$ rpki-client -vvf rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.mft File: 25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.mft (raw, json) Hash identifier: Qlc+xfiIx90i8WuOdn4xCgvq7pxvDINZZQAh81/mg5Y= Subject key identifier: DD:49:F0:55:27:32:71:70:63:ED:CD:60:6A:0A:64:A0:51:E8:DF:1F Authority key identifier: 25:E9:E2:DC:5F:3D:7E:F7:EE:5E:5C:70:3C:40:32:A9:29:6F:98:D5 Certificate issuer: /CN=25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5 Certificate serial: 605548A88501350C01065C40287A0BBDF119BB3D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.cer Subject info access: rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.mft Manifest number: 0108 Signing time: Mon 30 Jun 2025 09:56:30 +0000 Manifest this update: Mon 30 Jun 2025 09:51:30 +0000 Manifest next update: Tue 01 Jul 2025 11:38:30 +0000 Files and hashes: 1: 3137302e38332e3135322e302f32322d3234203d3e20323636343730.roa (hash: dUUPHdfzaaApAGOx5SEA2qWgEl+cVYg/hYO5LVqjPKA=) 2: 323830343a333835343a3a2f33322d3438203d3e20323636343730.roa (hash: 31SdXREOUa6wDgGNSBqbraCzoOF/TO46GqGYuv+ffkE=) 3: 25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.crl (hash: 6rpxWi8J9iv+/5fcdfXn3+TS5+WYYwtgkujId4RigI8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.crl rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 11:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:55:48:a8:85:01:35:0c:01:06:5c:40:28:7a:0b:bd:f1:19:bb:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5 Validity Not Before: Jun 30 09:51:30 2025 GMT Not After : Jul 1 11:38:30 2025 GMT Subject: CN=DD49F0552732717063EDCD606A0A64A051E8DF1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a2:27:28:00:7d:ae:33:f7:2f:b5:e7:14:75: 03:08:31:91:45:2f:b7:c5:a1:f7:79:e2:c2:d3:54: 63:1c:14:ad:7f:07:f6:27:89:86:39:7f:d4:c6:ee: fd:d0:01:9c:5a:83:f1:00:1e:5a:98:fe:48:df:cb: a1:12:d0:5d:69:ff:8a:51:81:31:cf:13:8c:8e:a9: 1e:10:76:63:f9:03:2b:cf:ef:c8:a9:25:77:31:58: d2:1c:aa:a4:22:19:40:3d:80:ef:86:16:c3:7e:d2: 8b:28:ac:e0:88:de:ca:d5:ea:ba:7a:17:93:53:c5: 5d:0d:ea:37:1c:4d:cb:f5:69:5f:b0:92:c9:1e:81: 04:37:66:63:f7:7b:78:be:14:4a:75:73:e1:d9:7c: c4:44:38:70:dc:fd:a0:96:7f:25:aa:6a:cc:16:cc: 4f:18:7f:0a:80:93:a2:27:7c:27:9b:fc:62:8f:9b: 78:59:0c:0e:e1:4d:63:dd:71:cd:a4:4b:6a:52:a7: aa:be:48:26:83:ed:86:96:d0:b4:9f:ae:b1:cd:2f: da:32:4e:86:a9:de:0b:b6:75:b7:c3:43:b7:f1:30: 26:94:e9:7e:27:36:e9:73:3d:56:cb:f7:cf:29:56: 9e:0e:c6:3c:2a:72:af:47:3d:4b:7c:6b:31:57:5f: 72:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:49:F0:55:27:32:71:70:63:ED:CD:60:6A:0A:64:A0:51:E8:DF:1F X509v3 Authority Key Identifier: