$ rpki-client -vvf rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft File: 2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft (raw, json) Hash identifier: HYcleWrba0yDi7+5L2iuuPm2Oa8A1QKco+tzYUn0Q1A= Subject key identifier: 19:63:CD:91:18:64:38:95:77:B5:08:26:9B:5B:B5:63:48:9A:F9:6E Authority key identifier: 28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9 Certificate issuer: /CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9 Certificate serial: 3533F441092527FD40527F63B7DDEB6AD94F8EF2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer Subject info access: rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft Manifest number: 021F Signing time: Fri 06 Jun 2025 13:13:32 +0000 Manifest this update: Fri 06 Jun 2025 13:08:32 +0000 Manifest next update: Sat 07 Jun 2025 15:06:32 +0000 Files and hashes: 1: 323830343a383863343a3a2f34382d3438203d3e20323732373932.roa (hash: pMsNE9PZdxPUZQ1ee0l8kve5nW5PLVXShE79wF6S0BA=) 2: 323830343a383863343a3a2f33322d3332203d3e20323732373932.roa (hash: EtesB69AQ6y4O933L4QCUQfBeeDeqAjblxt7W0bJGXA=) 3: 323830343a383863343a66633a3a2f34382d3438203d3e20323732373932.roa (hash: uIquRLf1o2jdjOFSQRwCQgQeJopCGHlj6eVpPkoczCw=) 4: 2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl (hash: Q+6FSNG5eVVY8E0B3K2TJyz+pA9bQ6dig06IQT8UO+8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 15:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:33:f4:41:09:25:27:fd:40:52:7f:63:b7:dd:eb:6a:d9:4f:8e:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9 Validity Not Before: Jun 6 13:08:32 2025 GMT Not After : Jun 7 15:06:32 2025 GMT Subject: CN=1963CD911864389577B508269B5BB563489AF96E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:f4:fc:d4:01:67:c7:7b:5c:a0:0f:1d:5e: 4b:e3:b8:38:ec:ae:a3:1b:44:8a:dd:81:02:5f:0d: 8e:0b:d1:c2:01:53:b9:a6:47:3f:30:5b:4d:e0:df: c9:32:fd:fc:54:a9:29:84:5a:0e:40:7f:f5:e7:f0: 66:e2:63:9a:84:f6:b7:b7:b8:d0:68:87:6a:62:68: 93:c4:28:53:c4:a7:d3:5a:c0:09:37:6e:61:47:eb: a9:32:b5:18:81:29:62:73:a1:78:7c:63:73:8c:14: bf:63:c7:5c:3b:8d:5a:9b:dc:20:38:21:b7:b0:72: 83:c0:c8:20:84:26:78:8d:8a:3c:8b:69:5f:f9:66: 9c:f9:16:7c:b3:f8:a5:f2:3f:3c:18:4f:e2:05:03: 5a:4f:70:5b:65:72:55:ce:69:fc:d1:35:37:db:df: 2d:0a:ea:af:a2:e8:ce:0b:0a:b4:ba:ee:c3:8c:ff: 46:f7:1f:7d:59:7a:c5:7a:b5:97:80:4c:84:ed:dc: db:44:23:06:9c:9b:a9:9a:17:3c:91:47:03:3c:9f: 6c:5c:9f:1b:0b:ed:00:c4:a0:2c:a4:f0:b6:5f:05: 3d:5c:8b:a5:02:bf:2c:45:32:55:d9:63:e3:90:2e: a6:af:73:7c:82:31:8c:de:ae:cc:e9:48:d9:9d:df: 5a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:63:CD:91:18:64:38:95:77:B5:08:26:9B:5B:B5:63:48:9A:F9:6E X509v3 