$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft File: 2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft (raw, json) Hash identifier: r03FAbzQ31knVeV/BzqUgVLxKmSalB/lJqQDr+NUyag= Subject key identifier: 22:A5:CA:57:C2:6B:FF:32:DA:CA:1F:F3:70:8D:30:90:0F:4F:47:2B Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7 Certificate issuer: /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7 Certificate serial: 2386DF75BDE57BC7DBF9DAF44B3E2414AA729030 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer Subject info access: rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft Manifest number: 023D Signing time: Sun 08 Jun 2025 15:15:14 +0000 Manifest this update: Sun 08 Jun 2025 15:10:14 +0000 Manifest next update: Mon 09 Jun 2025 15:39:14 +0000 Files and hashes: 1: 34352e3138312e3133322e302f32342d3234203d3e20323639313834.roa (hash: hhWP0ZOFP9QkXD1TLCXf2DK00yVyWv88kwhVjqWeg9Y=) 2: 2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl (hash: yg+8D9soDjG/IS1V3JN2FDQMLdoBMzcZ1/YQhU3uZIg=) 3: 34352e3138312e3133342e302f32342d3234203d3e20323639313834.roa (hash: vPCwI7osU5XVMd4zwaC+hIHow7PaLve2zweqHvxoEMY=) 4: 34352e3138312e3133332e302f32342d3234203d3e20323639313834.roa (hash: mky3eE3bx2kcV4ZGcqdlXI9kN6ITAw5dtUdmNnbM04A=) 5: 34352e3138312e3133342e302f32332d3233203d3e20323639313834.roa (hash: QRux96G/lfgz7O4EjHPAERqDHHHWAhFqgGE1GI68Qng=) 6: 34352e3138312e3133352e302f32342d3234203d3e20323639313834.roa (hash: hEdsYPpEYPD/H7JxaI1qlIgBP5CxC1rxiVbomFZxPTA=) 7: 323830343a363062303a3a2f33322d3430203d3e20323639313834.roa (hash: /rhTp7cAUkfwcSsOM4bufZ4hzfY9DaqMVKYmLOYscFo=) 8: 34352e3138312e3133322e302f32332d3233203d3e20323639313834.roa (hash: BY4SD16BwCLGiQCdlfmYRFg3wdhGuI3NPnN3QyHza1M=) 9: 34352e3138312e3133322e302f32322d3232203d3e20323639313834.roa (hash: PoDROXq7zNqNwPpg4bHVhkKOrPE3a92QWBQs0sLrW1g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Jun 2025 15:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:86:df:75:bd:e5:7b:c7:db:f9:da:f4:4b:3e:24:14:aa:72:90:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7 Validity Not Before: Jun 8 15:10:14 2025 GMT Not After : Jun 9 15:39:14 2025 GMT Subject: CN=22A5CA57C26BFF32DACA1FF3708D30900F4F472B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:c3:ce:d9:16:ff:a9:0d:4e:40:03:c5:0f: db:fa:ad:75:91:df:29:66:4e:4c:db:c0:17:ba:17: 4b:18:43:b9:e9:f5:07:1e:b2:6f:3b:27:2a:71:48: 7d:44:37:b6:e3:8b:07:84:01:ee:65:b9:c8:97:0e: 7c:4a:25:2e:5a:16:17:49:a6:68:40:d9:ad:2c:23: 61:34:e8:3c:f9:1d:b8:b1:f8:c5:a8:ad:15:0c:e8: f0:7e:ac:c6:5d:13:60:1b:39:d9:9b:aa:aa:6d:6a: b1:88:3f:95:fe:31:ea:ee:43:f7:44:0a:c4:93:d4: 4b:ad:cb:42:5e:38:de:9a:ee:3a:14:09:8e:db:2b: fd:61:a0:9c:4b:7f:00:bf:76:4b:72:3b:6a:1d:e1: 9d:11:70:6a:73:a8:d8:16:e5:8e:66:6f:2d:be:96: 2d:68:bf:20:d6:56:45:91:90:05:22:6b:e6:8d:a4: 7a:6c:52:dd:9c:cc:a4:21:43:d0:b8:d0:13:35:7d: 41:1e:22:29:3a:64:08:93:a0:cb:81:5c:7b:39:f4: 