$ rpki-client -vvf rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft File: 24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft (raw, json) Hash identifier: 2ZsmJbOi2El0AJ+5OM7yZtECEHOQiYwoIyMZ6SCt1lU= Subject key identifier: 93:AF:56:30:09:26:0E:01:59:13:70:A1:7B:DA:8B:0F:00:DC:1E:8F Authority key identifier: 24:EB:26:B6:D8:2E:15:65:FF:CB:1B:E8:BC:0C:2C:BB:B5:A8:07:82 Certificate issuer: /CN=24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782 Certificate serial: 756DD8FC9EFABF33B6EB8377E0D7A7903A62C42E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.cer Subject info access: rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft Manifest number: 0235 Signing time: Sun 08 Jun 2025 11:26:05 +0000 Manifest this update: Sun 08 Jun 2025 11:21:05 +0000 Manifest next update: Mon 09 Jun 2025 15:09:05 +0000 Files and hashes: 1: 24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.crl (hash: kx1AEX84C11ZqmLDH4lqw6iA75FDWrM0cIUcSexjqhY=) 2: 34352e3232352e382e302f32322d3234203d3e20323636393731.roa (hash: zGWGViH7td7rA46kVTE6+Y88vjDF1r+sX+Mq0/2vUdc=) 3: 323830343a343632343a3a2f33322d3438203d3e20323636393731.roa (hash: 2k3z59sIIIZSbsBKAV37RQcGmmjmnAqoXMIYJjnLyMI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.crl rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Jun 2025 15:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:6d:d8:fc:9e:fa:bf:33:b6:eb:83:77:e0:d7:a7:90:3a:62:c4:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782 Validity Not Before: Jun 8 11:21:05 2025 GMT Not After : Jun 9 15:09:05 2025 GMT Subject: CN=93AF563009260E01591370A17BDA8B0F00DC1E8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:49:1e:99:62:9c:20:30:d5:0a:08:a7:d3: be:38:18:c9:03:25:bb:2a:c2:35:a8:a3:5b:0b:b5: 04:5a:d2:c6:be:7c:f3:c1:20:17:4f:f4:4c:cd:ad: ea:7c:50:23:01:57:de:e3:1c:ad:4f:a2:4f:3e:77: c7:d2:cb:ec:82:93:05:28:bb:49:00:db:6b:ac:05: d0:f6:b2:3a:ed:f1:a4:7f:ab:98:71:89:1d:b4:e1: 36:cc:e7:cb:a1:79:70:3a:b0:eb:cf:dc:d2:34:48: 09:00:60:a7:34:d5:ce:3b:9f:08:9e:10:b5:a5:cb: 15:4f:c3:4f:fc:46:fb:45:a8:7d:de:56:9e:5e:f4: 48:7d:95:59:cc:ca:13:5e:1e:f5:a4:84:a6:ee:8e: 1b:5c:04:f5:8e:82:90:80:ab:01:1f:a3:82:2c:5e: 58:c3:04:55:2c:4b:14:98:1b:5e:14:e3:56:90:22: 5d:08:a6:53:dd:04:22:3a:4d:1b:a9:67:49:53:d4: c3:ee:b1:b8:17:55:41:b0:01:5d:6b:cb:30:f7:ae: ce:66:97:9a:33:0a:70:03:16:72:b7:c5:97:c2:9c: cd:61:8c:d0:a6:18:d1:e6:72:7d:cf:0b:3b:5e:7d: 1b:ad:0a:4f:f6:15:9d:15:30:77:ac:5b:aa:14:06: 80:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AF:56:30:09:26:0E:01:59:13:70:A1:7B:DA:8B:0F:00:DC:1E:8F X509v3 Authority Key Identifier: keyid:24:EB:26:B6:D8:2E:15:65:FF:CB:1B:E8:BC:0C:2C:BB:B5:A8:07:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ExApo75MGCDxkT4GEsH6mAUc9i19FizoCf2QPfySsfE/1/24EB26B6D82E1565FFCB1BE8BC0C2CBBB5A80782.