$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft File: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft (raw, json) Hash identifier: YdcM53MPFRoTuWJCE+UsDfEnvjuDHnPKy8Cxk5RcfK8= Subject key identifier: A6:AA:95:33:EC:7A:5A:B9:2B:8A:1E:A4:55:EF:F8:13:9F:8D:97:AF Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB Certificate issuer: /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Certificate serial: 42B4F5BFF562CCECE344EB9264F9276DDB51F96C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft Manifest number: 0245 Signing time: Fri 13 Jun 2025 04:48:39 +0000 Manifest this update: Fri 13 Jun 2025 04:43:39 +0000 Manifest next update: Sat 14 Jun 2025 08:11:39 +0000 Files and hashes: 1: 3230382e35322e3136322e302f32332d3234203d3e20323638363238.roa (hash: maW2GNrI3AoqX8WFxWiMg/YOqECnU1fsdQA4kdJdduU=) 2: 323830343a353431383a3a2f33322d3438203d3e20323638363238.roa (hash: hHMhRh5DdSaR5fzUNnHJawbPKzBIyAZaoDmsUo8IWgk=) 3: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl (hash: v+J9SJrLDUmbMcDBQL8b5TLGXTMbGb3SfADWKOWyahs=) 4: 34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (hash: MFaOGmG3uk10MnFBlQJ/Pj6U7TcWeAadSbIdDIDPMAE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 14 Jun 2025 08:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b4:f5:bf:f5:62:cc:ec:e3:44:eb:92:64:f9:27:6d:db:51:f9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Validity Not Before: Jun 13 04:43:39 2025 GMT Not After : Jun 14 08:11:39 2025 GMT Subject: CN=A6AA9533EC7A5AB92B8A1EA455EFF8139F8D97AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fb:3d:26:68:aa:30:0b:38:2b:1b:be:d5:fb: 8b:b5:6c:c5:f3:53:3a:4c:6d:14:39:31:f0:70:72: a4:bc:a2:91:91:f2:41:a8:e1:c1:89:28:64:af:e2: ba:45:a2:d0:5e:49:72:c5:ce:cf:6d:c9:4b:cc:1a: 4a:b8:a8:3a:0f:fc:c4:12:6b:e3:17:fd:bc:93:20: 94:1d:33:e9:41:61:20:2f:2d:4c:36:a9:c8:78:e9: 97:da:84:74:54:84:87:81:b7:94:dc:3a:4b:1d:a0: 3f:1a:a2:e9:8c:55:92:ae:91:58:71:fd:64:7e:df: 88:df:a1:25:45:16:8d:4a:3c:f0:38:b6:39:4f:06: 0d:c3:86:04:97:99:05:8a:8e:89:a6:d1:40:de:f1: a0:71:32:eb:76:cb:4c:55:b1:83:e3:d6:ff:65:53: a7:50:19:fe:ef:fa:d6:0a:d5:cd:c1:41:60:79:32: fe:d9:e3:2d:fe:e8:29:b0:a0:16:8e:87:f5:48:d9: e4:0d:d5:96:ae:c7:23:9a:bc:fd:97:6e:7c:55:cf: 4f:61:50:87:e7:f1:0b:cc:80:86:eb:b0:59:2e:80: a7:52:2a:9e:eb:a1:aa:b7:f9:08:bf:f9:fc:0b:f3: c9:26:2d:b5:8e:55:5b:64:d1:a9:51:54:00:62:be: 0f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AA:95:33:EC:7A:5A:B9:2B:8A:1E:A4:55:EF:F8:13:9F:8D:97:AF