$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft File: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft (raw, json) Hash identifier: Rn8/n13T7VYanmXqDf2duXskL9yyt1NfLlmEWuYEF7g= Subject key identifier: 1C:C9:61:8F:A1:07:10:63:11:AF:DB:A1:D6:7C:08:4A:A1:DF:FC:BF Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 Certificate issuer: /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Certificate serial: 59B8E370E8AE50EECFD768EC78FC5671A0AC4DEE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject info access: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft Manifest number: 0250 Signing time: Wed 18 Jun 2025 23:49:43 +0000 Manifest this update: Wed 18 Jun 2025 23:44:43 +0000 Manifest next update: Fri 20 Jun 2025 01:53:43 +0000 Files and hashes: 1: CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl (hash: GPnTwOqBzE4h1rVhtER3gWtPnqGFsZSqtFB1wH53HSo=) 2: 323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (hash: Qo7jd7bqgZ8RaIGB3HsVpFHOePniB9jZXdO3Roenvho=) 3: 3137372e3232322e3233322e302f32312d3233203d3e20323633343030.roa (hash: lSV/o4YOc33lWUDRl1YfEXFloffiS8CE/b74ZMOG18A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 01:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b8:e3:70:e8:ae:50:ee:cf:d7:68:ec:78:fc:56:71:a0:ac:4d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9 Validity Not Before: Jun 18 23:44:43 2025 GMT Not After : Jun 20 01:53:43 2025 GMT Subject: CN=1CC9618FA107106311AFDBA1D67C084AA1DFFCBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:54:1a:33:25:0d:b9:5c:e5:12:7d:6c:b0:50: 55:24:b2:54:3c:e6:62:f5:80:c5:fa:84:a8:87:2b: 54:d7:3b:2d:c0:6f:a4:bc:6f:23:f0:cd:42:fc:d5: ae:01:fb:5b:d4:05:3d:8f:18:10:c3:de:81:b9:d9: f1:78:1e:2a:b0:0e:d9:43:22:21:0a:34:e5:58:20: 4e:67:ef:49:9e:6d:09:d8:3f:2e:f1:31:c4:7f:7d: 0c:a5:19:c2:16:d1:63:8a:a5:ed:5d:18:cb:72:1b: a6:01:7b:63:c8:a4:05:ef:86:b5:4e:e3:63:50:15: d6:0e:5e:ac:97:4b:02:76:eb:16:e3:74:02:9c:e2: 17:8b:d2:ce:66:b0:be:69:75:c3:e9:31:b6:b2:b9: 9b:56:7c:88:6a:f9:33:e7:36:0f:5b:36:59:f0:15: 1d:95:ca:92:77:6a:f1:ff:d6:a9:6a:fa:7c:31:10: 87:67:ef:ed:85:ab:26:8d:a7:da:66:27:aa:6b:ac: f4:07:e9:15:e5:72:19:3a:50:f8:d6:dc:89:02:0f: 6e:9e:f0:1e:16:0f:80:37:db:67:81:3c:c1:38:d4: 2e:0b:5a:d4:10:18:13:45:80:a4:13:3f:a0:a0:72: 11:40:32:6c:20:a7:5e:7f:a3:43:78:48:8c:95:f7: b4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C9:61:8F:A1:07:10:63:11:AF:DB:A1:D6:7C:08:4A:A1:DF:FC:BF X509v3 Authority Key Identifier: keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:79:c1:d6:1c:05:1d:b4:c9:91:1e:9f:1f:2a:b7:30:26:5e: c7:cf:85:f6:d6:ce:79:75:91:50:a3:fb:ee:8a:eb:71:ea:06: a6:4a:28:9b:77:36:6a:a4:7b:04:9b:87:81:64:0c:b3:4f:24: dc:73:10:c0:d5:4e:ef:ab:ba:4b:eb:74:03:1c:d6:0d:55:ee: d7:62:45:3d:6e:a3:d0:f4:26:34:e8:1c:27:b2:26:c8:e3:59: 64:6b:cc:91:29:ba:5a:5d:e6:f2:dc:bb:dc:fa:20:9e:d7:4c: cf:3a:4f:e1:d9:fe:dd:e0:00:e0:fa:cc:43:9f:72:0f:af:6a: 99:d0:73:d3:e3:41:bd:6d:e9:b5:1b:7a:bb:d3:13:0c:2d:ef: d6:c2:5c:82:d4:3c:62:6a:2c:b8:b1:67:58:63:46:46:8f:89: b1:7b:e3:b5:75:c1:a7:a4:19:31:36:e7:87:68:95:f8:c9:a1: f2:35:3a:f3:e1:95:a5:30:6e:93:8e:40:26:18:94:6d:48:68: b0:85:71:e4:24:e9:00:a9:0a:d0:ef:c2:c7:8c:ac:cc:91:76: 16:c9:72:ab:c9:6e:65:a9:e5:93:35:7a:36:16:1b:4c:e1:6d: 8e:d2:13:4e:d1:f8:68:4b:2c:2a:bc:09:5d:03:7f:75:eb:62: 56:ec:6f:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWbjjcOiuUO7P12jsePxWcaCsTe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyMzkxRkE3QzI4QUUwRjlDOEIyQjk5RTE5MDkyQTM0 ODdBMkVDOTAeFw0yNTA2MTgyMzQ0NDNaFw0yNTA2MjAwMTUzNDNaMDMxMTAvBgNV BAMTKDFDQzk2MThGQTEwNzEwNjMxMUFGREJBMUQ2N0MwODRBQTFERkZDQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMVBozJQ25XOUSfWywUFUkslQ8 5mL1gMX6hKiHK1TXOy3Ab6S8byPwzUL81a4B+1vUBT2PGBDD3oG52fF4HiqwDtlD IiEKNOVYIE5n70mebQnYPy7xMcR/fQylGcIW0WOKpe1dGMtyG6YBe2PIpAXvhrVO 42NQFdYOXqyXSwJ26xbjdAKc4heL0s5msL5pdcPpMbayuZtWfIhq+TPnNg9bNlnw FR2VypJ3avH/1qlq+nwxEIdn7+2FqyaNp9pmJ6prrPQH6RXlchk6UPjW3IkCD26e 8B4WD4A322eBPME41C4LWtQQGBNFgKQTP6CgchFAMmwgp15/o0N4SIyV97TpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHMlhj6EHEGMRr9uh1nwISqHf/L8wHwYDVR0j BBgwFoAUzSOR+nworg+ciyuZ4ZCSo0h6LskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRo U1gvMS9DRDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMjM5MUZBN0MyOEFFMEY5 QzhCMkI5OUUxOTA5MkEzNDg3QTJFQzkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRoU1gvMS9D RDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMXnB1hwFHbTJkR6fHyq3MCZex8+F9tbOeXWRUKP77orrceoGpkoom3c2aqR7 BJuHgWQMs08k3HMQwNVO76u6S+t0AxzWDVXu12JFPW6j0PQmNOgcJ7ImyONZZGvM kSm6Wl3m8ty73PogntdMzzpP4dn+3eAA4PrMQ59yD69qmdBz0+NBvW3ptRt6u9MT DC3v1sJcgtQ8YmosuLFnWGNGRo+JsXvjtXXBp6QZMTbnh2iV+Mmh8jU68+GVpTBu k45AJhiUbUhosIVx5CTpAKkK0O/Cx4yszJF2Fslyq8luZanlkzV6NhYbTOFtjtIT TtH4aEssKrwJXQN/detiVuxvEA== -----END CERTIFICATE-----Generated at Thu Jun 19 05:16:45 2025 by rpki-client