$ rpki-client -vvf rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/1/70257C060065495B0C625EE3C4FC503EAEB25ED4.mft File: 70257C060065495B0C625EE3C4FC503EAEB25ED4.mft (raw, json) Hash identifier: elxQuZmXME4wL0U/q+KPy4mNR1Zf5VciK/LDkDqFnuI= Subject key identifier: C2:4B:6B:42:00:7C:10:CA:54:85:3F:71:2E:9C:DE:77:E6:FD:FD:20 Authority key identifier: 70:25:7C:06:00:65:49:5B:0C:62:5E:E3:C4:FC:50:3E:AE:B2:5E:D4 Certificate issuer: /CN=70257C060065495B0C625EE3C4FC503EAEB25ED4 Certificate serial: 7E926B8841CD543F6BDDA43B7F8901B80BD942B1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70257C060065495B0C625EE3C4FC503EAEB25ED4.cer Subject info access: rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/1/70257C060065495B0C625EE3C4FC503EAEB25ED4.mft Manifest number: 023B Signing time: Fri 06 Jun 2025 04:00:48 +0000 Manifest this update: Fri 06 Jun 2025 03:55:48 +0000 Manifest next update: Sat 07 Jun 2025 06:21:48 +0000 Files and hashes: 1: 3137302e38332e3133322e302f32322d3332203d3e20323632353838.roa (hash: n54bEmAKHrH55uyH7iG2uVSoDUEst88PNYE8dPwrj6Y=) 2: 70257C060065495B0C625EE3C4FC503EAEB25ED4.crl (hash: YTlz8wDOQO03pTXQuBbi8TlqKuvvvTAOJWENJnpAbKE=) 3: 323830343a323930343a3a2f33322d313238203d3e20323632353838.roa (hash: 6e5wiLtncoIk0EAy2KC3CBZkav/ZwbAEaCyWkfFMNgc=) 4: 3137372e37352e34382e302f32302d3332203d3e20323632353838.roa (hash: zGhinLdhgyoTukFfGGg90RiRqdYGxtxS8z7orNn1PNU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/1/70257C060065495B0C625EE3C4FC503EAEB25ED4.crl rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/1/70257C060065495B0C625EE3C4FC503EAEB25ED4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70257C060065495B0C625EE3C4FC503EAEB25ED4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 05:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:92:6b:88:41:cd:54:3f:6b:dd:a4:3b:7f:89:01:b8:0b:d9:42:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70257C060065495B0C625EE3C4FC503EAEB25ED4 Validity Not Before: Jun 6 03:55:48 2025 GMT Not After : Jun 7 06:21:48 2025 GMT Subject: CN=C24B6B42007C10CA54853F712E9CDE77E6FDFD20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1f:9b:8f:a3:0a:56:9e:3c:c3:7a:6d:7e:7d: bc:b5:0b:65:2d:97:a1:af:74:f4:57:a3:7d:9c:71: 60:83:9f:e6:1c:33:e4:f5:f8:95:55:a2:f2:16:3f: 19:f5:1e:56:2b:e9:08:a8:5c:99:86:78:fb:65:36: 39:9e:5c:63:e6:6c:ef:37:c5:f7:2f:a7:a5:55:a3: 12:86:74:e9:42:2f:bf:a6:17:51:1f:72:6e:dc:05: 9f:26:69:33:99:2b:4f:fe:c0:64:56:f0:c3:73:b6: 41:15:41:8d:a8:ba:e8:d4:27:6e:d6:54:db:cb:01: 78:9b:c8:4d:e3:e7:df:f6:1e:2d:16:26:02:13:f1: 8f:ee:d5:15:83:65:33:95:21:4b:df:22:d5:6a:c0: ab:ad:f5:93:75:d8:b2:fb:03:c4:dd:94:ca:fe:9c: 0c:37:70:fc:26:b1:09:dc:2d:3e:a4:f6:00:d7:b1: 6a:3c:66:ce:a4:64:74:50:1b:e9:21:97:a9:9e:a9: db:92:e3:27:0c:28:24:03:b9:9c:3a:d8:84:eb:1d: f6:3b:39:88:8a:53:8a:df:73:de:ff:02:da:c6:16: 7f:ce:92:75:78:8b:28:02:6a:d3:e2:56:09:79:83: 79:db:27:82:47:ab:23:2d:57:74:75:6b:1f:dc:c0: d5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4B:6B:42:00:7C:10:CA:54:85:3F:71:2E:9C:DE:77:E6:FD:FD:20 