$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/C5CF9FEDBE2481D771195D06081D49FA4AF07171.mft File: C5CF9FEDBE2481D771195D06081D49FA4AF07171.mft (raw, json) Hash identifier: NsjHVpQopMKl118IQLR8SffZ6y2VsRshsOAqAHWpbLs= Subject key identifier: 63:D0:8C:6E:2E:0A:64:04:F6:16:68:8D:45:AA:AC:37:11:72:23:02 Authority key identifier: C5:CF:9F:ED:BE:24:81:D7:71:19:5D:06:08:1D:49:FA:4A:F0:71:71 Certificate issuer: /CN=C5CF9FEDBE2481D771195D06081D49FA4AF07171 Certificate serial: 39AA37C69BC1C1FAAF7AB90C2AD196D45E74F180 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5CF9FEDBE2481D771195D06081D49FA4AF07171.cer Subject info access: rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/C5CF9FEDBE2481D771195D06081D49FA4AF07171.mft Manifest number: 01DF Signing time: Sat 07 Jun 2025 19:15:09 +0000 Manifest this update: Sat 07 Jun 2025 19:10:09 +0000 Manifest next update: Sun 08 Jun 2025 21:46:09 +0000 Files and hashes: 1: 3230302e3139322e3135322e302f32342d3234203d3e203631363133.roa (hash: HtDhyIfw3jNHYiZkcT8lwXkEYVkwLL93Y2AOhrtvGK4=) 2: 3230302e3139322e3135332e302f32342d3234203d3e203631363133.roa (hash: 9iiR35mEd65WRUH3Y31GcTvAfWWGmONClLM0IQV8hss=) 3: 3230302e3139322e3135342e302f32342d3234203d3e203631363133.roa (hash: 9Bl5yncWAeOSm8N9QosZWr/902rNM2a3j5BLe82de+0=) 4: 34352e3137312e36302e302f32322d3234203d3e203631363133.roa (hash: dbLAkZEz/5LCZ85Hg9KhUt21lXPpwFaKR4qY1XaULAE=) 5: 3230302e3139322e3135342e302f32332d3233203d3e203631363133.roa (hash: T7iTn9eS+b8oJWL1ueyFo5vdhPX/H7ZXAiAbrXccd8U=) 6: 3230302e3139322e3135352e302f32342d3234203d3e203631363133.roa (hash: EhtmDDkzcmiX4JwPmKMWh6GnFFKp8HYt1ZcnQJgK7m8=) 7: 3230302e3139322e3135322e302f32322d3232203d3e203631363133.roa (hash: SZb+s+INueINkL0Mw0isoCTOXFOPjes/9OmACLIGr0U=) 8: 323830343a353936343a3a2f33322d3334203d3e203631363133.roa (hash: MDMx0in4Iwe34EZMkw5D+rmrat+4qnXuhK5UbJworS8=) 9: C5CF9FEDBE2481D771195D06081D49FA4AF07171.crl (hash: 8IkmhgD0N3M4QjkcFA/rZGSmisTEJrfwLaitYUtYxTM=) 10: 3230302e3139322e3135322e302f32332d3233203d3e203631363133.roa (hash: yw8cT5GCfag/OZNIbxFXO9UcDzkNX0IWqUXeRidrr0Y=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/C5CF9FEDBE2481D771195D06081D49FA4AF07171.crl rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/C5CF9FEDBE2481D771195D06081D49FA4AF07171.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5CF9FEDBE2481D771195D06081D49FA4AF07171.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 21:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:aa:37:c6:9b:c1:c1:fa:af:7a:b9:0c:2a:d1:96:d4:5e:74:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CF9FEDBE2481D771195D06081D49FA4AF07171 Validity Not Before: Jun 7 19:10:09 2025 GMT Not After : Jun 8 21:46:09 2025 GMT Subject: CN=63D08C6E2E0A6404F616688D45AAAC3711722302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e5:c0:36:d2:85:ee:eb:56:7c:c3:99:d4:26: 89:21:f0:d6:c9:1c:7e:b6:98:0b:f8:7a:04:6d:20: 73:80:33:d5:0a:48:cf:e1:24:8d:66:d0:d5:15:f6: c8:9b:54:60:59:69:30:9f:d0:10:5f:18:34:5d:a2: 89:c6:9f:d5:4f:66:d5:48:93:36:4c:85:9e:81:75: 94:d1:cf:17:a0:0e:30:3c:76:76:c4:1d:c8:df:96: 22:46:e8:38:3a:fb:8a:99:a5:96:8f:2e:46:e4:32: f3:8f:57:d0:55:6b:26:34:e4:6e:28:1c:64:f5:55: 68:55:ec:96:1a:b2:e4:99:20:a3:b6:48:98:d7:eb: 23:15:d2:3b:86:bd:08:33:6e:c9:94:3a:68:a2:b1: 1c:dd:76:64:30:f1:24:16:3d:c1:c0:66:86:98:f4: 