X509v3 Authority Key Identifier: keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:dc:62:0d:f5:86:4d:15:fe:ec:f0:f8:b0:12:61:92:a7:5a: 04:84:06:b6:9d:bd:89:c5:7c:0c:e3:92:0d:72:7c:84:38:f8: 38:f4:02:35:be:d2:0b:f7:39:73:dd:bf:07:a0:d5:30:68:e8: f2:cd:0e:90:6f:c3:d6:83:c5:f4:95:4c:fa:fc:05:3a:a4:d8: 4d:cb:49:9f:a4:7c:cf:5a:0f:38:d8:4b:87:88:02:d6:76:5e: 3f:a3:06:0e:ef:fe:c0:46:60:12:b3:ca:5b:e9:19:84:be:ac: 0e:0c:be:88:ce:6a:b1:83:d9:04:ed:ef:c7:0e:db:e1:78:ad: b5:ee:21:cf:e4:9f:f6:a8:20:21:3c:a0:26:3f:29:1d:be:f7: bf:77:5c:26:48:25:1c:5c:d0:e2:a2:03:5a:06:61:d5:b5:fc: 57:96:bc:d3:8d:76:26:dd:6b:3b:2a:07:25:c7:da:ec:d4:54: 4c:76:54:b4:84:37:13:f3:d8:35:a3:64:37:a3:1f:09:7c:c1: 6a:65:82:4a:2d:49:bb:03:bd:2c:2b:18:e6:bb:52:fd:70:98: bd:e5:60:db:bb:02:8d:ae:02:0d:c5:9e:81:16:bc:90:ef:c0: 45:9b:61:a6:a6:e6:1f:f6:d7:32:31:23:2d:a3:d6:46:58:59: a7:5f:dc:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQrT1v/VizOzjROuSZPknbdtR+WwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzU5NEU5MzZFMUUyOEFENUFENzNBNkJGMjhBRTM4 QzAwMjhGQjAeFw0yNTA2MTMwNDQzMzlaFw0yNTA2MTQwODExMzlaMDMxMTAvBgNV BAMTKEE2QUE5NTMzRUM3QTVBQjkyQjhBMUVBNDU1RUZGODEzOUY4RDk3QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL+z0maKowCzgrG77V+4u1bMXz UzpMbRQ5MfBwcqS8opGR8kGo4cGJKGSv4rpFotBeSXLFzs9tyUvMGkq4qDoP/MQS a+MX/byTIJQdM+lBYSAvLUw2qch46ZfahHRUhIeBt5TcOksdoD8aoumMVZKukVhx /WR+34jfoSVFFo1KPPA4tjlPBg3DhgSXmQWKjomm0UDe8aBxMut2y0xVsYPj1v9l U6dQGf7v+tYK1c3BQWB5Mv7Z4y3+6CmwoBaOh/VI2eQN1ZauxyOavP2XbnxVz09h UIfn8QvMgIbrsFkugKdSKp7roaq3+Qi/+fwL88kmLbWOVVtk0alRVABivg/nAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpqqVM+x6Wrkrih6kVe/4E5+Nl68wHwYDVR0j BBgwFoAULJxZTpNuHiitWtc6a/KK44wAKPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpy aEEvMS8yQzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDOUM1OTRFOTM2RTFFMjhB RDVBRDczQTZCRjI4QUUzOEMwMDI4RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpyaEEvMS8y QzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASNxiDfWGTRX+7PD4sBJhkqdaBIQGtp29icV8DOOSDXJ8hDj4OPQCNb7SC/c5 c92/B6DVMGjo8s0OkG/D1oPF9JVM+vwFOqTYTctJn6R8z1oPONhLh4gC1nZeP6MG Du/+wEZgErPKW+kZhL6sDgy+iM5qsYPZBO3vxw7b4Xitte4hz+Sf9qggITygJj8p Hb73v3dcJkglHFzQ4qIDWgZh1bX8V5a80412Jt1rOyoHJcfa7NRUTHZUtIQ3E/PY NaNkN6MfCXzBamWCSi1JuwO9LCsY5rtS/XCYveVg27sCja4CDcWegRa8kO/ARZth pqbmH/bXMjEjLaPWRlhZp1/cNA== -----END CERTIFICATE-----Generated at Sat Jun 14 00:31:57 2025 by rpki-client