$ rpki-client -vvf rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft File: FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft (raw, json) Hash identifier: ZAx8nzkCnBWfBKUxqnHBfQZyvK7dJJhyUz58UzKsChQ= Subject key identifier: D9:95:8A:A3:9A:B1:D8:00:7B:85:34:9F:68:A8:94:46:50:BF:E4:A1 Authority key identifier: FE:FE:D5:72:32:6D:21:BF:FB:D7:33:CF:A0:CC:79:09:DC:EC:50:6E Certificate issuer: /CN=FEFED572326D21BFFBD733CFA0CC7909DCEC506E Certificate serial: 020B710689564798675CFEF30813E3BCAA9654E6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.cer Subject info access: rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft Manifest number: 0231 Signing time: Mon 09 Jun 2025 05:08:17 +0000 Manifest this update: Mon 09 Jun 2025 05:03:17 +0000 Manifest next update: Tue 10 Jun 2025 10:27:17 +0000 Files and hashes: 1: 3230312e3135392e3136342e302f32322d3234203d3e20323638363936.roa (hash: 23Qxox38N+0YhSohoMOAf1e2FgGS9Y6vrQAHVJYJktM=) 2: 34352e3136352e3234342e302f32322d3234203d3e20323638363936.roa (hash: 9lPKCbnYvVBettaFi7XsatcA2Q4Rlb6Sn4w7BXynKJ0=) 3: 323830343a353533343a3a2f33322d3438203d3e20323638363936.roa (hash: zP1mUoa6MadGrQiYWWMSC0ue620Jw7dMEBJTFUP49JY=) 4: FEFED572326D21BFFBD733CFA0CC7909DCEC506E.crl (hash: MRGV4anD6T8E/kKU9BR6ejzNsh/K4dzEemtma2YuQlA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.crl rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 07:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:0b:71:06:89:56:47:98:67:5c:fe:f3:08:13:e3:bc:aa:96:54:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEFED572326D21BFFBD733CFA0CC7909DCEC506E Validity Not Before: Jun 9 05:03:17 2025 GMT Not After : Jun 10 10:27:17 2025 GMT Subject: CN=D9958AA39AB1D8007B85349F68A8944650BFE4A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:81:9b:5f:86:c8:6c:5b:47:97:a6:7e:47:9c: 01:66:d5:0b:1f:c3:23:19:7a:72:9d:de:25:f8:73: b2:74:3c:68:97:dc:d3:c4:4f:f1:7a:bc:d3:40:35: 14:3b:c6:3f:ca:cb:7a:4c:96:41:97:3a:4a:04:44: 20:8c:e4:37:8d:8e:81:37:60:dd:29:7b:5e:e2:01: 93:1c:ed:60:c3:1e:ef:cb:1e:9b:76:8b:04:54:82: 51:56:e9:b6:ec:66:53:67:a8:bc:f1:a0:62:d8:d9: 87:21:3e:fb:67:ce:86:42:09:df:83:c6:01:c0:29: 03:d0:37:2d:65:7c:c4:f0:35:c6:8c:9e:04:b9:9c: b5:0b:37:68:38:6f:c6:a9:21:ec:cb:d2:64:3c:a6: 2b:fa:95:71:5a:32:05:ce:b2:f5:1d:e7:be:3b:04: 2a:b5:bd:6b:8b:01:5d:66:a0:17:e1:ea:04:3e:81: 63:40:bf:42:3e:f0:52:9e:77:e5:eb:6c:1d:fc:d6: 21:cd:7e:7e:54:dc:9e:f2:b0:5f:74:bc:a2:a5:60: c0:26:b1:0e:b1:2f:6f:4b:d0:95:85:9a:3d:ba:6e: 54:72:23:a6:48:d7:2e:f9:ab:11:f5:69:fb:08:af: f7:48:b3:1a:17:f9:62:cb:f9:a1:be:96:42:60:96: 78:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:95:8A:A3:9A:B1:D8:00:7B:85:34:9F:68:A8:94:46:50:BF:E4:A1 