$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft File: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft (raw, json) Hash identifier: pAVVDvf0D213eHn8Q8ywcQZU1UvJtrVM0oWQGsLTPF4= Subject key identifier: BF:3D:D1:56:3C:73:FE:E9:A7:66:09:61:81:46:08:98:9E:34:DA:70 Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB Certificate issuer: /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Certificate serial: 787276259BFF9D3B0E01090F44F0F2663B775D8E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft Manifest number: 0242 Signing time: Tue 10 Jun 2025 21:13:33 +0000 Manifest this update: Tue 10 Jun 2025 21:08:33 +0000 Manifest next update: Wed 11 Jun 2025 22:05:33 +0000 Files and hashes: 1: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl (hash: CBOxuxYW+Pvhe8SjdSm0UnOmq5KJnjAG8o2/uL40hzU=) 2: 323830343a353431383a3a2f33322d3438203d3e20323638363238.roa (hash: hHMhRh5DdSaR5fzUNnHJawbPKzBIyAZaoDmsUo8IWgk=) 3: 34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (hash: MFaOGmG3uk10MnFBlQJ/Pj6U7TcWeAadSbIdDIDPMAE=) 4: 3230382e35322e3136322e302f32332d3234203d3e20323638363238.roa (hash: maW2GNrI3AoqX8WFxWiMg/YOqECnU1fsdQA4kdJdduU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 22:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:72:76:25:9b:ff:9d:3b:0e:01:09:0f:44:f0:f2:66:3b:77:5d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Validity Not Before: Jun 10 21:08:33 2025 GMT Not After : Jun 11 22:05:33 2025 GMT Subject: CN=BF3DD1563C73FEE9A7660961814608989E34DA70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:02:d9:2a:9c:d3:eb:2a:47:f6:80:70:05:44: f9:99:54:fd:3d:16:12:30:38:e4:fe:0b:ed:4e:6a: 3a:8c:29:1d:d2:fb:f7:76:44:b3:e9:47:a1:5c:cf: 44:15:d5:54:5f:18:a7:c2:08:5c:cd:06:ac:6d:11: 9a:9a:87:01:79:87:47:38:a4:04:30:a9:eb:a6:79: 51:f6:98:5a:ba:05:b0:9a:f2:cc:69:08:f5:32:5b: 1e:42:01:1e:2e:27:62:eb:26:e7:de:10:c6:b2:14: 25:f9:fa:3b:77:fe:07:3f:16:f4:51:ec:48:88:a7: 80:a4:c9:7f:8d:b4:01:7f:88:3b:58:bb:8d:c8:b0: 6a:80:9f:01:ab:71:6c:28:59:04:a4:2b:71:33:23: c6:40:21:b7:c5:57:c5:af:87:0a:6c:49:a4:36:94: c5:12:35:ad:53:07:31:6c:79:ec:7c:87:f4:b3:86: 66:f9:89:50:7f:ed:13:a4:81:d3:10:80:08:92:73: 8f:8f:2e:81:c4:8c:1d:24:c0:fa:78:c6:2b:71:86: 59:88:35:2c:d2:8c:46:75:f8:fb:d0:7e:1f:81:c4: 3a:26:74:ee:e0:26:e9:82:ce:0b:83:0c:54:ba:70: 0d:96:45:b2:2f:e1:0b:60:8d:5c:b0:0e:8b:4e:00: 23:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3D:D1:56:3C:73:FE:E9:A7:66:09:61:81:46:08:98:9E:34:DA:70 