$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft File: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft (raw, json) Hash identifier: CI38T0cvmZLBHyaZJw6+0A4Q8jvj6+cOMFugvrSa56Y= Subject key identifier: 9A:0A:F8:E6:8B:BF:83:6A:6F:17:CB:79:12:8B:0C:23:2F:C3:6D:9C Authority key identifier: D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA Certificate issuer: /CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Certificate serial: 667693E113692BBE3BF7116D03119217AB5F95AA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject info access: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft Manifest number: 0233 Signing time: Tue 10 Jun 2025 12:26:25 +0000 Manifest this update: Tue 10 Jun 2025 12:21:24 +0000 Manifest next update: Wed 11 Jun 2025 13:00:24 +0000 Files and hashes: 1: D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl (hash: OoJtuD03bQunMPd9C+a9jMT8zh8EBVz+RafYCdoAVEg=) 2: 323830343a333164343a3a2f33322d3438203d3e203533313339.roa (hash: Tny32eTDORgq/MtVMRE6pvmeZrpwE0nT6BNCMfyIuNM=) 3: 3138372e3130392e38302e302f32302d3234203d3e203533313339.roa (hash: IQvjHctOgbHfUkTO0U34ErrEutSrCbjo/UK2hA9NLGA=) 4: 3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa (hash: sPenw571n896sllNaEQg92EoBX7mLS0ivDvfDaPaky8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 13:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:76:93:e1:13:69:2b:be:3b:f7:11:6d:03:11:92:17:ab:5f:95:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA Validity Not Before: Jun 10 12:21:24 2025 GMT Not After : Jun 11 13:00:24 2025 GMT Subject: CN=9A0AF8E68BBF836A6F17CB79128B0C232FC36D9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:45:dc:6b:d6:40:27:b5:dc:de:14:cf:22:f5: 4d:66:ef:74:d9:c7:65:23:2b:1f:a2:44:99:75:24: f5:d1:cf:66:df:57:83:7e:32:9d:25:11:ce:d3:19: 2c:0c:b2:cf:df:9e:7e:8f:1a:1f:81:fa:f4:36:e3: 8c:2c:01:08:0d:3f:37:f4:24:d1:8b:5c:35:1a:89: 5a:f6:cf:07:84:30:5d:43:f9:39:b3:71:13:28:ce: 29:86:70:8d:0b:07:1e:7c:f6:34:6a:0d:91:4f:87: 49:ce:03:f8:87:0e:96:c2:e9:b1:59:ea:9b:11:b7: a4:06:49:9c:8d:81:17:2b:f0:8c:a5:05:3e:f5:9e: 4c:b5:18:2b:1e:91:25:77:b6:4b:ee:da:28:de:61: 20:de:9c:cd:12:8e:32:c8:e6:5b:70:02:6f:d4:7f: c1:ad:26:0b:ce:a6:b2:8b:ba:9d:bd:92:6a:6b:db: 01:8d:e4:fd:89:e5:9b:67:e5:02:41:0d:2e:2c:d7: 17:9b:4f:c4:20:eb:83:b4:4c:61:e8:09:10:4c:ad: 4c:72:7c:73:82:e5:0a:e7:c5:e8:5d:37:2c:8d:45: 1b:00:ba:27:d4:ec:56:4a:c4:85:64:1a:d1:b7:00: 28:aa:1a:4a:c7:f4:ec:e9:75:fd:50:31:97:fe:f6: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0A:F8:E6:8B:BF:83:6A:6F:17:CB:79:12:8B:0C:23:2F:C3:6D:9C