$ rpki-client -vvf rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.mft File: 5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.mft (raw, json) Hash identifier: hFGUI7R9i5AjZG6Lg6YuUjJqCG/iveDrzVm+d07ziWU= Subject key identifier: BC:F0:61:B9:BA:3D:9A:C9:4D:DE:3F:69:FE:3E:11:25:C5:7E:E1:78 Authority key identifier: 54:45:B2:68:F9:5C:5A:86:AE:66:A9:F2:C2:3E:2E:41:A5:8C:3D:78 Certificate issuer: /CN=5445B268F95C5A86AE66A9F2C23E2E41A58C3D78 Certificate serial: 396F0FBF451EF530CF21A11815AEC2041A48427C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.cer Subject info access: rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.mft Manifest number: 020A Signing time: Sat 21 Jun 2025 01:03:28 +0000 Manifest this update: Sat 21 Jun 2025 00:58:28 +0000 Manifest next update: Sun 22 Jun 2025 03:23:28 +0000 Files and hashes: 1: 323830343a383133303a3a2f33332d3333203d3e20323732343338.roa (hash: UJHultIWjbAXcPu4zHAQA8RYVXSJDV/OMtT7Tth+/8Q=) 2: 5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.crl (hash: kofXXcd38Etjf7Iz5UvwYV6EBNkqTX8lLTMPvdv6/ZY=) 3: 323830343a383133303a383030303a3a2f33332d3333203d3e20323732343338.roa (hash: GjrPaBZSWJsxgmv98yvCZEAV3ZazqCvva2oFfCm4aMY=) 4: 323830343a383133303a3a2f33322d3332203d3e20323732343338.roa (hash: hqP9F0AlTlDTum7f/N7bi5mVBm7oH/AZevLDVLt12rw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.crl rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Jun 2025 03:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:6f:0f:bf:45:1e:f5:30:cf:21:a1:18:15:ae:c2:04:1a:48:42:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5445B268F95C5A86AE66A9F2C23E2E41A58C3D78 Validity Not Before: Jun 21 00:58:28 2025 GMT Not After : Jun 22 03:23:28 2025 GMT Subject: CN=BCF061B9BA3D9AC94DDE3F69FE3E1125C57EE178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:9c:ea:2d:d8:c1:11:bc:40:9d:b5:d6:15: 7f:f5:44:1d:58:ad:10:52:8d:3e:5f:d9:02:68:98: df:72:31:ce:71:50:02:50:24:3b:44:41:e9:cf:96: 98:d1:05:6f:ab:36:57:8d:84:8e:e4:44:a4:60:8c: b0:11:56:3f:a5:e7:12:f4:aa:1e:f6:7c:52:ac:59: 47:38:14:62:e3:2d:73:9e:30:58:05:2b:a4:a6:df: ba:08:70:b5:22:1d:87:4c:fa:ec:7e:18:01:e1:a0: ac:41:d8:b2:33:de:11:e8:88:3f:2e:7c:34:ee:b0: 5e:7f:5a:b9:ff:68:f4:aa:31:31:f9:fb:38:63:a0: 76:da:b7:b1:ea:62:c0:bd:1f:ac:ec:3b:01:28:2b: 7e:d2:00:ca:b2:92:55:bb:e3:05:46:93:10:3e:19: e1:9b:93:b4:a4:aa:b3:8a:46:ac:08:64:be:e2:61: 20:62:a8:dd:0d:f7:88:2c:23:42:db:8b:d8:79:33: 7c:d0:88:51:fa:97:f9:b0:b7:6d:ea:e8:88:a6:85: 10:e3:b4:d7:17:3e:c6:b8:6b:e9:fe:35:87:44:ca: 22:77:46:45:de:39:d7:9c:3e:19:b7:21:fc:c3:d7: b2:4d:1d:37:0c:2d:14:a5:29:b4:2d:a8:72:b0:fa: 57:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F0:61:B9:BA:3D:9A:C9:4D:DE:3F:69:FE:3E:11:25:C5:7E:E1:78 