$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft File: 2D59905C3FCA5BDA34D7101B088D80451D026C47.mft (raw, json) Hash identifier: fT80nO6fad0RODpI75ZCs1eexK1NNJLfaMx0evgNDFA= Subject key identifier: 02:7F:49:DE:51:22:89:86:D8:AD:B1:56:A7:43:DE:40:C2:31:93:3B Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 Certificate issuer: /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Certificate serial: 66855E2B0139AE610421688CF4C8E179C2BA99B0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer Subject info access: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft Manifest number: 02C4 Signing time: Thu 18 Sep 2025 07:53:55 +0000 Manifest this update: Thu 18 Sep 2025 07:48:55 +0000 Manifest next update: Fri 19 Sep 2025 10:53:55 +0000 Files and hashes: 1: 3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa (hash: zTSSMFG/lgVqOaFeXf9pCktuzCsj0jIoIIi1uaEYa0I=) 2: 2D59905C3FCA5BDA34D7101B088D80451D026C47.crl (hash: UdG2IsvUi/QMgc2gabfPh12ICp3Yec1SiGuRvxywZjE=) 3: 3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa (hash: GZELRNfuplahvPNzTKoCXKCGe7m/TvcDFJFlJBobK9k=) 4: 323830343a323439633a3a2f33322d3438203d3e20323634323333.roa (hash: NawnnPEHbMCtTiXRZuqs51ycbe695zSEZpiIfj2SEO8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 10:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:85:5e:2b:01:39:ae:61:04:21:68:8c:f4:c8:e1:79:c2:ba:99:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Validity Not Before: Sep 18 07:48:55 2025 GMT Not After : Sep 19 10:53:55 2025 GMT Subject: CN=027F49DE51228986D8ADB156A743DE40C231933B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:0e:8e:9c:eb:f8:3d:5b:4a:c9:f3:3f:c1: ba:d7:d3:da:c5:e3:09:17:54:78:f9:4c:6c:b7:63: c5:b4:5e:0e:88:88:3d:3c:e1:1c:46:e4:c7:eb:a0: cd:a4:79:54:c8:c1:b7:5f:69:d9:51:28:f9:5a:06: ae:bc:dc:11:85:44:07:cd:ca:48:fb:6a:bb:63:be: 68:a6:c9:ef:5c:00:6a:9a:3a:bf:b7:20:52:3b:e7: 14:5a:cc:4f:07:54:23:9d:be:37:66:c8:c2:21:25: c4:9a:4f:95:f4:35:a8:61:67:0f:09:ad:5d:04:c6: ab:ec:5e:a8:6e:40:ca:76:e7:d0:d2:17:5e:7e:7e: ce:17:ab:8a:32:ca:7d:d9:a8:a1:ce:73:1b:f7:b4: 9e:9c:e5:c4:19:b4:d3:00:b7:99:96:24:cf:0e:fb: 0c:42:34:7a:94:86:5a:7f:36:46:d4:a4:3e:74:01: 9d:32:7f:0a:10:ce:e5:ef:db:d9:2f:2f:00:82:c5: 40:8f:c8:eb:cd:44:6b:10:48:ba:d3:dc:77:32:92: e8:e3:7c:16:67:e6:a6:9a:d0:a3:54:fd:de:0c:b6: e8:be:1c:06:ef:56:62:7f:72:72:ad:7e:5c:c1:24: ba:96:30:b5:45:e2:2c:a9:63:de:c3:3a:1b:0c:d7: 13:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7F:49:DE:51:22:89:86:D8:AD:B1:56:A7:43:DE:40:C2:31:93:3B