$ rpki-client -vvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft File: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft (raw, json) Hash identifier: Y8JA4DxAXto7V5SoXR+HqTO+pgUj54JK2zzFy/dwIY8= Subject key identifier: 3C:42:E8:2E:FF:B1:E7:60:D1:B7:5F:1C:75:31:D8:C2:62:47:01:12 Authority key identifier: 98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5 Certificate issuer: /CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5 Certificate serial: 2CDBDEF1DE43764DDBB6428873B18E66E45CCC23 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer Subject info access: rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft Manifest number: 023A Signing time: Mon 09 Jun 2025 20:18:00 +0000 Manifest this update: Mon 09 Jun 2025 20:13:00 +0000 Manifest next update: Tue 10 Jun 2025 21:51:00 +0000 Files and hashes: 1: 98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl (hash: Oy8WQ2JlvM7CxN+I8aO5AwbILL+7f27jpJmlSFqEtwg=) 2: 34352e37302e34302e302f32322d3332203d3e20323637353436.roa (hash: ZGz/qxMNOnn8ZRQqWAjpD7CsiHW3hsbP55xHl3KH4L0=) 3: 3139312e3234312e38382e302f32312d3332203d3e20323637353436.roa (hash: xYKUjGDvB4ohftGmPkBCTmPGZBuO+nqUhKkaIhxMrJg=) 4: 323830343a343331303a3a2f33322d313238203d3e20323637353436.roa (hash: Kun2CCgPn8Q+q8HC0X//kGwa1c8M6wEv2En3ue4bLs0=) 5: 34352e3136362e3231322e302f32322d3332203d3e20323637353436.roa (hash: oxjQRGVdgBIIIUSH26/VmV6NbSjuLnOQbtY6pEUcqrk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 21:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:db:de:f1:de:43:76:4d:db:b6:42:88:73:b1:8e:66:e4:5c:cc:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5 Validity Not Before: Jun 9 20:13:00 2025 GMT Not After : Jun 10 21:51:00 2025 GMT Subject: CN=3C42E82EFFB1E760D1B75F1C7531D8C262470112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:12:4f:46:45:22:4d:91:9c:9e:47:f0:b3:c2: a7:5c:af:4e:e9:fb:26:10:76:c6:92:12:d7:8d:65: de:00:4f:e1:6d:dd:20:73:d6:ef:db:f1:d5:56:c0: d3:6b:bf:f8:05:b7:b1:13:d4:ab:62:8a:f5:dc:29: 15:d9:d5:66:da:2c:22:34:a1:b5:fb:28:95:fa:a5: 97:e0:60:de:36:40:3f:82:08:d1:ae:b2:f2:60:a4: 9b:d0:8f:f8:ce:bd:06:55:da:d5:d3:87:41:0f:94: 70:a9:6b:a4:a9:30:92:79:53:f3:9b:0a:08:f4:81: ab:1b:47:71:34:57:31:1d:16:07:0e:11:a3:80:5b: f7:2c:1a:ab:69:00:7b:0c:11:3d:21:38:26:08:ff: 2f:39:67:0a:9e:90:78:6c:93:eb:c1:20:43:93:c2: 48:25:de:14:b5:34:5c:bc:12:e0:e6:d4:80:af:a6: 3e:e5:ff:3a:7a:94:58:ce:af:f6:d7:cd:fd:d2:c8: 48:e1:ee:98:fc:95:b3:4f:30:f3:dc:6f:93:d3:de: 0d:aa:ae:f9:76:e1:1a:27:72:22:23:5d:7e:88:7c: cf:86:64:56:de:63:b8:3e:19:6e:d5:be:54:db:aa: 54:0f:b4:02:22:a3:c3:ae:48:d8:f3:73:2b:bd:ec: ab:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:42:E8:2E:FF:B1:E7:60:D1:B7:5F:1C:75:31:D8:C2:62:47:01:12 