42:a2:dd:62:b8:63:23:0a:ad:3c:0d:72:71:92:1d: cb:0f:c7:c4:02:3f:18:9f:56:33:91:82:3c:4e:4d: 01:e1:60:f6:e8:32:94:95:92:81:21:9f:a3:aa:c4: a3:fb:11:19:65:de:14:33:36:aa:24:e5:3b:a7:1b: 50:e6:ec:f0:88:26:93:63:34:3c:b1:16:4a:57:da: ff:bc:33:2f:af:b4:64:2f:2f:15:36:67:d0:30:34: 12:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D0:8C:6E:2E:0A:64:04:F6:16:68:8D:45:AA:AC:37:11:72:23:02 X509v3 Authority Key Identifier: keyid:C5:CF:9F:ED:BE:24:81:D7:71:19:5D:06:08:1D:49:FA:4A:F0:71:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/C5CF9FEDBE2481D771195D06081D49FA4AF07171.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5CF9FEDBE2481D771195D06081D49FA4AF07171.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/C5CF9FEDBE2481D771195D06081D49FA4AF07171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:bd:39:12:4d:a1:50:db:83:70:35:e8:c4:36:2d:fe:0e:ce: b2:52:4a:3d:fd:91:6a:e7:0e:e8:83:06:64:b1:55:5e:e8:46: 74:e5:92:ef:96:dd:5c:79:df:40:e0:6e:a6:e0:94:0c:fb:60: ee:8a:a5:0e:12:a9:a4:6a:00:6c:bf:c8:c1:3f:b6:49:75:87: 82:60:75:ec:d7:47:d2:c9:d7:40:79:ff:92:27:26:46:ae:70: 98:03:49:05:cf:3e:63:70:09:d1:c3:c6:51:fd:6c:49:04:fe: 07:87:d3:8d:b9:f0:67:4e:1c:ea:45:9e:4d:d8:73:44:b5:fe: 3c:27:8e:0e:e4:b7:c8:ca:d6:97:16:02:b9:e0:0d:e8:0a:24: 1a:02:3c:41:aa:59:fa:2b:70:fc:63:4f:a1:49:e0:61:bb:06: ba:aa:e3:2e:c5:0f:6a:14:ba:52:49:1d:43:ad:6f:ac:76:89: 04:ed:2e:47:65:2a:fa:8d:ee:66:f4:f0:c5:dd:b1:dc:12:68: 36:6c:92:53:cc:3d:bd:b0:43:57:7e:81:b1:f9:b0:1b:b1:6c: ed:e9:77:8c:95:f1:13:50:39:87:8f:e1:a8:e0:4b:92:b4:be: 77:73:c3:b8:cb:ba:aa:b5:5f:5f:9d:95:dc:0a:d2:54:bd:a4: f1:23:1c:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOao3xpvBwfqverkMKtGW1F508YAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDRjlGRURCRTI0ODFENzcxMTk1RDA2MDgxRDQ5RkE0 QUYwNzE3MTAeFw0yNTA2MDcxOTEwMDlaFw0yNTA2MDgyMTQ2MDlaMDMxMTAvBgNV BAMTKDYzRDA4QzZFMkUwQTY0MDRGNjE2Njg4RDQ1QUFBQzM3MTE3MjIzMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh5cA20oXu61Z8w5nUJokh8NbJ HH62mAv4egRtIHOAM9UKSM/hJI1m0NUV9sibVGBZaTCf0BBfGDRdoonGn9VPZtVI kzZMhZ6BdZTRzxegDjA8dnbEHcjfliJG6Dg6+4qZpZaPLkbkMvOPV9BVayY05G4o HGT1VWhV7JYasuSZIKO2SJjX6yMV0juGvQgzbsmUOmiisRzddmQw8SQWPcHAZoaY 9EKi3WK4YyMKrTwNcnGSHcsPx8QCPxifVjORgjxOTQHhYPboMpSVkoEhn6OqxKP7 ERll3hQzNqok5TunG1Dm7PCIJpNjNDyxFkpX2v+8My+vtGQvLxU2Z9AwNBJlAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUY9CMbi4KZAT2FmiNRaqsNxFyIwIwHwYDVR0j BBgwFoAUxc+f7b4kgddxGV0GCB1J+krwcXEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDYzUEExaGZKV3I0UlRkUW5NVEhYd21OU1NzMUVDVWhVdlBqeFBORFhU d1QvMC9DNUNGOUZFREJFMjQ4MUQ3NzExOTVEMDYwODFENDlGQTRBRjA3MTcxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1Q0Y5RkVEQkUyNDgxRDc3 MTE5NUQwNjA4MUQ0OUZBNEFGMDcxNzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDYzUEExaGZKV3I0UlRkUW5NVEhYd21OU1NzMUVDVWhVdlBqeFBORFhUd1QvMC9D NUNGOUZFREJFMjQ4MUQ3NzExOTVEMDYwODFENDlGQTRBRjA3MTcxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEr05Ek2hUNuDcDXoxDYt/g7OslJKPf2RaucO6IMGZLFVXuhGdOWS75bdXHnf QOBupuCUDPtg7oqlDhKppGoAbL/IwT+2SXWHgmB17NdH0snXQHn/kicmRq5wmANJ Bc8+Y3AJ0cPGUf1sSQT+B4fTjbnwZ04c6kWeTdhzRLX+PCeODuS3yMrWlxYCueAN 6AokGgI8QapZ+itw/GNPoUngYbsGuqrjLsUPahS6UkkdQ61vrHaJBO0uR2Uq+o3u ZvTwxd2x3BJoNmySU8w9vbBDV36BsfmwG7Fs7el3jJXxE1A5h4/hqOBLkrS+d3PD uMu6qrVfX52V3ArSVL2k8SMc6w== -----END CERTIFICATE-----Generated at Sun Jun 8 14:52:05 2025 by rpki-client