$ rpki-client -vvf rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft File: 1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft (raw, json) Hash identifier: /Hm6IvsiUPvlXROgUWgROL3KPSjO3GywH6xLX+uR/mA= Subject key identifier: 29:73:D2:48:4D:51:8A:3B:5B:74:5A:CF:3A:94:42:BA:68:7B:11:DB Authority key identifier: 1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F Certificate issuer: /CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F Certificate serial: 42763715E5393D16865D07E830C255B42F11DD66 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer Subject info access: rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft Manifest number: 2C Signing time: Sat 07 Jun 2025 20:09:22 +0000 Manifest this update: Sat 07 Jun 2025 20:04:22 +0000 Manifest next update: Sun 08 Jun 2025 20:32:22 +0000 Files and hashes: 1: 323830343a386534343a3a2f33322d3438203d3e20323733343134.roa (hash: NpcxWvXzal1YKXgip4gJbMKKp8E5cO//NlFEyag8Gr0=) 2: 1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl (hash: a2j7ZbTjDU4W8RJsAyv1vctXgpC73m21UPiWSt9UB7o=) 3: 34352e3138322e3134382e302f32322d3234203d3e20323733343134.roa (hash: dbbmdVzbgg93YC+/yC7kPmE+pyR0GJJ9WJLl+Jcl/IY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 08 Jun 2025 20:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:76:37:15:e5:39:3d:16:86:5d:07:e8:30:c2:55:b4:2f:11:dd:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F Validity Not Before: Jun 7 20:04:22 2025 GMT Not After : Jun 8 20:32:22 2025 GMT Subject: CN=2973D2484D518A3B5B745ACF3A9442BA687B11DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2f:56:93:af:a2:0c:ff:2a:98:51:65:78:e8: 6b:dc:9d:4f:6b:d7:bc:c0:c8:40:a7:b6:b1:f1:b1: af:d5:6c:5d:eb:03:88:ec:45:62:18:e8:c1:16:6a: 3e:9b:1d:cf:af:18:d9:cc:86:50:e5:6c:43:2b:a1: df:96:58:c1:06:c1:02:10:0f:07:97:d3:f7:40:bc: 85:d4:79:04:0a:63:02:2b:a2:19:a9:30:0e:c3:3c: a5:d7:eb:2d:5b:ff:d1:6f:90:4e:f3:3c:6f:3c:c8: e6:15:e7:de:50:53:6f:8d:66:99:e0:2a:f1:1d:1b: f3:42:f0:a1:0e:7b:cd:22:d3:5f:fa:23:9f:af:96: 4c:66:3f:d5:ca:20:dc:47:35:0a:10:74:13:4c:37: da:37:3c:31:8c:80:4e:51:85:55:e5:49:27:ab:ac: fa:a0:3d:dc:e0:bc:fd:f5:fe:ef:95:f2:bc:e7:12: 8f:db:20:c7:d0:96:d5:a8:57:98:60:f2:81:f4:2f: fb:01:e3:7a:2f:62:1f:d8:7e:ec:db:ac:67:73:ab: 2f:4b:8c:a1:8d:d5:25:46:6a:a2:72:15:ba:09:9b: 54:f0:d2:a0:b7:f8:07:7d:3e:92:3b:df:9c:3d:34: 6a:01:30:95:de:9b:86:27:83:d8:76:c7:92:da:21: c6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:73:D2:48:4D:51:8A:3B:5B:74:5A:CF:3A:94:42:BA:68:7B:11:DB X509v3 Authority Key Identifier: keyid:1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:eb:f1:d3:b5:81:f6:f8:67:99:a3:58:36:2c:13:25:ec:5b: 7b:9d:17:51:21:e0:95:c9:9c:b4:33:66:26:1f:87:03:71:5c: 8a:04:ad:34:a2:23:61:67:4a:3a:3c:90:40:78:51:e1:4a:00: d3:c6:c2:79:86:a1:05:24:36:ca:c0:0c:b1:6f:d6:89:d2:c0: f7:bc:49:66:45:d9:42:a8:44:5a:63:60:f9:bd:56:cf:95:6b: d8:a0:e0:0c:fa:50:ba:22:c7:07:32:03:83:a8:94:7d:69:f1: 31:3a:56:d3:cb:53:62:38:5e:b6:23:ed:52:a3:98:37:ab:3b: bd:71:e4:06:92:64:6c:6b:1e:2a:b1:e3:0d:e4:c3:6e:3d:48: 11:70:40:68:e1:58:df:c5:f6:7d:d4:19:ed:35:de:60:ab:cb: 54:b9:cb:44:65:c3:3a:b3:d5:63:7b:44:13:dc:00:e7:35:65: b5:59:7f:ee:19:4b:a6:a4:f3:fe:54:a9:bd:4f:5a:eb:79:17: b0:74:71:7e:d8:a0:5d:0c:f8:ab:f1:8f:17:73:94:71:68:09: 35:37:80:c1:29:bf:70:4a:48:5a:3d:86:ef:1a:a9:96:c2:b1: 9e:1e:96:49:aa:a7:2d:7d:f3:5d:54:25:b0:45:55:ae:9e:bb: 81:a9:76:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQnY3FeU5PRaGXQfoMMJVtC8R3WYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRkRDQTcwMzI5QjlEQ0QyMTc2MDlCRDlDRTU5NDJG RTFDNkEyRjAeFw0yNTA2MDcyMDA0MjJaFw0yNTA2MDgyMDMyMjJaMDMxMTAvBgNV BAMTKDI5NzNEMjQ4NEQ1MThBM0I1Qjc0NUFDRjNBOTQ0MkJBNjg3QjExREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIL1aTr6IM/yqYUWV46GvcnU9r 17zAyECntrHxsa/VbF3rA4jsRWIY6MEWaj6bHc+vGNnMhlDlbEMrod+WWMEGwQIQ DweX0/dAvIXUeQQKYwIrohmpMA7DPKXX6y1b/9FvkE7zPG88yOYV595QU2+NZpng KvEdG/NC8KEOe80i01/6I5+vlkxmP9XKINxHNQoQdBNMN9o3PDGMgE5RhVXlSSer rPqgPdzgvP31/u+V8rznEo/bIMfQltWoV5hg8oH0L/sB43ovYh/YfuzbrGdzqy9L jKGN1SVGaqJyFboJm1Tw0qC3+Ad9PpI735w9NGoBMJXem4Yng9h2x5LaIcZDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUKXPSSE1RijtbdFrPOpRCumh7EdswHwYDVR0j BBgwFoAUHO/cpwMpudzSF2Cb2c5ZQv4cai8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRzVHOUhjVXpQQURjZGF4TnlDVE5KS1RhTUg2U0N4eWNpOTFQVlg1WGFt Q1gvMC8xQ0VGRENBNzAzMjlCOURDRDIxNzYwOUJEOUNFNTk0MkZFMUM2QTJGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDRUZEQ0E3MDMyOUI5RENE MjE3NjA5QkQ5Q0U1OTQyRkUxQzZBMkYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RzVHOUhjVXpQQURjZGF4TnlDVE5KS1RhTUg2U0N4eWNpOTFQVlg1WGFtQ1gvMC8x Q0VGRENBNzAzMjlCOURDRDIxNzYwOUJEOUNFNTk0MkZFMUM2QTJGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvuvx07WB9vhnmaNYNiwTJexbe50XUSHglcmctDNmJh+HA3FcigStNKIjYWdK OjyQQHhR4UoA08bCeYahBSQ2ysAMsW/WidLA97xJZkXZQqhEWmNg+b1Wz5Vr2KDg DPpQuiLHBzIDg6iUfWnxMTpW08tTYjhetiPtUqOYN6s7vXHkBpJkbGseKrHjDeTD bj1IEXBAaOFY38X2fdQZ7TXeYKvLVLnLRGXDOrPVY3tEE9wA5zVltVl/7hlLpqTz /lSpvU9a63kXsHRxftigXQz4q/GPF3OUcWgJNTeAwSm/cEpIWj2G7xqplsKxnh6W SaqnLX3zXVQlsEVVrp67gal2sQ== -----END CERTIFICATE-----Generated at Sat Jun 7 23:13:07 2025 by rpki-client