$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.mft File: 2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.mft (raw, json) Hash identifier: e6bL3iLwBR+wcIJIG+fabHZD8vQF28CScMfkiG5Qsv8= Subject key identifier: 3F:FF:C1:76:16:D8:05:27:08:45:2A:A5:27:70:5A:83:F5:4D:BC:5F Authority key identifier: 2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1 Certificate issuer: /CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1 Certificate serial: 30432E19E64CBB32435F58B7F318C9E3D18EFAE4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer Subject info access: rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.mft Manifest number: 22 Signing time: Wed 20 Aug 2025 14:37:00 +0000 Manifest this update: Wed 20 Aug 2025 14:32:00 +0000 Manifest next update: Thu 21 Aug 2025 14:43:00 +0000 Files and hashes: 1: 2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl (hash: 0miHvDfF+7kj+SGUySbvkuJTxMxlw81qUrK1MXQa/KQ=) 2: 34352e3232372e3136382e302f32322d3234203d3e20323637303237.roa (hash: gY9FLBibYF5xfxYl0Nb9MQTIvah3Wu8qO7IYCcOhaFs=) 3: 323830343a343730383a3a2f33322d3337203d3e20323637303237.roa (hash: U/9M15TeapksX8XUjds2E9NJq2AK4bxt/Wst1EkaNVc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 14:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:43:2e:19:e6:4c:bb:32:43:5f:58:b7:f3:18:c9:e3:d1:8e:fa:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DFD4BE1F927C8BEF35DFC0E9976943171A517B1 Validity Not Before: Aug 20 14:32:00 2025 GMT Not After : Aug 21 14:43:00 2025 GMT Subject: CN=3FFFC17616D8052708452AA527705A83F54DBC5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:52:97:95:73:c7:a7:95:fa:85:fe:59:9d:48: e9:30:a0:c2:a8:46:88:b2:34:43:33:22:d7:40:7f: 38:a9:14:00:60:e1:8a:b6:0c:40:98:03:4e:69:0b: 6d:33:0d:18:48:4e:ac:4b:98:c6:76:21:29:ee:2c: 46:4c:3f:90:7f:c0:43:5d:ff:c0:9e:1f:f9:d4:b9: f6:f9:1f:71:3a:f1:7f:e4:55:ea:9a:55:cb:bc:37: d8:4f:f9:5d:68:21:83:ed:9c:9d:5c:2b:64:b6:ea: f4:f4:69:34:c4:1c:0d:14:8e:17:7b:5c:36:43:80: 4e:85:cb:c2:cd:50:b5:44:a0:3a:1b:d6:7f:ac:34: eb:dc:a8:63:b2:e5:b3:e7:6c:a0:4e:c8:10:2e:50: fc:81:7b:73:c2:0c:9e:7b:7c:87:8d:f5:9b:bb:44: 6f:2e:84:cf:86:e7:f5:fc:5b:21:bf:93:ff:6f:79: 2b:9d:52:ab:75:53:fc:79:52:28:70:f8:2f:80:d5: cf:10:fd:cd:a5:a8:81:cd:a3:8e:25:6c:06:6e:da: 50:7d:f9:f5:1c:d4:59:72:ad:57:37:06:47:56:51: 96:9c:b6:f6:df:26:97:1c:a0:35:72:ae:ce:bb:c3: c1:8e:4d:9c:f9:e8:69:13:bb:30:06:48:66:0d:c7: d2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FF:C1:76:16:D8:05:27:08:45:2A:A5:27:70:5A:83:F5:4D:BC:5F X509v3 Authority Key Identifier: keyid:2D:FD:4B:E1:F9:27:C8:BE:F3:5D:FC:0E:99:76:94:31:71:A5:17:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/2DFD4BE1F927C8BEF35DFC0E9976943171A517B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:36:8c:1f:2a:50:37:98:5c:1d:22:52:93:f6:f1:ee:8e:c6: 3b:da:38:6f:f3:f5:ea:a7:73:03:3c:86:6a:8a:85:89:b1:a3: d5:5e:0d:b0:a2:c2:89:a0:fb:04:0c:28:1e:e2:99:67:46:fc: c1:cf:2a:f8:43:f7:b7:9c:2c:44:b8:e1:06:90:42:5c:db:cf: 9b:5c:88:14:b0:4f:53:28:5a:ea:0d:a0:00:51:21:5c:07:7c: 0c:34:ee:9d:98:8c:e1:42:4e:e4:bc:09:f2:1f:29:b4:f4:6d: 40:7a:d6:5c:df:1c:2d:ca:90:2c:ff:64:86:89:40:01:84:25: a0:5a:0e:63:2d:0f:3f:fa:ca:8f:77:a6:37:28:e2:e8:47:f4: ed:68:3b:54:76:92:a4:79:b3:33:09:7a:c0:9a:7e:7a:6c:14: 15:14:13:5f:6b:8b:84:45:4c:0f:8b:98:de:8f:5e:7d:af:1b: 06:db:42:13:cc:6f:15:5a:c3:37:93:6f:5e:df:31:ef:8b:d6: 6f:0f:bf:7b:50:05:66:f0:42:5b:d4:5a:12:a4:3f:45:a3:c7: 1f:47:1b:e3:83:1e:ba:d1:24:e5:47:93:5f:e9:3d:00:a3:64: fc:77:6b:2c:bb:bf:13:9c:90:78:36:9a:fc:5c:ab:16:30:34: 6c:fb:a8:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMEMuGeZMuzJDX1i38xjJ49GO+uQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGRDRCRTFGOTI3QzhCRUYzNURGQzBFOTk3Njk0MzE3 MUE1MTdCMTAeFw0yNTA4MjAxNDMyMDBaFw0yNTA4MjExNDQzMDBaMDMxMTAvBgNV BAMTKDNGRkZDMTc2MTZEODA1MjcwODQ1MkFBNTI3NzA1QTgzRjU0REJDNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClUpeVc8enlfqF/lmdSOkwoMKo RoiyNEMzItdAfzipFABg4Yq2DECYA05pC20zDRhITqxLmMZ2ISnuLEZMP5B/wENd /8CeH/nUufb5H3E68X/kVeqaVcu8N9hP+V1oIYPtnJ1cK2S26vT0aTTEHA0Ujhd7 XDZDgE6Fy8LNULVEoDob1n+sNOvcqGOy5bPnbKBOyBAuUPyBe3PCDJ57fIeN9Zu7 RG8uhM+G5/X8WyG/k/9veSudUqt1U/x5Uihw+C+A1c8Q/c2lqIHNo44lbAZu2lB9 +fUc1FlyrVc3BkdWUZactvbfJpccoDVyrs67w8GOTZz56GkTuzAGSGYNx9LzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUP//BdhbYBScIRSqlJ3Bag/VNvF8wHwYDVR0j BBgwFoAULf1L4fknyL7zXfwOmXaUMXGlF7EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNXV1RFpxZ0xxWVBvdEVjZUJzbWNTNlNlTWR3cHlxWFZ1YWhodnJhV3RK WXovMC8yREZENEJFMUY5MjdDOEJFRjM1REZDMEU5OTc2OTQzMTcxQTUxN0IxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERkQ0QkUxRjkyN0M4QkVG MzVERkMwRTk5NzY5NDMxNzFBNTE3QjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NXV1RFpxZ0xxWVBvdEVjZUJzbWNTNlNlTWR3cHlxWFZ1YWhodnJhV3RKWXovMC8y REZENEJFMUY5MjdDOEJFRjM1REZDMEU5OTc2OTQzMTcxQTUxN0IxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUjaMHypQN5hcHSJSk/bx7o7GO9o4b/P16qdzAzyGaoqFibGj1V4NsKLCiaD7 BAwoHuKZZ0b8wc8q+EP3t5wsRLjhBpBCXNvPm1yIFLBPUyha6g2gAFEhXAd8DDTu nZiM4UJO5LwJ8h8ptPRtQHrWXN8cLcqQLP9kholAAYQloFoOYy0PP/rKj3emNyji 6Ef07Wg7VHaSpHmzMwl6wJp+emwUFRQTX2uLhEVMD4uY3o9efa8bBttCE8xvFVrD N5NvXt8x74vWbw+/e1AFZvBCW9RaEqQ/RaPHH0cb44MeutEk5UeTX+k9AKNk/Hdr LLu/E5yQeDaa/FyrFjA0bPuo1g== -----END CERTIFICATE-----Generated at Wed Aug 20 16:30:49 2025 by rpki-client