$ rpki-client -vvf rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft File: 203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft (raw, json) Hash identifier: KN0KMgR5nfqUbJ+z0IUPDG00FHP/Xue/deghqH6ltyo= Subject key identifier: CC:B2:57:E0:1B:1A:8D:26:22:95:74:BC:3B:45:8F:39:69:02:83:68 Authority key identifier: 20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7 Certificate issuer: /CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7 Certificate serial: 67F9D3F05C1F34681F2F647A40546287D59C6E5E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer Subject info access: rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft Manifest number: 023F Signing time: Sun 08 Jun 2025 03:55:34 +0000 Manifest this update: Sun 08 Jun 2025 03:50:34 +0000 Manifest next update: Mon 09 Jun 2025 04:27:34 +0000 Files and hashes: 1: 323830343a6138633a3a2f33322d3438203d3e20323632323939.roa (hash: EeO9rj+ZkVIkb2Nu0/KE+IFQ8hNAOE0eB+Vu/g/K8/8=) 2: 203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl (hash: ml7b7t1vQzVP9CGJpA/M44HWMMO/qJ4KEod1v2iLnZ4=) 3: 3137372e35342e3234382e302f32312d3234203d3e20323632323939.roa (hash: J9JKS/uOVSTf4lxE2/X712ak1j9CChp3U8mi1+Az2NM=) 4: 3137372e35342e3234302e302f32312d3234203d3e20323632323939.roa (hash: zzuAYXVxZSPy90ckTABafh3wBDFSIA6yCF8t1bKcPTw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Jun 2025 02:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f9:d3:f0:5c:1f:34:68:1f:2f:64:7a:40:54:62:87:d5:9c:6e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7 Validity Not Before: Jun 8 03:50:34 2025 GMT Not After : Jun 9 04:27:34 2025 GMT Subject: CN=CCB257E01B1A8D26229574BC3B458F3969028368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:25:b7:8f:20:f7:b1:c3:b9:57:40:b0:12: d7:fa:41:c6:f2:5b:91:ab:38:02:a7:69:d1:47:51: bb:bd:bf:43:eb:cb:ed:f9:41:68:64:4e:74:80:3a: 95:af:7c:20:9e:63:71:d3:a4:92:52:8c:7c:12:5e: 4e:e1:98:cb:82:ff:98:13:8e:2b:3f:a5:b5:fe:5a: 5c:fd:44:97:5c:f5:c0:bc:35:94:95:39:73:2b:b4: 12:ea:16:8a:5f:6e:65:c6:dc:46:e5:f0:71:61:8e: ff:54:2a:6f:b5:c1:5b:e1:91:eb:d4:2c:6e:22:85: 4b:11:cb:ef:c7:3f:df:e7:a5:08:aa:55:44:fa:56: 10:09:c2:2f:c0:10:a7:ea:ad:96:ff:d7:73:ad:e8: 50:8d:d5:87:36:f5:73:89:75:b4:af:73:0d:ff:f1: 39:83:11:4a:94:76:6e:a8:6d:f8:33:b3:73:c8:61: 0d:24:28:ff:60:61:a5:cc:b1:6f:5a:61:1a:54:2f: 09:38:b5:5a:9d:2b:7f:de:e7:ca:2e:75:da:35:23: 29:09:d0:fe:96:1a:b9:72:49:7a:6b:35:d9:df:ba: 83:a5:36:60:88:a0:d7:a5:9c:4e:8b:8b:13:cf:fc: b0:09:50:dd:ca:27:f7:75:af:50:c2:1d:d8:32:bd: c3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B2:57:E0:1B:1A:8D:26:22:95:74:BC:3B:45:8F:39:69:02:83:68 