$ rpki-client -vvf rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/515B950829908AADA6288C237B01B1EA0D226D2E.mft File: 515B950829908AADA6288C237B01B1EA0D226D2E.mft (raw, json) Hash identifier: OJcnnUaOXjA8QBSwSzjNuIa5x8eg9/nzr6vF+C/wGq8= Subject key identifier: 42:C7:F2:DD:9E:85:55:5E:C2:F2:50:3E:63:EB:BB:9C:37:87:FF:E1 Authority key identifier: 51:5B:95:08:29:90:8A:AD:A6:28:8C:23:7B:01:B1:EA:0D:22:6D:2E Certificate issuer: /CN=515B950829908AADA6288C237B01B1EA0D226D2E Certificate serial: 6942CCE5762CC1268AAFBBAE6D7EAEA0357C6E2A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/515B950829908AADA6288C237B01B1EA0D226D2E.cer Subject info access: rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/515B950829908AADA6288C237B01B1EA0D226D2E.mft Manifest number: C3 Signing time: Fri 06 Jun 2025 03:02:22 +0000 Manifest this update: Fri 06 Jun 2025 02:57:21 +0000 Manifest next update: Sat 07 Jun 2025 04:28:21 +0000 Files and hashes: 1: 3133382e39372e31322e302f32322d3234203d3e20323634313131.roa (hash: s2Uj/gVKqjm880NupIn+G+Sbc6oPdwnT5yPsg1arZ4A=) 2: 3136382e3139362e38382e302f32322d3234203d3e20323634313131.roa (hash: YBCrdWjoz/XrOnHHBx6Ch9nW7HtpswW7IoSisoy9alA=) 3: 515B950829908AADA6288C237B01B1EA0D226D2E.crl (hash: ie0EDlHWwoKOzh+Alb4gPWpGjkxoaCq8uXOcQufTkWQ=) 4: 323830343a323239633a3a2f33322d3334203d3e20323634313131.roa (hash: 0oKYBSPJ2AbGGbyMuiC7XTFVY7IxAwqsBLqU511GkOg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/515B950829908AADA6288C237B01B1EA0D226D2E.crl rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/515B950829908AADA6288C237B01B1EA0D226D2E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/515B950829908AADA6288C237B01B1EA0D226D2E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 04:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:42:cc:e5:76:2c:c1:26:8a:af:bb:ae:6d:7e:ae:a0:35:7c:6e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515B950829908AADA6288C237B01B1EA0D226D2E Validity Not Before: Jun 6 02:57:21 2025 GMT Not After : Jun 7 04:28:21 2025 GMT Subject: CN=42C7F2DD9E85555EC2F2503E63EBBB9C3787FFE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:38:c2:58:0f:8a:0f:71:ce:b9:c0:25:d1: 71:e1:42:03:7a:7f:2f:4a:88:77:cf:f0:86:b9:3c: eb:09:09:d1:42:3b:4c:25:28:47:44:80:5f:7d:59: df:9c:f3:01:9c:93:c3:01:72:ae:12:d9:a5:9a:af: 32:21:fe:a0:32:c2:04:0e:96:f1:fd:64:be:41:ec: ab:6d:3c:17:18:37:c5:62:ea:ea:ba:d0:a0:0d:4c: 97:d5:b8:56:a3:d6:99:04:b0:5c:0d:06:aa:a2:52: 8e:f1:e2:73:35:c0:62:f9:14:72:58:50:3d:eb:ef: 08:8f:08:6e:5d:57:73:72:5f:b7:65:53:27:bb:24: 86:bd:72:1a:a7:ca:88:f8:13:60:6f:12:f2:35:29: 4e:15:d9:6b:83:28:9c:68:f3:ca:7f:44:9b:c6:cc: 8f:d1:c8:80:b5:b4:2c:d7:ac:67:c0:af:53:53:8b: c4:37:4a:31:8f:f2:1f:b8:92:1b:23:3c:97:af:07: cd:fd:02:a9:52:24:0b:c2:dc:ef:8d:a3:ee:3a:13: 95:cc:2e:be:85:10:64:ea:75:79:0e:36:25:85:c4: 1f:8c:68:06:4d:ca:62:1f:0e:fa:3f:4c:56:76:1d: b5:24:26:0f:70:de:d3:58:d7:8c:d0:67:98:28:33: 33:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C7:F2:DD:9E:85:55:5E:C2:F2:50:3E:63:EB:BB:9C:37:87:FF:E1 