$ rpki-client -vvf rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft File: 1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft (raw, json) Hash identifier: E0V2mhLVmtrnsCR+dhIqqIV8NPfsp1BsBHHoAXX6wPI= Subject key identifier: C9:42:B2:B0:0B:A8:9C:76:C3:F3:8E:70:E0:79:3B:72:DA:0A:09:43 Authority key identifier: 1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14 Certificate issuer: /CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14 Certificate serial: 23E1F57C1D055BDE1D9594DA8801654A98E1B8E1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer Subject info access: rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft Manifest number: 52 Signing time: Sat 14 Jun 2025 02:34:32 +0000 Manifest this update: Sat 14 Jun 2025 02:29:32 +0000 Manifest next update: Sun 15 Jun 2025 03:57:32 +0000 Files and hashes: 1: 1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl (hash: AG3RIlM5d9uFtu4TbSDXwJB6pPr4dIUW6QcAJCzLjTA=) 2: 323830343a333137633a3a2f33322d3634203d3e20323635303138.roa (hash: ez+ajbN41gMQLCvCNkwbbF7k57+fkGAT5m28gVygc5E=) 3: 3136302e3233382e3230302e302f32322d3332203d3e20323635303138.roa (hash: hv7rV0YAjf7OIxTmW4CmSIfCjHYfqZrGrG5y4H2smTY=) 4: 3137302e38342e3139362e302f32322d3332203d3e20323635303138.roa (hash: GMqVz+pNv4jlVq8AM/MysXTepHhSdbVZyc7Np+Ty+wo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 15 Jun 2025 03:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e1:f5:7c:1d:05:5b:de:1d:95:94:da:88:01:65:4a:98:e1:b8:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14 Validity Not Before: Jun 14 02:29:32 2025 GMT Not After : Jun 15 03:57:32 2025 GMT Subject: CN=C942B2B00BA89C76C3F38E70E0793B72DA0A0943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:25:22:d4:82:4f:e1:9d:09:e2:be:87:c7:02: 87:36:8a:4b:36:13:8b:be:7b:43:1b:3a:61:90:86: fd:d1:11:7c:25:1d:40:19:44:d9:c3:50:ef:ac:d1: 73:c3:64:cf:03:f1:bf:7a:7b:2e:3d:17:89:97:fa: 5a:ca:4c:60:63:ca:41:1d:77:05:bd:77:3f:15:3b: cf:dc:a3:f2:e3:6b:20:98:1a:8e:8d:f0:a5:cd:00: 36:17:a1:70:b4:c7:1f:5c:f7:b4:08:f4:30:4b:d0: 62:0e:57:6d:21:f7:ba:d4:b0:e2:20:10:db:5b:17: c8:1a:27:99:5c:b2:39:c3:33:5d:10:b5:b0:8b:aa: ca:6f:03:d5:4e:ac:f6:1e:37:1f:71:9e:ce:84:62: 59:cb:eb:e4:15:b0:62:7b:78:80:3f:6a:1a:5c:16: 63:06:f8:94:d7:fd:3f:f0:05:11:ee:ed:ff:29:62: f0:29:25:32:a3:8c:d6:9e:f0:ca:5e:9d:0b:e7:dd: a0:10:a5:fb:02:21:2f:1f:98:6a:05:57:5e:73:75: a8:67:c5:d0:0f:9b:c2:65:36:e0:66:0c:69:0c:4e: 57:fb:bf:e7:5b:ed:f5:59:6f:b9:9e:77:db:3f:1e: ff:5e:1d:f8:74:45:57:4f:2f:8d:51:ff:f2:38:2f: b6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:42:B2:B0:0B:A8:9C:76:C3:F3:8E:70:E0:79:3B:72:DA:0A:09:43 