keyid:25:E9:E2:DC:5F:3D:7E:F7:EE:5E:5C:70:3C:40:32:A9:29:6F:98:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/25E9E2DC5F3D7EF7EE5E5C703C4032A9296F98D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:df:b6:9c:22:54:3f:03:c3:51:04:df:f2:8f:84:eb:af:0e: ed:92:2f:f6:55:a4:f5:ed:cc:31:a7:7d:05:7f:32:6d:69:7e: 71:04:4b:16:50:96:f3:f6:94:ab:3e:c4:bb:9f:dd:c1:e4:1d: a5:1f:32:b7:cd:4a:5e:d4:c8:42:8a:ae:1b:66:17:17:57:ec: 21:8a:cf:6f:e6:29:0e:69:0a:d9:3b:9b:b1:39:86:8c:5b:82: ce:b0:e4:af:e9:66:66:24:89:7b:d8:98:dc:2b:48:3b:b6:89: b4:76:1f:6b:da:7f:6c:99:00:01:52:29:80:cc:13:8d:c2:eb: 0b:15:a8:2d:94:04:31:45:d6:8c:44:a1:5f:26:74:d0:46:fc: ca:a9:a7:31:7e:eb:58:8a:4c:1c:65:aa:7e:fd:d5:59:a4:31: a5:3d:00:b2:88:e4:3d:0f:4f:36:01:97:03:fc:3d:1b:7d:e2: 33:b9:25:19:f9:5d:1b:4d:64:46:c6:d9:b9:28:04:e4:ab:9e: b7:54:f8:15:1c:0c:4c:ba:55:d7:af:b0:4f:7b:77:c6:ae:96: db:6d:50:e9:95:32:34:a6:29:07:42:e2:49:c2:b8:a5:9b:05: 18:d5:4f:d4:32:bd:8c:ef:58:9f:e5:f1:20:42:3c:11:c7:c6: 36:db:9a:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYFVIqIUBNQwBBlxAKHoLvfEZuz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVFOUUyREM1RjNEN0VGN0VFNUU1QzcwM0M0MDMyQTky OTZGOThENTAeFw0yNTA2MzAwOTUxMzBaFw0yNTA3MDExMTM4MzBaMDMxMTAvBgNV BAMTKERENDlGMDU1MjczMjcxNzA2M0VEQ0Q2MDZBMEE2NEEwNTFFOERGMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEoicoAH2uM/cvtecUdQMIMZFF L7fFofd54sLTVGMcFK1/B/YniYY5f9TG7v3QAZxag/EAHlqY/kjfy6ES0F1p/4pR gTHPE4yOqR4QdmP5AyvP78ipJXcxWNIcqqQiGUA9gO+GFsN+0osorOCI3srV6rp6 F5NTxV0N6jccTcv1aV+wkskegQQ3ZmP3e3i+FEp1c+HZfMREOHDc/aCWfyWqaswW zE8YfwqAk6InfCeb/GKPm3hZDA7hTWPdcc2kS2pSp6q+SCaD7YaW0LSfrrHNL9oy Toap3gu2dbfDQ7fxMCaU6X4nNulzPVbL988pVp4Oxjwqcq9HPUt8azFXX3IpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3UnwVScycXBj7c1gagpkoFHo3x8wHwYDVR0j BBgwFoAUJeni3F89fvfuXlxwPEAyqSlvmNUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjFEZ0FvWXZNM0RHckE0eG4xd3BqWGdBMkxuM2JVcUtzSHNvUmhpRlB4 M2MvMC8yNUU5RTJEQzVGM0Q3RUY3RUU1RTVDNzAzQzQwMzJBOTI5NkY5OEQ1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1RTlFMkRDNUYzRDdFRjdF RTVFNUM3MDNDNDAzMkE5Mjk2Rjk4RDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SjFEZ0FvWXZNM0RHckE0eG4xd3BqWGdBMkxuM2JVcUtzSHNvUmhpRlB4M2MvMC8y NUU5RTJEQzVGM0Q3RUY3RUU1RTVDNzAzQzQwMzJBOTI5NkY5OEQ1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGN+2nCJUPwPDUQTf8o+E668O7ZIv9lWk9e3MMad9BX8ybWl+cQRLFlCW8/aU qz7Eu5/dweQdpR8yt81KXtTIQoquG2YXF1fsIYrPb+YpDmkK2TubsTmGjFuCzrDk r+lmZiSJe9iY3CtIO7aJtHYfa9p/bJkAAVIpgMwTjcLrCxWoLZQEMUXWjEShXyZ0 0Eb8yqmnMX7rWIpMHGWqfv3VWaQxpT0AsojkPQ9PNgGXA/w9G33iM7klGfldG01k RsbZuSgE5Kuet1T4FRwMTLpV16+wT3t3xq6W221Q6ZUyNKYpB0LiScK4pZsFGNVP 1DK9jO9Yn+XxIEI8EcfGNtuaNQ== -----END CERTIFICATE-----Generated at Mon Jun 30 20:27:29 2025 by rpki-client