X509v3 Authority Key Identifier: keyid:51:5B:95:08:29:90:8A:AD:A6:28:8C:23:7B:01:B1:EA:0D:22:6D:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/515B950829908AADA6288C237B01B1EA0D226D2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/515B950829908AADA6288C237B01B1EA0D226D2E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/515B950829908AADA6288C237B01B1EA0D226D2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:67:ea:f5:ba:1f:5b:12:b4:c4:0d:c6:c1:e5:89:8f:f7:b7: 46:36:de:f1:6a:b8:9f:d5:a0:cc:b0:b3:3c:ef:64:b6:81:67: d7:be:41:e0:7d:38:55:0d:53:4c:e1:ae:25:94:08:aa:e4:3a: 0c:b6:01:08:40:e1:18:35:18:25:52:fa:3f:8c:25:a3:53:5c: 37:c7:92:57:30:3c:10:ff:96:9e:0a:c4:2b:7e:03:dc:38:86: 51:58:47:45:ca:5b:a2:3a:19:ff:e8:b9:62:c1:66:e1:be:16: 15:c2:45:98:0a:fc:b7:30:30:67:a8:41:42:5d:25:0a:75:5b: 56:cb:da:7c:08:e4:37:94:b5:cd:18:38:72:eb:cf:35:af:07: 07:c3:6a:5c:10:63:32:45:c5:04:aa:83:4b:fc:84:f2:6a:7b: 4e:31:7a:8d:64:82:65:12:62:a6:a5:c5:d1:0f:13:b8:6d:1f: 5f:55:89:43:67:af:5b:79:9b:58:62:ad:a8:8e:9b:25:4a:d3: 13:d2:a1:2a:52:42:54:f6:18:44:eb:6a:de:07:54:a2:a3:0e: fb:79:5a:2c:58:76:3c:d0:ce:7e:2a:04:8a:6e:94:e7:88:46: 72:4f:5f:4f:23:d5:5b:a8:c7:1d:9e:a5:30:6a:b6:3c:60:99: ba:79:9b:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaULM5XYswSaKr7uubX6uoDV8biowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1Qjk1MDgyOTkwOEFBREE2Mjg4QzIzN0IwMUIxRUEw RDIyNkQyRTAeFw0yNTA2MDYwMjU3MjFaFw0yNTA2MDcwNDI4MjFaMDMxMTAvBgNV BAMTKDQyQzdGMkREOUU4NTU1NUVDMkYyNTAzRTYzRUJCQjlDMzc4N0ZGRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8yzjCWA+KD3HOucAl0XHhQgN6 fy9KiHfP8Ia5POsJCdFCO0wlKEdEgF99Wd+c8wGck8MBcq4S2aWarzIh/qAywgQO lvH9ZL5B7KttPBcYN8Vi6uq60KANTJfVuFaj1pkEsFwNBqqiUo7x4nM1wGL5FHJY UD3r7wiPCG5dV3NyX7dlUye7JIa9chqnyoj4E2BvEvI1KU4V2WuDKJxo88p/RJvG zI/RyIC1tCzXrGfAr1NTi8Q3SjGP8h+4khsjPJevB839AqlSJAvC3O+No+46E5XM Lr6FEGTqdXkONiWFxB+MaAZNymIfDvo/TFZ2HbUkJg9w3tNY14zQZ5goMzNBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQsfy3Z6FVV7C8lA+Y+u7nDeH/+EwHwYDVR0j BBgwFoAUUVuVCCmQiq2mKIwjewGx6g0ibS4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDI0MThFRXRXNFpycGlIeVFUWVhqWFdXQTQ5NGk4TG8yd01nbzFQdmVG c1ovMC81MTVCOTUwODI5OTA4QUFEQTYyODhDMjM3QjAxQjFFQTBEMjI2RDJFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUxNUI5NTA4Mjk5MDhBQURB NjI4OEMyMzdCMDFCMUVBMEQyMjZEMkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDI0MThFRXRXNFpycGlIeVFUWVhqWFdXQTQ5NGk4TG8yd01nbzFQdmVGc1ovMC81 MTVCOTUwODI5OTA4QUFEQTYyODhDMjM3QjAxQjFFQTBEMjI2RDJFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnGfq9bofWxK0xA3GweWJj/e3Rjbe8Wq4n9WgzLCzPO9ktoFn175B4H04VQ1T TOGuJZQIquQ6DLYBCEDhGDUYJVL6P4wlo1NcN8eSVzA8EP+WngrEK34D3DiGUVhH RcpbojoZ/+i5YsFm4b4WFcJFmAr8tzAwZ6hBQl0lCnVbVsvafAjkN5S1zRg4cuvP Na8HB8NqXBBjMkXFBKqDS/yE8mp7TjF6jWSCZRJipqXF0Q8TuG0fX1WJQ2evW3mb WGKtqI6bJUrTE9KhKlJCVPYYROtq3gdUoqMO+3laLFh2PNDOfioEim6U54hGck9f TyPVW6jHHZ6lMGq2PGCZunmbEQ== -----END CERTIFICATE-----Generated at Fri Jun 6 20:24:33 2025 by rpki-client