2B26IRZ5nK3l/nP6lCMzgjcvOSI4pRS07FJY4tr54f4rUrc6XMQf0lUI BFgRng3jUPgWxtZ6zTHUBK88cSPQqY4FcA2beG5OLXlWceDFGwYoefM6d17nWrdu MwKnuR0tcTJq+fu5O1u6ROYHRAAMI5/uAfuLmMesIhVMml0CMiks6KndrTmGOeJh APuf/xRP+x22XSDRsO6i8ckV6oKmN/mkFuk0puJ+YSxQaF1bT8dSE+22IaXugW6R Prv4REVSQbZ1w4Qt/G6kkO/rLA== -----END CERTIFICATE-----Generated at Mon Jun 30 15:05:24 2025 by rpki-client