$ rpki-client -vvf rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.mft File: CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.mft (raw, json) Hash identifier: BFxyxf7rSywNeY5dHro0XYYcU+szbkAfjwGW7/azt5M= Subject key identifier: A6:8A:B7:FD:2A:57:0D:53:26:76:7F:0F:F4:2B:B0:75:67:42:A8:6A Authority key identifier: CB:A4:AF:DE:F5:70:B3:49:AF:68:EE:9A:0A:D0:7B:DD:D7:B2:33:EF Certificate issuer: /CN=CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF Certificate serial: 09FE999E0E7A269E6BF00B0DE09FFE6501B725B7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.cer Subject info access: rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.mft Manifest number: 0208 Signing time: Sat 07 Jun 2025 07:31:10 +0000 Manifest this update: Sat 07 Jun 2025 07:26:10 +0000 Manifest next update: Sun 08 Jun 2025 08:51:10 +0000 Files and hashes: 1: 34352e3136342e3139362e302f32322d3234203d3e20323638363430.roa (hash: aURF8xV/1WfF2q4B+wUE+APyvcwke9zut2utOvhQT0Q=) 2: CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.crl (hash: Z3gCpdHoTwtjhR7Zhq+cGPXA7rMfp9PcnpjY/R9dTAc=) 3: 323830343a353434383a3a2f33322d3336203d3e20323638363430.roa (hash: 38oZ7qGP7oZFwjPXnHJH0jKBkkY+GIWZKLt9hNZqu60=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.crl rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 08:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:fe:99:9e:0e:7a:26:9e:6b:f0:0b:0d:e0:9f:fe:65:01:b7:25:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF Validity Not Before: Jun 7 07:26:10 2025 GMT Not After : Jun 8 08:51:10 2025 GMT Subject: CN=A68AB7FD2A570D5326767F0FF42BB0756742A86A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:48:66:58:48:7b:c0:b7:62:ec:03:42:95:db: bf:76:c1:87:ab:99:9f:af:8c:19:d3:9b:99:2a:a7: 68:7d:ae:e3:98:eb:03:b6:f1:1c:b9:b1:51:7e:bd: 39:a0:ef:6e:4c:c3:81:c5:27:b2:cb:c1:cc:30:ff: f5:d8:ab:63:fe:59:c0:63:ce:f3:90:b2:04:89:07: cb:77:78:07:34:49:26:32:68:58:1a:8c:01:9b:1e: fa:5a:e8:16:c5:8e:fe:1d:78:c0:99:d0:06:60:c6: b6:26:c0:b0:04:92:9f:32:10:5e:7c:a7:8f:a2:ed: b4:e1:04:b5:f0:c6:b9:0a:b1:65:c6:9f:be:60:91: f1:e1:ae:fd:05:b4:f0:95:1f:77:cc:25:fd:06:ad: 00:08:e8:63:55:0a:5a:f3:4b:fa:6c:62:1c:58:b8: 05:d3:ff:6a:6c:e8:60:77:8b:33:e4:5a:37:71:3d: ef:c4:11:24:86:f7:f3:07:93:59:80:81:81:19:17: 53:99:bf:78:16:d4:3f:28:d4:21:5f:c8:f4:e2:9d: e7:fa:03:c8:57:30:f7:fe:a2:4b:9d:16:c0:c3:d9: 01:0c:b8:59:34:2f:5c:9b:fd:f7:63:f4:c4:2d:44: e0:6a:28:25:69:38:9f:34:ad:b2:b3:f6:eb:34:38: d0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8A:B7:FD:2A:57:0D:53:26:76:7F:0F:F4:2B:B0:75:67:42:A8:6A X509v3 Authority Key Identifier: keyid:CB:A4:AF:DE:F5:70:B3:49:AF:68:EE:9A:0A:D0:7B:DD:D7:B2:33:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3XqWU4MiJYmeMHcBKZ6BKAP22w1qBJrxqxgh42TN4cw/0/CBA4AFDEF570B349AF68EE9A0AD07BDDD7B233EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:51:05:99:14:e4:0b:bd:c7:c5:cb:5f:05:5c:31:48:18:20: 15:d0:67:ff:01:d5:35:ca:38:f6:fc:63:98:b6:cc:a0:5c:41: 4a:c8:47:29:03:ad:dd:a6:2d:69:46:de:df:7e:8b:24:29:27: 48:82:86:13:77:92:76:59:80:38:7c:5e:74:aa:b4:b1:f1:b0: ed:77:b3:cc:9b:a1:00:f5:04:e0:03:7d:84:2f:bf:52:4e:30: 76:21:b5:0a:25:28:5f:ef:59:1b:93:27:db:29:00:a2:2d:b1: 38:ab:77:75:a1:4d:fd:a9:9a:47:7f:c8:a3:2a:26:db:ad:d8: d3:3f:84:ae:88:29:6f:b2:df:3a:f4:36:7b:dd:82:d4:7b:c3: d7:7a:6e:3e:95:fd:7b:78:3a:0d:d6:5e:05:12:f2:0c:45:9e: 3b:e8:97:2c:cc:eb:60:04:74:31:cf:8b:55:56:6c:3c:c9:2a: 41:d7:8c:4c:a5:9f:b3:3c:b0:9f:62:b7:a2:95:25:3e:09:4a: 8b:ed:74:46:95:f9:41:ab:22:f3:08:f8:bd:28:73:af:04:ed: d2:96:81:5a:ec:e6:f2:2d:ba:80:32:dd:ae:10:04:9c:12:6f: b5:e9:3d:0b:70:bb:9c:00:ea:39:9e:72:a6:7b:a1:a5:61:7e: 26:e5:87:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCf6Zng56Jp5r8AsN4J/+ZQG3JbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JBNEFGREVGNTcwQjM0OUFGNjhFRTlBMEFEMDdCRERE N0IyMzNFRjAeFw0yNTA2MDcwNzI2MTBaFw0yNTA2MDgwODUxMTBaMDMxMTAvBgNV BAMTKEE2OEFCN0ZEMkE1NzBENTMyNjc2N0YwRkY0MkJCMDc1Njc0MkE4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQSGZYSHvAt2LsA0KV2792wYer mZ+vjBnTm5kqp2h9ruOY6wO28Ry5sVF+vTmg725Mw4HFJ7LLwcww//XYq2P+WcBj zvOQsgSJB8t3eAc0SSYyaFgajAGbHvpa6BbFjv4deMCZ0AZgxrYmwLAEkp8yEF58 p4+i7bThBLXwxrkKsWXGn75gkfHhrv0FtPCVH3fMJf0GrQAI6GNVClrzS/psYhxY uAXT/2ps6GB3izPkWjdxPe/EESSG9/MHk1mAgYEZF1OZv3gW1D8o1CFfyPTinef6 A8hXMPf+okudFsDD2QEMuFk0L1yb/fdj9MQtROBqKCVpOJ80rbKz9us0OND/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpoq3/SpXDVMmdn8P9CuwdWdCqGowHwYDVR0j BBgwFoAUy6Sv3vVws0mvaO6aCtB73deyM+8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjNYcVdVNE1pSlltZU1IY0JLWjZCS0FQMjJ3MXFCSnJ4cXhnaDQyVE40 Y3cvMC9DQkE0QUZERUY1NzBCMzQ5QUY2OEVFOUEwQUQwN0JEREQ3QjIzM0VGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCQTRBRkRFRjU3MEIzNDlB RjY4RUU5QTBBRDA3QkRERDdCMjMzRUYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SjNYcVdVNE1pSlltZU1IY0JLWjZCS0FQMjJ3MXFCSnJ4cXhnaDQyVE40Y3cvMC9D QkE0QUZERUY1NzBCMzQ5QUY2OEVFOUEwQUQwN0JEREQ3QjIzM0VGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMFEFmRTkC73HxctfBVwxSBggFdBn/wHVNco49vxjmLbMoFxBSshHKQOt3aYt aUbe336LJCknSIKGE3eSdlmAOHxedKq0sfGw7XezzJuhAPUE4AN9hC+/Uk4wdiG1 CiUoX+9ZG5Mn2ykAoi2xOKt3daFN/amaR3/Ioyom263Y0z+Erogpb7LfOvQ2e92C 1HvD13puPpX9e3g6DdZeBRLyDEWeO+iXLMzrYAR0Mc+LVVZsPMkqQdeMTKWfszyw n2K3opUlPglKi+10RpX5Qasi8wj4vShzrwTt0paBWuzm8i26gDLdrhAEnBJvtek9 C3C7nADqOZ5ypnuhpWF+JuWH5w== -----END CERTIFICATE-----Generated at Sat Jun 7 16:49:15 2025 by rpki-client