X509v3 Authority Key Identifier: keyid:70:25:7C:06:00:65:49:5B:0C:62:5E:E3:C4:FC:50:3E:AE:B2:5E:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/1/70257C060065495B0C625EE3C4FC503EAEB25ED4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70257C060065495B0C625EE3C4FC503EAEB25ED4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGS4xfD5qP5JBXbKKTkeJZp9V4NDJuKTr53B8dJYjtA/1/70257C060065495B0C625EE3C4FC503EAEB25ED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b1:51:80:55:ef:bc:7d:37:5a:34:26:59:0e:74:e3:9a:9d: 72:e3:53:57:4b:d1:26:1a:6a:9b:02:d8:de:3b:98:60:22:5e: fd:ce:3c:c9:a7:20:d5:a4:f4:93:51:80:ee:14:d9:45:09:39: b1:07:e6:7c:f8:09:d5:50:82:f4:0c:f8:fa:39:c8:36:9a:a4: d7:0f:4a:78:ff:46:9a:73:c0:90:7b:40:d3:a5:5b:22:a2:ce: 58:00:da:bd:55:ef:a9:fa:2d:c7:6b:aa:f8:a9:8a:02:f6:d1: ca:2d:c2:7b:ca:5f:27:74:b0:fb:63:6f:7f:dd:71:9d:ab:d8: 43:a5:52:fa:82:48:f8:02:b8:22:20:95:a7:ad:f3:83:99:cd: b7:76:85:9b:26:8f:05:94:8b:34:f1:16:6e:90:66:a2:db:26: 93:1e:1e:f9:b9:1b:7e:13:1f:d5:6a:52:c8:11:ef:6a:45:46: 23:f0:84:2d:13:9f:13:08:3c:4d:9a:28:4c:df:ed:1a:9b:2a: a6:2f:5c:72:d5:0c:37:c1:39:29:65:dc:fb:83:ef:b5:22:bf: 8a:44:7c:9f:b9:a2:94:32:17:1e:6f:cd:1b:a4:60:ec:17:00: f3:39:31:36:87:de:6d:18:39:6d:c0:2a:e1:85:ab:ff:da:73: 5f:f6:3d:4d -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUfpJriEHNVD9r3aQ7f4kBuAvZQrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAyNTdDMDYwMDY1NDk1QjBDNjI1RUUzQzRGQzUwM0VB RUIyNUVENDAeFw0yNTA2MDYwMzU1NDhaFw0yNTA2MDcwNjIxNDhaMDMxMTAvBgNV BAMTKEMyNEI2QjQyMDA3QzEwQ0E1NDg1M0Y3MTJFOUNERTc3RTZGREZEMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQH5uPowpWnjzDem1+fby1C2Ut l6GvdPRXo32ccWCDn+YcM+T1+JVVovIWPxn1HlYr6QioXJmGePtlNjmeXGPmbO83 xfcvp6VVoxKGdOlCL7+mF1Efcm7cBZ8maTOZK0/+wGRW8MNztkEVQY2ouujUJ27W VNvLAXibyE3j59/2Hi0WJgIT8Y/u1RWDZTOVIUvfItVqwKut9ZN12LL7A8TdlMr+ nAw3cPwmsQncLT6k9gDXsWo8Zs6kZHRQG+khl6meqduS4ycMKCQDuZw62ITrHfY7 OYiKU4rfc97/AtrGFn/OknV4iygCatPiVgl5g3nbJ4JHqyMtV3R1ax/cwNXxAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUwktrQgB8EMpUhT9xLpzed+b9/SAwHwYDVR0j BBgwFoAUcCV8BgBlSVsMYl7jxPxQPq6yXtQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9BR1M0eGZENXFQNUpCWGJLS1RrZUpacDlWNE5ESnVLVHI1M0I4ZEpZanRB LzEvNzAyNTdDMDYwMDY1NDk1QjBDNjI1RUUzQzRGQzUwM0VBRUIyNUVENC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83MDI1N0MwNjAwNjU0OTVCMEM2 MjVFRTNDNEZDNTAzRUFFQjI1RUQ0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FH UzR4ZkQ1cVA1SkJYYktLVGtlSlpwOVY0TkRKdUtUcjUzQjhkSllqdEEvMS83MDI1 N0MwNjAwNjU0OTVCMEM2MjVFRTNDNEZDNTAzRUFFQjI1RUQ0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA LLFRgFXvvH03WjQmWQ5045qdcuNTV0vRJhpqmwLY3juYYCJe/c48yacg1aT0k1GA 7hTZRQk5sQfmfPgJ1VCC9Az4+jnINpqk1w9KeP9GmnPAkHtA06VbIqLOWADavVXv qfotx2uq+KmKAvbRyi3Ce8pfJ3Sw+2Nvf91xnavYQ6VS+oJI+AK4IiCVp63zg5nN t3aFmyaPBZSLNPEWbpBmotsmkx4e+bkbfhMf1WpSyBHvakVGI/CELROfEwg8TZoo TN/tGpsqpi9cctUMN8E5KWXc+4PvtSK/ikR8n7milDIXHm/NG6Rg7BcA8zkxNofe bRg5bcAq4YWr/9pzX/Y9TQ== -----END CERTIFICATE-----Generated at Fri Jun 6 07:06:40 2025 by rpki-client