$ rpki-client -vvf rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft File: DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft (raw, json) Hash identifier: pkKWakZwqs8baCKsFVn+5lHWrktvqDiECtNzGnUlkMg= Subject key identifier: 2D:A8:30:94:2E:E2:B9:66:BC:4B:4B:68:12:07:92:34:12:39:D6:7D Authority key identifier: DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7 Certificate issuer: /CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7 Certificate serial: 07B8341FCBFF3AB4E1D4428135CFA7FE4910D241 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer Subject info access: rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft Manifest number: 022C Signing time: Sat 07 Jun 2025 02:43:02 +0000 Manifest this update: Sat 07 Jun 2025 02:38:02 +0000 Manifest next update: Sun 08 Jun 2025 05:27:02 +0000 Files and hashes: 1: 3137302e3233332e37362e302f32322d3234203d3e20323633343935.roa (hash: Gwy9zblG706ghCX5/JVGDiaxPqAmIwnXEqUmjq1gI0c=) 2: DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl (hash: wI/gCAS1n+M4e8XRHGu1GgQu/ScYy2k8bzrUqpBX9QI=) 3: 323830343a313262633a3a2f33322d3438203d3e20323633343935.roa (hash: lJamWfGsgdftwb6MoUAW/t7o12xx87lvoGqpZkx6hgI=) 4: 3139312e3234332e34382e302f32322d3234203d3e20323633343935.roa (hash: 9SsdRo7F/WQKm+zUuXydKWyuBOs8eQuYsJD3wiY7ifQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 22:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:b8:34:1f:cb:ff:3a:b4:e1:d4:42:81:35:cf:a7:fe:49:10:d2:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7 Validity Not Before: Jun 7 02:38:02 2025 GMT Not After : Jun 8 05:27:02 2025 GMT Subject: CN=2DA830942EE2B966BC4B4B68120792341239D67D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:10:48:4a:b0:08:8c:a4:ad:7c:2d:63:e3: 77:e7:14:dd:84:cf:2d:9a:6f:e6:fb:ef:88:f1:74: f0:76:f0:de:fc:15:d8:79:4e:65:a7:fd:0c:f5:3d: ae:02:34:4f:1f:b5:93:25:fb:59:fd:3f:5d:2f:41: 9f:61:af:39:ae:56:f2:41:7f:01:f6:7c:92:60:03: c6:08:71:8c:2b:87:1c:57:c6:7d:13:c0:c4:5d:23: a7:d1:45:c0:d9:32:15:df:6e:04:e1:87:37:91:3b: fb:32:49:2b:1f:60:35:79:4a:54:54:b3:cc:90:08: e2:aa:98:e4:9e:71:42:17:ef:85:b6:7f:c5:04:0e: 35:19:74:b9:0c:b4:c5:78:0b:40:7a:09:e5:c2:92: 25:72:c2:21:26:b7:24:35:b6:b4:98:93:63:ec:97: 41:c8:ba:02:0e:34:27:7b:98:64:d1:20:86:2e:6f: 65:27:2b:12:eb:64:91:98:42:cb:95:07:af:c8:c2: 2b:60:db:4a:af:06:5c:70:b7:96:7d:c2:eb:b3:0d: d8:29:50:df:8d:09:21:53:2b:e7:2d:1f:8e:0d:df: 20:5d:4c:e8:50:d9:55:1e:6f:ec:61:82:77:88:35: e7:d0:42:af:53:ca:70:9d:ff:5c:42:66:02:c8:6d: 58:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A8:30:94:2E:E2:B9:66:BC:4B:4B:68:12:07:92:34:12:39:D6:7D X509v3 