X509v3 Authority Key Identifier: keyid:20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:50:c6:58:8a:14:0a:91:fd:f7:88:88:45:ed:19:bf:00:14: aa:fe:ab:ef:b7:91:fd:a0:4a:5b:d2:1a:c0:5c:32:83:d0:50: bd:88:cb:d8:59:5c:85:9d:22:bd:de:3d:6e:26:13:80:9d:83: 93:23:a2:5b:80:6a:52:3d:27:08:8b:39:f6:49:5a:aa:f4:b9: 74:6c:cd:4f:e3:fc:86:8b:e8:36:2a:3a:15:89:e5:2a:cb:d4: 76:a5:5c:ea:aa:ba:22:fa:be:bc:78:e2:ec:f9:a7:d6:ea:cd: c1:3a:b8:86:bb:99:b6:6d:2d:29:52:a0:58:43:12:fe:80:a6: 7a:fb:e0:02:ae:a8:64:86:35:5c:da:51:ad:5f:f0:03:2c:aa: a1:d0:bf:6c:d0:36:8d:c7:1b:19:2b:74:ce:a8:05:03:c6:6b: 6b:12:e0:3d:d9:57:55:20:7d:87:76:9f:11:fd:f2:44:9d:fc: 8a:9f:90:50:33:91:f0:99:44:1b:ee:ac:93:1f:b2:20:ba:66: 8a:ad:f6:a5:c6:1f:a4:4e:06:e2:c0:03:68:d8:18:fb:76:95: c0:a4:a7:af:24:bf:3c:74:ba:a6:05:d9:13:51:9f:85:fe:07: b7:f3:85:f5:7a:3d:f6:94:d3:c1:56:8f:9c:7c:43:a8:4a:27: c4:c1:4a:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZ/nT8FwfNGgfL2R6QFRih9Wcbl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAzRENDQTdERTc5QzhDNERBQkFBMTBBNkNBOUU5M0VB N0QzOURGNzAeFw0yNTA2MDgwMzUwMzRaFw0yNTA2MDkwNDI3MzRaMDMxMTAvBgNV BAMTKENDQjI1N0UwMUIxQThEMjYyMjk1NzRCQzNCNDU4RjM5NjkwMjgzNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3tCW3jyD3scO5V0CwEtf6Qcby W5GrOAKnadFHUbu9v0Pry+35QWhkTnSAOpWvfCCeY3HTpJJSjHwSXk7hmMuC/5gT jis/pbX+Wlz9RJdc9cC8NZSVOXMrtBLqFopfbmXG3Ebl8HFhjv9UKm+1wVvhkevU LG4ihUsRy+/HP9/npQiqVUT6VhAJwi/AEKfqrZb/13Ot6FCN1Yc29XOJdbSvcw3/ 8TmDEUqUdm6obfgzs3PIYQ0kKP9gYaXMsW9aYRpULwk4tVqdK3/e58ouddo1IykJ 0P6WGrlySXprNdnfuoOlNmCIoNelnE6LixPP/LAJUN3KJ/d1r1DCHdgyvcPhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzLJX4BsajSYilXS8O0WPOWkCg2gwHwYDVR0j BBgwFoAUID3Mp955yMTauqEKbKnpPqfTnfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BH U0UvMS8yMDNEQ0NBN0RFNzlDOEM0REFCQUExMEE2Q0E5RTkzRUE3RDM5REY3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwM0RDQ0E3REU3OUM4QzRE QUJBQTEwQTZDQTlFOTNFQTdEMzlERjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BHU0UvMS8y MDNEQ0NBN0RFNzlDOEM0REFCQUExMEE2Q0E5RTkzRUE3RDM5REY3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADVDGWIoUCpH994iIRe0ZvwAUqv6r77eR/aBKW9IawFwyg9BQvYjL2FlchZ0i vd49biYTgJ2DkyOiW4BqUj0nCIs59klaqvS5dGzNT+P8hovoNio6FYnlKsvUdqVc 6qq6Ivq+vHji7Pmn1urNwTq4hruZtm0tKVKgWEMS/oCmevvgAq6oZIY1XNpRrV/w AyyqodC/bNA2jccbGSt0zqgFA8ZraxLgPdlXVSB9h3afEf3yRJ38ip+QUDOR8JlE G+6skx+yILpmiq32pcYfpE4G4sADaNgY+3aVwKSnryS/PHS6pgXZE1Gfhf4Ht/OF 9Xo99pTTwVaPnHxDqEonxMFKaQ== -----END CERTIFICATE-----Generated at Sun Jun 8 07:26:09 2025 by rpki-client