$ rpki-client -vvf rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft File: CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft (raw, json) Hash identifier: n+i4f+Rcepm+ZxcueKlwA+BGz+sBCoMrivizE69Q37c= Subject key identifier: 81:57:72:EA:36:12:29:3F:E8:82:3F:11:AE:0F:66:50:1E:91:5C:DA Authority key identifier: CB:0E:C6:B7:F7:40:56:65:C6:58:4B:5D:B7:F3:C8:75:5A:A6:D2:27 Certificate issuer: /CN=CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227 Certificate serial: 10E6C05C014785EE16DDAE86CB7B860878B1732A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer Subject info access: rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft Manifest number: 0244 Signing time: Mon 16 Jun 2025 20:12:03 +0000 Manifest this update: Mon 16 Jun 2025 20:07:03 +0000 Manifest next update: Tue 17 Jun 2025 21:57:03 +0000 Files and hashes: 1: 3137302e37382e39362e302f32322d3234203d3e20323636323639.roa (hash: HnG1DMJoAuqnzDxdBRoltWz1OrOXM/EvggoTnkRAc/Q=) 2: CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl (hash: /9SvaBHvzJIFxzu773QyC327l9Qf6+gm8YQoi8LFNTc=) 3: 323830343a333531633a3a2f33322d3438203d3e20323636323639.roa (hash: 0RAwiE1uQZC4AnhcHcz8NAlKcFd2Q+l+WGtwVHrZPlg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 21:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:e6:c0:5c:01:47:85:ee:16:dd:ae:86:cb:7b:86:08:78:b1:73:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227 Validity Not Before: Jun 16 20:07:03 2025 GMT Not After : Jun 17 21:57:03 2025 GMT Subject: CN=815772EA3612293FE8823F11AE0F66501E915CDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:1e:6e:18:7c:59:fb:2a:07:f6:02:d2:71:89: 17:65:0c:07:68:be:49:c8:05:db:f9:d8:8b:f7:9e: ad:10:22:9a:a2:bf:03:56:7a:1e:ae:d9:35:7f:f6: 95:45:79:ea:2e:c2:70:fa:0a:69:6f:7c:05:06:e7: dc:6b:4f:88:b9:77:33:91:03:14:30:19:98:a2:33: 71:65:ed:b9:09:a0:c1:ed:12:d8:56:76:33:53:47: 41:c1:bf:95:c1:44:87:ec:25:bf:0f:10:7a:7f:fc: 19:d0:f2:a2:5c:35:70:b7:43:6a:52:82:73:68:71: 85:62:80:b4:33:41:97:05:3b:6b:89:27:d8:dc:58: 62:44:42:98:65:62:6d:9a:69:30:20:ab:f0:47:22: 83:58:97:2b:d0:b0:65:82:de:d1:71:0b:8e:d4:89: 18:d7:cc:88:a1:29:08:10:31:b2:e1:cc:bb:e1:e4: f3:8a:01:27:8d:b4:48:cc:a5:52:e4:bd:75:b1:90: 84:f0:11:e1:20:a1:06:84:3a:c1:c2:95:f0:ca:bc: 83:53:b1:5c:3a:0a:5c:3b:cf:cf:24:0a:b5:f9:07: 76:2d:cf:2f:c6:67:c4:79:89:4c:ed:f9:78:85:a1: 3b:ab:47:8c:3c:c4:1f:a6:cd:e5:32:a6:f0:96:49: ea:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:57:72:EA:36:12:29:3F:E8:82:3F:11:AE:0F:66:50:1E:91:5C:DA X509v3 Authority Key Identifier: