$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft File: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft (raw, json) Hash identifier: s4MKsMrZNyGrY/E+IWs6o1GH1CnLUoPzmOBXVTWTtPA= Subject key identifier: B6:42:9D:82:EC:4F:5B:ED:2F:BC:96:99:E1:40:E5:97:8F:B7:28:96 Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB Certificate issuer: /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Certificate serial: 6E48938AF684E5B031DBB9F63C2E67B8F54C491E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft Manifest number: 0246 Signing time: Sat 14 Jun 2025 00:13:40 +0000 Manifest this update: Sat 14 Jun 2025 00:08:40 +0000 Manifest next update: Sun 15 Jun 2025 01:42:40 +0000 Files and hashes: 1: 323830343a353431383a3a2f33322d3438203d3e20323638363238.roa (hash: hHMhRh5DdSaR5fzUNnHJawbPKzBIyAZaoDmsUo8IWgk=) 2: 3230382e35322e3136322e302f32332d3234203d3e20323638363238.roa (hash: maW2GNrI3AoqX8WFxWiMg/YOqECnU1fsdQA4kdJdduU=) 3: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl (hash: 9qSJewbFlYfL+d5NLrohNdNardXWiDMTU2Q4CtFsCwA=) 4: 34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (hash: MFaOGmG3uk10MnFBlQJ/Pj6U7TcWeAadSbIdDIDPMAE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 15 Jun 2025 01:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:48:93:8a:f6:84:e5:b0:31:db:b9:f6:3c:2e:67:b8:f5:4c:49:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Validity Not Before: Jun 14 00:08:40 2025 GMT Not After : Jun 15 01:42:40 2025 GMT Subject: CN=B6429D82EC4F5BED2FBC9699E140E5978FB72896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e5:cd:5d:f0:03:92:84:7a:fb:3b:a7:e7:05: 7d:bd:2b:df:cb:16:19:8d:55:b7:2e:aa:d0:cd:64: d9:15:40:1e:f2:6e:dc:d7:54:a7:dd:5d:c7:dc:e2: 33:44:cc:6e:c7:26:90:e7:b5:a9:77:d8:ff:1d:6d: 72:36:e1:aa:cc:dd:25:13:90:0b:fd:08:b7:99:ed: 9d:82:96:11:88:c6:57:4e:ea:fa:70:76:e9:c6:29: e0:3c:1d:47:0b:32:6b:4d:a4:be:24:c5:9d:90:7e: 8b:00:37:6b:83:3f:b3:b7:a7:0f:41:8f:4d:15:e2: 41:6a:ec:0b:7b:0d:bb:87:d3:6d:4e:6d:21:34:3c: 03:34:9c:bc:58:70:0f:46:e2:04:f4:38:2e:65:4b: 6d:a4:a0:c7:e6:4a:7d:b5:8b:0e:d4:28:c4:1e:ba: e7:04:ce:7b:e5:ce:02:71:1d:be:e1:06:00:67:a7: bd:b4:9e:38:be:c0:9d:cd:f2:1d:9a:6b:13:cd:c6: 14:65:30:c8:a4:1d:6a:78:3d:ef:4e:0a:e1:72:71: c3:a1:a3:7c:fc:01:97:15:95:5d:b7:9e:7f:13:dc: 65:ab:b1:df:fd:5d:0d:4e:20:02:78:2b:f2:93:ee: f8:24:b0:b7:98:4f:80:d6:2d:15:73:ae:32:16:0e: b8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:42:9D:82:EC:4F:5B:ED:2F:BC:96:99:E1:40:E5:97:8F:B7:28:96 