$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft File: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json) Hash identifier: Xt1tce5XkZqAFa2yAO/K47gj0iVKYDd2KwbhUzZlI4A= Subject key identifier: 03:23:21:72:CA:24:50:F9:46:36:D1:1B:A0:A1:FF:A4:DA:73:CC:03 Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Certificate serial: 67CB7FE484C8D87AA47FF9419700F28D3CD0D13B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft Manifest number: 0247 Signing time: Thu 12 Jun 2025 02:48:23 +0000 Manifest this update: Thu 12 Jun 2025 02:43:23 +0000 Manifest next update: Fri 13 Jun 2025 04:52:23 +0000 Files and hashes: 1: 3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa (hash: lSV/o4YOc33lWUDRl1YfEXFloffiS8CE/b74ZMOG18A=) 2: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: Qo7jd7bqgZ8RaIGB3HsVpFHOePniB9jZXdO3Roenvho=) 3: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: +JW9GiW6YB/drRMNELv/rqj93jakV2W+xxjKiiYCdZw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 13 Jun 2025 04:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:cb:7f:e4:84:c8:d8:7a:a4:7f:f9:41:97:00:f2:8d:3c:d0:d1:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Validity Not Before: Jun 12 02:43:23 2025 GMT Not After : Jun 13 04:52:23 2025 GMT Subject: CN=03232172CA2450F94636D11BA0A1FFA4DA73CC03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c5:27:f9:9d:69:e3:7c:a3:b3:5c:25:bc:fc: 9d:2f:3e:f2:f9:a5:13:8a:66:21:d4:82:d3:75:70: 2b:7a:df:99:3b:4a:27:8f:4e:70:92:c9:c3:f5:0c: f5:3f:9d:82:cc:b8:b0:2b:04:13:06:63:ce:ab:9e: fe:08:2d:4e:e4:16:09:7d:3e:f4:6e:a6:1f:9e:e9: 81:fa:d7:2a:e8:c3:c8:fb:34:e2:0a:45:38:6e:3c: 71:f0:7a:2a:19:cb:71:8b:d5:a4:1d:4d:0d:be:a9: 25:e9:b7:e9:64:08:07:9e:bb:ba:b1:3d:bc:f6:9e: a1:f5:88:35:c5:8d:ed:59:ce:1d:41:37:57:fe:77: 59:87:08:06:df:1e:65:92:fd:24:6e:ab:3e:68:56: f6:dd:fe:b9:58:1d:e9:42:32:6b:a4:30:0a:e0:f3: 5c:0b:aa:ac:48:01:f0:bc:cc:ed:38:8a:e2:d0:62: 50:0d:0d:34:18:8d:ff:66:6b:c0:02:28:56:87:3c: 22:6a:a4:b1:a0:a7:e4:1a:41:de:2c:6e:7a:55:43: f7:b7:cf:6e:9f:f0:92:eb:8e:eb:b0:23:1f:cd:1d: 76:cb:48:ab:dc:b9:e0:cf:fd:26:5b:c2:6e:fd:e3: 37:cc:9a:ee:6e:4b:04:d2:8c:d4:a4:b5:a3:64:d0: 64:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:23:21:72:CA:24:50:F9:46:36:D1:1B:A0:A1:FF:A4:DA:73:CC:03 X509v3 Authority Key Identifier: keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:e2:a8:41:37:8c:0f:09:14:be:0f:92:da:63:88:b5:77:19: 9c:ab:4c:c2:f2:21:ec:03:4a:2c:bb:50:9d:22:54:46:cd:9c: 08:d4:32:5d:b7:b8:39:bf:18:e6:ea:1e:2f:52:69:69:d8:3f: 73:37:09:9e:e2:9d:e6:8e:46:86:eb:c0:5f:14:db:3a:76:b3: 92:d9:f5:77:14:65:a5:8d:b3:35:27:8b:1a:03:3b:48:6e:ad: 2e:98:30:86:89:0a:61:dc:76:04:1e:a9:3c:5c:e5:f7:c4:9c: 45:6f:25:c9:19:b4:3f:f2:04:af:ea:56:3a:a9:91:78:7f:06: 84:6a:0a:86:b7:9f:f0:63:91:29:8f:32:65:6b:a2:84:c1:61: 0b:20:1c:bd:b6:99:28:bc:b6:45:10:65:a3:a8:fa:63:56:d1: 44:9c:d5:29:d1:95:50:05:c9:cd:b3:0f:59:f6:50:07:69:14: d7:b8:a4:68:98:5e:ca:82:64:48:36:8f:c1:1a:9b:b9:83:3e: 2c:ea:18:3f:c5:be:2c:da:2b:6e:15:f2:0a:20:55:92:ba:d5: 8f:4e:7e:b3:37:b1:0c:8b:31:f1:39:19:0e:17:78:f2:87:7f: d9:aa:4e:d9:87:43:48:1d:a6:26:43:1e:27:83:23:67:67:c0: 36:4e:33:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZ8t/5ITI2Hqkf/lBlwDyjTzQ0TswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyMzkxRkE3QzI4QUUwRjlDOEIyQjk5RTE5MDkyQTM0 ODdBMkVDOTAeFw0yNTA2MTIwMjQzMjNaFw0yNTA2MTMwNDUyMjNaMDMxMTAvBgNV BAMTKDAzMjMyMTcyQ0EyNDUwRjk0NjM2RDExQkEwQTFGRkE0REE3M0NDMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcxSf5nWnjfKOzXCW8/J0vPvL5 pROKZiHUgtN1cCt635k7SiePTnCSycP1DPU/nYLMuLArBBMGY86rnv4ILU7kFgl9 PvRuph+e6YH61yrow8j7NOIKRThuPHHweioZy3GL1aQdTQ2+qSXpt+lkCAeeu7qx Pbz2nqH1iDXFje1Zzh1BN1f+d1mHCAbfHmWS/SRuqz5oVvbd/rlYHelCMmukMArg 81wLqqxIAfC8zO04iuLQYlANDTQYjf9ma8ACKFaHPCJqpLGgp+QaQd4sbnpVQ/e3 z26f8JLrjuuwIx/NHXbLSKvcueDP/SZbwm794zfMmu5uSwTSjNSktaNk0GQfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAyMhcsokUPlGNtEboKH/pNpzzAMwHwYDVR0j BBgwFoAUzSOR+nworg+ciyuZ4ZCSo0h6LskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRo U1gvMS9DRDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMjM5MUZBN0MyOEFFMEY5 QzhCMkI5OUUxOTA5MkEzNDg3QTJFQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRoU1gvMS9D RDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJOKoQTeMDwkUvg+S2mOItXcZnKtMwvIh7ANKLLtQnSJURs2cCNQyXbe4Ob8Y 5uoeL1Jpadg/czcJnuKd5o5GhuvAXxTbOnazktn1dxRlpY2zNSeLGgM7SG6tLpgw hokKYdx2BB6pPFzl98ScRW8lyRm0P/IEr+pWOqmReH8GhGoKhref8GORKY8yZWui hMFhCyAcvbaZKLy2RRBlo6j6Y1bRRJzVKdGVUAXJzbMPWfZQB2kU17ikaJheyoJk SDaPwRqbuYM+LOoYP8W+LNorbhXyCiBVkrrVj05+szexDIsx8TkZDhd48od/2apO 2YdDSB2mJkMeJ4MjZ2fANk4zeQ== -----END CERTIFICATE-----Generated at Thu Jun 12 16:07:34 2025 by rpki-client