$ rpki-client -vvf rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.mft File: D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.mft (raw, json) Hash identifier: 2J5QFa8h9pgFIj/8VFcREgVl56TWgwfrKDOwxeWTg9g= Subject key identifier: 71:2C:6E:74:2D:9E:02:B7:99:BF:D0:52:46:2D:D8:75:57:44:BF:00 Authority key identifier: D1:CD:19:F6:2C:42:BD:2B:F5:33:8E:82:0F:69:E8:A3:4E:38:B6:A6 Certificate issuer: /CN=D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6 Certificate serial: 50EDF96379E224936B8FCC8864437BADBB2B8647 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.cer Subject info access: rsync://rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.mft Manifest number: 1A Signing time: Fri 04 Jul 2025 08:19:21 +0000 Manifest this update: Fri 04 Jul 2025 08:14:21 +0000 Manifest next update: Sat 05 Jul 2025 11:07:21 +0000 Files and hashes: 1: 3138392e38342e35342e302f32332d3233203d3e20323731363835.roa (hash: KtmeHUCbWnIXtNtwGd6SKuNNTX6tDaZEnxlYg/KMDso=) 2: 323830343a376636343a3a2f33322d3332203d3e20323731363835.roa (hash: GXGTm4Va/sMcBfleoj5CSHakwb/P4WzKU90sRLVRa5E=) 3: D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.crl (hash: RVYb3SXzMH20LKeesvOFwpojh7erTWnrO+svDS+R0Eo=) 4: 34352e3233302e38372e302f32342d3234203d3e20323731363835.roa (hash: 9KJcwWcBCuH/rf/IQKbxQdfrVYN52iwpoZlL+Vok+Ks=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.crl rsync://rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Jul 2025 10:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ed:f9:63:79:e2:24:93:6b:8f:cc:88:64:43:7b:ad:bb:2b:86:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6 Validity Not Before: Jul 4 08:14:21 2025 GMT Not After : Jul 5 11:07:21 2025 GMT Subject: CN=712C6E742D9E02B799BFD052462DD8755744BF00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:97:81:e6:50:b0:ec:40:b7:75:36:d9:6f:d1: 4d:0f:d8:00:d4:3d:9a:41:0e:0d:b2:83:eb:bb:fb: 5a:6d:38:01:0a:01:ab:57:0a:52:2b:32:24:94:88: bc:9b:e4:2a:4d:ac:fe:f7:a9:e4:35:49:39:90:b0: b9:bd:33:7e:6f:d0:82:26:08:83:86:87:f9:64:e3: e0:28:63:dc:33:44:de:7d:e6:41:d9:4b:af:2d:89: fa:2b:9e:d0:6f:8c:b6:d7:04:fe:f0:86:ae:ec:51: f2:1f:ca:45:c4:9f:38:db:d8:0a:ec:c0:21:fa:2b: cd:14:3d:de:6d:4b:80:1e:44:7e:61:0d:58:cc:89: 09:5f:ae:16:9e:64:52:62:28:99:16:51:54:45:54: 86:a6:e3:33:5c:b5:e1:09:28:af:f5:1d:54:9f:fb: 3a:24:89:5e:57:ed:68:c0:70:8c:eb:b2:19:f4:21: be:21:50:00:c6:ee:02:d0:59:a4:35:f3:e5:1c:54: f6:0f:cb:ba:e8:66:7e:55:8f:55:63:66:53:0a:c6: 61:70:e8:07:03:e5:e4:93:0a:f2:b6:31:bc:c5:56: 53:b7:3e:b8:af:10:94:48:7d:bc:53:35:ae:7f:0f: 9d:13:92:2d:bf:8f:a7:9e:04:5f:c0:18:84:ef:75: d7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2C:6E:74:2D:9E:02:B7:99:BF:D0:52:46:2D:D8:75:57:44:BF:00 X509v3 Authority Key Identifier: keyid:D1:CD:19:F6:2C:42:BD:2B:F5:33:8E:82:0F:69:E8:A3:4E:38:B6:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/xq59bgthkbc2StqhG3QDKkZZSN7BgHCCRwCPbXqUwUu/0/D1CD19F62C42BD2BF5338E820F69E8A34E38B6A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:e0:16:98:98:e1:ec:b8:5c:1c:56:9e:c8:dc:91:86:6c:6f: 6d:41:bf:07:54:19:9a:ab:45:91:16:76:38:d4:b2:81:ec:b1: e2:a7:ca:5e:fa:44:77:b2:0b:1f:97:07:73:33:0c:97:f2:16: 74:b0:5c:cf:f1:13:98:dc:cb:a3:f0:4b:6d:0d:cc:31:a6:bc: 9a:f9:91:5b:9b:66:00:01:7c:ca:03:02:74:c6:d9:20:39:cc: 1a:cd:66:e2:03:91:b9:f7:e2:c7:06:90:0d:f2:c7:ac:ac:32: 87:15:0a:67:40:57:c1:45:af:21:d2:94:57:fa:29:c7:33:66: 57:bf:c0:33:3c:60:56:0b:b0:da:e8:5c:8c:3e:cd:6f:7e:01: 80:5a:4c:41:57:55:7c:8d:a7:d3:3a:21:f8:8c:39:22:fb:56: 77:38:16:93:b4:16:55:b8:ce:4c:4e:59:d6:ac:83:15:65:3f: 37:0c:77:b5:a3:c4:4e:da:d9:8b:71:f9:ab:dd:f9:dc:fd:c5: 10:f3:b5:b6:64:2c:1f:ab:1f:7a:3f:ec:6b:25:f9:da:99:76: e0:ee:1e:cd:a3:ca:e6:d2:91:5b:b5:d2:5b:30:1d:7e:b7:82: c6:c0:2a:c3:5a:ff:74:d7:44:fb:4b:44:8f:3b:30:a8:b4:f0: 1d:57:d6:83 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUUO35Y3niJJNrj8yIZEN7rbsrhkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDRDE5RjYyQzQyQkQyQkY1MzM4RTgyMEY2OUU4QTM0 RTM4QjZBNjAeFw0yNTA3MDQwODE0MjFaFw0yNTA3MDUxMTA3MjFaMDMxMTAvBgNV BAMTKDcxMkM2RTc0MkQ5RTAyQjc5OUJGRDA1MjQ2MkREODc1NTc0NEJGMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+l4HmULDsQLd1Ntlv0U0P2ADU PZpBDg2yg+u7+1ptOAEKAatXClIrMiSUiLyb5CpNrP73qeQ1STmQsLm9M35v0IIm CIOGh/lk4+AoY9wzRN595kHZS68tiforntBvjLbXBP7whq7sUfIfykXEnzjb2Ars wCH6K80UPd5tS4AeRH5hDVjMiQlfrhaeZFJiKJkWUVRFVIam4zNcteEJKK/1HVSf +zokiV5X7WjAcIzrshn0Ib4hUADG7gLQWaQ18+UcVPYPy7roZn5Vj1VjZlMKxmFw 6AcD5eSTCvK2MbzFVlO3PrivEJRIfbxTNa5/D50Tki2/j6eeBF/AGITvddeNAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUcSxudC2eAreZv9BSRi3YdVdEvwAwHwYDVR0j BBgwFoAU0c0Z9ixCvSv1M46CD2noo044tqYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby94cTU5Ymd0aGtiYzJTdHFoRzNRREtrWlpTTjdCZ0hDQ1J3Q1BiWHFVd1V1 LzAvRDFDRDE5RjYyQzQyQkQyQkY1MzM4RTgyMEY2OUU4QTM0RTM4QjZBNi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9EMUNEMTlGNjJDNDJCRDJCRjUz MzhFODIwRjY5RThBMzRFMzhCNkE2LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL3hx NTliZ3Roa2JjMlN0cWhHM1FES2taWlNON0JnSENDUndDUGJYcVV3VXUvMC9EMUNE MTlGNjJDNDJCRDJCRjUzMzhFODIwRjY5RThBMzRFMzhCNkE2Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA M+AWmJjh7LhcHFaeyNyRhmxvbUG/B1QZmqtFkRZ2ONSygeyx4qfKXvpEd7ILH5cH czMMl/IWdLBcz/ETmNzLo/BLbQ3MMaa8mvmRW5tmAAF8ygMCdMbZIDnMGs1m4gOR uffixwaQDfLHrKwyhxUKZ0BXwUWvIdKUV/opxzNmV7/AMzxgVguw2uhcjD7Nb34B gFpMQVdVfI2n0zoh+Iw5IvtWdzgWk7QWVbjOTE5Z1qyDFWU/Nwx3taPETtrZi3H5 q9353P3FEPO1tmQsH6sfej/sayX52pl24O4ezaPK5tKRW7XSWzAdfreCxsAqw1r/ dNdE+0tEjzswqLTwHVfWgw== -----END CERTIFICATE-----Generated at Fri Jul 4 12:22:59 2025 by rpki-client