89:3e:72:2e:6e:68:25:2e:7d:4c:d4:f0:ed:a3:b4: 61:c1:69:49:c8:13:f1:11:f7:aa:ca:89:14:0c:a6: 66:50:be:2e:c1:c9:bd:54:a5:64:47:7a:0d:37:07: e4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A5:CA:57:C2:6B:FF:32:DA:CA:1F:F3:70:8D:30:90:0F:4F:47:2B X509v3 Authority Key Identifier: keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e7:b9:e0:69:66:45:83:67:04:a4:d7:7d:1b:c9:35:2f:a1: 45:d9:41:ff:83:05:33:ed:30:08:ee:c5:d1:74:78:14:c2:34: 80:c5:de:18:b3:16:08:b3:07:df:e6:01:fd:1a:27:af:b9:b2: 7b:ae:84:b2:46:ad:bc:ee:75:df:1f:f4:1d:36:d6:a1:bc:68: 54:97:1a:4e:bc:99:7c:91:dd:86:19:8d:35:44:52:66:0c:98: 1e:14:73:f8:87:df:63:3b:51:b0:48:83:cc:1b:0a:0e:0a:41: 85:db:a4:92:99:0c:09:a1:5c:8e:e2:c2:33:86:97:69:48:10: 58:e0:ed:e5:6a:a0:c0:4e:ba:f1:15:31:93:3a:a9:39:d8:9f: e4:80:08:a3:dd:e3:d9:27:03:1f:95:b6:bb:0a:4b:23:48:4c: a1:28:99:2d:93:ee:2e:46:94:2a:36:03:56:07:84:20:f9:02: cd:0e:89:03:84:2a:2f:dc:ec:96:6c:4b:f6:fe:58:d6:39:a4: 69:0c:b8:c9:6f:b7:19:f8:18:f5:71:19:42:42:df:ab:85:58: 1c:5b:c8:c5:80:ed:05:96:38:28:35:26:8d:42:ef:29:2f:e8: 98:24:ce:08:72:e4:5a:26:0e:4d:e2:59:25:87:96:82:5d:d2: 0a:cc:7a:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUI4bfdb3le8fb+dr0Sz4kFKpykDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5Q0I5OUQ5OEMxMUY3QUYxQTQwNUI1RDA1MDc1MDZF NkY4MDhBNzAeFw0yNTA2MDgxNTEwMTRaFw0yNTA2MDkxNTM5MTRaMDMxMTAvBgNV BAMTKDIyQTVDQTU3QzI2QkZGMzJEQUNBMUZGMzcwOEQzMDkwMEY0RjQ3MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3OcPO2Rb/qQ1OQAPFD9v6rXWR 3ylmTkzbwBe6F0sYQ7np9Qcesm87JypxSH1EN7bjiweEAe5luciXDnxKJS5aFhdJ pmhA2a0sI2E06Dz5Hbix+MWorRUM6PB+rMZdE2AbOdmbqqptarGIP5X+MeruQ/dE CsST1Euty0JeON6a7joUCY7bK/1hoJxLfwC/dktyO2od4Z0RcGpzqNgW5Y5mby2+ li1ovyDWVkWRkAUia+aNpHpsUt2czKQhQ9C40BM1fUEeIik6ZAiToMuBXHs59Ik+ ci5uaCUufUzU8O2jtGHBaUnIE/ER96rKiRQMpmZQvi7Byb1UpWRHeg03B+RrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIqXKV8Jr/zLayh/zcI0wkA9PRyswHwYDVR0j BBgwFoAUKpy5nZjBH3rxpAW10FB1Bub4CKcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0ZZSmkxMlVaZ2pRaUV1dFF3V0s3dUgzWVBIbjkxRng2S3B4MmNBWGRH ZjQvMS8yQTlDQjk5RDk4QzExRjdBRjFBNDA1QjVEMDUwNzUwNkU2RjgwOEE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBOUNCOTlEOThDMTFGN0FG MUE0MDVCNUQwNTA3NTA2RTZGODA4QTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0ZZSmkxMlVaZ2pRaUV1dFF3V0s3dUgzWVBIbjkxRng2S3B4MmNBWGRHZjQvMS8y QTlDQjk5RDk4QzExRjdBRjFBNDA1QjVEMDUwNzUwNkU2RjgwOEE3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKue54GlmRYNnBKTXfRvJNS+hRdlB/4MFM+0wCO7F0XR4FMI0gMXeGLMWCLMH 3+YB/Ronr7mye66EskatvO513x/0HTbWobxoVJcaTryZfJHdhhmNNURSZgyYHhRz +IffYztRsEiDzBsKDgpBhdukkpkMCaFcjuLCM4aXaUgQWODt5WqgwE668RUxkzqp Odif5IAIo93j2ScDH5W2uwpLI0hMoSiZLZPuLkaUKjYDVgeEIPkCzQ6JA4QqL9zs lmxL9v5Y1jmkaQy4yW+3GfgY9XEZQkLfq4VYHFvIxYDtBZY4KDUmjULvKS/omCTO CHLkWiYOTeJZJYeWgl3SCsx63w== -----END CERTIFICATE-----Generated at Sun Jun 8 23:50:56 2025 by rpki-client