Authority Key Identifier: keyid:28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b8:a6:8b:26:e0:bb:61:6f:d7:eb:af:dc:4d:d0:5b:32:d1: 69:cb:de:e4:e3:b9:ba:bc:b5:be:fa:72:c1:c5:10:a1:90:66: ea:7d:c1:b5:15:43:8b:c4:1f:10:ed:73:08:6d:45:ab:dd:46: 18:61:a1:b4:c0:40:2a:4b:dc:90:2e:fd:39:f4:7e:98:29:bf: 6a:c9:62:e9:68:86:06:67:3d:66:c2:94:88:d7:81:61:a0:c6: f2:a2:7c:24:04:f1:1e:9a:f8:5b:9e:e9:62:5d:7c:c9:73:7f: 6b:c2:f7:ca:33:df:57:ab:da:b5:07:31:59:d4:07:4a:a8:e4: a7:ea:07:83:2b:38:e6:a3:b1:e6:2a:40:b3:6e:26:32:b7:7e: d3:cb:70:b2:96:a1:d7:aa:ea:aa:f1:4c:60:df:33:2c:74:85: 8b:69:9b:fe:5e:1f:d4:0f:93:d1:e7:4f:9d:c3:fa:c4:7e:1a: 77:bb:55:5d:36:1f:28:52:75:ae:cd:2b:52:d9:91:52:f0:5e: c6:38:4b:1e:92:4a:50:f1:4b:60:8a:1c:a9:4d:12:7f:b6:f6: 8a:d4:fa:bc:98:8d:92:66:07:bb:b9:22:ec:b3:11:2c:73:55: 7c:31:1b:a7:00:ef:b4:78:5a:15:84:34:33:00:2b:e6:fc:00: d3:8e:f0:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNTP0QQklJ/1AUn9jt93ratlPjvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwMEFGOEU2NzJGNjRFMDJDRUM1RDA0N0VERUIyQUQ4 NkI0N0VEOTAeFw0yNTA2MDYxMzA4MzJaFw0yNTA2MDcxNTA2MzJaMDMxMTAvBgNV BAMTKDE5NjNDRDkxMTg2NDM4OTU3N0I1MDgyNjlCNUJCNTYzNDg5QUY5NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoX/T81AFnx3tcoA8dXkvjuDjs rqMbRIrdgQJfDY4L0cIBU7mmRz8wW03g38ky/fxUqSmEWg5Af/Xn8GbiY5qE9re3 uNBoh2piaJPEKFPEp9NawAk3bmFH66kytRiBKWJzoXh8Y3OMFL9jx1w7jVqb3CA4 IbewcoPAyCCEJniNijyLaV/5Zpz5Fnyz+KXyPzwYT+IFA1pPcFtlclXOafzRNTfb 3y0K6q+i6M4LCrS67sOM/0b3H31ZesV6tZeATITt3NtEIwacm6maFzyRRwM8n2xc nxsL7QDEoCyk8LZfBT1ci6UCvyxFMlXZY+OQLqavc3yCMYzerszpSNmd31p/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGWPNkRhkOJV3tQgmm1u1Y0ia+W4wHwYDVR0j BBgwFoAUKACvjmcvZOAs7F0Eft6yrYa0ftkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVZtczhUV2ZYYkdSdlFrQlBkQnV0S0RtbzRNZlFydDhNNUJNUzZKd2hw Zm8vMS8yODAwQUY4RTY3MkY2NEUwMkNFQzVEMDQ3RURFQjJBRDg2QjQ3RUQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4MDBBRjhFNjcyRjY0RTAy Q0VDNUQwNDdFREVCMkFEODZCNDdFRDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVZtczhUV2ZYYkdSdlFrQlBkQnV0S0RtbzRNZlFydDhNNUJNUzZKd2hwZm8vMS8y ODAwQUY4RTY3MkY2NEUwMkNFQzVEMDQ3RURFQjJBRDg2QjQ3RUQ5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE7imiybgu2Fv1+uv3E3QWzLRacve5OO5ury1vvpywcUQoZBm6n3BtRVDi8Qf EO1zCG1Fq91GGGGhtMBAKkvckC79OfR+mCm/asli6WiGBmc9ZsKUiNeBYaDG8qJ8 JATxHpr4W57pYl18yXN/a8L3yjPfV6vatQcxWdQHSqjkp+oHgys45qOx5ipAs24m Mrd+08twspah16rqqvFMYN8zLHSFi2mb/l4f1A+T0edPncP6xH4ad7tVXTYfKFJ1 rs0rUtmRUvBexjhLHpJKUPFLYIocqU0Sf7b2itT6vJiNkmYHu7ki7LMRLHNVfDEb pwDvtHhaFYQ0MwAr5vwA047wyQ== -----END CERTIFICATE-----Generated at Fri Jun 6 19:10:14 2025 by rpki-client