X509v3 Authority Key Identifier: keyid:FE:FE:D5:72:32:6D:21:BF:FB:D7:33:CF:A0:CC:79:09:DC:EC:50:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:38:ea:07:ab:c7:30:63:40:83:d7:66:b1:bd:47:fa:0d:97: 31:1e:cc:9c:3b:5e:aa:da:6d:50:c0:9d:0e:6f:19:89:75:6b: fe:be:74:76:f3:aa:48:0d:79:91:a1:83:31:49:54:0e:fc:22: bc:cb:97:94:a3:3f:b7:ca:bf:bc:85:cc:74:d8:2f:0a:76:95: 60:f7:85:18:73:41:d9:88:d6:88:59:eb:00:d7:cc:65:c5:da: 23:90:e9:50:14:96:8d:2f:c2:1a:cf:ff:97:8b:99:7c:e3:68: 23:0e:b0:4e:a9:43:0e:1b:fa:eb:e0:56:8f:22:a9:90:6e:46: 33:b0:22:4e:b6:8a:9c:0a:30:0a:3a:1d:b5:3e:a0:90:a2:3c: d6:e4:56:b4:3c:68:ce:f1:3a:7a:57:72:87:85:a6:a0:0d:80: 59:a2:a4:e8:c1:da:60:07:fa:6c:e7:a1:08:12:3d:37:f1:01: 1f:61:0b:44:25:3c:9e:b5:6b:2c:d0:fd:d8:29:37:d6:3f:d3: 17:58:49:fc:0e:f7:fc:f1:8d:15:3e:4b:cf:8f:9e:9d:eb:96: e1:ee:cd:c3:79:5b:d7:6c:9a:79:fe:63:21:00:9f:82:3c:a6: db:9d:12:ce:63:f5:54:10:e0:95:f6:d2:8b:d5:19:69:eb:f2: a1:50:3b:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAgtxBolWR5hnXP7zCBPjvKqWVOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVGRUQ1NzIzMjZEMjFCRkZCRDczM0NGQTBDQzc5MDlE Q0VDNTA2RTAeFw0yNTA2MDkwNTAzMTdaFw0yNTA2MTAxMDI3MTdaMDMxMTAvBgNV BAMTKEQ5OTU4QUEzOUFCMUQ4MDA3Qjg1MzQ5RjY4QTg5NDQ2NTBCRkU0QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEgZtfhshsW0eXpn5HnAFm1Qsf wyMZenKd3iX4c7J0PGiX3NPET/F6vNNANRQ7xj/Ky3pMlkGXOkoERCCM5DeNjoE3 YN0pe17iAZMc7WDDHu/LHpt2iwRUglFW6bbsZlNnqLzxoGLY2YchPvtnzoZCCd+D xgHAKQPQNy1lfMTwNcaMngS5nLULN2g4b8apIezL0mQ8piv6lXFaMgXOsvUd5747 BCq1vWuLAV1moBfh6gQ+gWNAv0I+8FKed+XrbB381iHNfn5U3J7ysF90vKKlYMAm sQ6xL29L0JWFmj26blRyI6ZI1y75qxH1afsIr/dIsxoX+WLL+aG+lkJglnhTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2ZWKo5qx2AB7hTSfaKiURlC/5KEwHwYDVR0j BBgwFoAU/v7VcjJtIb/71zPPoMx5CdzsUG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUthY2FCTEs2c3g0RXhMVmdZcmNNYVN5NHhHVWFQTVVYQmQ0ZThkWWtR Q2cvMC9GRUZFRDU3MjMyNkQyMUJGRkJENzMzQ0ZBMENDNzkwOURDRUM1MDZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFRkVENTcyMzI2RDIxQkZG QkQ3MzNDRkEwQ0M3OTA5RENFQzUwNkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUthY2FCTEs2c3g0RXhMVmdZcmNNYVN5NHhHVWFQTVVYQmQ0ZThkWWtRQ2cvMC9G RUZFRDU3MjMyNkQyMUJGRkJENzMzQ0ZBMENDNzkwOURDRUM1MDZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQDjqB6vHMGNAg9dmsb1H+g2XMR7MnDteqtptUMCdDm8ZiXVr/r50dvOqSA15 kaGDMUlUDvwivMuXlKM/t8q/vIXMdNgvCnaVYPeFGHNB2YjWiFnrANfMZcXaI5Dp UBSWjS/CGs//l4uZfONoIw6wTqlDDhv66+BWjyKpkG5GM7AiTraKnAowCjodtT6g kKI81uRWtDxozvE6eldyh4WmoA2AWaKk6MHaYAf6bOehCBI9N/EBH2ELRCU8nrVr LND92Ck31j/TF1hJ/A73/PGNFT5Lz4+eneuW4e7Nw3lb12yaef5jIQCfgjym250S zmP1VBDglfbSi9UZaevyoVA7sg== -----END CERTIFICATE-----Generated at Mon Jun 9 07:04:39 2025 by rpki-client