$ rpki-client -vvf rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.mft File: 254C729A5155256E1BAF89E48E06C4EBA96761EA.mft (raw, json) Hash identifier: R9cQB0+DgpfAAZhDZ75v9EGVJvyRCiEAacmUZD7VR2o= Subject key identifier: 64:86:1A:63:21:03:E6:5D:EE:18:33:E1:D1:76:4E:5C:59:95:06:81 Authority key identifier: 25:4C:72:9A:51:55:25:6E:1B:AF:89:E4:8E:06:C4:EB:A9:67:61:EA Certificate issuer: /CN=254C729A5155256E1BAF89E48E06C4EBA96761EA Certificate serial: 76C76C9098CF65D86E46D09E244299FEBD99D356 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/254C729A5155256E1BAF89E48E06C4EBA96761EA.cer Subject info access: rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.mft Manifest number: 0221 Signing time: Mon 09 Jun 2025 00:20:00 +0000 Manifest this update: Mon 09 Jun 2025 00:15:00 +0000 Manifest next update: Tue 10 Jun 2025 04:04:00 +0000 Files and hashes: 1: 254C729A5155256E1BAF89E48E06C4EBA96761EA.crl (hash: 9yXyDZMFbjHWgLVXhsZ4kxIEahwptPh+Vnm9AK7nofc=) 2: 323830343a383030383a3a2f33322d3438203d3e20323731373235.roa (hash: 4rSv5X1Lyr+dKBZWL1W04oXbgppBiMkeed8Lk/UsDh8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.crl rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/254C729A5155256E1BAF89E48E06C4EBA96761EA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 04:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c7:6c:90:98:cf:65:d8:6e:46:d0:9e:24:42:99:fe:bd:99:d3:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=254C729A5155256E1BAF89E48E06C4EBA96761EA Validity Not Before: Jun 9 00:15:00 2025 GMT Not After : Jun 10 04:04:00 2025 GMT Subject: CN=64861A632103E65DEE1833E1D1764E5C59950681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:16:b0:95:59:69:d9:66:97:18:e9:e0:92:39: c4:15:57:9c:a5:6d:ef:5e:06:14:3a:61:1b:ee:42: 78:a2:0c:98:d4:21:8a:fb:ce:9d:b7:5a:11:7a:51: ca:7c:ed:59:b6:37:d6:9b:63:dc:20:4d:5b:62:3b: 37:4e:91:af:c6:71:b0:54:c7:77:9f:8b:d1:b4:4f: e5:78:fc:f1:58:00:5b:23:27:1b:88:cd:02:37:30: cd:a6:8f:20:7b:55:73:96:d1:a4:83:0c:2f:f6:45: 42:6f:6f:8b:0f:7e:d9:b1:da:ff:e5:ba:5e:b2:ec: 5c:de:5b:61:4e:00:ea:b7:0b:10:a7:f4:1e:37:6c: b5:19:30:d4:2c:55:de:6f:9f:24:53:13:c7:eb:59: a8:04:de:2e:a8:10:df:0c:6e:10:a1:19:c9:b5:42: cb:c3:9c:97:2b:ec:74:7e:75:86:81:73:9f:5d:a8: a0:dc:90:12:c9:6d:8d:62:24:54:d3:57:2e:4d:51: 9b:b0:c6:88:ee:61:ea:95:6f:4b:64:4f:fb:70:21: 71:d7:14:6a:91:e5:41:bb:30:60:2c:13:99:55:f0: 14:35:a5:79:25:67:43:be:7d:c3:ef:8b:bd:b7:ff: 29:c3:c6:66:da:58:04:9c:f9:fd:89:6c:d5:72:5c: fe:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:86:1A:63:21:03:E6:5D:EE:18:33:E1:D1:76:4E:5C:59:95:06:81 X509v3 Authority Key Identifier: keyid:25:4C:72:9A:51:55:25:6E:1B:AF:89:E4:8E:06:C4:EB:A9:67:61:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/254C729A5155256E1BAF89E48E06C4EBA96761EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e7gKkX9S6xyix2YqKrTH3Hxb9w3CySam1aUBXUkucEA/0/254C729A5155256E1BAF89E48E06C4EBA96761EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c5:af:95:f5:5c:7c:24:e7:e2:0a:91:f3:05:1c:45:84:c1: 78:f6:c4:e1:67:1f:66:73:58:3f:15:8d:19:45:fe:df:f1:4e: b1:68:3e:c9:59:7d:6a:1c:f5:bd:1e:97:59:90:b5:76:ba:aa: 5c:b5:8a:d8:23:0c:1c:23:c0:cb:59:d2:f0:ed:cc:5b:79:d1: 50:30:ab:c5:f9:14:af:00:d1:16:d5:e8:ea:71:9a:ab:98:59: 1e:c7:fb:6d:11:40:c4:99:7f:31:8b:5f:6f:a5:44:e9:ca:6d: 0f:1e:55:f4:22:90:7c:f0:31:85:ba:df:bd:af:14:3c:a4:51: 73:31:ed:a0:69:7c:f4:fe:51:9b:71:ab:5d:64:06:b9:4d:99: e4:e8:e7:52:42:81:db:2c:d7:63:75:92:7e:95:1f:8f:80:09: ce:4b:14:29:e8:16:a4:a0:42:25:b0:e1:0d:56:27:2c:cb:e2: 73:e5:46:dc:ae:2b:73:e8:4f:1b:0c:fb:3e:ef:59:0e:72:15: 31:b3:5b:0f:6e:e1:59:98:1a:dc:4b:95:2d:ac:ad:26:2b:b1: a5:da:1d:a9:7c:4f:de:56:5a:6a:80:1a:f5:89:90:cc:94:6c: db:a7:68:06:4b:a2:4e:68:42:75:b0:92:6b:94:eb:89:fe:5a: 8b:d2:6f:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdsdskJjPZdhuRtCeJEKZ/r2Z01YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU0QzcyOUE1MTU1MjU2RTFCQUY4OUU0OEUwNkM0RUJB OTY3NjFFQTAeFw0yNTA2MDkwMDE1MDBaFw0yNTA2MTAwNDA0MDBaMDMxMTAvBgNV BAMTKDY0ODYxQTYzMjEwM0U2NURFRTE4MzNFMUQxNzY0RTVDNTk5NTA2ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXFrCVWWnZZpcY6eCSOcQVV5yl be9eBhQ6YRvuQniiDJjUIYr7zp23WhF6Ucp87Vm2N9abY9wgTVtiOzdOka/GcbBU x3efi9G0T+V4/PFYAFsjJxuIzQI3MM2mjyB7VXOW0aSDDC/2RUJvb4sPftmx2v/l ul6y7FzeW2FOAOq3CxCn9B43bLUZMNQsVd5vnyRTE8frWagE3i6oEN8MbhChGcm1 QsvDnJcr7HR+dYaBc59dqKDckBLJbY1iJFTTVy5NUZuwxojuYeqVb0tkT/twIXHX FGqR5UG7MGAsE5lV8BQ1pXklZ0O+fcPvi723/ynDxmbaWASc+f2JbNVyXP55AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZIYaYyED5l3uGDPh0XZOXFmVBoEwHwYDVR0j BBgwFoAUJUxymlFVJW4br4nkjgbE66lnYeowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2U3Z0trWDlTNnh5aXgyWXFLclRIM0h4Yjl3M0N5U2FtMWFVQlhVa3Vj RUEvMC8yNTRDNzI5QTUxNTUyNTZFMUJBRjg5RTQ4RTA2QzRFQkE5Njc2MUVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1NEM3MjlBNTE1NTI1NkUx QkFGODlFNDhFMDZDNEVCQTk2NzYxRUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2U3Z0trWDlTNnh5aXgyWXFLclRIM0h4Yjl3M0N5U2FtMWFVQlhVa3VjRUEvMC8y NTRDNzI5QTUxNTUyNTZFMUJBRjg5RTQ4RTA2QzRFQkE5Njc2MUVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABsWvlfVcfCTn4gqR8wUcRYTBePbE4WcfZnNYPxWNGUX+3/FOsWg+yVl9ahz1 vR6XWZC1drqqXLWK2CMMHCPAy1nS8O3MW3nRUDCrxfkUrwDRFtXo6nGaq5hZHsf7 bRFAxJl/MYtfb6VE6cptDx5V9CKQfPAxhbrfva8UPKRRczHtoGl89P5Rm3GrXWQG uU2Z5OjnUkKB2yzXY3WSfpUfj4AJzksUKegWpKBCJbDhDVYnLMvic+VG3K4rc+hP Gwz7Pu9ZDnIVMbNbD27hWZga3EuVLaytJiuxpdodqXxP3lZaaoAa9YmQzJRs26do BkuiTmhCdbCSa5Trif5ai9Jv1w== -----END CERTIFICATE-----Generated at Mon Jun 9 13:21:43 2025 by rpki-client