X509v3 Authority Key Identifier: keyid:98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:3b:b6:13:bf:51:72:36:7d:05:60:c0:20:aa:26:0e:af:2c: f0:59:a5:5a:a3:98:a0:18:8e:41:f9:1d:2b:97:17:ec:28:2b: a9:ff:88:25:5a:e6:95:4a:6b:6d:05:7d:67:94:19:e9:31:5a: 33:cb:f2:76:65:c4:8b:85:18:22:70:8a:87:22:6c:5c:6a:c1: 15:66:ca:a2:ba:66:83:5e:5f:be:c2:02:e9:d4:21:6b:df:f9: de:2e:1b:91:8a:ae:3a:b2:59:91:66:d8:ad:46:b9:94:ab:28: 35:d7:fe:1a:d0:7d:97:a9:da:6e:e2:a9:68:35:fd:9d:dd:8d: 3b:89:ba:df:e6:fc:98:8c:cc:4e:be:92:7e:c6:06:c4:da:06: e3:c3:cf:43:e0:ac:cc:1d:3a:d0:d5:40:b5:09:14:35:18:a0: b5:34:d3:96:db:54:0e:f0:a4:0c:74:fa:22:03:28:e5:c7:c0: 23:ae:d2:e9:2e:fd:f6:68:e3:ee:7d:1c:45:f6:ab:0a:22:35: 42:86:db:d3:dc:98:1e:dd:5e:e1:e5:62:79:ec:52:61:97:ff: 0d:89:1b:47:17:5d:f2:67:0d:9d:da:e2:67:fd:c1:0a:dd:ad: d4:73:b9:91:37:c7:db:57:c7:93:4a:e3:28:e2:50:73:7a:8a: 24:5f:a7:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULNve8d5Ddk3btkKIc7GOZuRczCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThENzA3REEwRjZENzIxQ0E5MDU2QUUwQjcxMjZFREQy MTRBRDdENTAeFw0yNTA2MDkyMDEzMDBaFw0yNTA2MTAyMTUxMDBaMDMxMTAvBgNV BAMTKDNDNDJFODJFRkZCMUU3NjBEMUI3NUYxQzc1MzFEOEMyNjI0NzAxMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXEk9GRSJNkZyeR/Czwqdcr07p +yYQdsaSEteNZd4AT+Ft3SBz1u/b8dVWwNNrv/gFt7ET1KtiivXcKRXZ1WbaLCI0 obX7KJX6pZfgYN42QD+CCNGusvJgpJvQj/jOvQZV2tXTh0EPlHCpa6SpMJJ5U/Ob Cgj0gasbR3E0VzEdFgcOEaOAW/csGqtpAHsMET0hOCYI/y85ZwqekHhsk+vBIEOT wkgl3hS1NFy8EuDm1ICvpj7l/zp6lFjOr/bXzf3SyEjh7pj8lbNPMPPcb5PT3g2q rvl24RonciIjXX6IfM+GZFbeY7g+GW7VvlTbqlQPtAIio8OuSNjzcyu97KvLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPELoLv+x52DRt18cdTHYwmJHARIwHwYDVR0j BBgwFoAUmNcH2g9tchypBWrgtxJu3SFK19UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSExYYnZkUmNtRDRERko2cm03aVdOcTVHRWNURmtQVmhLdVpCTlpMMjZn U00vMS85OEQ3MDdEQTBGNkQ3MjFDQTkwNTZBRTBCNzEyNkVERDIxNEFEN0Q1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4RDcwN0RBMEY2RDcyMUNB OTA1NkFFMEI3MTI2RUREMjE0QUQ3RDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SExYYnZkUmNtRDRERko2cm03aVdOcTVHRWNURmtQVmhLdVpCTlpMMjZnU00vMS85 OEQ3MDdEQTBGNkQ3MjFDQTkwNTZBRTBCNzEyNkVERDIxNEFEN0Q1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoTu2E79RcjZ9BWDAIKomDq8s8FmlWqOYoBiOQfkdK5cX7Cgrqf+IJVrmlUpr bQV9Z5QZ6TFaM8vydmXEi4UYInCKhyJsXGrBFWbKorpmg15fvsIC6dQha9/53i4b kYquOrJZkWbYrUa5lKsoNdf+GtB9l6nabuKpaDX9nd2NO4m63+b8mIzMTr6SfsYG xNoG48PPQ+CszB060NVAtQkUNRigtTTTlttUDvCkDHT6IgMo5cfAI67S6S799mjj 7n0cRfarCiI1Qobb09yYHt1e4eVieexSYZf/DYkbRxdd8mcNndriZ/3BCt2t1HO5 kTfH21fHk0rjKOJQc3qKJF+nZg== -----END CERTIFICATE-----Generated at Tue Jun 10 02:00:18 2025 by rpki-client