X509v3 Authority Key Identifier: keyid:54:45:B2:68:F9:5C:5A:86:AE:66:A9:F2:C2:3E:2E:41:A5:8C:3D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:10:93:64:33:6e:67:89:e9:e9:44:1e:70:b2:01:62:22:f7: 1a:3b:bd:3a:bc:ca:bc:84:5c:f9:30:64:45:2d:6f:63:69:96: 0b:0e:c6:ab:3b:0e:86:8b:48:e4:fc:eb:5f:df:4d:bd:b9:dd: b0:d4:37:27:a4:a5:9a:32:b2:4c:23:f1:d3:48:9a:6c:45:e3: a9:88:34:e0:9c:38:43:f8:cf:f1:c9:73:3b:37:1f:84:f5:f6: 1c:47:fa:ac:f5:93:44:46:5d:03:81:e6:99:e1:33:a6:f0:cb: cc:6c:7c:6c:4a:c1:0c:47:21:3e:67:0c:60:20:2d:ec:80:0e: 38:19:e2:69:9a:7c:ef:9c:87:e8:00:b9:e3:5a:0c:12:d8:e6: 55:d6:14:33:5a:e3:2b:8e:53:ce:4c:b0:7a:b4:be:19:bd:69: 71:13:de:03:c2:c8:8d:81:af:50:0d:4e:9f:2e:22:9e:b2:9e: c8:8f:92:13:dc:e3:82:6d:b3:3a:6d:ea:88:9c:17:28:52:c4: 1a:10:bd:4c:53:ee:3c:9f:bd:f4:b1:c2:aa:4c:60:34:60:dd: 26:d0:af:b6:68:f3:6e:4f:f0:98:63:d0:52:34:30:d4:8a:57: d9:15:c0:1c:be:c5:8f:4d:78:96:59:62:82:c7:61:e1:07:df: 83:fb:a5:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOW8Pv0Ue9TDPIaEYFa7CBBpIQnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ0NUIyNjhGOTVDNUE4NkFFNjZBOUYyQzIzRTJFNDFB NThDM0Q3ODAeFw0yNTA2MjEwMDU4MjhaFw0yNTA2MjIwMzIzMjhaMDMxMTAvBgNV BAMTKEJDRjA2MUI5QkEzRDlBQzk0RERFM0Y2OUZFM0UxMTI1QzU3RUUxNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaMJzqLdjBEbxAnbXWFX/1RB1Y rRBSjT5f2QJomN9yMc5xUAJQJDtEQenPlpjRBW+rNleNhI7kRKRgjLARVj+l5xL0 qh72fFKsWUc4FGLjLXOeMFgFK6Sm37oIcLUiHYdM+ux+GAHhoKxB2LIz3hHoiD8u fDTusF5/Wrn/aPSqMTH5+zhjoHbat7HqYsC9H6zsOwEoK37SAMqyklW74wVGkxA+ GeGbk7SkqrOKRqwIZL7iYSBiqN0N94gsI0Lbi9h5M3zQiFH6l/mwt23q6IimhRDj tNcXPsa4a+n+NYdEyiJ3RkXeOdecPhm3IfzD17JNHTcMLRSlKbQtqHKw+lf7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvPBhubo9mslN3j9p/j4RJcV+4XgwHwYDVR0j BBgwFoAUVEWyaPlcWoauZqnywj4uQaWMPXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmNqVm1wakRKU3RWdHpZQnFuVVMyUjVRTkFHVUFzS0ZFWWdGeTZNdmFu OHgvMC81NDQ1QjI2OEY5NUM1QTg2QUU2NkE5RjJDMjNFMkU0MUE1OEMzRDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0NDVCMjY4Rjk1QzVBODZB RTY2QTlGMkMyM0UyRTQxQTU4QzNENzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmNqVm1wakRKU3RWdHpZQnFuVVMyUjVRTkFHVUFzS0ZFWWdGeTZNdmFuOHgvMC81 NDQ1QjI2OEY5NUM1QTg2QUU2NkE5RjJDMjNFMkU0MUE1OEMzRDc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdxCTZDNuZ4np6UQecLIBYiL3Gju9OrzKvIRc+TBkRS1vY2mWCw7GqzsOhotI 5PzrX99NvbndsNQ3J6SlmjKyTCPx00iabEXjqYg04Jw4Q/jP8clzOzcfhPX2HEf6 rPWTREZdA4HmmeEzpvDLzGx8bErBDEchPmcMYCAt7IAOOBniaZp875yH6AC541oM EtjmVdYUM1rjK45TzkywerS+Gb1pcRPeA8LIjYGvUA1Ony4inrKeyI+SE9zjgm2z Om3qiJwXKFLEGhC9TFPuPJ+99LHCqkxgNGDdJtCvtmjzbk/wmGPQUjQw1IpX2RXA HL7Fj014llligsdh4Qffg/uldA== -----END CERTIFICATE-----Generated at Sat Jun 21 19:06:15 2025 by rpki-client