X509v3 Authority Key Identifier: keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:6b:ee:92:b3:25:33:a8:aa:1a:3f:0d:5d:99:50:55:13:12: 52:20:ba:26:98:b0:0f:f5:ea:e0:0e:ce:82:7a:e4:4b:61:12: bb:60:ad:7a:4f:60:8c:43:01:55:e1:94:40:d7:59:cb:5e:c1: 3a:1e:07:00:f0:b9:dd:8f:0b:a2:a8:a2:78:65:d3:9c:c7:5f: 0e:16:ba:78:bf:80:fb:a8:59:c7:26:b6:e6:5e:dd:d3:31:91: c9:aa:9c:cd:2f:3c:b4:32:d4:ab:11:17:df:4a:d3:9e:48:c7: e1:4a:66:52:a0:a4:8d:d8:ad:14:46:76:f1:40:fb:bb:a1:34: e3:e5:e1:41:f4:d0:b0:c2:10:42:18:a6:b2:04:d3:d3:db:fe: fc:b5:d9:4f:03:bd:c0:07:20:39:a9:71:5f:72:b4:ae:07:0f: ca:4a:b7:a6:f1:18:8d:11:9d:fd:c7:05:1f:37:0f:65:c9:15: 7a:b2:57:0c:fb:30:c3:66:68:77:bc:20:aa:e0:b1:3f:04:ba: c3:e6:64:21:c8:79:fc:95:76:da:56:e6:3b:48:1a:91:d7:98: e1:40:cb:77:bc:16:02:4d:03:8f:7a:f8:96:7c:a7:18:af:74: 00:7c:f9:b3:a0:08:2f:73:da:cd:38:35:55:7d:4d:d8:6b:0e: f6:9b:98:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZoVeKwE5rmEEIWiM9MjhecK6mbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1OTkwNUMzRkNBNUJEQTM0RDcxMDFCMDg4RDgwNDUx RDAyNkM0NzAeFw0yNTA5MTgwNzQ4NTVaFw0yNTA5MTkxMDUzNTVaMDMxMTAvBgNV BAMTKDAyN0Y0OURFNTEyMjg5ODZEOEFEQjE1NkE3NDNERTQwQzIzMTkzM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLvw6OnOv4PVtKyfM/wbrX09rF 4wkXVHj5TGy3Y8W0Xg6IiD084RxG5MfroM2keVTIwbdfadlRKPlaBq683BGFRAfN ykj7artjvmimye9cAGqaOr+3IFI75xRazE8HVCOdvjdmyMIhJcSaT5X0NahhZw8J rV0ExqvsXqhuQMp259DSF15+fs4Xq4oyyn3ZqKHOcxv3tJ6c5cQZtNMAt5mWJM8O +wxCNHqUhlp/NkbUpD50AZ0yfwoQzuXv29kvLwCCxUCPyOvNRGsQSLrT3Hcykujj fBZn5qaa0KNU/d4Mtui+HAbvVmJ/cnKtflzBJLqWMLVF4iypY97DOhsM1xMTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUAn9J3lEiiYbYrbFWp0PeQMIxkzswHwYDVR0j BBgwFoAULVmQXD/KW9o01xAbCI2ARR0CbEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5 QUgvMS8yRDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENTk5MDVDM0ZDQTVCREEz NEQ3MTAxQjA4OEQ4MDQ1MUQwMjZDNDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5QUgvMS8y RDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy2vukrMlM6iqGj8NXZlQVRMSUiC6JpiwD/Xq4A7OgnrkS2ESu2Ctek9gjEMB VeGUQNdZy17BOh4HAPC53Y8LoqiieGXTnMdfDha6eL+A+6hZxya25l7d0zGRyaqc zS88tDLUqxEX30rTnkjH4UpmUqCkjditFEZ28UD7u6E04+XhQfTQsMIQQhimsgTT 09v+/LXZTwO9wAcgOalxX3K0rgcPykq3pvEYjRGd/ccFHzcPZckVerJXDPsww2Zo d7wgquCxPwS6w+ZkIch5/JV22lbmO0gakdeY4UDLd7wWAk0Dj3r4lnynGK90AHz5 s6AIL3PazTg1VX1N2GsO9puYrA== -----END CERTIFICATE-----Generated at Thu Sep 18 14:35:35 2025 by rpki-client