X509v3 Authority Key Identifier: keyid:D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:44:1d:be:0d:7b:01:a0:18:8e:99:27:61:9e:92:ea:6c:f1: 98:87:d5:b2:fc:41:93:cc:79:03:f3:85:26:86:a0:95:2e:f3: 20:77:1f:cf:44:ed:09:58:2b:1f:b4:3b:af:f1:df:08:2b:ae: b6:eb:9f:f7:c3:3c:fb:34:31:c1:b2:52:b8:bd:0d:c6:0b:36: 15:01:b1:00:07:e7:75:ae:5e:1c:3b:63:7c:fe:ee:0d:99:ac: 64:9f:b8:2b:7e:5e:ac:5f:96:dc:33:3f:02:f0:8c:79:e1:32: b5:88:89:ff:48:7b:12:6b:cb:33:21:f7:a8:f4:28:8a:96:86: 51:31:65:e4:50:a8:81:0b:25:0c:76:42:7e:e7:e2:0a:9e:31: dd:00:5f:da:f1:e2:2d:61:8e:2e:a1:c6:4e:ae:78:ce:23:3b: 21:a2:1d:f2:b5:b2:b9:cf:b5:c6:e8:18:3a:7c:6a:09:62:55: 11:f7:fa:26:2f:86:dc:c6:66:50:8e:5c:b7:27:ff:f5:d8:f4: 4d:4d:ec:9b:77:9d:f5:64:76:dd:bc:d5:74:2c:9d:2b:c6:74: a4:c8:d0:bf:ce:1a:61:89:8a:5d:21:54:f0:fa:2e:7d:98:55: 67:27:5e:d1:43:3f:81:ab:e0:ad:78:55:b6:27:66:3f:c6:5d: 5e:54:f5:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZnaT4RNpK7479xFtAxGSF6tflaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNERGRjE5ODIyQzVCMjdDN0JDQzE2QkZEOEJFMkEz ODRGODlBQTAeFw0yNTA2MTAxMjIxMjRaFw0yNTA2MTExMzAwMjRaMDMxMTAvBgNV BAMTKDlBMEFGOEU2OEJCRjgzNkE2RjE3Q0I3OTEyOEIwQzIzMkZDMzZEOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvRdxr1kAntdzeFM8i9U1m73TZ x2UjKx+iRJl1JPXRz2bfV4N+Mp0lEc7TGSwMss/fnn6PGh+B+vQ244wsAQgNPzf0 JNGLXDUaiVr2zweEMF1D+TmzcRMozimGcI0LBx589jRqDZFPh0nOA/iHDpbC6bFZ 6psRt6QGSZyNgRcr8IylBT71nky1GCsekSV3tkvu2ijeYSDenM0SjjLI5ltwAm/U f8GtJgvOprKLup29kmpr2wGN5P2J5Ztn5QJBDS4s1xebT8Qg64O0TGHoCRBMrUxy fHOC5QrnxehdNyyNRRsAuifU7FZKxIVkGtG3ACiqGkrH9Ozpdf1QMZf+9kb1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUmgr45ou/g2pvF8t5EosMIy/DbZwwHwYDVR0j BBgwFoAU0iTf8ZgixbJ8e8wWv9i+KjhPiaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlW QXYvMS9EMjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyMjRERkYxOTgyMkM1QjI3 QzdCQ0MxNkJGRDhCRTJBMzg0Rjg5QUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RGllZFU5QjdNNk54WHI1eFFoSmRmdDE3SE5zalFTM2RnNmlVSHJKWmlWQXYvMS9E MjI0REZGMTk4MjJDNUIyN0M3QkNDMTZCRkQ4QkUyQTM4NEY4OUFBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgUQdvg17AaAYjpknYZ6S6mzxmIfVsvxBk8x5A/OFJoaglS7zIHcfz0TtCVgr H7Q7r/HfCCuutuuf98M8+zQxwbJSuL0Nxgs2FQGxAAfnda5eHDtjfP7uDZmsZJ+4 K35erF+W3DM/AvCMeeEytYiJ/0h7EmvLMyH3qPQoipaGUTFl5FCogQslDHZCfufi Cp4x3QBf2vHiLWGOLqHGTq54ziM7IaId8rWyuc+1xugYOnxqCWJVEff6Ji+G3MZm UI5ctyf/9dj0TU3sm3ed9WR23bzVdCydK8Z0pMjQv84aYYmKXSFU8PoufZhVZyde 0UM/gavgrXhVtidmP8ZdXlT1lw== -----END CERTIFICATE-----Generated at Tue Jun 10 21:58:54 2025 by rpki-client