$ rpki-client -vvf rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft File: DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft (raw, json) Hash identifier: 4b1GlNTOD4hw0R+zQwGkhMmPtmGPxW6b+ISgXJ3BRAQ= Subject key identifier: F6:F3:B2:01:FA:9D:92:63:C5:92:29:17:36:D6:52:1A:52:20:4C:2B Authority key identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F Certificate issuer: /CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F Certificate serial: 48F77E128013506B15043D7DEF19CF2DB9BBD60C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer Subject info access: rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft Manifest number: 023A Signing time: Mon 09 Jun 2025 19:34:57 +0000 Manifest this update: Mon 09 Jun 2025 19:29:57 +0000 Manifest next update: Tue 10 Jun 2025 22:19:57 +0000 Files and hashes: 1: 323830343a333131383a3a2f33322d3438203d3e20323634393932.roa (hash: DzRsY8gKF0BWS3fC42Y03Map2xKST/W63/0XfL2297o=) 2: DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl (hash: buiMD5fVwYtmkzLUWZhLZPLQ+a5fdph/gPbLMc6ZZe0=) 3: 3137302e38342e39362e302f32322d3234203d3e20323634393932.roa (hash: wNMrZaU8aUZouPKty7zWuzFcAqfI9Vza8zAIQ/rQ9/g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 22:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f7:7e:12:80:13:50:6b:15:04:3d:7d:ef:19:cf:2d:b9:bb:d6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F Validity Not Before: Jun 9 19:29:57 2025 GMT Not After : Jun 10 22:19:57 2025 GMT Subject: CN=F6F3B201FA9D9263C592291736D6521A52204C2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:19:ff:03:22:bf:04:6e:9f:1d:d4:47:31:fe: ac:cc:82:b5:d2:70:0a:d8:08:e5:e7:b3:90:bc:09: e5:bb:78:69:9d:63:76:45:0d:46:0c:8f:83:24:5e: 48:5e:b4:7a:9d:fe:10:87:f8:30:d8:cd:9e:1a:1b: 50:c2:64:ba:c6:e1:ba:7f:14:d9:9a:c8:d0:22:4b: 49:37:17:30:47:c7:9f:95:61:49:a7:ff:ec:a5:a5: de:dc:a6:d5:6e:d9:f8:db:2b:02:2e:9e:a7:60:1a: e4:49:ca:eb:03:5d:66:3d:2a:c3:e2:5a:86:a3:e0: 0e:75:fe:56:90:74:14:16:0d:99:da:26:c3:fd:d4: 10:0e:84:80:0a:be:00:ef:c4:49:a5:60:77:f3:ed: a2:c8:6d:ef:ec:f9:07:a3:18:3c:26:1d:53:1e:93: 34:c9:fe:85:87:2a:f2:27:34:ce:ed:90:28:28:db: 01:44:58:18:76:b4:e7:79:33:79:61:f4:96:a4:fa: 82:17:f0:a6:8a:5d:ed:41:c8:15:6b:51:fb:87:33: 62:b5:f6:67:dc:01:ac:99:b0:08:ff:54:00:31:8d: d3:ae:1f:80:e4:5d:77:4f:3c:e6:f4:a3:2a:1f:b7: 59:6c:64:4f:b3:6e:db:48:fa:dd:32:8a:dc:37:79: 24:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F3:B2:01:FA:9D:92:63:C5:92:29:17:36:D6:52:1A:52:20:4C:2B X509v3 Authority Key Identifier: keyid:DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:77:b6:b3:71:c4:da:0d:37:f1:4c:65:05:74:11:f8:9f:6e: 0d:5a:a3:c1:2b:54:0d:09:da:71:db:86:fe:00:e3:fe:27:59: 1e:dd:bb:90:57:2f:de:09:2e:ec:25:76:f6:be:9d:04:cd:cd: ce:03:cc:01:62:f1:0f:8a:8e:29:d3:22:83:65:9e:f1:b6:f7: 8a:60:10:90:2b:c8:35:b2:72:32:5b:a9:78:dc:c2:86:22:89: 5f:82:26:27:1f:95:9f:bd:bf:8a:9e:09:9a:b3:81:63:b3:d1: 0e:df:f1:c0:0e:c1:49:cb:2f:c1:73:ca:a8:44:04:6b:6b:ce: 89:9e:90:89:94:31:99:65:5e:62:10:17:18:1b:8f:6b:b9:78: 11:1d:37:92:9b:dd:67:7b:85:4f:3e:fc:90:7a:7f:35:ff:54: 1b:5a:19:25:90:88:80:92:95:c6:27:5d:5a:f1:43:76:c9:9a: 8d:22:c4:aa:70:1f:55:44:4b:58:e3:aa:ef:50:d1:db:48:b4: 77:c1:13:68:ce:1b:c1:0c:3b:0b:31:9d:f6:02:73:00:d3:20: d3:56:c9:fc:62:30:1d:64:3b:b2:9e:6e:bf:02:cc:7e:75:b9: b2:78:21:4d:86:85:af:38:66:7f:d0:e8:9d:ee:33:32:56:84: 54:ce:f4:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSPd+EoATUGsVBD197xnPLbm71gwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE0OENBQzFBRDkyNzY4QjVDQkM2MTIxOURCQTZGRUJD RDhBMjIzRjAeFw0yNTA2MDkxOTI5NTdaFw0yNTA2MTAyMjE5NTdaMDMxMTAvBgNV BAMTKEY2RjNCMjAxRkE5RDkyNjNDNTkyMjkxNzM2RDY1MjFBNTIyMDRDMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGf8DIr8Ebp8d1Ecx/qzMgrXS cArYCOXns5C8CeW7eGmdY3ZFDUYMj4MkXkhetHqd/hCH+DDYzZ4aG1DCZLrG4bp/ FNmayNAiS0k3FzBHx5+VYUmn/+ylpd7cptVu2fjbKwIunqdgGuRJyusDXWY9KsPi Woaj4A51/laQdBQWDZnaJsP91BAOhIAKvgDvxEmlYHfz7aLIbe/s+QejGDwmHVMe kzTJ/oWHKvInNM7tkCgo2wFEWBh2tOd5M3lh9Jak+oIX8KaKXe1ByBVrUfuHM2K1 9mfcAayZsAj/VAAxjdOuH4DkXXdPPOb0oyoft1lsZE+zbttI+t0yitw3eSRBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9vOyAfqdkmPFkikXNtZSGlIgTCswHwYDVR0j BBgwFoAU2kjKwa2SdotcvGEhnbpv682KIj8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQjROb3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpo TlgvMS9EQTQ4Q0FDMUFEOTI3NjhCNUNCQzYxMjE5REJBNkZFQkNEOEEyMjNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBNDhDQUMxQUQ5Mjc2OEI1 Q0JDNjEyMTlEQkE2RkVCQ0Q4QTIyM0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QjROb3MzS3BuZlpqUmdpcWRqc0J2RkNyMzlqZksydktpZW1XMVB4SFpoTlgvMS9E QTQ4Q0FDMUFEOTI3NjhCNUNCQzYxMjE5REJBNkZFQkNEOEEyMjNGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ3e2s3HE2g038UxlBXQR+J9uDVqjwStUDQnacduG/gDj/idZHt27kFcv3gku 7CV29r6dBM3NzgPMAWLxD4qOKdMig2We8bb3imAQkCvINbJyMlupeNzChiKJX4Im Jx+Vn72/ip4JmrOBY7PRDt/xwA7BScsvwXPKqEQEa2vOiZ6QiZQxmWVeYhAXGBuP a7l4ER03kpvdZ3uFTz78kHp/Nf9UG1oZJZCIgJKVxiddWvFDdsmajSLEqnAfVURL WOOq71DR20i0d8ETaM4bwQw7CzGd9gJzANMg01bJ/GIwHWQ7sp5uvwLMfnW5sngh TYaFrzhmf9Done4zMlaEVM70cg== -----END CERTIFICATE-----Generated at Tue Jun 10 01:51:43 2025 by rpki-client