$ rpki-client -vvf rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft File: 2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft (raw, json) Hash identifier: WIsz101AJaKYlbbRfzKQYiBcER/RbNrzhTy8aMN9tHk= Subject key identifier: B0:18:09:FF:39:1A:97:94:94:09:76:C9:EF:AC:EB:E9:BD:05:11:51 Authority key identifier: 2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47 Certificate issuer: /CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647 Certificate serial: 4420B01867FEC936204FFFEF7D3ACB0A1C2B0588 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer Subject info access: rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft Manifest number: 0251 Signing time: Wed 20 Aug 2025 13:41:24 +0000 Manifest this update: Wed 20 Aug 2025 13:36:24 +0000 Manifest next update: Thu 21 Aug 2025 15:25:24 +0000 Files and hashes: 1: 2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl (hash: PQXmUH+FCh/I56D5DEpTb/DgWkV2lQBV403vyMeS4/4=) 2: 3230302e33392e35302e302f32342d3234203d3e20323731353234.roa (hash: z6AxAeBvuZkF2Hv3TgcmR5cniDfzlrMjmqRXv6n3fBs=) 3: 3230302e33392e34392e302f32342d3234203d3e20323731353234.roa (hash: KleVsHAqtvWr8k2742HawWCdXqH/hhdJzyliz+AilX4=) 4: 3230302e33392e34382e302f32342d3234203d3e20323731353234.roa (hash: 3Ffp5JJCiBJxBl96vfAKZjO3HJm6sYK5tARVTWZSBow=) 5: 3230302e33392e35312e302f32342d3234203d3e20323731353234.roa (hash: 1IV3WY/QEAW1n1IWjg0tOjW5dO+ggc66oTNHEIV7TWI=) 6: 323830343a376365303a3a2f33322d3333203d3e20323731353234.roa (hash: cexwvQVo5HooQieHGBIwzXZEIQLA1g0ov7qJ1ITQWNQ=) 7: 3230302e33392e34382e302f32322d3232203d3e20323731353234.roa (hash: Vp+ej4dQx+65lyUdgAHuPgBaf+ucorRNSBDiDndfVME=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 15:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:20:b0:18:67:fe:c9:36:20:4f:ff:ef:7d:3a:cb:0a:1c:2b:05:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647 Validity Not Before: Aug 20 13:36:24 2025 GMT Not After : Aug 21 15:25:24 2025 GMT Subject: CN=B01809FF391A9794940976C9EFACEBE9BD051151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f2:e5:e4:2d:3d:49:bb:29:74:a9:be:8e:6e: a3:eb:44:f1:4e:6c:ee:8c:01:85:32:33:12:51:af: 77:6d:7f:3e:96:33:ed:43:4f:9a:7d:9b:dd:15:08: f4:c9:69:cd:36:e1:de:36:d8:40:3b:d7:19:c9:e0: fa:68:a9:a3:4b:d9:7b:eb:37:a8:ae:c7:0c:d5:8a: 4f:62:34:b7:bb:bc:94:15:0f:78:d2:7c:0f:1e:8e: a9:77:a8:b8:b8:db:2d:50:5b:11:7a:de:27:88:b0: d5:92:5c:94:5b:fc:32:1b:91:7c:3b:b7:fa:23:30: 88:8d:83:41:3c:89:f3:c7:92:34:29:8a:22:b6:4b: 99:dd:7b:af:27:c2:5f:56:57:a3:b7:c6:da:0c:32: 11:03:d6:8b:14:fb:5f:d9:d8:4a:de:9b:92:d5:58: 7b:76:38:67:f3:64:58:a8:ed:6d:65:78:4b:d0:91: d5:0d:4f:b9:c8:4d:49:dd:35:f0:92:57:13:34:7b: b7:40:eb:5b:2a:d6:a7:f9:4d:81:6b:0e:bb:8f:5a: c9:78:d0:85:d9:a5:d6:19:4c:00:4a:ef:3c:45:4f: 44:0f:2f:0e:e3:b5:2c:e0:32:aa:4b:a5:4c:8b:13: bf:b3:67:d7:2e:ea:6d:08:8f:08:01:9f:5e:ce:26: 6a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:18:09:FF:39:1A:97:94:94:09:76:C9:EF:AC:EB:E9:BD:05:11:51 X509v3 Authority Key Identifier: keyid:2D:D9:7F:5E:85:D5:A9:57:8E:78:94:0C:FD:5B:AE:DF:B8:2E:06:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CfUTGqQ24bcLqCcB928MyfWAbCkdUkyUtXPyDXeAm1oB/0/2DD97F5E85D5A9578E78940CFD5BAEDFB82E0647.