$ rpki-client -vvf rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft File: 2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft (raw, json) Hash identifier: ++VCwNVcjMMk08jsSo+SVwOzqbsvD0JfM0Q4eOBN8UY= Subject key identifier: A5:2E:15:80:D6:0E:CE:F0:30:84:39:14:54:E4:BC:AF:14:07:B8:87 Authority key identifier: 2A:9F:90:A6:C0:E7:A9:D2:C5:E1:C1:68:81:55:36:53:46:26:06:85 Certificate issuer: /CN=2A9F90A6C0E7A9D2C5E1C1688155365346260685 Certificate serial: 2565E457A30F333155C9C6B3BFA595DA08F32585 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer Subject info access: rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft Manifest number: 023B Signing time: Fri 06 Jun 2025 00:59:13 +0000 Manifest this update: Fri 06 Jun 2025 00:54:13 +0000 Manifest next update: Sat 07 Jun 2025 03:54:13 +0000 Files and hashes: 1: 3133382e3132312e34302e302f32322d3332203d3e20323730383931.roa (hash: 0TP0X4N5B/kB0sXJtzuafX2ea3uKpmvm4dgyq0U0O6A=) 2: 2A9F90A6C0E7A9D2C5E1C1688155365346260685.crl (hash: V31cMPsSIZajPTkxbRo014+vB2vq3clP/UNiruAQxWk=) 3: 323830343a373330383a3a2f33322d313238203d3e20323730383931.roa (hash: TFXsRnDBKiVgFfiHrP4nBxeZLl85ER7J0/zeEqj5uFw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.crl rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 03:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:65:e4:57:a3:0f:33:31:55:c9:c6:b3:bf:a5:95:da:08:f3:25:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A9F90A6C0E7A9D2C5E1C1688155365346260685 Validity Not Before: Jun 6 00:54:13 2025 GMT Not After : Jun 7 03:54:13 2025 GMT Subject: CN=A52E1580D60ECEF03084391454E4BCAF1407B887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:92:06:f3:a0:49:b7:38:43:15:b5:41:6a:4d: 17:2b:9e:82:df:5e:ce:4d:59:a9:4e:e4:3e:c0:fb: 1e:25:d6:7f:aa:66:10:48:e4:f6:7b:69:05:c8:c4: 85:b5:f7:d2:df:05:b8:d0:b7:9e:5c:8f:61:42:30: 80:2d:d7:57:c0:c1:d9:de:e4:6a:7c:f6:05:bf:e7: 0a:bb:6c:d5:6d:8d:fc:10:62:27:4f:3a:d1:9d:76: 7d:27:71:d8:42:ed:cd:29:8c:f1:36:13:a1:fb:c1: f3:29:84:6e:10:9e:bf:37:b3:df:2f:23:16:ad:49: 21:61:e8:19:b0:b3:24:1d:45:62:3f:14:70:13:5e: cd:73:e9:8d:7e:0d:3b:d0:a9:58:26:66:9f:f5:79: f0:3b:b5:50:76:aa:a6:83:41:a7:c7:5c:68:de:c3: 39:0d:cb:13:fb:ad:0b:bb:9e:f1:51:ee:ff:c2:c3: 65:16:24:02:41:a6:af:32:b7:df:8e:c6:54:45:bd: 7b:8a:a2:09:ad:aa:f6:3d:88:ae:45:dd:1e:4d:50: b4:0b:24:2a:82:51:77:81:64:21:8c:e2:c1:e4:df: a7:b5:c2:54:57:03:e9:d4:b0:a1:73:c4:82:d8:6e: b6:a1:c7:ba:7f:d1:ae:cd:e6:6a:a4:90:7d:4e:9a: 10:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2E:15:80:D6:0E:CE:F0:30:84:39:14:54:E4:BC:AF:14:07:B8:87 X509v3 Authority Key Identifier: