$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft File: D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft (raw, json) Hash identifier: XElcqRI6mwa7kfXg9tWn9dtYvRXft3VMXUUR4fF2Y+k= Subject key identifier: 38:36:B4:64:B5:BB:5C:BC:69:00:77:89:24:39:0C:D2:32:B1:0A:6F Authority key identifier: D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B Certificate issuer: /CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B Certificate serial: 4EDAD3601E1CA34095CCC901BAA0665ECB48E555 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft Manifest number: E5 Signing time: Thu 12 Jun 2025 19:42:49 +0000 Manifest this update: Thu 12 Jun 2025 19:37:49 +0000 Manifest next update: Fri 13 Jun 2025 23:05:49 +0000 Files and hashes: 1: D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl (hash: LhbtdxZjLTdjZWpOnObKOUDjjr+vj1OuNX22I+7tatQ=) 2: 3137372e37332e36302e302f32322d3234203d3e20323633343638.roa (hash: ojNYwHHCihvNSk2FkbyfGPhui+Fo/NptmXx53NBSpaQ=) 3: 3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa (hash: mQl+DqMitEfto4sm/J239pDInofAJ055830zO5LsIjU=) 4: 323830343a313234633a3a2f33322d3438203d3e20323633343638.roa (hash: T2k3XHzj+R5PWM1PAn1IiRXkMkZU+kzdLTKOTB9BdPU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 13 Jun 2025 23:05:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:da:d3:60:1e:1c:a3:40:95:cc:c9:01:ba:a0:66:5e:cb:48:e5:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B Validity Not Before: Jun 12 19:37:49 2025 GMT Not After : Jun 13 23:05:49 2025 GMT Subject: CN=3836B464B5BB5CBC6900778924390CD232B10A6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:f0:88:6b:98:ed:46:b3:20:7f:2e:d4:9e: 36:dc:76:c0:02:e4:97:9c:86:02:11:05:5f:01:cd: 2c:7f:44:ff:05:69:e9:04:dd:0f:25:99:9c:9b:a3: 33:60:9b:0f:34:39:f0:3f:c5:ee:3d:2d:3d:5a:42: 52:38:7d:0e:f9:66:90:2b:1e:3c:8d:12:8a:fd:c9: 9f:71:eb:63:a5:34:66:aa:f1:c5:62:44:54:bd:c4: ac:13:36:9b:78:b6:bd:2c:14:ec:45:48:8b:6e:30: 62:c0:08:c7:49:41:62:81:0e:e4:a2:8a:c7:00:52: ec:5b:d2:c9:fc:1c:fd:d2:3c:86:96:5a:37:b4:e1: ab:79:46:36:52:26:ba:1d:3a:0d:c5:e2:58:97:15: be:d7:26:58:f8:b5:32:fc:5c:9a:f6:8d:42:d9:62: 75:36:9c:60:b6:c7:6b:88:48:e8:35:99:0e:4f:89: e7:51:3d:56:e1:5b:c7:8a:53:f6:31:f5:8a:22:ca: 60:d7:37:7c:3b:9a:d3:48:89:8a:10:ca:0c:4c:76: 35:16:14:fb:08:9e:2d:3e:46:68:f3:e9:d7:eb:07: 5b:57:5e:23:15:13:15:21:8d:4a:d7:5b:eb:eb:73: e5:c9:1c:5d:2f:6e:2e:4a:62:96:dd:d4:a7:b5:39: a5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:36:B4:64:B5:BB:5C:BC:69:00:77:89:24:39:0C:D2:32:B1:0A:6F X509v3 