$ rpki-client -vvf rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft File: 1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft (raw, json) Hash identifier: kPg8aY8t+CcpRrybE6CMpT9GUyvCLEcWWF5Ml+Y+UGw= Subject key identifier: 26:1F:E6:AD:13:C8:CD:22:65:EA:37:81:10:33:0F:37:FE:01:40:E1 Authority key identifier: 1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0 Certificate issuer: /CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0 Certificate serial: 6EEC58497960B92FFF913E1BD8E8BBED95DA9A24 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft Manifest number: 0239 Signing time: Sat 07 Jun 2025 15:28:28 +0000 Manifest this update: Sat 07 Jun 2025 15:23:28 +0000 Manifest next update: Sun 08 Jun 2025 18:38:28 +0000 Files and hashes: 1: 34352e3233372e3233362e302f32322d3234203d3e20323638323935.roa (hash: 1C/jOWt5ZHfKspqIFOUeY8exgTDIPGSvNHULSTIuARE=) 2: 1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl (hash: CnawlnLr37/6t1IgDk3afRLUbRWzI7n/GzISzeBQBbs=) 3: 323830343a346566383a3a2f33322d3335203d3e20323638323935.roa (hash: BstW0UlvH2wEHgaNKCbfIv8DXJSe7M/kYqDRbvgjc5k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 18:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ec:58:49:79:60:b9:2f:ff:91:3e:1b:d8:e8:bb:ed:95:da:9a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0 Validity Not Before: Jun 7 15:23:28 2025 GMT Not After : Jun 8 18:38:28 2025 GMT Subject: CN=261FE6AD13C8CD2265EA378110330F37FE0140E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:04:6c:0e:95:27:29:7a:64:95:d0:33:a2:58: 10:7f:b2:a7:ad:43:93:a0:7e:61:0d:46:a7:b8:59: 17:e9:22:04:ac:73:af:f9:f3:4c:97:8e:3d:c8:f4: 95:a7:80:c2:fc:ae:1a:08:95:97:98:34:64:bf:e5: 84:d0:d8:7e:70:69:0b:83:32:0d:80:09:1c:c1:b4: 5a:d9:aa:1c:85:60:41:44:bb:92:1c:0e:41:60:91: f4:56:ae:26:0b:c3:5f:75:31:3b:d2:ba:bd:11:04: fb:d5:48:93:cd:92:bb:4f:c1:6f:34:65:18:7e:06: 83:62:9e:a4:c9:a5:a0:84:17:95:5e:06:7e:5c:50: 97:b0:89:ed:49:9a:08:03:dd:cb:6c:d7:27:bd:2b: cd:8b:cc:1f:89:a3:23:6d:a4:25:6f:84:53:98:ed: 8a:f5:42:22:37:b9:a3:75:bd:b3:91:59:f1:9b:c9: c0:82:3b:c1:1c:01:d5:40:5d:c5:c0:82:cf:ce:0a: 48:5a:81:fa:f0:15:5e:78:47:95:8b:1c:26:79:aa: 15:d7:61:74:28:3d:f9:37:22:5f:88:fb:3b:e6:34: f5:39:f6:0a:e1:77:ec:1b:a7:c1:02:ca:bb:68:a8: 8a:5e:5b:a8:ae:47:97:70:3b:6a:ce:56:2b:88:0e: 0c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:1F:E6:AD:13:C8:CD:22:65:EA:37:81:10:33:0F:37:FE:01:40:E1 X509v3 Authority Key Identifier: keyid:1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:84:09:43:51:d2:41:d4:da:40:95:21:c5:e4:61:85:d9:68: 41:83:2e:0f:ff:cf:c5:1c:7d:71:73:a2:d1:37:04:71:b7:24: eb:39:7f:91:24:55:d4:67:3f:75:48:42:67:e1:ac:d8:c3:cb: 23:36:40:20:ef:1c:23:c7:68:87:50:8f:2b:9e:42:ec:33:75: 0b:b5:1b:7d:63:fb:c6:5d:99:f3:d3:c8:3d:01:3a:66:2b:7c: 40:35:1b:ec:4f:b7:d2:ae:d3:a7:82:95:38:5f:fc:15:00:67: 7e:96:e5:fc:93:2c:47:d2:09:68:15:7c:6f:19:d8:2d:3c:e9: 84:30:2a:33:ce:51:1c:5b:da:48:ff:b3:7a:4e:d2:61:9c:af: a0:41:73:56:20:c8:23:78:e2:cf:d7:d8:4e:ee:4e:e6:0e:72: 94:c7:20:39:36:47:ba:7a:bd:6b:78:a4:3d:e8:eb:17:e5:e2: 66:04:50:03:40:8e:1e:a6:6c:5c:c9:7a:82:ff:6b:9f:1f:1d: 27:14:f9:7f:fe:7a:64:ef:31:0d:c2:58:91:b9:3a:89:12:ab: 1b:83:9d:99:89:49:42:ee:c1:16:9a:2b:c0:a2:c5:d3:48:c8: 6f:af:80:2d:8c:ae:b6:41:82:94:a3:8e:b3:76:2a:94:c8:7d: d2:65:fe:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbuxYSXlguS//kT4b2Oi77ZXamiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMzYwOUQ5NjZERDhCMjJFNUZENTY2N0U0QkFDQUNF RkY4RDFGMDAeFw0yNTA2MDcxNTIzMjhaFw0yNTA2MDgxODM4MjhaMDMxMTAvBgNV BAMTKDI2MUZFNkFEMTNDOENEMjI2NUVBMzc4MTEwMzMwRjM3RkUwMTQwRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/BGwOlScpemSV0DOiWBB/sqet Q5OgfmENRqe4WRfpIgSsc6/580yXjj3I9JWngML8rhoIlZeYNGS/5YTQ2H5waQuD Mg2ACRzBtFrZqhyFYEFEu5IcDkFgkfRWriYLw191MTvSur0RBPvVSJPNkrtPwW80 ZRh+BoNinqTJpaCEF5VeBn5cUJewie1JmggD3cts1ye9K82LzB+JoyNtpCVvhFOY 7Yr1QiI3uaN1vbORWfGbycCCO8EcAdVAXcXAgs/OCkhagfrwFV54R5WLHCZ5qhXX YXQoPfk3Il+I+zvmNPU59grhd+wbp8ECyrtoqIpeW6iuR5dwO2rOViuIDgyTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUJh/mrRPIzSJl6jeBEDMPN/4BQOEwHwYDVR0j BBgwFoAUG6NgnZZt2LIuX9VmfkusrO/40fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FI cm8vMS8xQkEzNjA5RDk2NkREOEIyMkU1RkQ1NjY3RTRCQUNBQ0VGRjhEMUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCQTM2MDlEOTY2REQ4QjIy RTVGRDU2NjdFNEJBQ0FDRUZGOEQxRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FIcm8vMS8x QkEzNjA5RDk2NkREOEIyMkU1RkQ1NjY3RTRCQUNBQ0VGRjhEMUYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANYQJQ1HSQdTaQJUhxeRhhdloQYMuD//PxRx9cXOi0TcEcbck6zl/kSRV1Gc/ dUhCZ+Gs2MPLIzZAIO8cI8doh1CPK55C7DN1C7UbfWP7xl2Z89PIPQE6Zit8QDUb 7E+30q7Tp4KVOF/8FQBnfpbl/JMsR9IJaBV8bxnYLTzphDAqM85RHFvaSP+zek7S YZyvoEFzViDII3jiz9fYTu5O5g5ylMcgOTZHunq9a3ikPejrF+XiZgRQA0COHqZs XMl6gv9rnx8dJxT5f/56ZO8xDcJYkbk6iRKrG4OdmYlJQu7BFporwKLF00jIb6+A LYyutkGClKOOs3YqlMh90mX+xg== -----END CERTIFICATE-----Generated at Sun Jun 8 01:36:34 2025 by rpki-client