X509v3 Authority Key Identifier: keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:db:f6:59:fd:f8:8c:1f:cb:d6:af:35:f1:cf:f8:8d:03:4a: f1:9c:8d:c3:93:b0:9c:a2:e0:53:8e:6d:74:d9:9f:3c:37:b0: c7:cf:cc:0d:a8:fd:63:f6:40:67:4f:76:3e:e2:d7:d6:24:4e: 4a:27:8e:70:95:20:76:f3:a7:bb:65:b1:17:ea:43:4c:68:5d: 0d:c6:60:42:11:52:0c:f8:9f:1b:a1:45:a2:02:af:b6:2e:1d: 8d:62:47:88:e0:13:4c:de:71:a8:fa:80:97:97:ea:5a:dd:b1: 7f:fe:2d:c7:ee:42:9c:f7:54:63:03:7a:95:a7:86:78:8f:90: 08:dc:2c:d9:22:57:61:f7:0b:5e:0b:9a:68:79:26:07:7c:69: d7:50:db:cb:94:38:eb:0e:9f:fe:40:21:eb:2e:53:42:ee:ab: 93:66:55:57:0a:27:7d:b7:4a:06:24:2a:fd:2a:d9:99:62:a0: b7:c2:ed:7d:ac:93:d6:db:5a:a0:59:2e:4b:f0:05:66:14:37: 9e:1d:d7:4d:52:83:4c:88:4c:bb:44:25:19:c8:e9:08:42:c9: 02:2d:6b:07:48:bc:de:45:be:e7:10:b9:f0:aa:af:ad:23:0e: f9:69:8e:8a:12:52:de:ea:dd:9c:29:14:f8:21:98:fa:7c:fc: dd:3a:0a:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeHJ2JZv/nTsOAQkPRPDyZjt3XY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzU5NEU5MzZFMUUyOEFENUFENzNBNkJGMjhBRTM4 QzAwMjhGQjAeFw0yNTA2MTAyMTA4MzNaFw0yNTA2MTEyMjA1MzNaMDMxMTAvBgNV BAMTKEJGM0REMTU2M0M3M0ZFRTlBNzY2MDk2MTgxNDYwODk4OUUzNERBNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtAtkqnNPrKkf2gHAFRPmZVP09 FhIwOOT+C+1OajqMKR3S+/d2RLPpR6Fcz0QV1VRfGKfCCFzNBqxtEZqahwF5h0c4 pAQwqeumeVH2mFq6BbCa8sxpCPUyWx5CAR4uJ2LrJufeEMayFCX5+jt3/gc/FvRR 7EiIp4CkyX+NtAF/iDtYu43IsGqAnwGrcWwoWQSkK3EzI8ZAIbfFV8WvhwpsSaQ2 lMUSNa1TBzFseex8h/Szhmb5iVB/7ROkgdMQgAiSc4+PLoHEjB0kwPp4xitxhlmI NSzSjEZ1+PvQfh+BxDomdO7gJumCzguDDFS6cA2WRbIv4QtgjVywDotOACPLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvz3RVjxz/umnZglhgUYImJ402nAwHwYDVR0j BBgwFoAULJxZTpNuHiitWtc6a/KK44wAKPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpy aEEvMS8yQzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDOUM1OTRFOTM2RTFFMjhB RDVBRDczQTZCRjI4QUUzOEMwMDI4RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpyaEEvMS8y QzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAedv2Wf34jB/L1q818c/4jQNK8ZyNw5OwnKLgU45tdNmfPDewx8/MDaj9Y/ZA Z092PuLX1iROSieOcJUgdvOnu2WxF+pDTGhdDcZgQhFSDPifG6FFogKvti4djWJH iOATTN5xqPqAl5fqWt2xf/4tx+5CnPdUYwN6laeGeI+QCNws2SJXYfcLXguaaHkm B3xp11Dby5Q46w6f/kAh6y5TQu6rk2ZVVwonfbdKBiQq/SrZmWKgt8LtfayT1tta oFkuS/AFZhQ3nh3XTVKDTIhMu0QlGcjpCELJAi1rB0i83kW+5xC58KqvrSMO+WmO ihJS3urdnCkU+CGY+nz83ToKTg== -----END CERTIFICATE-----Generated at Wed Jun 11 01:41:41 2025 by rpki-client