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a7:d8:85:4c:d3:cb:b7:23:24:c9:68:ee:04:0c:38:aa:56: e3:40:06:ac:b7:70:04:b7:3e:69:70:2e:6f:93:15:59:9b:b6: fb:e4:d1:da:6e:89:8f:1a:93:6b:81:b6:37:04:32:42:ca:43: 30:c4:3f:8a:b0:86:56:27:1c:c2:25:f6:91:23:6d:bd:40:ca: 78:a1:59:0a:53:9c:01:48:f7:1c:7e:3d:ad:e6:c7:48:d6:48: 99:1f:83:a6:6a:fc:74:78:2c:67:01:a4:17:d3:79:e8:dc:0c: 21:78:75:2b:49:7f:21:24:a6:68:47:d6:bf:86:08:43:40:01: a2:6f:31:d8:19:4f:0e:0e:e1:04:d3:d1:f2:b9:d8:48:15:1d: 94:c2:b6:ac:ca:d8:65:11:f4:76:74:b4:77:5e:85:2c:f9:0c: af:fb:14:88:34:2c:74:63:bc:dc:84:2f:64:84:eb:6d:6e:53: ef:2b:96:92:2b:7b:18:fa:aa:89:9c:42:8e:91:f8:58:73:ab: 41:f1:0e:89:09:ba:2c:07:b0:69:86:a4:f8:70:0a:5e:ae:a7: 48:f6:82:1f:4a:ea:a9:e4:bc:57:e5:72:8f:5c:a7:63:69:c7: 51:4d:4d:90:b8:dc:28:6c:a1:2a:b5:79:4a:38:ab:53:76:96: 5b:d6:b7:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdW3Y/J76vzO264N34NenkDpixC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRFQjI2QjZEODJFMTU2NUZGQ0IxQkU4QkMwQzJDQkJC NUE4MDc4MjAeFw0yNTA2MDgxMTIxMDVaFw0yNTA2MDkxNTA5MDVaMDMxMTAvBgNV BAMTKDkzQUY1NjMwMDkyNjBFMDE1OTEzNzBBMTdCREE4QjBGMDBEQzFFOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6S0kemWKcIDDVCgin0744GMkD JbsqwjWoo1sLtQRa0sa+fPPBIBdP9EzNrep8UCMBV97jHK1Pok8+d8fSy+yCkwUo u0kA22usBdD2sjrt8aR/q5hxiR204TbM58uheXA6sOvP3NI0SAkAYKc01c47nwie ELWlyxVPw0/8RvtFqH3eVp5e9Eh9lVnMyhNeHvWkhKbujhtcBPWOgpCAqwEfo4Is XljDBFUsSxSYG14U41aQIl0IplPdBCI6TRupZ0lT1MPusbgXVUGwAV1ryzD3rs5m l5ozCnADFnK3xZfCnM1hjNCmGNHmcn3PCztefRutCk/2FZ0VMHesW6oUBoDbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUk69WMAkmDgFZE3Che9qLDwDcHo8wHwYDVR0j BBgwFoAUJOsmttguFWX/yxvovAwsu7WoB4IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0V4QXBvNzVNR0NEeGtUNEdFc0g2bUFVYzlpMTlGaXpvQ2YyUVBmeVNz ZkUvMS8yNEVCMjZCNkQ4MkUxNTY1RkZDQjFCRThCQzBDMkNCQkI1QTgwNzgyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0RUIyNkI2RDgyRTE1NjVG RkNCMUJFOEJDMEMyQ0JCQjVBODA3ODIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0V4QXBvNzVNR0NEeGtUNEdFc0g2bUFVYzlpMTlGaXpvQ2YyUVBmeVNzZkUvMS8y NEVCMjZCNkQ4MkUxNTY1RkZDQjFCRThCQzBDMkNCQkI1QTgwNzgyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZqfYhUzTy7cjJMlo7gQMOKpW40AGrLdwBLc+aXAub5MVWZu2++TR2m6JjxqT a4G2NwQyQspDMMQ/irCGViccwiX2kSNtvUDKeKFZClOcAUj3HH49rebHSNZImR+D pmr8dHgsZwGkF9N56NwMIXh1K0l/ISSmaEfWv4YIQ0ABom8x2BlPDg7hBNPR8rnY SBUdlMK2rMrYZRH0dnS0d16FLPkMr/sUiDQsdGO83IQvZITrbW5T7yuWkit7GPqq iZxCjpH4WHOrQfEOiQm6LAewaYak+HAKXq6nSPaCH0rqqeS8V+Vyj1ynY2nHUU1N kLjcKGyhKrV5SjirU3aWW9a3cw== -----END CERTIFICATE-----Generated at Mon Jun 9 07:07:42 2025 by rpki-client