Authority Key Identifier: keyid:D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:a0:a2:fe:42:9f:e9:c0:21:9b:e7:bd:4a:8d:95:6e:cb:4f: 1a:c4:45:c6:75:2b:ab:81:98:b0:48:04:e8:dd:39:be:c9:bb: 9e:09:a7:80:b6:7a:12:ba:f4:54:8a:89:2f:9f:cf:4b:0b:8c: ec:ab:cd:ad:6e:bb:b4:48:aa:ed:ff:08:79:f4:e0:6f:8b:f2: e7:b7:70:92:54:df:4b:5b:79:ad:e7:dd:8a:df:68:02:ce:31: 88:e8:db:32:d1:0b:e5:3f:93:a8:75:40:96:70:8b:79:1e:b2: b6:13:a7:8a:4c:39:79:42:c6:91:2a:61:e0:e7:d3:7c:2e:db: 52:b4:66:6a:16:f1:92:16:b7:b5:7f:9c:f7:85:94:23:c9:92: 65:56:6c:cc:81:61:66:ed:75:07:b3:af:30:79:92:3a:5c:71: 17:9d:02:5d:34:ec:1c:63:53:4b:34:e7:9f:46:78:26:4b:1c: 72:c5:05:40:ae:3f:6d:6a:2c:df:d3:da:7b:88:38:ab:a1:27: 22:ab:53:56:e0:6c:2c:29:2b:66:2f:f9:28:f0:9c:33:41:e8: b9:8f:19:ab:8e:bb:a8:8b:4c:a3:1b:ad:87:ab:c6:56:52:b4: 99:37:87:9c:eb:ec:a7:28:e4:7b:25:09:c5:9a:ee:7b:35:82: 94:2d:10:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTtrTYB4co0CVzMkBuqBmXstI5VUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM3NEY1NDI4MEZDOUNGN0U5MDY4QzZGRjc0NEZBNUFE MTQ5RDcxQjAeFw0yNTA2MTIxOTM3NDlaFw0yNTA2MTMyMzA1NDlaMDMxMTAvBgNV BAMTKDM4MzZCNDY0QjVCQjVDQkM2OTAwNzc4OTI0MzkwQ0QyMzJCMTBBNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QfCIa5jtRrMgfy7UnjbcdsAC 5JechgIRBV8BzSx/RP8FaekE3Q8lmZybozNgmw80OfA/xe49LT1aQlI4fQ75ZpAr HjyNEor9yZ9x62OlNGaq8cViRFS9xKwTNpt4tr0sFOxFSItuMGLACMdJQWKBDuSi iscAUuxb0sn8HP3SPIaWWje04at5RjZSJrodOg3F4liXFb7XJlj4tTL8XJr2jULZ YnU2nGC2x2uISOg1mQ5PiedRPVbhW8eKU/Yx9YoiymDXN3w7mtNIiYoQygxMdjUW FPsIni0+Rmjz6dfrB1tXXiMVExUhjUrXW+vrc+XJHF0vbi5KYpbd1Ke1OaUZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUODa0ZLW7XLxpAHeJJDkM0jKxCm8wHwYDVR0j BBgwFoAU03T1QoD8nPfpBoxv90T6WtFJ1xswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0Vh blkvMC9EMzc0RjU0MjgwRkM5Q0Y3RTkwNjhDNkZGNzQ0RkE1QUQxNDlENzFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNzRGNTQyODBGQzlDRjdF OTA2OEM2RkY3NDRGQTVBRDE0OUQ3MUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0VhblkvMC9E Mzc0RjU0MjgwRkM5Q0Y3RTkwNjhDNkZGNzQ0RkE1QUQxNDlENzFCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEApaCi/kKf6cAhm+e9So2VbstPGsRFxnUrq4GYsEgE6N05vsm7ngmngLZ6Err0 VIqJL5/PSwuM7KvNrW67tEiq7f8IefTgb4vy57dwklTfS1t5refdit9oAs4xiOjb MtEL5T+TqHVAlnCLeR6ythOnikw5eULGkSph4OfTfC7bUrRmahbxkha3tX+c94WU I8mSZVZszIFhZu11B7OvMHmSOlxxF50CXTTsHGNTSzTnn0Z4JksccsUFQK4/bWos 39Pae4g4q6EnIqtTVuBsLCkrZi/5KPCcM0HouY8Zq467qItMoxuth6vGVlK0mTeH nOvspyjkeyUJxZruezWClC0QKQ== -----END CERTIFICATE-----Generated at Fri Jun 13 03:28:18 2025 by rpki-client