$ rpki-client -vvf rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft File: 1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft (raw, json) Hash identifier: o0E7BGCg08bbjlMX6CNAwByqUeHmLYyERKpt+5NYuh0= Subject key identifier: 7F:AF:8C:88:50:B4:6B:D5:E1:AF:72:61:A2:54:E7:DE:BF:F4:A6:98 Authority key identifier: 1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14 Certificate issuer: /CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14 Certificate serial: 25A7B69788B8F399008B805A4252EB940947FC06 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer Subject info access: rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft Manifest number: 4F Signing time: Wed 11 Jun 2025 17:55:17 +0000 Manifest this update: Wed 11 Jun 2025 17:50:17 +0000 Manifest next update: Thu 12 Jun 2025 21:21:17 +0000 Files and hashes: 1: 1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl (hash: IZ2UbC2j/PVMrV/G5Z/Ao9xYUToVHKRVwYvFowaYoLc=) 2: 3136302e3233382e3230302e302f32322d3332203d3e20323635303138.roa (hash: hv7rV0YAjf7OIxTmW4CmSIfCjHYfqZrGrG5y4H2smTY=) 3: 323830343a333137633a3a2f33322d3634203d3e20323635303138.roa (hash: ez+ajbN41gMQLCvCNkwbbF7k57+fkGAT5m28gVygc5E=) 4: 3137302e38342e3139362e302f32322d3332203d3e20323635303138.roa (hash: GMqVz+pNv4jlVq8AM/MysXTepHhSdbVZyc7Np+Ty+wo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Jun 2025 21:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a7:b6:97:88:b8:f3:99:00:8b:80:5a:42:52:eb:94:09:47:fc:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E60FA7690519A93DF69DB8EACC9EDB0380B2B14 Validity Not Before: Jun 11 17:50:17 2025 GMT Not After : Jun 12 21:21:17 2025 GMT Subject: CN=7FAF8C8850B46BD5E1AF7261A254E7DEBFF4A698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ec:d3:34:46:d2:3a:e1:e5:2d:b0:04:a6:f5: 2c:bd:dc:47:10:67:b0:57:04:50:be:70:b3:df:a1: c3:0d:06:91:06:8f:f6:e4:04:38:ae:62:af:ab:cc: 6c:ab:d3:a8:69:e9:7d:a9:68:2c:85:d1:4b:05:67: 13:80:0e:ab:35:a0:5b:3f:ca:cd:30:fa:21:56:c1: 4d:72:be:35:3c:e2:0f:53:5c:6f:22:d5:38:7b:0c: d9:8b:fa:e0:b1:2a:25:8a:ca:40:aa:f2:e1:85:72: b3:c6:36:17:88:9d:26:8d:37:2c:2d:b0:f5:8d:c6: 57:00:79:c6:78:2a:03:2b:f6:60:cc:37:99:33:12: 2d:b1:aa:3a:c9:4d:e5:3d:11:59:34:ac:4d:d0:bc: bd:9f:a2:74:3d:4a:4c:c5:2a:5b:0a:20:a8:1f:74: f1:46:93:45:5c:63:0c:ef:38:55:fc:7c:73:e5:22: 2b:4c:82:8a:95:1c:52:03:d8:05:73:af:c4:0a:f1: 66:94:de:0d:e7:fc:ff:6d:fc:25:6d:a7:47:dc:74: cd:6a:76:49:fa:30:37:a3:61:85:7e:e0:fa:79:1e: 0f:ac:06:fb:b6:b3:64:e4:81:44:57:ab:77:37:87: d2:47:bb:8c:03:6c:70:bd:5d:96:46:1f:43:50:90: 09:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AF:8C:88:50:B4:6B:D5:E1:AF:72:61:A2:54:E7:DE:BF:F4:A6:98 X509v3 Authority Key Identifier: keyid:1E:60:FA:76:90:51:9A:93:DF:69:DB:8E:AC:C9:ED:B0:38:0B:2B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/0/1E60FA7690519A93DF69DB8EACC9EDB0380B2B14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:c8:36:7b:b3:c6:b6:d9:6b:ec:15:81:02:b0:ad:76:c4:63: e9:ea:ad:22:8c:86:22:1a:71:e7:e7:8c:65:65:1b:e3:af:d7: b0:0c:ca:92:e1:c4:eb:14:66:71:10:17:7f:3b:c2:4a:37:d8: c8:a6:15:46:70:98:5a:b4:83:fc:f9:97:17:90:d5:83:f7:2d: 19:7c:98:f7:01:fc:8d:ed:44:90:7d:99:6c:47:4e:b4:9c:a3: 52:46:f2:62:4c:e1:86:3f:eb:25:46:f0:ed:10:1a:bf:8a:a1: b9:11:87:96:21:8b:4d:67:f5:39:e0:db:03:d2:c0:88:f6:a8: 1d:4d:27:37:09:33:36:c0:ad:03:03:d7:81:5d:3d:08:24:f5: b7:a7:fa:5f:f2:6b:5a:43:13:a7:d4:b3:34:a1:e3:19:fd:c9: 17:10:68:97:98:9d:c4:c5:86:80:e6:6a:f1:83:4e:f5:19:37: 1c:dd:70:ca:a2:3c:97:f7:a8:f3:f4:ff:1d:88:d8:4a:4d:21: a0:09:0d:69:36:58:e7:8e:8c:c9:94:9d:d6:81:42:12:29:03: cf:be:2d:66:b0:fc:86:5d:ec:48:e3:d1:21:b8:04:4c:87:37: a6:da:14:8b:09:e4:00:eb:82:49:19:7c:65:33:db:08:2f:9d: d2:09:b6:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJae2l4i485kAi4BaQlLrlAlH/AYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2MEZBNzY5MDUxOUE5M0RGNjlEQjhFQUNDOUVEQjAz ODBCMkIxNDAeFw0yNTA2MTExNzUwMTdaFw0yNTA2MTIyMTIxMTdaMDMxMTAvBgNV BAMTKDdGQUY4Qzg4NTBCNDZCRDVFMUFGNzI2MUEyNTRFN0RFQkZGNEE2OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD7NM0RtI64eUtsASm9Sy93EcQ Z7BXBFC+cLPfocMNBpEGj/bkBDiuYq+rzGyr06hp6X2paCyF0UsFZxOADqs1oFs/ ys0w+iFWwU1yvjU84g9TXG8i1Th7DNmL+uCxKiWKykCq8uGFcrPGNheInSaNNywt sPWNxlcAecZ4KgMr9mDMN5kzEi2xqjrJTeU9EVk0rE3QvL2fonQ9SkzFKlsKIKgf dPFGk0VcYwzvOFX8fHPlIitMgoqVHFID2AVzr8QK8WaU3g3n/P9t/CVtp0fcdM1q dkn6MDejYYV+4Pp5Hg+sBvu2s2TkgURXq3c3h9JHu4wDbHC9XZZGH0NQkAnfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUf6+MiFC0a9Xhr3JholTn3r/0ppgwHwYDVR0j BBgwFoAUHmD6dpBRmpPfaduOrMntsDgLKxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2p2WUFxOFlNN3JpUnR4bWJ6WVlzNVQ2MzY1aUVnOUFpZUVENmRVQTRH a1ovMC8xRTYwRkE3NjkwNTE5QTkzREY2OURCOEVBQ0M5RURCMDM4MEIyQjE0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFNjBGQTc2OTA1MTlBOTNE RjY5REI4RUFDQzlFREIwMzgwQjJCMTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2p2WUFxOFlNN3JpUnR4bWJ6WVlzNVQ2MzY1aUVnOUFpZUVENmRVQTRHa1ovMC8x RTYwRkE3NjkwNTE5QTkzREY2OURCOEVBQ0M5RURCMDM4MEIyQjE0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt8g2e7PGttlr7BWBArCtdsRj6eqtIoyGIhpx5+eMZWUb46/XsAzKkuHE6xRm cRAXfzvCSjfYyKYVRnCYWrSD/PmXF5DVg/ctGXyY9wH8je1EkH2ZbEdOtJyjUkby Ykzhhj/rJUbw7RAav4qhuRGHliGLTWf1OeDbA9LAiPaoHU0nNwkzNsCtAwPXgV09 CCT1t6f6X/JrWkMTp9SzNKHjGf3JFxBol5idxMWGgOZq8YNO9Rk3HN1wyqI8l/eo 8/T/HYjYSk0hoAkNaTZY546MyZSd1oFCEikDz74tZrD8hl3sSOPRIbgETIc3ptoU iwnkAOuCSRl8ZTPbCC+d0gm21w== -----END CERTIFICATE-----Generated at Thu Jun 12 11:04:18 2025 by rpki-client