$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft File: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft (raw, json) Hash identifier: q74LQXJPXhvVzJvDUizLzxQoNDL+EDDUSiiMLNvWI/8= Subject key identifier: 68:0F:4A:12:86:CC:A3:5C:CE:0F:15:23:94:1E:AF:ED:AC:E2:29:CA Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Certificate serial: 474D1C000650C43907473C3DFE3D7E47D13992D1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft Manifest number: 02F8 Signing time: Sat 26 Jul 2025 12:38:05 +0000 Manifest this update: Sat 26 Jul 2025 12:33:05 +0000 Manifest next update: Sun 27 Jul 2025 16:28:05 +0000 Files and hashes: 1: 3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (hash: AJNOOqPt9YDmVyj7oLMiS+ahRBlnaPrzhm3IG8z6/rY=) 2: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl (hash: uS2GxTlXUTyA9s9UQfKmfNIW/BR/ueUBXLr9HhleKvw=) 3: 3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa (hash: oPMBUQyiQOvcv4tb1YKSLPGxZ04J+5T7lbQU8TfpNP8=) 4: 323830343a3937383a3a2f33322d313238203d3e20323633303837.roa (hash: xlFzvxIG/gYH0KzWQM5/0pJLtz7KgwD/JIoIT+dykDo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 16:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:4d:1c:00:06:50:c4:39:07:47:3c:3d:fe:3d:7e:47:d1:39:92:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Validity Not Before: Jul 26 12:33:05 2025 GMT Not After : Jul 27 16:28:05 2025 GMT Subject: CN=680F4A1286CCA35CCE0F1523941EAFEDACE229CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:09:23:65:4c:87:3e:1f:95:93:be:99:a1:46: 00:27:94:30:9a:58:7a:d1:a3:f1:61:cd:55:be:e9: 7f:de:9a:59:34:15:3b:14:76:c1:61:a8:b6:3f:e3: 6e:0d:c6:cc:70:40:ee:08:2e:ed:ce:b5:06:8d:f9: 98:53:6d:41:dd:dc:ed:77:26:4b:8f:8f:5b:4f:84: b5:a4:81:78:30:10:e8:3a:bc:a5:12:ea:52:0f:6d: d5:ca:ae:b0:7c:3a:68:6d:f1:52:b8:bd:0c:bf:30: 07:8e:7d:b3:21:a9:28:4b:02:23:91:bf:ee:4f:dd: 57:6f:1b:57:54:42:06:c2:bf:cc:4d:42:df:38:b0: 15:27:8c:85:69:5e:34:c6:82:83:01:4e:df:2b:d4: bd:d8:f9:48:da:fa:4a:7b:57:01:e8:79:11:18:47: 44:ed:98:c4:19:de:b5:98:43:bd:fe:44:84:b0:e5: 77:c8:2f:4a:60:be:e7:3f:a2:88:c8:f4:96:24:27: 9e:1e:6c:6b:8f:29:5c:87:c2:fa:a8:7d:bf:02:01: c1:5a:bb:97:19:f2:aa:18:1d:2c:bd:81:5d:96:e5: 05:3c:b8:8a:b6:56:58:50:b7:09:78:5a:aa:15:ac: e1:53:3a:56:1b:db:6c:fb:f4:34:47:ad:96:39:45: 94:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0F:4A:12:86:CC:A3:5C:CE:0F:15:23:94:1E:AF:ED:AC:E2:29:CA X509v3 Authority Key Identifier: keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:6a:9c:35:45:13:39:95:6c:30:bc:85:be:1a:b1:d2:5c:c9: dd:69:44:88:05:67:67:18:e7:8e:05:3e:c4:7f:55:cf:84:fa: 0a:13:82:24:c1:0e:4d:d0:fe:e7:4b:1f:0f:47:79:83:81:01: ae:94:ce:4b:55:11:0a:b1:a0:5f:85:35:af:d6:1e:d3:11:bf: 68:48:3c:4b:f8:14:bc:d9:be:57:b4:1d:e6:df:1c:56:39:dd: 01:de:f2:f7:16:83:1b:f0:04:dc:63:db:36:50:b7:bc:a5:99: 06:88:0a:08:26:b3:77:ee:16:27:e6:7b:71:8f:b3:c7:9b:e9: 07:ec:24:20:07:76:2c:1d:2a:50:f3:7e:08:25:44:53:2f:e2: fb:bf:08:c8:de:1f:aa:bc:c0:33:f2:9f:25:b5:68:23:13:cd: 2b:dd:89:8a:0c:aa:16:3c:96:a2:d4:24:56:83:79:d6:93:ad: 9a:3d:66:e8:bd:50:1f:ed:75:1d:28:6d:15:06:7b:b2:5a:81: de:e6:22:e0:1e:14:1d:09:0b:f2:0f:ee:cc:d0:8a:ec:bc:a6: 95:71:bd:6c:a5:51:19:4f:96:a7:4d:fc:ad:74:cc:00:34:b6: 86:bc:fe:7a:fb:25:97:46:7b:12:90:37:cd:9b:7d:6d:85:b5: ad:24:97:fb -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUR00cAAZQxDkHRzw9/j1+R9E5ktEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFB MzY0M0Y5NDAeFw0yNTA3MjYxMjMzMDVaFw0yNTA3MjcxNjI4MDVaMDMxMTAvBgNV BAMTKDY4MEY0QTEyODZDQ0EzNUNDRTBGMTUyMzk0MUVBRkVEQUNFMjI5Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiCSNlTIc+H5WTvpmhRgAnlDCa WHrRo/FhzVW+6X/emlk0FTsUdsFhqLY/424NxsxwQO4ILu3OtQaN+ZhTbUHd3O13 JkuPj1tPhLWkgXgwEOg6vKUS6lIPbdXKrrB8Omht8VK4vQy/MAeOfbMhqShLAiOR v+5P3VdvG1dUQgbCv8xNQt84sBUnjIVpXjTGgoMBTt8r1L3Y+Uja+kp7VwHoeREY R0TtmMQZ3rWYQ73+RISw5XfIL0pgvuc/oojI9JYkJ54ebGuPKVyHwvqofb8CAcFa u5cZ8qoYHSy9gV2W5QU8uIq2VlhQtwl4WqoVrOFTOlYb22z79DRHrZY5RZTBAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUaA9KEobMo1zODxUjlB6v7aziKcowHwYDVR0j BBgwFoAULQ0Ui98u1Pvb64DbHrN36qNkP5QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9LRmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1C LzAvMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFBMzY0M0Y5NC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yRDBEMTQ4QkRGMkVENEZCREJF QjgwREIxRUIzNzdFQUEzNjQzRjk0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0tG ZTlGRzNheEhabzVHZUhGM2ZGRmJtV0MxNTd1NW5jVFdkYzZZQXFWbUIvMC8yRDBE MTQ4QkRGMkVENEZCREJFQjgwREIxRUIzNzdFQUEzNjQzRjk0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA vWqcNUUTOZVsMLyFvhqx0lzJ3WlEiAVnZxjnjgU+xH9Vz4T6ChOCJMEOTdD+50sf D0d5g4EBrpTOS1URCrGgX4U1r9Ye0xG/aEg8S/gUvNm+V7Qd5t8cVjndAd7y9xaD G/AE3GPbNlC3vKWZBogKCCazd+4WJ+Z7cY+zx5vpB+wkIAd2LB0qUPN+CCVEUy/i +78IyN4fqrzAM/KfJbVoIxPNK92JigyqFjyWotQkVoN51pOtmj1m6L1QH+11HSht FQZ7slqB3uYi4B4UHQkL8g/uzNCK7LymlXG9bKVRGU+Wp038rXTMADS2hrz+evsl l0Z7EpA3zZt9bYW1rSSX+w== -----END CERTIFICATE-----Generated at Sat Jul 26 21:06:25 2025 by rpki-client