$ rpki-client -vvf rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft File: D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft (raw, json) Hash identifier: tMSWG4Rcjv656HWGwMLy1+eUcHVe0V2/vLUuS2lw4Io= Subject key identifier: C2:B4:0E:87:28:54:E6:E1:94:D4:4B:F0:33:46:1F:5F:94:8D:B0:45 Authority key identifier: D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D Certificate issuer: /CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D Certificate serial: 2ADA12D7E6BA168F9FF31E1AE99C689BEDCB7078 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer Subject info access: rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft Manifest number: 020D Signing time: Thu 05 Jun 2025 23:41:30 +0000 Manifest this update: Thu 05 Jun 2025 23:36:30 +0000 Manifest next update: Sat 07 Jun 2025 02:50:30 +0000 Files and hashes: 1: 3137302e37392e3234382e302f32322d3332203d3e203532363132.roa (hash: wN/RSPwQ23Kwd3VVvWWTYhQYkuWh44ZA+l6CPqOI494=) 2: 3137372e3132342e32302e302f32322d3332203d3e203532363132.roa (hash: MptvA3OgB87bq87s97oIXKhdykd0tjn38UhVCqEEP3U=) 3: 323830343a323266633a3a2f33322d313238203d3e203532363132.roa (hash: AwW/iWWYcsvH2ijJtEvIfqYNgjHlHzSJXVHody6Onj4=) 4: D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl (hash: ocDm1KVXj1QzH1gDK4MlDcTTosv3MpjgAVl6HF17FDs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 02:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:da:12:d7:e6:ba:16:8f:9f:f3:1e:1a:e9:9c:68:9b:ed:cb:70:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D Validity Not Before: Jun 5 23:36:30 2025 GMT Not After : Jun 7 02:50:30 2025 GMT Subject: CN=C2B40E872854E6E194D44BF033461F5F948DB045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b0:d8:d7:d2:31:69:e5:43:51:42:3a:cc:db: cc:3c:d3:e7:0f:6f:e1:3b:7a:4d:38:2d:9a:58:af: db:7a:1d:dd:74:7f:62:34:c9:d4:1f:dc:8b:6c:c8: 52:3b:f5:50:68:17:8b:85:c8:44:88:0e:8f:3d:b0: b3:72:8a:50:a4:b9:36:9d:de:33:2d:1b:cd:cb:8f: 79:d4:01:69:94:f9:e4:97:54:42:bf:99:c7:80:c8: 81:61:ca:fd:0b:97:ef:68:2d:96:82:cb:06:a9:70: d3:2f:85:b4:5d:17:03:0c:eb:d7:5b:51:5d:4f:8b: ba:02:8e:50:0e:18:f8:58:d5:8b:0e:f7:27:50:73: 93:31:7b:25:8a:36:c8:b7:03:6b:e3:f6:c1:e7:56: 65:c6:9d:01:04:1e:1e:4d:39:c2:ad:a7:84:3a:50: 86:18:8a:f5:3e:70:ce:71:42:e0:38:3a:ec:d4:3a: 38:0b:bc:20:93:21:90:c7:26:4b:59:dc:28:fa:b0: e0:b0:87:e7:e5:44:0f:b2:f2:1e:be:86:ca:a4:c6: cc:6d:41:f0:2b:bf:3c:7f:93:18:ab:a1:39:db:ce: eb:2b:7b:e4:83:2d:2c:ba:2d:a7:db:84:78:7a:8d: b3:fe:95:60:49:35:39:e2:4b:c1:1e:42:54:c8:55: 13:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B4:0E:87:28:54:E6:E1:94:D4:4B:F0:33:46:1F:5F:94:8D:B0:45 X509v3 