keyid:2A:9F:90:A6:C0:E7:A9:D2:C5:E1:C1:68:81:55:36:53:46:26:06:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:ac:2d:b3:be:a6:0e:1e:0d:79:8e:eb:00:7a:20:79:2f:a1: 4e:06:30:08:c2:10:95:ae:0c:84:49:7b:37:44:1f:f3:55:1b: d2:ff:5a:21:52:ef:dc:c8:1a:3a:92:73:cb:14:d2:e9:63:de: 99:41:c5:1d:58:a1:bc:83:ec:5d:fe:96:8c:0b:0c:b0:31:6c: 97:e4:66:3a:52:bb:50:2b:55:64:f9:84:e6:02:68:98:de:a1: 90:c8:a8:01:05:51:c7:dc:6f:67:93:b9:d8:32:7a:5a:7d:6a: 22:30:9a:70:18:7f:aa:76:5b:45:3f:b6:cf:e3:20:e8:81:54: 24:2b:29:67:33:23:43:f8:79:bf:f0:d7:b6:1c:3c:e8:75:44: b6:41:95:29:20:49:49:09:7f:7a:10:f8:bf:30:5c:ba:22:db: dd:98:4b:60:97:63:25:93:e7:6b:85:96:82:7e:fe:62:62:3a: de:15:82:49:d9:6f:dc:66:0a:cf:7a:06:bd:0a:98:4e:e3:e8: d4:ef:ac:02:d4:76:d0:dd:16:c2:2c:d0:e6:a8:a5:c7:d8:33: e7:78:45:a1:7c:60:75:cb:dc:46:b1:f2:48:6d:e2:49:e4:e6: e9:59:27:dd:ed:cd:9f:e3:1d:07:32:cc:6f:a8:bd:4e:f6:d2: 7e:4d:7c:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJWXkV6MPMzFVycazv6WV2gjzJYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5RjkwQTZDMEU3QTlEMkM1RTFDMTY4ODE1NTM2NTM0 NjI2MDY4NTAeFw0yNTA2MDYwMDU0MTNaFw0yNTA2MDcwMzU0MTNaMDMxMTAvBgNV BAMTKEE1MkUxNTgwRDYwRUNFRjAzMDg0MzkxNDU0RTRCQ0FGMTQwN0I4ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykgbzoEm3OEMVtUFqTRcrnoLf Xs5NWalO5D7A+x4l1n+qZhBI5PZ7aQXIxIW199LfBbjQt55cj2FCMIAt11fAwdne 5Gp89gW/5wq7bNVtjfwQYidPOtGddn0ncdhC7c0pjPE2E6H7wfMphG4Qnr83s98v IxatSSFh6BmwsyQdRWI/FHATXs1z6Y1+DTvQqVgmZp/1efA7tVB2qqaDQafHXGje wzkNyxP7rQu7nvFR7v/Cw2UWJAJBpq8yt9+OxlRFvXuKogmtqvY9iK5F3R5NULQL JCqCUXeBZCGM4sHk36e1wlRXA+nUsKFzxILYbrahx7p/0a7N5mqkkH1OmhBpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUpS4VgNYOzvAwhDkUVOS8rxQHuIcwHwYDVR0j BBgwFoAUKp+QpsDnqdLF4cFogVU2U0YmBoUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNENmbWN2WTRXcU52enF5cWZUckJ0SkhwZFVGOUtzM2hrRzF0OWZiQktr VnYvMS8yQTlGOTBBNkMwRTdBOUQyQzVFMUMxNjg4MTU1MzY1MzQ2MjYwNjg1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBOUY5MEE2QzBFN0E5RDJD NUUxQzE2ODgxNTUzNjUzNDYyNjA2ODUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NENmbWN2WTRXcU52enF5cWZUckJ0SkhwZFVGOUtzM2hrRzF0OWZiQktrVnYvMS8y QTlGOTBBNkMwRTdBOUQyQzVFMUMxNjg4MTU1MzY1MzQ2MjYwNjg1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIKwts76mDh4NeY7rAHogeS+hTgYwCMIQla4MhEl7N0Qf81Ub0v9aIVLv3Mga OpJzyxTS6WPemUHFHVihvIPsXf6WjAsMsDFsl+RmOlK7UCtVZPmE5gJomN6hkMio AQVRx9xvZ5O52DJ6Wn1qIjCacBh/qnZbRT+2z+Mg6IFUJCspZzMjQ/h5v/DXthw8 6HVEtkGVKSBJSQl/ehD4vzBcuiLb3ZhLYJdjJZPna4WWgn7+YmI63hWCSdlv3GYK z3oGvQqYTuPo1O+sAtR20N0WwizQ5qilx9gz53hFoXxgdcvcRrHySG3iSeTm6Vkn 3e3Nn+MdBzLMb6i9TvbSfk18kw== -----END CERTIFICATE-----Generated at Fri Jun 6 07:20:08 2025 by rpki-client