Authority Key Identifier: keyid:DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:2c:ea:c1:88:f4:2b:90:a8:6d:ec:69:0b:c8:14:19:bc:ed: eb:ba:d1:ab:f7:96:b0:fd:b3:3f:f6:b1:fb:a2:49:49:d9:93: ef:e5:3e:87:fa:a2:7f:64:2a:1e:09:5e:11:23:5b:ac:72:52: 69:de:53:2d:50:60:b1:23:2e:8e:49:75:71:23:42:0d:a3:81: c5:c1:a4:01:b7:98:97:3b:c8:e9:66:be:98:7c:5b:98:51:c6: b6:69:2a:42:c0:2c:53:1f:85:b7:43:ff:49:6a:0c:16:c0:b8: 6b:00:3a:a6:ce:6e:9d:e0:ab:80:c4:8b:a5:bf:f8:03:7e:4f: 3b:1a:e4:a3:98:97:c0:2a:8c:2d:39:d3:01:ea:e2:e6:07:b4: 24:bd:62:bd:dc:aa:ba:66:97:95:e1:44:aa:4b:a9:ff:6f:ab: d5:4a:2f:3a:65:3d:6b:78:5b:08:7c:62:d8:7b:7c:67:1b:b5: f6:b9:20:ca:95:ba:e0:45:01:46:87:6f:62:c5:be:18:bd:b8: 83:cf:8b:7f:5d:7e:7d:fb:45:cc:d3:fc:ac:3a:64:da:72:3e: b8:20:51:31:ad:0d:00:14:55:7e:05:7d:24:86:13:27:5c:b6: 93:36:bc:82:23:e9:45:7a:05:b5:e6:23:85:d7:c7:ed:e1:2f: 9f:92:99:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUB7g0H8v/OrTh1EKBNc+n/kkQ0kEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RkM1NjgwNUM3NjY3RTE4MDE4NTRCM0M3N0FEQ0I2 NEE2M0RENzAeFw0yNTA2MDcwMjM4MDJaFw0yNTA2MDgwNTI3MDJaMDMxMTAvBgNV BAMTKDJEQTgzMDk0MkVFMkI5NjZCQzRCNEI2ODEyMDc5MjM0MTIzOUQ2N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6LRBISrAIjKStfC1j43fnFN2E zy2ab+b774jxdPB28N78Fdh5TmWn/Qz1Pa4CNE8ftZMl+1n9P10vQZ9hrzmuVvJB fwH2fJJgA8YIcYwrhxxXxn0TwMRdI6fRRcDZMhXfbgThhzeRO/sySSsfYDV5SlRU s8yQCOKqmOSecUIX74W2f8UEDjUZdLkMtMV4C0B6CeXCkiVywiEmtyQ1trSYk2Ps l0HIugIONCd7mGTRIIYub2UnKxLrZJGYQsuVB6/Iwitg20qvBlxwt5Z9wuuzDdgp UN+NCSFTK+ctH44N3yBdTOhQ2VUeb+xhgneINefQQq9TynCd/1xCZgLIbVhFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQULagwlC7iuWa8S0toEgeSNBI51n0wHwYDVR0j BBgwFoAU3k/FaAXHZn4YAYVLPHety2SmPdcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3VpeUJYV3BQVUhKenpQWjFCRWJTazZZQzJ1dEhOQWlTNXJFb1Vtb2Zp U1kvMC9ERTRGQzU2ODA1Qzc2NjdFMTgwMTg1NEIzQzc3QURDQjY0QTYzREQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFNEZDNTY4MDVDNzY2N0Ux ODAxODU0QjNDNzdBRENCNjRBNjNERDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3VpeUJYV3BQVUhKenpQWjFCRWJTazZZQzJ1dEhOQWlTNXJFb1Vtb2ZpU1kvMC9E RTRGQzU2ODA1Qzc2NjdFMTgwMTg1NEIzQzc3QURDQjY0QTYzREQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANCzqwYj0K5CobexpC8gUGbzt67rRq/eWsP2zP/ax+6JJSdmT7+U+h/qif2Qq HgleESNbrHJSad5TLVBgsSMujkl1cSNCDaOBxcGkAbeYlzvI6Wa+mHxbmFHGtmkq QsAsUx+Ft0P/SWoMFsC4awA6ps5uneCrgMSLpb/4A35POxrko5iXwCqMLTnTAeri 5ge0JL1ivdyqumaXleFEqkup/2+r1UovOmU9a3hbCHxi2Ht8Zxu19rkgypW64EUB RodvYsW+GL24g8+Lf11+fftFzNP8rDpk2nI+uCBRMa0NABRVfgV9JIYTJ1y2kza8 giPpRXoFteYjhdfH7eEvn5KZsw== -----END CERTIFICATE-----Generated at Sat Jun 7 06:33:46 2025 by rpki-client