keyid:CB:0E:C6:B7:F7:40:56:65:C6:58:4B:5D:B7:F3:C8:75:5A:A6:D2:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:eb:e7:7f:82:e5:17:7f:e1:19:10:da:5f:ff:f6:ae:97:75: ef:17:b3:e3:db:a8:2c:69:5f:d3:62:4f:1c:b8:c1:ac:d3:9e: d5:42:b8:24:1b:f9:c4:bd:e2:14:c5:48:28:87:ed:85:d4:d2: 3e:54:ee:5e:18:e1:82:29:5a:ab:dd:c1:fd:7c:c6:71:9e:4c: 7c:73:36:13:7e:04:e3:7f:bb:b0:c4:4c:1f:6a:84:d7:aa:fe: 0a:82:92:f8:75:75:1c:96:c0:10:b0:73:b3:1a:87:6a:b8:61: c4:2d:d6:ef:3f:84:61:de:dc:2e:db:db:7f:af:ba:1e:ed:90: a0:3d:a2:56:c5:1a:58:56:6c:4b:08:32:2a:bd:69:0b:55:06: cf:a6:cc:1a:93:87:7c:43:bd:a4:b5:77:41:38:a7:70:3c:29: 11:65:60:e5:26:30:88:34:ec:fd:65:b6:78:4a:95:24:88:10: 09:20:23:59:88:05:96:f2:0f:7d:fa:a4:7a:55:01:ad:5e:ed: 37:20:cb:17:36:60:59:1a:13:1c:9b:fc:5e:74:07:ee:ed:f7: 48:ec:91:d2:5a:cd:b0:bd:63:76:3c:18:96:92:0c:2a:18:5a: 72:17:63:42:d9:af:55:fa:82:ac:d2:5a:a0:4b:1d:3e:1f:81: 77:68:6a:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEObAXAFHhe4W3a6Gy3uGCHixcyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0IwRUM2QjdGNzQwNTY2NUM2NTg0QjVEQjdGM0M4NzU1 QUE2RDIyNzAeFw0yNTA2MTYyMDA3MDNaFw0yNTA2MTcyMTU3MDNaMDMxMTAvBgNV BAMTKDgxNTc3MkVBMzYxMjI5M0ZFODgyM0YxMUFFMEY2NjUwMUU5MTVDREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0Hm4YfFn7Kgf2AtJxiRdlDAdo vknIBdv52Iv3nq0QIpqivwNWeh6u2TV/9pVFeeouwnD6CmlvfAUG59xrT4i5dzOR AxQwGZiiM3Fl7bkJoMHtEthWdjNTR0HBv5XBRIfsJb8PEHp//BnQ8qJcNXC3Q2pS gnNocYVigLQzQZcFO2uJJ9jcWGJEQphlYm2aaTAgq/BHIoNYlyvQsGWC3tFxC47U iRjXzIihKQgQMbLhzLvh5POKASeNtEjMpVLkvXWxkITwEeEgoQaEOsHClfDKvINT sVw6Clw7z88kCrX5B3Ytzy/GZ8R5iUzt+XiFoTurR4w8xB+mzeUypvCWSepVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgVdy6jYSKT/ogj8Rrg9mUB6RXNowHwYDVR0j BBgwFoAUyw7Gt/dAVmXGWEtdt/PIdVqm0icwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjc0cmFBNHJQRWRiR2t4YzNxcmFOVExIbW1peTNRQmFrUlV3RVVEdW1L YlAvMS9DQjBFQzZCN0Y3NDA1NjY1QzY1ODRCNURCN0YzQzg3NTVBQTZEMjI3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCMEVDNkI3Rjc0MDU2NjVD NjU4NEI1REI3RjNDODc1NUFBNkQyMjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mjc0cmFBNHJQRWRiR2t4YzNxcmFOVExIbW1peTNRQmFrUlV3RVVEdW1LYlAvMS9D QjBFQzZCN0Y3NDA1NjY1QzY1ODRCNURCN0YzQzg3NTVBQTZEMjI3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuevnf4LlF3/hGRDaX//2rpd17xez49uoLGlf02JPHLjBrNOe1UK4JBv5xL3i FMVIKIfthdTSPlTuXhjhgilaq93B/XzGcZ5MfHM2E34E43+7sMRMH2qE16r+CoKS +HV1HJbAELBzsxqHarhhxC3W7z+EYd7cLtvbf6+6Hu2QoD2iVsUaWFZsSwgyKr1p C1UGz6bMGpOHfEO9pLV3QTincDwpEWVg5SYwiDTs/WW2eEqVJIgQCSAjWYgFlvIP ffqkelUBrV7tNyDLFzZgWRoTHJv8XnQH7u33SOyR0lrNsL1jdjwYlpIMKhhachdj QtmvVfqCrNJaoEsdPh+Bd2hq2Q== -----END CERTIFICATE-----Generated at Tue Jun 17 00:53:57 2025 by rpki-client