$ rpki-client -vvf rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft File: 2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft (raw, json) Hash identifier: DV1etJtCBhdrw4HI0wvXkqezGUysuYF/a4vLQHCYh9s= Subject key identifier: 58:9D:04:76:4E:A8:EE:F1:8E:E3:DF:A5:FE:A0:E1:48:9D:E5:5B:ED Authority key identifier: 2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3 Certificate issuer: /CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3 Certificate serial: 39260BF95B10D2AF8F90841A24672AF0754CE27E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer Subject info access: rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft Manifest number: 022D Signing time: Wed 04 Jun 2025 08:47:50 +0000 Manifest this update: Wed 04 Jun 2025 08:42:50 +0000 Manifest next update: Thu 05 Jun 2025 12:05:50 +0000 Files and hashes: 1: 3137372e32312e34382e302f32302d3234203d3e20323633303834.roa (hash: e/s1SwprzaW2XI2ybtfgpJhbKCKNV7Oqf5bmwFWZXOU=) 2: 2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl (hash: bgBTz/r3DTqU5beIs4hlwT/6MRRUgYVK8yFgeC3LGbw=) 3: 323830343a6134383a3a2f33322d3438203d3e20323633303834.roa (hash: jPrR+RSh1mv/rOMCUWCMEK9RXpMvIUpnibJtczV7Zt8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 05 Jun 2025 11:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:26:0b:f9:5b:10:d2:af:8f:90:84:1a:24:67:2a:f0:75:4c:e2:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B7568CA4C33430EB72DDBC822D40E65F63042A3 Validity Not Before: Jun 4 08:42:50 2025 GMT Not After : Jun 5 12:05:50 2025 GMT Subject: CN=589D04764EA8EEF18EE3DFA5FEA0E1489DE55BED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2c:34:d1:df:24:35:e9:17:52:1e:b7:65:22: 45:0f:26:de:0e:dc:67:4a:fc:1b:22:4e:7b:d4:1d: 43:f1:d8:ad:4c:54:8d:d4:c0:19:6d:a3:11:84:88: f5:80:8e:81:20:ab:8f:9e:9b:d0:e3:8f:5d:ef:04: 84:be:58:d8:8a:5c:d2:3c:8f:87:cd:fe:f6:23:ce: b0:3d:9e:ce:5d:53:80:75:c3:f1:a1:f5:77:b8:c3: 8d:00:f4:e2:36:f1:e2:3f:58:7d:fe:92:4c:fb:09: 81:35:10:fd:44:ef:09:b0:aa:d4:bb:9b:6f:4b:de: b4:c8:e3:cf:d7:c9:d2:e4:25:fa:c3:c0:0a:bf:7b: 83:c1:9a:51:00:53:f4:c5:a6:05:c7:3c:6e:a2:a7: fa:cb:fa:42:9d:0b:83:eb:e1:ea:e1:d2:a9:76:07: c0:6a:f4:d8:b5:7c:a4:d2:db:56:94:e5:ca:a1:e2: eb:4c:d3:26:0f:b1:71:8e:38:48:8b:ed:96:75:34: ce:fd:1e:4d:90:1b:ca:a4:23:bd:dd:fc:96:71:dc: 08:a6:f7:9b:98:4a:ee:81:a0:c3:e2:4a:ea:2f:b1: f2:c4:a9:b0:b1:d5:3e:3e:d0:35:bf:fe:06:26:1a: f9:d0:16:20:a7:20:1d:06:84:1d:d5:4a:20:71:6a: e4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9D:04:76:4E:A8:EE:F1:8E:E3:DF:A5:FE:A0:E1:48:9D:E5:5B:ED X509v3 Authority Key Identifier: keyid:2B:75:68:CA:4C:33:43:0E:B7:2D:DB:C8:22:D4:0E:65:F6:30:42:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7568CA4C33430EB72DDBC822D40E65F63042A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RBkxYdDHDXH2SaXweaFQ1jAnsXmZqEspsjftAGREd7Y/0/2B7568CA4C33430EB72DDBC822D40E65F63042A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7a:7d:e5:4e:c9:6b:cc:2b:9a:af:c4:bc:00:0b:6f:d7:bc: 40:99:11:9e:7a:c5:27:50:97:f0:53:36:83:34:93:44:b6:2c: 48:82:65:f7:f2:c0:b6:7d:3a:15:d7:7a:15:d4:88:9a:31:33: c2:66:45:4a:1a:75:f6:12:88:21:28:43:4e:34:69:82:f1:14: c3:c5:81:6b:df:a2:39:f8:2d:dc:a7:82:5b:9e:5d:3d:fe:dc: 83:8e:01:1d:9c:c4:69:39:22:d1:db:7b:57:47:26:2a:0b:8c: 90:76:6d:1f:64:a8:01:a2:d2:69:a6:3c:1c:2b:85:0f:78:81: 24:76:71:77:1d:05:46:20:3d:a9:3c:5c:2c:4d:14:d2:51:60: a3:e4:19:cd:a2:5d:13:cb:f2:b7:b4:58:80:ff:b3:ed:10:8a: 6b:9d:20:ed:c2:88:d7:24:ee:fb:1b:fa:6d:56:c6:cb:d0:33: a3:80:d4:51:96:63:2f:ad:dd:05:fe:17:99:69:41:ab:eb:5f: 4f:9a:19:80:ce:9d:22:44:51:b7:5a:e3:a8:c4:0d:aa:90:67: 23:a9:49:f3:9f:92:41:94:2c:b1:4b:71:63:fd:06:9b:0e:f6: 67:68:21:06:69:c0:b5:dd:21:ea:6e:79:33:a0:ad:e7:a6:5f: 38:af:bc:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOSYL+VsQ0q+PkIQaJGcq8HVM4n4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI3NTY4Q0E0QzMzNDMwRUI3MkREQkM4MjJENDBFNjVG NjMwNDJBMzAeFw0yNTA2MDQwODQyNTBaFw0yNTA2MDUxMjA1NTBaMDMxMTAvBgNV BAMTKDU4OUQwNDc2NEVBOEVFRjE4RUUzREZBNUZFQTBFMTQ4OURFNTVCRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDALDTR3yQ16RdSHrdlIkUPJt4O 3GdK/BsiTnvUHUPx2K1MVI3UwBltoxGEiPWAjoEgq4+em9Djj13vBIS+WNiKXNI8 j4fN/vYjzrA9ns5dU4B1w/Gh9Xe4w40A9OI28eI/WH3+kkz7CYE1EP1E7wmwqtS7 m29L3rTI48/XydLkJfrDwAq/e4PBmlEAU/TFpgXHPG6ip/rL+kKdC4Pr4erh0ql2 B8Bq9Ni1fKTS21aU5cqh4utM0yYPsXGOOEiL7ZZ1NM79Hk2QG8qkI73d/JZx3Aim 95uYSu6BoMPiSuovsfLEqbCx1T4+0DW//gYmGvnQFiCnIB0GhB3VSiBxauSxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUWJ0Edk6o7vGO49+l/qDhSJ3lW+0wHwYDVR0j BBgwFoAUK3VoykwzQw63LdvIItQOZfYwQqMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1JCa3hZZERIRFhIMlNhWHdlYUZRMWpBbnNYbVpxRXNwc2pmdEFHUkVk N1kvMC8yQjc1NjhDQTRDMzM0MzBFQjcyRERCQzgyMkQ0MEU2NUY2MzA0MkEzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNzU2OENBNEMzMzQzMEVC NzJEREJDODIyRDQwRTY1RjYzMDQyQTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1JCa3hZZERIRFhIMlNhWHdlYUZRMWpBbnNYbVpxRXNwc2pmdEFHUkVkN1kvMC8y Qjc1NjhDQTRDMzM0MzBFQjcyRERCQzgyMkQ0MEU2NUY2MzA0MkEzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlXp95U7Ja8wrmq/EvAALb9e8QJkRnnrFJ1CX8FM2gzSTRLYsSIJl9/LAtn06 Fdd6FdSImjEzwmZFShp19hKIIShDTjRpgvEUw8WBa9+iOfgt3KeCW55dPf7cg44B HZzEaTki0dt7V0cmKguMkHZtH2SoAaLSaaY8HCuFD3iBJHZxdx0FRiA9qTxcLE0U 0lFgo+QZzaJdE8vyt7RYgP+z7RCKa50g7cKI1yTu+xv6bVbGy9Azo4DUUZZjL63d Bf4XmWlBq+tfT5oZgM6dIkRRt1rjqMQNqpBnI6lJ85+SQZQssUtxY/0Gmw72Z2gh BmnAtd0h6m55M6Ct56ZfOK+8iw== -----END CERTIFICATE-----Generated at Wed Jun 4 11:24:19 2025 by rpki-client