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:81:ac:31:b6:84:6a:96:2f:4e:66:47:39:fc:64:00:83:f1: 40:fe:c9:a1:18:f4:bb:40:5b:4d:dc:f7:07:07:2b:ea:d0:ad: a4:84:ce:da:8b:7f:28:7d:ce:ba:d6:81:3e:35:54:f4:38:55: 25:1c:fc:a8:61:6d:7b:c8:0b:56:16:d1:e0:af:6b:aa:b3:fd: 48:78:00:05:0d:f2:bd:15:a4:b1:7c:cc:09:4f:1e:c9:63:96: 9e:89:f6:57:8d:9f:23:04:b0:0d:54:30:e7:b7:8c:d3:32:14: 1e:c0:da:1a:e8:cc:0f:f2:60:b3:aa:e0:80:b2:04:a4:e5:f1: a0:78:f5:cd:76:12:1f:2e:25:41:0f:1a:08:11:2c:7e:4a:66: c3:b3:7d:2c:36:34:13:ee:ce:60:21:55:5e:48:a0:7c:2e:e9: d4:37:34:71:85:e5:ef:d4:38:e0:00:68:4e:39:61:75:6f:24: a2:37:16:9a:e3:78:03:89:0d:ca:8b:f0:bd:79:11:1e:9d:40: f2:9f:f4:5f:2c:4d:01:10:56:95:8b:2e:a4:68:11:54:06:c2: ca:64:a5:42:7e:c1:76:c9:ba:bb:5b:0e:95:52:46:c8:ce:34: 5c:96:ee:3a:a8:2c:a2:50:28:d8:4c:99:c7:1e:b6:8f:d5:14: 07:92:b9:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURCCwGGf+yTYgT//vfTrLChwrBYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREOTdGNUU4NUQ1QTk1NzhFNzg5NDBDRkQ1QkFFREZC ODJFMDY0NzAeFw0yNTA4MjAxMzM2MjRaFw0yNTA4MjExNTI1MjRaMDMxMTAvBgNV BAMTKEIwMTgwOUZGMzkxQTk3OTQ5NDA5NzZDOUVGQUNFQkU5QkQwNTExNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw8uXkLT1Juyl0qb6ObqPrRPFO bO6MAYUyMxJRr3dtfz6WM+1DT5p9m90VCPTJac024d422EA71xnJ4PpoqaNL2Xvr N6iuxwzVik9iNLe7vJQVD3jSfA8ejql3qLi42y1QWxF63ieIsNWSXJRb/DIbkXw7 t/ojMIiNg0E8ifPHkjQpiiK2S5nde68nwl9WV6O3xtoMMhED1osU+1/Z2Erem5LV WHt2OGfzZFio7W1leEvQkdUNT7nITUndNfCSVxM0e7dA61sq1qf5TYFrDruPWsl4 0IXZpdYZTABK7zxFT0QPLw7jtSzgMqpLpUyLE7+zZ9cu6m0IjwgBn17OJmoTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUsBgJ/zkal5SUCXbJ76zr6b0FEVEwHwYDVR0j BBgwFoAULdl/XoXVqVeOeJQM/Vuu37guBkcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ2ZVVEdxUTI0YmNMcUNjQjkyOE15ZldBYkNrZFVreVV0WFB5RFhlQW0x b0IvMC8yREQ5N0Y1RTg1RDVBOTU3OEU3ODk0MENGRDVCQUVERkI4MkUwNjQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERDk3RjVFODVENUE5NTc4 RTc4OTQwQ0ZENUJBRURGQjgyRTA2NDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q2ZVVEdxUTI0YmNMcUNjQjkyOE15ZldBYkNrZFVreVV0WFB5RFhlQW0xb0IvMC8y REQ5N0Y1RTg1RDVBOTU3OEU3ODk0MENGRDVCQUVERkI4MkUwNjQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADYGsMbaEapYvTmZHOfxkAIPxQP7JoRj0u0BbTdz3Bwcr6tCtpITO2ot/KH3O utaBPjVU9DhVJRz8qGFte8gLVhbR4K9rqrP9SHgABQ3yvRWksXzMCU8eyWOWnon2 V42fIwSwDVQw57eM0zIUHsDaGujMD/Jgs6rggLIEpOXxoHj1zXYSHy4lQQ8aCBEs fkpmw7N9LDY0E+7OYCFVXkigfC7p1Dc0cYXl79Q44ABoTjlhdW8kojcWmuN4A4kN yovwvXkRHp1A8p/0XyxNARBWlYsupGgRVAbCymSlQn7Bdsm6u1sOlVJGyM40XJbu OqgsolAo2EyZxx62j9UUB5K5HA== -----END CERTIFICATE-----Generated at Wed Aug 20 16:19:59 2025 by rpki-client