X509v3 Authority Key Identifier: keyid:1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:c1:6e:98:b2:a6:71:70:ec:7f:83:e1:ff:87:4e:6c:42:e8: 9c:5f:97:2b:5f:b4:b3:98:17:ca:67:dd:31:cb:11:ea:7a:8c: 3b:32:2c:09:e9:c0:fa:64:81:fb:df:69:4f:0e:13:fc:6f:3e: 4e:25:63:17:d5:96:2c:f4:05:f0:fe:26:6a:97:5d:c3:85:82: 0a:bd:90:7a:9d:8d:6d:ce:e3:92:8e:2c:67:4f:6e:a4:bc:f7: 3d:eb:d6:b6:f6:b9:ff:d5:98:b5:46:50:3f:a9:d4:d1:5b:92: 50:49:a0:ec:ed:54:3b:fc:17:31:96:e3:91:3c:eb:8c:e0:cc: 57:01:1b:04:84:f0:01:f6:12:e0:72:98:e4:6a:23:66:e5:9a: 86:df:f4:f6:c4:2b:0c:9f:f9:dc:20:c1:11:98:16:b1:df:ce: 8e:60:af:2c:6b:a0:f3:7e:7f:36:02:37:e0:60:7e:47:88:fb: 14:ee:c8:a7:03:b0:5a:ed:69:7e:d2:25:e2:99:4f:56:14:5e: 95:3d:bc:85:b6:ad:ee:b7:9f:58:78:3f:0d:da:3a:1f:a4:8d: 69:d7:2b:13:10:94:a7:78:f4:50:fe:5d:43:24:19:4d:a9:b0: 72:85:e1:10:77:6b:82:c2:17:25:af:42:95:1f:11:84:ee:8f: 50:f1:5c:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI+H1fB0FW94dlZTaiAFlSpjhuOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2MEZBNzY5MDUxOUE5M0RGNjlEQjhFQUNDOUVEQjAz ODBCMkIxNDAeFw0yNTA2MTQwMjI5MzJaFw0yNTA2MTUwMzU3MzJaMDMxMTAvBgNV BAMTKEM5NDJCMkIwMEJBODlDNzZDM0YzOEU3MEUwNzkzQjcyREEwQTA5NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNJSLUgk/hnQnivofHAoc2iks2 E4u+e0MbOmGQhv3REXwlHUAZRNnDUO+s0XPDZM8D8b96ey49F4mX+lrKTGBjykEd dwW9dz8VO8/co/LjayCYGo6N8KXNADYXoXC0xx9c97QI9DBL0GIOV20h97rUsOIg ENtbF8gaJ5lcsjnDM10QtbCLqspvA9VOrPYeNx9xns6EYlnL6+QVsGJ7eIA/ahpc FmMG+JTX/T/wBRHu7f8pYvApJTKjjNae8MpenQvn3aAQpfsCIS8fmGoFV15zdahn xdAPm8JlNuBmDGkMTlf7v+db7fVZb7med9s/Hv9eHfh0RVdPL41R//I4L7a7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUyUKysAuonHbD845w4Hk7ctoKCUMwHwYDVR0j BBgwFoAUHmD6dpBRmpPfaduOrMntsDgLKxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2p2WUFxOFlNN3JpUnR4bWJ6WVlzNVQ2MzY1aUVnOUFpZUVENmRVQTRH a1ovMC8xRTYwRkE3NjkwNTE5QTkzREY2OURCOEVBQ0M5RURCMDM4MEIyQjE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFNjBGQTc2OTA1MTlBOTNE RjY5REI4RUFDQzlFREIwMzgwQjJCMTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2p2WUFxOFlNN3JpUnR4bWJ6WVlzNVQ2MzY1aUVnOUFpZUVENmRVQTRHa1ovMC8x RTYwRkE3NjkwNTE5QTkzREY2OURCOEVBQ0M5RURCMDM4MEIyQjE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAycFumLKmcXDsf4Ph/4dObELonF+XK1+0s5gXymfdMcsR6nqMOzIsCenA+mSB +99pTw4T/G8+TiVjF9WWLPQF8P4mapddw4WCCr2Qep2Nbc7jko4sZ09upLz3PevW tva5/9WYtUZQP6nU0VuSUEmg7O1UO/wXMZbjkTzrjODMVwEbBITwAfYS4HKY5Goj ZuWaht/09sQrDJ/53CDBEZgWsd/OjmCvLGug835/NgI34GB+R4j7FO7IpwOwWu1p ftIl4plPVhRelT28hbat7refWHg/Ddo6H6SNadcrExCUp3j0UP5dQyQZTamwcoXh EHdrgsIXJa9ClR8RhO6PUPFc7Q== -----END CERTIFICATE-----Generated at Sat Jun 14 20:30:48 2025 by rpki-client