$ rpki-client -vvf rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft File: 2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft (raw, json) Hash identifier: 11U02q72KS2G3Ju7FGbRhnQsrfT0MHfUu9cewVBLkNU= Subject key identifier: 73:15:A1:34:AF:61:AB:0C:ED:04:03:54:46:90:48:5D:76:1A:C5:28 Authority key identifier: 2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70 Certificate issuer: /CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370 Certificate serial: 357A44D853020899A71F6BFECBA036C65A3A3CCD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer Subject info access: rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft Manifest number: 0256 Signing time: Wed 02 Jul 2025 09:13:44 +0000 Manifest this update: Wed 02 Jul 2025 09:08:44 +0000 Manifest next update: Thu 03 Jul 2025 11:51:44 +0000 Files and hashes: 1: 323830343a343431383a3a2f33322d3334203d3e20323637363032.roa (hash: SVa3n9CXuCMyjnUcZIuGz915kRDbHwqunvwZpWNFCqE=) 2: 34352e37312e38342e302f32322d3234203d3e20323637363032.roa (hash: 1NxEPZFmMr8y2/dlgVX6k0u/Jfu4X7J3Z/0pEUeqw54=) 3: 2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl (hash: RU+BDuMvk1zIaKKolF7fgzyigBn3cjV/Zd4QU3oZFzY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 11:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:7a:44:d8:53:02:08:99:a7:1f:6b:fe:cb:a0:36:c6:5a:3a:3c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370 Validity Not Before: Jul 2 09:08:44 2025 GMT Not After : Jul 3 11:51:44 2025 GMT Subject: CN=7315A134AF61AB0CED0403544690485D761AC528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:db:39:42:5f:79:7b:e2:da:a3:09:3d:24:5a: f2:9b:99:04:f4:5a:97:20:73:7a:f4:ba:96:89:1c: 0b:73:c6:0e:53:1f:a9:8f:b6:65:a6:ac:c0:36:1b: ae:54:63:ca:d0:02:df:1d:8d:22:45:1b:e9:c2:db: 1e:db:fd:06:35:6f:0d:2e:5b:f7:1d:04:b3:e8:8c: 32:43:b0:0c:d6:28:e1:f8:a9:b5:3a:7b:48:1f:e6: e8:0f:1c:da:37:40:87:82:46:da:bc:da:04:cc:5b: 8d:83:3c:32:1b:e8:b1:7c:31:c3:30:cd:76:aa:59: 90:76:cf:d2:90:70:aa:eb:74:74:2a:d3:24:a3:31: 57:ff:c0:e2:06:bb:50:69:81:17:1c:4f:05:d7:76: 8d:73:c0:84:c7:95:34:ec:10:70:36:05:b7:8b:70: 6d:48:9f:48:4a:02:d9:44:0f:30:9c:e5:12:99:f2: 44:25:37:77:94:14:bf:38:97:a7:dd:69:80:5c:55: 79:1f:df:13:2f:03:87:c4:5b:c9:36:2c:ac:6b:a4: 20:b0:2c:5c:aa:5f:b7:d8:a6:c5:b1:2f:b4:dc:6f: 62:26:6b:c0:df:4e:9b:6a:5a:05:02:cc:2c:4e:09: a2:f2:06:c1:f2:09:31:6e:3e:86:8b:a6:f3:13:a5: f4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:15:A1:34:AF:61:AB:0C:ED:04:03:54:46:90:48:5D:76:1A:C5:28 X509v3 Authority Key Identifier: keyid:2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b4:81:e1:e8:e9:14:1b:b2:27:9c:a0:73:f4:f8:1a:94:8c: 9f:09:e7:36:15:c2:c0:28:9e:f8:5d:cf:57:66:89:b0:6e:d8: 05:86:84:a0:5d:db:3f:9b:75:ee:3b:d1:b8:a0:a7:6b:30:7c: ed:52:9b:52:d6:db:34:01:db:ca:47:78:ba:df:a3:31:92:cd: 94:79:27:79:47:12:0b:fa:48:a1:b9:bf:fc:3c:00:1f:fb:cb: 2c:ec:55:a8:bf:22:51:41:b8:92:15:eb:ab:41:c0:00:0d:94: 5c:7d:cb:a7:c7:8c:fe:df:11:4e:39:39:d0:ed:ce:4f:89:05: 2b:6d:de:50:f6:e0:99:e1:8f:ad:40:21:ac:1b:b6:51:4f:17: d5:64:8f:81:72:cb:ef:68:14:5e:a5:0e:4c:fc:b4:a4:3a:81: d0:ca:b3:c0:87:df:4b:0d:17:a3:02:66:c4:22:7c:bb:e5:0a: 5b:36:2f:fe:85:13:d1:fa:5d:18:97:73:bb:48:3f:55:65:d8: 9f:12:d5:45:c3:bf:80:85:31:2c:61:d7:97:e2:c7:db:10:31: f0:36:2e:f9:33:54:d9:60:3d:ad:6e:ef:bf:86:ae:cf:c3:6d: f0:36:a3:d6:12:74:9d:06:39:e2:32:3d:26:90:80:78:e5:06: c1:7d:8e:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNXpE2FMCCJmnH2v+y6A2xlo6PM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBMkU5NzQyQkFGQjAzRkZGOEI0ODA3QUI5MDc1RkZD QzMxMDM3MDAeFw0yNTA3MDIwOTA4NDRaFw0yNTA3MDMxMTUxNDRaMDMxMTAvBgNV BAMTKDczMTVBMTM0QUY2MUFCMENFRDA0MDM1NDQ2OTA0ODVENzYxQUM1MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV2zlCX3l74tqjCT0kWvKbmQT0 Wpcgc3r0upaJHAtzxg5TH6mPtmWmrMA2G65UY8rQAt8djSJFG+nC2x7b/QY1bw0u W/cdBLPojDJDsAzWKOH4qbU6e0gf5ugPHNo3QIeCRtq82gTMW42DPDIb6LF8McMw zXaqWZB2z9KQcKrrdHQq0ySjMVf/wOIGu1BpgRccTwXXdo1zwITHlTTsEHA2BbeL cG1In0hKAtlEDzCc5RKZ8kQlN3eUFL84l6fdaYBcVXkf3xMvA4fEW8k2LKxrpCCw LFyqX7fYpsWxL7Tcb2Ima8DfTptqWgUCzCxOCaLyBsHyCTFuPoaLpvMTpfQRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcxWhNK9hqwztBANURpBIXXYaxSgwHwYDVR0j BBgwFoAULKLpdCuvsD//i0gHq5B1/8wxA3AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDlHUjU0R3dxeXFCZ1ZZajFlSERYZk5YUzFoN3FoYUZMRW5ycW5CUXFD QU0vMS8yQ0EyRTk3NDJCQUZCMDNGRkY4QjQ4MDdBQjkwNzVGRkNDMzEwMzcwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDQTJFOTc0MkJBRkIwM0ZG RjhCNDgwN0FCOTA3NUZGQ0MzMTAzNzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDlHUjU0R3dxeXFCZ1ZZajFlSERYZk5YUzFoN3FoYUZMRW5ycW5CUXFDQU0vMS8y Q0EyRTk3NDJCQUZCMDNGRkY4QjQ4MDdBQjkwNzVGRkNDMzEwMzcwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjbSB4ejpFBuyJ5ygc/T4GpSMnwnnNhXCwCie+F3PV2aJsG7YBYaEoF3bP5t1 7jvRuKCnazB87VKbUtbbNAHbykd4ut+jMZLNlHkneUcSC/pIobm//DwAH/vLLOxV qL8iUUG4khXrq0HAAA2UXH3Lp8eM/t8RTjk50O3OT4kFK23eUPbgmeGPrUAhrBu2 UU8X1WSPgXLL72gUXqUOTPy0pDqB0MqzwIffSw0XowJmxCJ8u+UKWzYv/oUT0fpd GJdzu0g/VWXYnxLVRcO/gIUxLGHXl+LH2xAx8DYu+TNU2WA9rW7vv4auz8Nt8Daj 1hJ0nQY54jI9JpCAeOUGwX2O4Q== -----END CERTIFICATE-----Generated at Wed Jul 2 16:19:34 2025 by rpki-client