Authority Key Identifier: keyid:D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ff:5e:3b:6b:e0:f0:88:00:4e:d1:6c:6c:85:c4:b6:b4:54: df:4f:79:ac:56:2f:cc:52:63:2b:90:c9:b6:69:9f:61:09:00: 1e:23:8c:2d:58:6c:72:cc:59:96:21:d9:67:f0:e6:f4:bb:fd: 21:d4:aa:78:f0:d7:f0:13:06:9f:fa:f0:a7:ab:df:df:fe:61: 0b:94:d9:5b:cf:32:e1:2c:ac:01:dc:8b:62:9a:68:6f:9e:85: 3e:a9:a1:d7:29:7c:d6:fc:b1:18:4c:01:2e:3e:dd:33:dc:20: e4:79:8f:dd:ef:d8:fb:fd:00:8b:87:d7:da:67:f0:fd:d5:69: 69:26:aa:99:88:c5:af:af:1d:83:bd:85:ba:fe:3d:25:f3:a1: 7f:f4:b0:00:50:69:90:f9:b3:cc:59:f9:82:86:50:93:98:a3: 7a:32:7d:f3:9e:47:d3:f8:8b:d8:81:d8:f1:7b:b2:87:6b:1a: 05:c0:e8:a2:5d:52:e8:d1:81:04:66:40:08:51:30:15:02:a5: 31:e8:53:9d:ef:bc:ed:69:3d:13:88:a2:12:77:5f:f1:85:1d: 86:cc:a2:94:12:f7:f3:e9:89:97:ed:74:a8:45:a0:de:c7:9e: 72:a9:f1:79:08:be:57:d2:cf:78:31:b2:02:6d:c4:c5:af:eb: 56:ed:be:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKtoS1+a6Fo+f8x4a6Zxom+3LcHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYzMzlDODZERTBDNjVGNDI5OUUwQjkyNUVERDg4RUFC ODg2RjcyRDAeFw0yNTA2MDUyMzM2MzBaFw0yNTA2MDcwMjUwMzBaMDMxMTAvBgNV BAMTKEMyQjQwRTg3Mjg1NEU2RTE5NEQ0NEJGMDMzNDYxRjVGOTQ4REIwNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDusNjX0jFp5UNRQjrM28w80+cP b+E7ek04LZpYr9t6Hd10f2I0ydQf3ItsyFI79VBoF4uFyESIDo89sLNyilCkuTad 3jMtG83Lj3nUAWmU+eSXVEK/mceAyIFhyv0Ll+9oLZaCywapcNMvhbRdFwMM69db UV1Pi7oCjlAOGPhY1YsO9ydQc5MxeyWKNsi3A2vj9sHnVmXGnQEEHh5NOcKtp4Q6 UIYYivU+cM5xQuA4OuzUOjgLvCCTIZDHJktZ3Cj6sOCwh+flRA+y8h6+hsqkxsxt QfArvzx/kxiroTnbzusre+SDLSy6LafbhHh6jbP+lWBJNTniS8EeQlTIVRPPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwrQOhyhU5uGU1EvwM0YfX5SNsEUwHwYDVR0j BBgwFoAU1jOcht4MZfQpnguSXt2I6riG9y0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFF5cmFKblBFRVFXbWpGTGE0ZEJwUTlRNTgyTHQ3Smt6Mkw3M2EzanZv RWUvMC9ENjMzOUM4NkRFMEM2NUY0Mjk5RTBCOTI1RUREODhFQUI4ODZGNzJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2MzM5Qzg2REUwQzY1RjQy OTlFMEI5MjVFREQ4OEVBQjg4NkY3MkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFF5cmFKblBFRVFXbWpGTGE0ZEJwUTlRNTgyTHQ3Smt6Mkw3M2EzanZvRWUvMC9E NjMzOUM4NkRFMEM2NUY0Mjk5RTBCOTI1RUREODhFQUI4ODZGNzJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK/9eO2vg8IgATtFsbIXEtrRU3095rFYvzFJjK5DJtmmfYQkAHiOMLVhscsxZ liHZZ/Dm9Lv9IdSqePDX8BMGn/rwp6vf3/5hC5TZW88y4SysAdyLYppob56FPqmh 1yl81vyxGEwBLj7dM9wg5HmP3e/Y+/0Ai4fX2mfw/dVpaSaqmYjFr68dg72Fuv49 JfOhf/SwAFBpkPmzzFn5goZQk5ijejJ9855H0/iL2IHY8Xuyh2saBcDool1S6NGB BGZACFEwFQKlMehTne+87Wk9E4iiEndf8YUdhsyilBL38+mJl+10qEWg3seecqnx eQi+V9LPeDGyAm3Exa/rVu2+wQ== -----END CERTIFICATE-----Generated at Fri Jun 6 06:07:01 2025 by rpki-client