$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft File: 2D59905C3FCA5BDA34D7101B088D80451D026C47.mft (raw, json) Hash identifier: 4Ykmyxi4jI+O+CAQBiTh20qfHyvYUUsql30RqlFIrSg= Subject key identifier: 7B:9F:5C:96:38:1D:63:AF:81:1E:B1:88:E8:74:94:6F:69:7B:E5:44 Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 Certificate issuer: /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Certificate serial: 282A2D600B405227DF5C1B993128DCABE8E704AB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer Subject info access: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft Manifest number: 027A Signing time: Thu 24 Jul 2025 07:19:22 +0000 Manifest this update: Thu 24 Jul 2025 07:14:22 +0000 Manifest next update: Fri 25 Jul 2025 10:07:22 +0000 Files and hashes: 1: 323830343a323439633a3a2f33322d3438203d3e20323634323333.roa (hash: NawnnPEHbMCtTiXRZuqs51ycbe695zSEZpiIfj2SEO8=) 2: 2D59905C3FCA5BDA34D7101B088D80451D026C47.crl (hash: SF8Khb22LVo/2n4KpzJAla3fMJtU+zsfM/U81n35IKI=) 3: 3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa (hash: GZELRNfuplahvPNzTKoCXKCGe7m/TvcDFJFlJBobK9k=) 4: 3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa (hash: zTSSMFG/lgVqOaFeXf9pCktuzCsj0jIoIIi1uaEYa0I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 25 Jul 2025 10:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:2a:2d:60:0b:40:52:27:df:5c:1b:99:31:28:dc:ab:e8:e7:04:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Validity Not Before: Jul 24 07:14:22 2025 GMT Not After : Jul 25 10:07:22 2025 GMT Subject: CN=7B9F5C96381D63AF811EB188E874946F697BE544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:81:60:a8:52:05:c5:6f:1d:ab:15:d5:5a: f6:25:20:ec:73:dd:f9:b2:87:a6:12:9d:c4:1b:f3: 4a:2e:f7:23:b8:1e:07:6a:f7:35:9c:95:5d:66:4c: 10:5d:a5:11:1c:6b:d4:1d:92:bf:3c:e8:a4:13:c4: 23:cd:a9:eb:4e:a5:ff:be:e6:1b:01:93:a2:43:82: 1c:4e:13:81:d8:92:83:e1:ef:b4:89:1e:63:cf:3a: 4d:0f:fe:d5:85:f2:e5:54:f6:be:d6:da:2d:ba:14: 0d:bf:d7:e1:9c:b0:44:32:95:5e:e5:33:df:a2:06: 68:b8:ff:98:f4:50:8e:5f:39:1b:75:8b:2c:f9:6d: f1:e8:1b:6c:6c:ca:8a:ac:53:d5:c3:51:0c:29:5d: 11:2a:aa:21:6e:14:35:3b:79:0d:0e:4c:0d:ca:88: 21:d4:d9:27:16:b2:e1:84:ef:c3:91:cc:82:c1:e3: 8d:90:c5:ce:0e:e1:19:65:95:43:5b:05:0b:07:10: cc:05:be:70:7e:a8:5d:ae:65:68:a4:9a:ef:41:f0: 4b:1b:a2:ad:d9:06:a3:48:4d:c5:9f:6a:bf:fd:99: 75:68:9a:ed:62:3b:48:26:b7:b7:1e:08:16:51:ab: c5:3f:69:b2:b9:8a:59:c9:e8:fc:fc:6f:7d:2b:12: 36:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9F:5C:96:38:1D:63:AF:81:1E:B1:88:E8:74:94:6F:69:7B:E5:44 X509v3 Authority Key Identifier: keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:47:0d:ee:3c:a2:af:2f:95:78:37:f7:c7:17:68:3d:53:7d: 4b:01:1d:a8:7d:5a:2e:fc:f8:51:d0:fc:33:9f:4f:07:65:62: 6e:13:a4:ad:77:b1:f1:c5:da:5c:c6:53:9a:de:85:0c:2d:6f: 97:59:5f:ce:18:15:67:82:f1:b4:71:68:30:f0:36:1f:88:38: c5:c6:a9:03:76:8b:96:b0:41:63:cc:8d:6f:43:a5:76:3c:49: 47:f6:8a:79:4c:75:31:85:f0:0b:79:1b:d1:fc:0a:d1:34:33: 46:1d:da:c3:08:59:46:61:12:4c:14:38:4c:e8:fd:a3:67:de: 65:f0:c4:ae:47:3b:8c:96:76:b8:fd:cf:22:cb:d5:e6:cc:20: 28:ab:73:78:f0:ab:b1:a0:e6:c5:e9:66:2a:09:b4:85:81:bf: 37:81:f0:88:61:ac:23:4c:f0:e5:44:39:17:d6:eb:d1:f8:ef: ee:b7:1a:7b:70:ee:c6:de:3b:87:62:05:d6:0b:4b:ec:3d:3e: 96:8b:96:3b:9d:37:d2:7e:8a:a1:17:84:fe:19:06:71:a8:40: 39:5f:f1:15:bf:0f:4e:50:5a:4a:84:47:4b:54:d0:7c:57:5f: b1:90:58:a3:09:2b:0f:00:d5:2f:95:87:4c:65:7e:18:e4:e2: 38:69:b7:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKCotYAtAUiffXBuZMSjcq+jnBKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1OTkwNUMzRkNBNUJEQTM0RDcxMDFCMDg4RDgwNDUx RDAyNkM0NzAeFw0yNTA3MjQwNzE0MjJaFw0yNTA3MjUxMDA3MjJaMDMxMTAvBgNV BAMTKDdCOUY1Qzk2MzgxRDYzQUY4MTFFQjE4OEU4NzQ5NDZGNjk3QkU1NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9NYFgqFIFxW8dqxXVWvYlIOxz 3fmyh6YSncQb80ou9yO4Hgdq9zWclV1mTBBdpREca9Qdkr886KQTxCPNqetOpf++ 5hsBk6JDghxOE4HYkoPh77SJHmPPOk0P/tWF8uVU9r7W2i26FA2/1+GcsEQylV7l M9+iBmi4/5j0UI5fORt1iyz5bfHoG2xsyoqsU9XDUQwpXREqqiFuFDU7eQ0OTA3K iCHU2ScWsuGE78ORzILB442Qxc4O4RlllUNbBQsHEMwFvnB+qF2uZWikmu9B8Esb oq3ZBqNITcWfar/9mXVomu1iO0gmt7ceCBZRq8U/abK5ilnJ6Pz8b30rEjaDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUe59cljgdY6+BHrGI6HSUb2l75UQwHwYDVR0j BBgwFoAULVmQXD/KW9o01xAbCI2ARR0CbEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5 QUgvMS8yRDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENTk5MDVDM0ZDQTVCREEz NEQ3MTAxQjA4OEQ4MDQ1MUQwMjZDNDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5QUgvMS8y RDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzEcN7jyiry+VeDf3xxdoPVN9SwEdqH1aLvz4UdD8M59PB2VibhOkrXex8cXa XMZTmt6FDC1vl1lfzhgVZ4LxtHFoMPA2H4g4xcapA3aLlrBBY8yNb0OldjxJR/aK eUx1MYXwC3kb0fwK0TQzRh3awwhZRmESTBQ4TOj9o2feZfDErkc7jJZ2uP3PIsvV 5swgKKtzePCrsaDmxelmKgm0hYG/N4HwiGGsI0zw5UQ5F9br0fjv7rcae3Duxt47 h2IF1gtL7D0+louWO5030n6KoReE/hkGcahAOV/xFb8PTlBaSoRHS1TQfFdfsZBY owkrDwDVL5WHTGV+GOTiOGm35g== -----END CERTIFICATE-----Generated at Thu Jul 24 23:31:28 2025 by rpki-client