$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft File: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json) Hash identifier: PuaoDV5E6CpnPD5E7BUE6Y3xcnZ18lOHkpP/Z+dhimk= Subject key identifier: 52:16:66:80:56:5E:71:BB:46:63:7F:5D:7A:88:90:A0:B6:F7:94:1C Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Certificate serial: 58033BC5F5718A4B5F28FE3740048D441378802B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft Manifest number: 0245 Signing time: Tue 10 Jun 2025 13:58:21 +0000 Manifest this update: Tue 10 Jun 2025 13:53:21 +0000 Manifest next update: Wed 11 Jun 2025 16:37:21 +0000 Files and hashes: 1: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: XV5XX9PLzNBv/P4girhHwL5IoFqlM9HITg6T91PfpPE=) 2: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: Qo7jd7bqgZ8RaIGB3HsVpFHOePniB9jZXdO3Roenvho=) 3: 3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa (hash: lSV/o4YOc33lWUDRl1YfEXFloffiS8CE/b74ZMOG18A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 16:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:03:3b:c5:f5:71:8a:4b:5f:28:fe:37:40:04:8d:44:13:78:80:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Validity Not Before: Jun 10 13:53:21 2025 GMT Not After : Jun 11 16:37:21 2025 GMT Subject: CN=52166680565E71BB46637F5D7A8890A0B6F7941C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8c:04:2a:86:d3:e2:19:e6:34:8e:a8:69:33: f0:6c:b9:8f:0e:45:b1:9d:c7:4e:19:c9:8a:da:b7: 83:b7:9e:2f:9d:9a:34:e0:58:e8:b3:ab:77:50:08: 9a:2a:57:a7:20:44:60:60:9f:9f:cd:ca:6a:d6:47: 29:77:9c:40:4a:a1:e7:ae:5c:e1:af:86:8b:96:6c: 50:93:19:51:60:19:6a:0c:cb:10:c0:dc:29:ed:6c: 21:5f:d3:2a:98:ea:24:2d:e9:ff:9f:dc:22:33:3b: 8e:89:5c:6d:e3:1f:19:66:a2:a5:43:1b:c9:08:5c: 52:a2:bf:f5:19:ba:97:2e:dc:de:a8:1e:f0:89:02: cb:c3:98:a9:34:4e:95:a0:9e:35:f7:7a:4a:10:4e: 79:2f:d5:25:f4:5e:c6:d0:38:25:4b:f2:3d:7b:f2: 93:eb:7a:ab:bd:f9:0a:6d:67:77:4d:c3:98:8d:51: ac:e4:4e:09:12:b2:ac:49:4c:7c:51:0b:9d:91:9f: 05:cb:e2:59:7e:18:60:10:09:20:ad:5f:56:b0:7b: 55:97:2c:02:f0:4a:6b:d8:92:26:ca:85:08:c4:8f: a5:95:51:f3:53:0e:0e:46:4b:a9:b2:1c:45:bc:5c: d9:43:9f:db:2b:dc:97:0d:92:6a:5a:3f:f9:13:2c: 61:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:16:66:80:56:5E:71:BB:46:63:7F:5D:7A:88:90:A0:B6:F7:94:1C X509v3 Authority Key Identifier: keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:7b:6d:56:ac:e4:61:04:20:d1:3d:64:68:95:aa:b3:8d:74: ed:5a:fc:4b:d2:3c:94:01:90:34:1e:3a:05:3c:39:34:5b:19: fd:95:0d:29:09:bd:6d:60:19:1c:43:60:36:09:1f:6c:13:87: 9c:f9:fc:91:ae:ac:b6:ee:b3:87:4e:31:84:68:f1:26:44:90: e5:5b:41:84:ce:b5:b9:98:e9:2f:79:3b:ed:45:0c:78:63:bf: dc:bb:55:c3:99:d0:3d:a6:07:48:35:a8:db:13:12:7b:d0:46: 7f:f2:39:ea:2c:0e:cd:11:d0:44:42:fe:76:70:59:5e:06:54: 54:b0:5b:42:42:e4:01:54:36:95:f6:7a:5f:16:ca:33:94:82: 95:7f:45:3d:24:f6:b9:90:1a:75:b3:6a:5e:d8:98:de:14:4b: 44:9a:87:b7:ee:2b:93:a9:dd:7c:e2:61:5b:9d:3d:7b:ce:d1: ff:88:bc:3a:0d:81:e9:95:29:e7:61:9f:91:13:3f:3e:bc:5c: 6e:f0:6c:c3:b0:37:bb:96:e1:7c:fb:8b:62:c9:b4:74:8a:54: 34:e1:29:78:22:7d:d4:eb:f9:4f:4d:9c:c9:87:4f:d6:35:41: 77:1f:73:bc:52:e2:47:e1:97:aa:91:23:53:47:19:28:7c:4e: a9:f9:ec:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWAM7xfVxiktfKP43QASNRBN4gCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyMzkxRkE3QzI4QUUwRjlDOEIyQjk5RTE5MDkyQTM0 ODdBMkVDOTAeFw0yNTA2MTAxMzUzMjFaFw0yNTA2MTExNjM3MjFaMDMxMTAvBgNV BAMTKDUyMTY2NjgwNTY1RTcxQkI0NjYzN0Y1RDdBODg5MEEwQjZGNzk0MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8jAQqhtPiGeY0jqhpM/BsuY8O RbGdx04ZyYrat4O3ni+dmjTgWOizq3dQCJoqV6cgRGBgn5/NymrWRyl3nEBKoeeu XOGvhouWbFCTGVFgGWoMyxDA3CntbCFf0yqY6iQt6f+f3CIzO46JXG3jHxlmoqVD G8kIXFKiv/UZupcu3N6oHvCJAsvDmKk0TpWgnjX3ekoQTnkv1SX0XsbQOCVL8j17 8pPrequ9+QptZ3dNw5iNUazkTgkSsqxJTHxRC52RnwXL4ll+GGAQCSCtX1awe1WX LALwSmvYkibKhQjEj6WVUfNTDg5GS6myHEW8XNlDn9sr3JcNkmpaP/kTLGF3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUUhZmgFZecbtGY39deoiQoLb3lBwwHwYDVR0j BBgwFoAUzSOR+nworg+ciyuZ4ZCSo0h6LskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRo U1gvMS9DRDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMjM5MUZBN0MyOEFFMEY5 QzhCMkI5OUUxOTA5MkEzNDg3QTJFQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRoU1gvMS9D RDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApXttVqzkYQQg0T1kaJWqs4107Vr8S9I8lAGQNB46BTw5NFsZ/ZUNKQm9bWAZ HENgNgkfbBOHnPn8ka6stu6zh04xhGjxJkSQ5VtBhM61uZjpL3k77UUMeGO/3LtV w5nQPaYHSDWo2xMSe9BGf/I56iwOzRHQREL+dnBZXgZUVLBbQkLkAVQ2lfZ6XxbK M5SClX9FPST2uZAadbNqXtiY3hRLRJqHt+4rk6ndfOJhW509e87R/4i8Og2B6ZUp 52GfkRM/PrxcbvBsw7A3u5bhfPuLYsm0dIpUNOEpeCJ91Ov5T02cyYdP1jVBdx9z vFLiR+GXqpEjU0cZKHxOqfnsjQ== -----END CERTIFICATE-----Generated at Wed Jun 11 05:02:30 2025 by rpki-client