$ rpki-client -vvf rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft File: D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft (raw, json) Hash identifier: 1DYGCU1MmEceGsexeVHhx9yIJyvsmpILpUIYokHHsSc= Subject key identifier: E8:C1:5F:5C:E0:D3:73:D1:70:91:8B:D1:ED:3E:64:28:19:D3:A4:6B Authority key identifier: D2:3F:9B:F7:7C:C1:B3:2D:E1:FE:EA:20:8F:14:CD:34:38:A4:DC:BE Certificate issuer: /CN=D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE Certificate serial: 73FBE83C0C5BBD79D1B87972F7E661CABBC4F330 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer Subject info access: rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft Manifest number: 1B Signing time: Fri 06 Jun 2025 17:20:23 +0000 Manifest this update: Fri 06 Jun 2025 17:15:23 +0000 Manifest next update: Sat 07 Jun 2025 20:44:23 +0000 Files and hashes: 1: D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl (hash: r70EsQmJJDPNc6FmAJPTWXm4JekQrj2gubfGZ5fGFko=) 2: 3136382e3232372e38382e302f32322d3234203d3e20323634353536.roa (hash: am5A4bo+CeX/idLnSOVp8k4cvl+rRIWfZDIw8duCyYA=) 3: 323830343a323137383a3a2f33322d3438203d3e20323634353536.roa (hash: GksSVdLS7K0cl550vTDzKqmAY2+LTjqW45XiI8cG9xk=) 4: 3133382e302e3230342e302f32322d3234203d3e20323634353536.roa (hash: Bp/MXpC4FvWK4Yo9ZUl+rpN/2KDLvDApID7I3LrdZiw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 19:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:fb:e8:3c:0c:5b:bd:79:d1:b8:79:72:f7:e6:61:ca:bb:c4:f3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE Validity Not Before: Jun 6 17:15:23 2025 GMT Not After : Jun 7 20:44:23 2025 GMT Subject: CN=E8C15F5CE0D373D170918BD1ED3E642819D3A46B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8d:d8:0d:03:81:aa:17:37:90:bc:22:3a:64: 6c:b9:74:14:f2:af:79:d1:c3:ee:a0:e0:d2:d0:9a: 1c:ec:4e:22:25:76:5f:d9:28:2c:78:70:ee:ee:c0: d2:36:65:98:b9:1c:fa:a5:b3:d5:5a:46:e0:80:82: 8b:0c:ed:a3:ec:0e:96:ef:8a:6c:04:39:d9:3f:61: 3c:02:3a:f0:83:33:92:24:51:9b:2b:8e:d4:13:39: 67:6c:04:e1:92:9c:f3:f6:48:f7:70:fb:15:91:ae: 53:24:2f:21:c1:7c:84:6d:0d:2b:15:3d:37:44:ae: 65:7d:87:98:73:bb:13:e7:d3:f5:38:1c:8f:8c:db: 93:20:f6:37:7b:56:e6:0f:fd:df:e4:94:0f:6e:d7: 5a:fc:02:e8:d3:2d:45:27:74:9d:d1:fc:15:14:4b: b6:b8:b1:fb:7a:ea:f8:79:1e:39:c2:47:04:2d:ff: a4:b8:f2:66:b3:49:0d:15:dd:3b:a5:8b:e1:f4:eb: 9f:72:f2:2b:27:5d:0e:0f:61:2f:bf:f2:c7:f1:8d: 06:09:42:46:0f:57:75:a0:03:4f:6c:fb:36:83:a1: d5:1e:ca:df:62:d7:25:a8:76:ea:f0:8a:f2:dc:e7: 1e:60:e0:61:ce:a9:61:06:da:41:f2:76:81:87:1c: cc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C1:5F:5C:E0:D3:73:D1:70:91:8B:D1:ED:3E:64:28:19:D3:A4:6B X509v3 Authority Key Identifier: keyid:D2:3F:9B:F7:7C:C1:B3:2D:E1:FE:EA:20:8F:14:CD:34:38:A4:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/0/D23F9BF77CC1B32DE1FEEA208F14CD3438A4DCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:19:71:ab:4a:f5:6b:4a:fc:81:95:22:d8:56:74:ef:3e:70: 2f:50:64:85:84:5c:69:48:90:d1:f5:f1:19:8c:10:97:83:b4: 7b:d9:1c:29:be:e1:c5:03:ac:bc:85:3e:21:cb:2e:12:fd:1b: 7f:ad:ef:d3:05:3a:ce:a7:b5:ca:2d:b3:f2:a6:93:8f:38:13: f7:1d:43:1d:27:90:cb:4e:b4:3b:01:69:f9:87:96:d7:c7:6d: 71:27:3e:06:b1:90:e3:9f:35:a1:0b:e8:3a:06:9a:93:b1:32: a0:46:11:25:aa:88:c7:10:35:5b:94:f6:b5:54:3e:f6:a4:71: 86:52:cf:5d:09:61:c9:a2:5b:3d:57:a1:67:ea:ab:53:1f:24: 70:23:8c:f1:f7:42:8e:d8:be:36:92:ad:ca:9a:75:7a:ba:4e: c5:94:e2:80:bb:93:de:0b:e4:6c:32:a0:b9:2f:20:3e:a5:32: 50:1d:9e:95:33:d4:3b:05:d6:41:57:ba:ff:17:b4:f1:6f:ce: dd:e1:a6:d5:d8:ae:8e:52:6d:cd:65:22:ea:89:9c:2b:fb:df: db:b6:96:7f:d2:f7:d5:2a:f0:a5:f7:f9:00:08:cc:de:9d:7c: 69:5f:9a:dc:5e:c2:03:5a:26:f6:f2:13:ea:a7:2c:db:98:c2: 8f:ad:1b:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUc/voPAxbvXnRuHly9+ZhyrvE8zAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIzRjlCRjc3Q0MxQjMyREUxRkVFQTIwOEYxNENEMzQz OEE0RENCRTAeFw0yNTA2MDYxNzE1MjNaFw0yNTA2MDcyMDQ0MjNaMDMxMTAvBgNV BAMTKEU4QzE1RjVDRTBEMzczRDE3MDkxOEJEMUVEM0U2NDI4MTlEM0E0NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7jdgNA4GqFzeQvCI6ZGy5dBTy r3nRw+6g4NLQmhzsTiIldl/ZKCx4cO7uwNI2ZZi5HPqls9VaRuCAgosM7aPsDpbv imwEOdk/YTwCOvCDM5IkUZsrjtQTOWdsBOGSnPP2SPdw+xWRrlMkLyHBfIRtDSsV PTdErmV9h5hzuxPn0/U4HI+M25Mg9jd7VuYP/d/klA9u11r8AujTLUUndJ3R/BUU S7a4sft66vh5HjnCRwQt/6S48mazSQ0V3Tuli+H0659y8isnXQ4PYS+/8sfxjQYJ QkYPV3WgA09s+zaDodUeyt9i1yWodurwivLc5x5g4GHOqWEG2kHydoGHHMxhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU6MFfXODTc9FwkYvR7T5kKBnTpGswHwYDVR0j BBgwFoAU0j+b93zBsy3h/uogjxTNNDik3L4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRHhuWGlSQjN6c0NMQkdjc1pnYVJzS0xiN3Mzc3dIeDN2b1Z4NHlUa0px cnMvMC9EMjNGOUJGNzdDQzFCMzJERTFGRUVBMjA4RjE0Q0QzNDM4QTREQ0JFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyM0Y5QkY3N0NDMUIzMkRF MUZFRUEyMDhGMTRDRDM0MzhBNERDQkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RHhuWGlSQjN6c0NMQkdjc1pnYVJzS0xiN3Mzc3dIeDN2b1Z4NHlUa0pxcnMvMC9E MjNGOUJGNzdDQzFCMzJERTFGRUVBMjA4RjE0Q0QzNDM4QTREQ0JFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaBlxq0r1a0r8gZUi2FZ07z5wL1BkhYRcaUiQ0fXxGYwQl4O0e9kcKb7hxQOs vIU+IcsuEv0bf63v0wU6zqe1yi2z8qaTjzgT9x1DHSeQy060OwFp+YeW18dtcSc+ BrGQ4581oQvoOgaak7EyoEYRJaqIxxA1W5T2tVQ+9qRxhlLPXQlhyaJbPVehZ+qr Ux8kcCOM8fdCjti+NpKtypp1erpOxZTigLuT3gvkbDKguS8gPqUyUB2elTPUOwXW QVe6/xe08W/O3eGm1diujlJtzWUi6omcK/vf27aWf9L31Srwpff5AAjM3p18aV+a 3F7CA1om9vIT6qcs25jCj60b7w== -----END CERTIFICATE-----Generated at Fri Jun 6 19:55:25 2025 by rpki-client