$ rpki-client -vvf rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft File: 2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft (raw, json) Hash identifier: sgby0aSOBFrkA0r2yCKqRkJOmLae6vqYmlNLmQkHboY= Subject key identifier: 21:FC:64:D2:27:72:E9:9C:B1:6D:C4:2D:89:1B:4E:1A:1E:D2:4A:77 Authority key identifier: 2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70 Certificate issuer: /CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370 Certificate serial: 4D9A314B825039EAC3BE46C0942724737849B1AB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer Subject info access: rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft Manifest number: 023A Signing time: Wed 11 Jun 2025 02:23:46 +0000 Manifest this update: Wed 11 Jun 2025 02:18:46 +0000 Manifest next update: Thu 12 Jun 2025 06:11:46 +0000 Files and hashes: 1: 2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl (hash: SyEHaxL0r/yGdLFq8ahFVAHVMkCW809/I4gzKXiR3dI=) 2: 34352e37312e38342e302f32322d3234203d3e20323637363032.roa (hash: 1NxEPZFmMr8y2/dlgVX6k0u/Jfu4X7J3Z/0pEUeqw54=) 3: 323830343a343431383a3a2f33322d3334203d3e20323637363032.roa (hash: SVa3n9CXuCMyjnUcZIuGz915kRDbHwqunvwZpWNFCqE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Jun 2025 06:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:9a:31:4b:82:50:39:ea:c3:be:46:c0:94:27:24:73:78:49:b1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370 Validity Not Before: Jun 11 02:18:46 2025 GMT Not After : Jun 12 06:11:46 2025 GMT Subject: CN=21FC64D22772E99CB16DC42D891B4E1A1ED24A77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c2:ef:64:5d:68:d6:12:bc:5d:a8:92:82:a5: 32:38:fc:87:38:58:df:54:b1:a5:96:1f:ac:63:97: 05:07:f0:be:76:99:b9:86:fc:66:40:92:1d:7c:75: d4:95:ba:14:14:8a:97:97:79:b1:96:6a:c7:e7:83: ac:8e:f5:06:ab:be:ed:ec:cc:27:d6:13:ec:cf:cc: 59:6c:57:c4:a9:fe:4a:3d:f0:d8:b7:fd:56:84:a2: c1:a3:8d:70:56:01:e8:1c:67:ee:e1:4e:ca:02:18: f3:ce:d4:ce:ab:36:bd:9c:f3:f6:b0:5d:2b:ba:81: 06:e7:52:11:dd:09:a0:af:da:fc:d1:cf:c7:6f:34: 82:2b:ee:d1:cc:92:44:35:9f:c5:52:26:56:79:ac: 8e:8e:5c:c7:99:ea:5b:85:8d:5b:99:80:1a:53:eb: 4d:0f:af:89:c0:41:60:2a:fc:5a:7a:81:36:7c:d2: 0a:25:db:5a:6a:aa:fb:62:6d:17:bf:6b:0c:b9:aa: 35:d4:ad:76:a8:25:c5:2d:ff:d5:d2:e9:58:e6:0e: 0f:ff:7f:fc:4f:3e:5e:d9:c0:29:5e:3c:63:6e:0a: e3:07:22:ca:bd:22:8d:2c:12:17:eb:7c:ee:ca:16: 19:06:13:3b:39:07:20:5a:41:20:ca:1f:83:9f:3a: b6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FC:64:D2:27:72:E9:9C:B1:6D:C4:2D:89:1B:4E:1A:1E:D2:4A:77 X509v3 Authority Key Identifier: keyid:2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:63:4e:14:fb:aa:71:fe:85:a9:76:dd:6a:f3:75:51:70:6c: 51:4c:a3:7f:28:cd:48:2a:d1:b8:3e:76:4a:50:a9:68:d6:18: 6e:33:90:e1:cb:b4:30:1b:8c:41:8b:b0:0a:87:6b:be:a1:22: 1d:d3:d8:d3:d9:6e:a3:53:ed:26:bb:de:7e:3e:56:be:69:03: 03:16:92:52:93:c9:34:43:ad:05:ea:86:fe:f8:4d:55:c5:a4: d7:91:a5:3a:c3:ca:f7:2c:2c:1a:f3:8f:07:8b:82:e1:0c:26: 53:ca:e9:83:38:53:29:06:80:6f:d1:0c:75:4d:7c:0d:bb:9d: 21:7c:f1:2d:2f:75:66:1c:10:4c:04:28:e7:e9:1c:31:d2:10: e6:64:93:d1:64:44:f3:4f:1b:96:c6:97:17:48:58:be:7b:89: 37:89:0c:8f:49:78:56:02:de:39:8c:f8:7b:70:33:cf:30:c2: 23:6d:85:17:78:75:fe:6a:81:df:d4:77:7c:79:b1:4e:b8:d6: 1f:3d:bd:fa:da:b7:ff:d3:b9:88:ba:6a:cd:dc:80:12:9e:f5: 51:ab:05:7f:fc:58:fc:56:e2:6e:2c:e3:50:4b:89:bf:0c:0f: 03:74:1e:51:c5:15:6e:b1:31:b7:ba:25:22:d7:61:dc:9e:bb: 99:c3:67:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTZoxS4JQOerDvkbAlCckc3hJsaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBMkU5NzQyQkFGQjAzRkZGOEI0ODA3QUI5MDc1RkZD QzMxMDM3MDAeFw0yNTA2MTEwMjE4NDZaFw0yNTA2MTIwNjExNDZaMDMxMTAvBgNV BAMTKDIxRkM2NEQyMjc3MkU5OUNCMTZEQzQyRDg5MUI0RTFBMUVEMjRBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvwu9kXWjWErxdqJKCpTI4/Ic4 WN9UsaWWH6xjlwUH8L52mbmG/GZAkh18ddSVuhQUipeXebGWasfng6yO9Qarvu3s zCfWE+zPzFlsV8Sp/ko98Ni3/VaEosGjjXBWAegcZ+7hTsoCGPPO1M6rNr2c8/aw XSu6gQbnUhHdCaCv2vzRz8dvNIIr7tHMkkQ1n8VSJlZ5rI6OXMeZ6luFjVuZgBpT 600Pr4nAQWAq/Fp6gTZ80gol21pqqvtibRe/awy5qjXUrXaoJcUt/9XS6VjmDg// f/xPPl7ZwClePGNuCuMHIsq9Io0sEhfrfO7KFhkGEzs5ByBaQSDKH4OfOrahAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUIfxk0idy6ZyxbcQtiRtOGh7SSncwHwYDVR0j BBgwFoAULKLpdCuvsD//i0gHq5B1/8wxA3AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDlHUjU0R3dxeXFCZ1ZZajFlSERYZk5YUzFoN3FoYUZMRW5ycW5CUXFD QU0vMS8yQ0EyRTk3NDJCQUZCMDNGRkY4QjQ4MDdBQjkwNzVGRkNDMzEwMzcwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDQTJFOTc0MkJBRkIwM0ZG RjhCNDgwN0FCOTA3NUZGQ0MzMTAzNzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDlHUjU0R3dxeXFCZ1ZZajFlSERYZk5YUzFoN3FoYUZMRW5ycW5CUXFDQU0vMS8y Q0EyRTk3NDJCQUZCMDNGRkY4QjQ4MDdBQjkwNzVGRkNDMzEwMzcwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp2NOFPuqcf6FqXbdavN1UXBsUUyjfyjNSCrRuD52SlCpaNYYbjOQ4cu0MBuM QYuwCodrvqEiHdPY09luo1PtJrvefj5WvmkDAxaSUpPJNEOtBeqG/vhNVcWk15Gl OsPK9ywsGvOPB4uC4QwmU8rpgzhTKQaAb9EMdU18DbudIXzxLS91ZhwQTAQo5+kc MdIQ5mST0WRE808blsaXF0hYvnuJN4kMj0l4VgLeOYz4e3AzzzDCI22FF3h1/mqB 39R3fHmxTrjWHz29+tq3/9O5iLpqzdyAEp71UasFf/xY/FbibizjUEuJvwwPA3Qe UcUVbrExt7olItdh3J67mcNnGw== -----END CERTIFICATE-----Generated at Wed Jun 11 09:46:37 2025 by rpki-client