$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft File: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft (raw, json) Hash identifier: uOR6ZLfXGMCQ7WTyvKms3jyX7aVuZ2yKXFKI83yMyMo= Subject key identifier: B6:47:FA:0A:72:1D:B7:14:AC:41:77:81:33:B2:67:E4:41:D5:D6:DF Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 Certificate issuer: /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Certificate serial: 407326DBB9426432C0EAF5822E81046E1DFF3A86 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject info access: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft Manifest number: 023C Signing time: Fri 06 Jun 2025 10:28:00 +0000 Manifest this update: Fri 06 Jun 2025 10:23:00 +0000 Manifest next update: Sat 07 Jun 2025 12:13:00 +0000 Files and hashes: 1: 34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa (hash: uvDWAWwHQEIwaeCaS7oSbgW6akspuwjD8Bob8V00050=) 2: 323830343a346335633a3a2f33322d3438203d3e20323637333636.roa (hash: aBuDzalJjtN6QjODimHKIqdgYVt/ZmaeAC/ItTdnYZs=) 3: F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl (hash: HhA4QVgPDf1AhbuHMRWDK78yiMR4WANl4E3WG4lOPcw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 12:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:73:26:db:b9:42:64:32:c0:ea:f5:82:2e:81:04:6e:1d:ff:3a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2 Validity Not Before: Jun 6 10:23:00 2025 GMT Not After : Jun 7 12:13:00 2025 GMT Subject: CN=B647FA0A721DB714AC41778133B267E441D5D6DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:86:aa:71:8d:70:7a:87:01:98:fe:bb:9e:b0: d5:96:22:52:58:45:70:33:91:89:3a:9c:da:12:45: 8c:7e:19:97:26:a3:24:ed:1e:68:4f:99:8d:00:15: b2:17:ec:3e:5c:81:37:f4:bf:f9:ad:b2:5d:7c:4e: a8:f3:a0:34:6d:1f:c1:e6:2e:fc:f1:b0:0a:99:f5: b1:b0:9a:f1:a5:1d:07:a4:9c:ed:24:9f:26:32:ef: 82:d7:e0:99:81:05:76:54:1d:69:64:78:a5:ec:ca: f0:42:a3:b7:a3:e9:36:de:66:94:d7:eb:c5:3b:01: 31:a7:10:69:69:52:9d:0d:15:38:61:0a:69:35:b5: f1:44:d3:13:d2:ac:50:d0:68:e5:d1:9f:85:52:0c: da:52:8c:de:ea:bb:2c:0c:b6:78:b8:7f:8c:bb:2c: 21:68:a3:72:6e:a3:c8:57:0c:b2:12:a0:29:19:d4: 94:5a:60:4c:4a:9d:5b:0e:5f:c7:22:13:f8:f1:d5: 13:73:5b:3b:5e:16:c5:97:9b:f2:8b:10:9e:f2:e8: 78:b1:04:f2:5a:10:7a:d2:fd:45:50:42:50:6c:25: 08:ce:35:df:7b:0f:79:8d:29:0e:7f:b0:72:63:d8: 3f:fe:ac:6d:8d:f7:90:67:eb:96:79:f6:85:b7:01: 67:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:47:FA:0A:72:1D:B7:14:AC:41:77:81:33:B2:67:E4:41:D5:D6:DF X509v3 Authority Key Identifier: keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2b:d3:85:95:95:66:b4:ed:9d:09:51:fc:bf:81:2a:3f:03: 3c:20:8b:70:da:1a:e8:e5:a2:20:40:38:07:e3:96:a4:fc:35: d0:28:97:8b:30:40:11:2a:57:82:bb:45:6d:29:d6:3c:ec:74: 7b:24:e2:99:b0:40:dc:09:d0:90:42:d6:17:41:d8:04:c5:16: 27:86:bc:bb:16:2f:60:71:3c:a0:b3:7d:cd:19:d3:44:69:27: eb:65:d5:49:bf:b8:20:74:58:85:32:a5:f8:bf:0b:1b:8f:07: 32:bc:be:8e:13:71:d5:08:d2:fe:d2:e1:9a:f1:c3:5e:31:14: f7:bc:1b:dd:78:d3:ef:c3:ae:69:0f:26:da:84:e5:91:ec:c7: 75:96:89:a0:a3:d4:b2:a0:6d:3d:51:8c:69:69:df:0c:89:d9: f8:8a:d8:c5:5e:6b:c6:01:0f:e4:f2:78:0b:48:86:b0:c0:65: c8:50:96:7d:c6:3a:04:a3:11:38:50:f0:56:63:c1:43:fb:3a: f4:b0:a2:3f:6d:46:71:b5:c7:2a:ae:dc:d1:66:3a:16:d6:d4: 99:6a:a3:7b:87:7e:c5:6a:99:ec:4e:71:67:f8:3c:ee:5a:72: 22:c8:5e:fe:c3:a8:86:e5:bd:53:fc:27:d7:c9:49:20:74:55: ae:6c:00:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQHMm27lCZDLA6vWCLoEEbh3/OoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMEFFNjNFRDk5MTI0RjdEM0YxNEI4RkE5QzFGRjM3 ODAwNjdDMjAeFw0yNTA2MDYxMDIzMDBaFw0yNTA2MDcxMjEzMDBaMDMxMTAvBgNV BAMTKEI2NDdGQTBBNzIxREI3MTRBQzQxNzc4MTMzQjI2N0U0NDFENUQ2REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyhqpxjXB6hwGY/ruesNWWIlJY RXAzkYk6nNoSRYx+GZcmoyTtHmhPmY0AFbIX7D5cgTf0v/mtsl18TqjzoDRtH8Hm LvzxsAqZ9bGwmvGlHQeknO0knyYy74LX4JmBBXZUHWlkeKXsyvBCo7ej6TbeZpTX 68U7ATGnEGlpUp0NFThhCmk1tfFE0xPSrFDQaOXRn4VSDNpSjN7quywMtni4f4y7 LCFoo3Juo8hXDLISoCkZ1JRaYExKnVsOX8ciE/jx1RNzWzteFsWXm/KLEJ7y6Hix BPJaEHrS/UVQQlBsJQjONd97D3mNKQ5/sHJj2D/+rG2N95Bn65Z59oW3AWcjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtkf6CnIdtxSsQXeBM7Jn5EHV1t8wHwYDVR0j BBgwFoAU9CCuY+2ZEk99PxS4+pwf83gAZ8IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhH MWYvMC9GNDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0MjBBRTYzRUQ5OTEyNEY3 RDNGMTRCOEZBOUMxRkYzNzgwMDY3QzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnJpVDVzZDJWcVdGeWJEZnI2cjJnQkhka2dIU0FGMURtRlBNV1NraEhHMWYvMC9G NDIwQUU2M0VEOTkxMjRGN0QzRjE0QjhGQTlDMUZGMzc4MDA2N0MyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOyvThZWVZrTtnQlR/L+BKj8DPCCLcNoa6OWiIEA4B+OWpPw10CiXizBAESpX grtFbSnWPOx0eyTimbBA3AnQkELWF0HYBMUWJ4a8uxYvYHE8oLN9zRnTRGkn62XV Sb+4IHRYhTKl+L8LG48HMry+jhNx1QjS/tLhmvHDXjEU97wb3XjT78OuaQ8m2oTl kezHdZaJoKPUsqBtPVGMaWnfDInZ+IrYxV5rxgEP5PJ4C0iGsMBlyFCWfcY6BKMR OFDwVmPBQ/s69LCiP21GcbXHKq7c0WY6FtbUmWqje4d+xWqZ7E5xZ/g87lpyIshe /sOohuW9U/wn18lJIHRVrmwAcw== -----END CERTIFICATE-----Generated at Fri Jun 6 19:43:51 2025 by rpki-client