$ rpki-client -vvf rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.mft File: 2EE7830EC8B817A3DBD80AAF93266292D6118661.mft (raw, json) Hash identifier: PnkVhqoMvm4wxljXmIJ6egoFxsiG7UsYtE70QDZqgps= Subject key identifier: 94:11:D4:2F:00:28:14:51:B5:4B:D6:CB:83:7B:ED:2C:00:3F:28:3E Authority key identifier: 2E:E7:83:0E:C8:B8:17:A3:DB:D8:0A:AF:93:26:62:92:D6:11:86:61 Certificate issuer: /CN=2EE7830EC8B817A3DBD80AAF93266292D6118661 Certificate serial: 5C8AD1128A2CEB150BDB87B81C536B8608964709 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.cer Subject info access: rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.mft Manifest number: 0243 Signing time: Tue 29 Jul 2025 04:25:36 +0000 Manifest this update: Tue 29 Jul 2025 04:20:36 +0000 Manifest next update: Wed 30 Jul 2025 06:08:36 +0000 Files and hashes: 1: 2EE7830EC8B817A3DBD80AAF93266292D6118661.crl (hash: 9nwrdJIRcZOhRaWhGk9ykPKwuLJOSg5Wr+iOokmdi2o=) 2: 3136382e3139342e3130342e302f32322d3332203d3e20323634353238.roa (hash: 6f/JrCsIS/911PrWzhju+B3rEV/TxqS+LO1DubtMYMQ=) 3: 323830343a323130383a3a2f33322d313238203d3e20323634353238.roa (hash: +OAJWEFOIqiJtr4wj3xWoUGpWUwlD2PgPPxTjNExz8c=) 4: 3133382e302e32302e302f32322d3332203d3e20323634353238.roa (hash: iJH2yqZGqU9DH9vmSVPx5xqeOYEUHugqaQgZHF8fe3k=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.crl rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Jul 2025 06:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:8a:d1:12:8a:2c:eb:15:0b:db:87:b8:1c:53:6b:86:08:96:47:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EE7830EC8B817A3DBD80AAF93266292D6118661 Validity Not Before: Jul 29 04:20:36 2025 GMT Not After : Jul 30 06:08:36 2025 GMT Subject: CN=9411D42F00281451B54BD6CB837BED2C003F283E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b5:73:c6:9f:fc:6f:ef:47:2e:46:df:b2:93: 0d:86:29:6f:ec:0e:57:d2:c4:cf:dd:a9:de:f2:9f: db:39:3d:69:1a:bd:da:f2:69:2f:05:7c:9b:26:b3: 03:40:e5:46:7e:b0:7f:71:88:5a:7a:ee:21:cb:bd: 34:29:0c:31:7c:26:4a:68:43:98:30:d9:3d:c9:6e: 49:5f:5b:4d:09:d3:82:4c:5f:2d:2b:a1:96:8e:a8: 1a:f0:96:f8:1c:4c:96:81:a3:12:ad:33:23:12:83: 71:b5:34:33:be:92:b5:1d:99:ee:b5:47:28:07:6d: fc:ee:0c:01:4c:bd:fa:4b:e1:5d:ee:ce:d4:f5:65: f4:84:50:49:0a:9e:3c:7f:c7:0d:23:66:0c:0c:9b: 5f:ae:95:78:54:46:9f:2f:1e:18:f7:8b:4f:7c:05: c7:36:dd:bb:7f:77:d1:6a:0d:fa:1d:b7:0f:61:88: 1b:89:6b:8d:67:46:d2:eb:2f:74:0d:41:b9:50:a6: 22:a8:4b:fb:db:4e:e6:af:fd:9d:a7:85:c3:1d:59: ac:f5:d6:c8:12:62:e0:10:a9:b8:e2:b4:b6:2b:23: 70:8b:0b:ba:b9:fe:a3:3e:96:99:34:16:bc:69:57: ff:b5:56:a6:9e:e4:3c:8e:13:a0:17:42:83:12:49: 90:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:11:D4:2F:00:28:14:51:B5:4B:D6:CB:83:7B:ED:2C:00:3F:28:3E X509v3 Authority Key Identifier: keyid:2E:E7:83:0E:C8:B8:17:A3:DB:D8:0A:AF:93:26:62:92:D6:11:86:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/1/2EE7830EC8B817A3DBD80AAF93266292D6118661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:23:b4:af:23:d3:cb:59:4a:7b:28:e4:cd:8b:12:c0:14:eb: 0f:8a:d8:a3:41:56:ca:93:96:97:4a:2e:53:3c:2b:56:86:51: 29:0d:c5:db:65:64:06:48:60:a7:d0:88:0b:82:4c:80:16:f9: 88:58:09:4d:52:59:db:42:ac:0f:7b:e7:e4:fd:97:b6:24:bb: ac:5c:ac:26:a9:cc:fb:62:8d:b6:24:a5:64:ce:13:81:41:cf: 26:ea:ff:e5:7a:2a:85:d4:23:92:3f:88:4b:ad:a6:cc:01:70: 24:6f:ba:9a:9c:c6:0b:90:6e:f1:18:ee:5c:54:ef:0d:97:32: ec:51:4b:54:75:02:92:a1:5e:55:8e:6c:fc:5b:d3:02:84:09: bf:65:12:95:55:f0:eb:7c:73:8c:9d:04:39:98:08:8a:c8:d8: 95:09:3e:c5:b4:6f:65:4a:10:75:bd:b6:7c:4b:bd:79:cd:d9: 33:e5:17:2d:a0:03:ef:8d:42:38:6f:1f:55:78:94:87:86:12: 1a:79:98:a9:5a:5d:c8:f9:ba:25:1b:c7:83:a3:7c:a7:2b:3d: 27:4d:30:7c:35:8e:a7:a4:78:c9:f8:d9:f0:b3:ed:c9:dd:d0: 42:f7:83:21:83:53:1d:65:f4:38:eb:55:18:fb:3b:bf:96:0d: f5:31:1d:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXIrREoos6xUL24e4HFNrhgiWRwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVFNzgzMEVDOEI4MTdBM0RCRDgwQUFGOTMyNjYyOTJE NjExODY2MTAeFw0yNTA3MjkwNDIwMzZaFw0yNTA3MzAwNjA4MzZaMDMxMTAvBgNV BAMTKDk0MTFENDJGMDAyODE0NTFCNTRCRDZDQjgzN0JFRDJDMDAzRjI4M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/tXPGn/xv70cuRt+ykw2GKW/s DlfSxM/dqd7yn9s5PWkavdryaS8FfJsmswNA5UZ+sH9xiFp67iHLvTQpDDF8Jkpo Q5gw2T3JbklfW00J04JMXy0roZaOqBrwlvgcTJaBoxKtMyMSg3G1NDO+krUdme61 RygHbfzuDAFMvfpL4V3uztT1ZfSEUEkKnjx/xw0jZgwMm1+ulXhURp8vHhj3i098 Bcc23bt/d9FqDfodtw9hiBuJa41nRtLrL3QNQblQpiKoS/vbTuav/Z2nhcMdWaz1 1sgSYuAQqbjitLYrI3CLC7q5/qM+lpk0FrxpV/+1Vqae5DyOE6AXQoMSSZDDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlBHULwAoFFG1S9bLg3vtLAA/KD4wHwYDVR0j BBgwFoAULueDDsi4F6Pb2AqvkyZiktYRhmEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkdTZVBybk1YanZwTWlQQUdyZmVzSG16bzRMMTgxMzNWREtlQVBRVUpK bzgvMS8yRUU3ODMwRUM4QjgxN0EzREJEODBBQUY5MzI2NjI5MkQ2MTE4NjYxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFRTc4MzBFQzhCODE3QTNE QkQ4MEFBRjkzMjY2MjkyRDYxMTg2NjEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkdTZVBybk1YanZwTWlQQUdyZmVzSG16bzRMMTgxMzNWREtlQVBRVUpKbzgvMS8y RUU3ODMwRUM4QjgxN0EzREJEODBBQUY5MzI2NjI5MkQ2MTE4NjYxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEABiO0ryPTy1lKeyjkzYsSwBTrD4rYo0FWypOWl0ouUzwrVoZRKQ3F22VkBkhg p9CIC4JMgBb5iFgJTVJZ20KsD3vn5P2XtiS7rFysJqnM+2KNtiSlZM4TgUHPJur/ 5XoqhdQjkj+IS62mzAFwJG+6mpzGC5Bu8RjuXFTvDZcy7FFLVHUCkqFeVY5s/FvT AoQJv2USlVXw63xzjJ0EOZgIisjYlQk+xbRvZUoQdb22fEu9ec3ZM+UXLaAD741C OG8fVXiUh4YSGnmYqVpdyPm6JRvHg6N8pys9J00wfDWOp6R4yfjZ8LPtyd3QQveD IYNTHWX0OOtVGPs7v5YN9TEdiw== -----END CERTIFICATE-----Generated at Tue Jul 29 16:35:44 2025 by rpki-client