X509v3 Authority Key Identifier: keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:86:3c:04:3c:36:e7:69:83:b0:99:a0:b2:92:e8:32:ce:76: d8:68:f5:f2:de:bb:f8:e7:f5:14:24:09:4f:72:55:e1:86:2b: 9e:39:1e:89:dd:42:3f:8c:2c:d7:fe:cd:2d:b9:f1:6e:63:4a: f0:18:48:78:55:cd:4c:df:04:3b:90:6a:ab:40:cd:37:9c:f1: 15:1a:83:6f:e7:5c:da:3a:63:85:d5:55:c3:89:f5:dd:3b:1d: 04:70:0a:3c:de:96:e5:ae:ce:98:a1:fb:9a:3c:f1:46:f1:69: a9:f1:9f:e6:40:8b:eb:da:a9:d0:b7:72:0a:17:e3:b6:10:33: aa:9b:4d:fa:84:22:ce:cc:b3:a6:c6:d8:b4:5a:15:6d:36:24: 46:59:62:32:5b:47:f7:b0:09:7a:d0:18:44:d0:51:46:94:c8: ee:24:dd:c1:f6:19:11:6a:c0:c0:87:cd:96:27:47:2d:9f:ab: 41:ed:84:31:05:7c:f2:ee:c3:f1:1c:bb:38:fc:25:bd:bf:a7: 72:d7:7a:65:2d:8f:28:3c:a5:2c:f6:c1:bf:d6:22:d8:35:33: 03:c0:c2:f6:15:23:42:66:5d:ed:dc:45:61:19:b7:b6:91:1b: 3d:1c:c0:2e:77:7e:07:9c:cb:d8:9b:6d:fc:6d:71:6c:bf:dd: af:12:9b:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbkiTivaE5bAx27n2PC5nuPVMSR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzU5NEU5MzZFMUUyOEFENUFENzNBNkJGMjhBRTM4 QzAwMjhGQjAeFw0yNTA2MTQwMDA4NDBaFw0yNTA2MTUwMTQyNDBaMDMxMTAvBgNV BAMTKEI2NDI5RDgyRUM0RjVCRUQyRkJDOTY5OUUxNDBFNTk3OEZCNzI4OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC25c1d8AOShHr7O6fnBX29K9/L FhmNVbcuqtDNZNkVQB7ybtzXVKfdXcfc4jNEzG7HJpDntal32P8dbXI24arM3SUT kAv9CLeZ7Z2ClhGIxldO6vpwdunGKeA8HUcLMmtNpL4kxZ2QfosAN2uDP7O3pw9B j00V4kFq7At7DbuH021ObSE0PAM0nLxYcA9G4gT0OC5lS22koMfmSn21iw7UKMQe uucEznvlzgJxHb7hBgBnp720nji+wJ3N8h2aaxPNxhRlMMikHWp4Pe9OCuFyccOh o3z8AZcVlV23nn8T3GWrsd/9XQ1OIAJ4K/KT7vgksLeYT4DWLRVzrjIWDrivAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUtkKdguxPW+0vvJaZ4UDll4+3KJYwHwYDVR0j BBgwFoAULJxZTpNuHiitWtc6a/KK44wAKPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpy aEEvMS8yQzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDOUM1OTRFOTM2RTFFMjhB RDVBRDczQTZCRjI4QUUzOEMwMDI4RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpyaEEvMS8y QzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaIY8BDw252mDsJmgspLoMs522Gj18t67+Of1FCQJT3JV4YYrnjkeid1CP4ws 1/7NLbnxbmNK8BhIeFXNTN8EO5Bqq0DNN5zxFRqDb+dc2jpjhdVVw4n13TsdBHAK PN6W5a7OmKH7mjzxRvFpqfGf5kCL69qp0LdyChfjthAzqptN+oQizsyzpsbYtFoV bTYkRlliMltH97AJetAYRNBRRpTI7iTdwfYZEWrAwIfNlidHLZ+rQe2EMQV88u7D 8Ry7OPwlvb+nctd6ZS2PKDylLPbBv9Yi2DUzA8DC9hUjQmZd7dxFYRm3tpEbPRzA Lnd+B5zL2Jtt/G1xbL/drxKbNg== -----END CERTIFICATE-----Generated at Sat Jun 14 07:22:08 2025 by rpki-client