$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft File: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft (raw, json) Hash identifier: gtmytp9SmJm67qL4v/RsxWP45gNIAdVEJ5gtprK4Rzk= Subject key identifier: DD:B4:3A:33:F2:FA:A0:E4:75:0C:86:01:5B:D0:B6:C7:5F:49:30:57 Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Certificate serial: 3B406187F6A909D6F91E60FA344BB2E01361DBE3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft Manifest number: 02D5 Signing time: Mon 30 Jun 2025 10:05:32 +0000 Manifest this update: Mon 30 Jun 2025 10:00:32 +0000 Manifest next update: Tue 01 Jul 2025 10:59:32 +0000 Files and hashes: 1: 3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (hash: AJNOOqPt9YDmVyj7oLMiS+ahRBlnaPrzhm3IG8z6/rY=) 2: 323830343a3937383a3a2f33322d313238203d3e20323633303837.roa (hash: xlFzvxIG/gYH0KzWQM5/0pJLtz7KgwD/JIoIT+dykDo=) 3: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl (hash: ypZl7/0FHLiPg+Cwo9XmvQ2RQ+XdTHi1Ym3l63OjWac=) 4: 3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa (hash: oPMBUQyiQOvcv4tb1YKSLPGxZ04J+5T7lbQU8TfpNP8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 10:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:40:61:87:f6:a9:09:d6:f9:1e:60:fa:34:4b:b2:e0:13:61:db:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Validity Not Before: Jun 30 10:00:32 2025 GMT Not After : Jul 1 10:59:32 2025 GMT Subject: CN=DDB43A33F2FAA0E4750C86015BD0B6C75F493057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a8:17:df:b3:e2:78:2e:f3:3c:4b:a4:03:79: 63:89:84:4e:20:7e:2d:f5:9a:63:d1:e9:19:09:bc: 34:01:c3:b6:a4:7e:3d:63:6e:5b:f1:0c:b1:49:da: 8d:73:2d:3d:d5:10:7d:1c:8d:50:97:dd:65:8e:24: c4:9a:d2:1d:b9:cc:5f:bf:83:fd:79:1f:3a:ea:1d: 0f:56:33:71:21:25:2a:73:5c:62:60:63:ea:c6:f8: 35:33:0b:50:35:9d:4d:e8:b0:72:a1:bd:7f:7c:90: 34:9f:90:ac:20:6e:d5:56:40:af:ce:61:29:8c:2b: c2:68:65:83:9a:c8:7f:8f:c2:d8:a7:e8:f0:6d:dc: 50:68:f9:7b:ce:38:33:d9:14:6e:23:cd:de:fd:a4: 70:1e:d5:eb:ae:cb:f4:b8:8f:de:14:c0:13:d7:23: 07:c2:f3:79:3b:95:b3:aa:52:a7:d9:82:d2:78:60: 79:86:e3:89:a3:ba:40:b4:fb:b4:e4:be:8b:84:61: 2b:9d:63:ba:29:d9:ed:a3:48:41:4d:94:a9:ea:01: 5a:69:1a:c0:4b:74:c4:26:e6:c8:8c:da:51:6a:9f: 37:01:d8:cb:47:01:e3:6b:f4:54:f7:34:ba:a1:48: c6:68:5f:f0:76:59:9d:d8:07:af:18:c9:c1:81:b6: 2b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B4:3A:33:F2:FA:A0:E4:75:0C:86:01:5B:D0:B6:C7:5F:49:30:57 X509v3 Authority Key Identifier: keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:67:09:56:44:a4:31:31:6e:79:14:8c:9c:6d:1a:82:9e:bf: a3:91:b2:c7:9c:d6:2f:6a:03:2c:6a:c8:31:d0:5c:36:e6:bb: c9:67:66:12:b6:26:3a:bf:ed:a3:fc:8c:68:b9:88:f9:43:f8: 61:45:df:ff:34:9f:32:aa:f6:5b:0a:4e:fa:c1:15:08:24:97: e8:c6:9f:c1:26:d9:11:de:1d:aa:32:c5:e2:61:ea:92:9f:bd: c1:58:2b:8f:3e:7d:e9:65:b6:69:58:5f:5a:f4:74:68:90:ef: 92:57:3e:18:30:8b:49:b2:54:72:a9:71:94:f6:03:c4:60:df: c9:30:15:56:62:1d:cb:d7:a1:09:0f:ef:a3:da:63:57:f0:b3: ca:bb:09:5f:b9:8d:6c:68:22:24:48:e1:2d:69:69:a1:4c:1e: 4b:da:c4:d9:33:f8:9c:dc:61:64:73:a7:8a:e1:41:d8:cd:ac: fb:82:1d:c7:ab:45:86:0f:aa:57:a4:5e:37:03:cb:b0:9c:d3: 47:7f:17:12:ed:d4:f2:36:04:5d:4c:7d:4f:f9:f5:9f:ff:71: 32:d9:9c:d4:d0:03:e9:2c:d7:4f:ed:04:65:af:82:43:c8:89: 89:2e:44:98:e3:d5:c5:63:54:53:64:67:9f:43:21:69:94:e5: 11:71:80:ea -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUO0Bhh/apCdb5HmD6NEuy4BNh2+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFB MzY0M0Y5NDAeFw0yNTA2MzAxMDAwMzJaFw0yNTA3MDExMDU5MzJaMDMxMTAvBgNV BAMTKEREQjQzQTMzRjJGQUEwRTQ3NTBDODYwMTVCRDBCNkM3NUY0OTMwNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2qBffs+J4LvM8S6QDeWOJhE4g fi31mmPR6RkJvDQBw7akfj1jblvxDLFJ2o1zLT3VEH0cjVCX3WWOJMSa0h25zF+/ g/15HzrqHQ9WM3EhJSpzXGJgY+rG+DUzC1A1nU3osHKhvX98kDSfkKwgbtVWQK/O YSmMK8JoZYOayH+Pwtin6PBt3FBo+XvOODPZFG4jzd79pHAe1euuy/S4j94UwBPX IwfC83k7lbOqUqfZgtJ4YHmG44mjukC0+7TkvouEYSudY7op2e2jSEFNlKnqAVpp GsBLdMQm5siM2lFqnzcB2MtHAeNr9FT3NLqhSMZoX/B2WZ3YB68YycGBtiuHAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU3bQ6M/L6oOR1DIYBW9C2x19JMFcwHwYDVR0j BBgwFoAULQ0Ui98u1Pvb64DbHrN36qNkP5QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9LRmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1C LzAvMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFBMzY0M0Y5NC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yRDBEMTQ4QkRGMkVENEZCREJF QjgwREIxRUIzNzdFQUEzNjQzRjk0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0tG ZTlGRzNheEhabzVHZUhGM2ZGRmJtV0MxNTd1NW5jVFdkYzZZQXFWbUIvMC8yRDBE MTQ4QkRGMkVENEZCREJFQjgwREIxRUIzNzdFQUEzNjQzRjk0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA UmcJVkSkMTFueRSMnG0agp6/o5Gyx5zWL2oDLGrIMdBcNua7yWdmErYmOr/to/yM aLmI+UP4YUXf/zSfMqr2WwpO+sEVCCSX6MafwSbZEd4dqjLF4mHqkp+9wVgrjz59 6WW2aVhfWvR0aJDvklc+GDCLSbJUcqlxlPYDxGDfyTAVVmIdy9ehCQ/vo9pjV/Cz yrsJX7mNbGgiJEjhLWlpoUweS9rE2TP4nNxhZHOniuFB2M2s+4Idx6tFhg+qV6Re NwPLsJzTR38XEu3U8jYEXUx9T/n1n/9xMtmc1NAD6SzXT+0EZa+CQ8iJiS5EmOPV xWNUU2Rnn0MhaZTlEXGA6g== -----END CERTIFICATE-----Generated at Mon Jun 30 13:32:36 2025 by rpki-client