$ rpki-client -vvf rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft File: 5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft (raw, json) Hash identifier: 7eBWA12CYPHwLCXbfXNZS87LWu0O3H2fYJodlAF7RCY= Subject key identifier: 88:2E:98:44:24:4F:6F:FF:05:D1:C2:2F:95:24:1E:E3:5D:D6:FE:B8 Authority key identifier: 5B:A4:DD:BB:E9:74:E5:C2:A2:5A:95:2B:F4:43:11:47:F1:D1:95:BD Certificate issuer: /CN=5BA4DDBBE974E5C2A25A952BF4431147F1D195BD Certificate serial: 5AFE21D716F9E66AE10D29C345A61EE5E153B6D8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer Subject info access: rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft Manifest number: B4 Signing time: Fri 20 Jun 2025 17:19:29 +0000 Manifest this update: Fri 20 Jun 2025 17:14:29 +0000 Manifest next update: Sat 21 Jun 2025 19:42:29 +0000 Files and hashes: 1: 3230312e3138322e3137362e302f32322d3332203d3e20323637353238.roa (hash: H03Vu8Bfe520dv1rMV0OcFZWYxUrvxZVo6HkfaDNrN0=) 2: 323830343a343263633a3a2f33322d313238203d3e20323637353238.roa (hash: P5vMjk9xZLUcu/EuN4M9DYWvTIbHxAsWjggzhrTxV18=) 3: 5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl (hash: 4Unb3uh8pJk3b9V3wT+mvv+AiBi4WTq9yRJyyGUIEHs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 19:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:fe:21:d7:16:f9:e6:6a:e1:0d:29:c3:45:a6:1e:e5:e1:53:b6:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BA4DDBBE974E5C2A25A952BF4431147F1D195BD Validity Not Before: Jun 20 17:14:29 2025 GMT Not After : Jun 21 19:42:29 2025 GMT Subject: CN=882E9844244F6FFF05D1C22F95241EE35DD6FEB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b9:0d:97:7f:42:1f:0c:9e:b9:28:48:c8:83: 11:c0:96:7a:62:80:88:0a:88:80:c7:1b:d4:ef:30: b9:be:b9:ca:fd:82:8c:1d:65:14:72:04:a4:88:47: 28:e5:e9:63:65:bf:31:68:4a:46:56:8d:d7:4f:ff: c2:ee:83:5d:ed:20:cf:fd:19:b6:a4:88:09:1a:26: db:18:06:35:88:31:00:8a:7a:2f:af:b2:9b:21:7b: 04:38:34:a2:9d:57:8b:0c:1c:50:05:65:aa:68:12: 01:34:b1:ef:0a:df:1f:72:62:eb:0c:1d:5c:24:12: ba:3b:1a:5e:fc:e2:8d:71:df:c9:87:1a:ea:7b:c2: 9b:2d:13:b6:07:c1:12:56:41:0a:2d:c4:11:8d:71: 9a:11:1e:c0:60:7e:3d:ef:84:9c:4f:97:be:25:54: b3:4f:da:3e:55:b2:59:4e:4f:83:6a:f8:1b:88:a2: cc:cd:1a:8f:68:ff:b9:ef:61:1e:24:72:2a:58:03: 60:47:74:98:62:e7:37:67:a8:b7:ab:4f:d5:f2:8e: 60:4d:35:f9:40:b2:b3:71:15:ed:b6:9f:84:6c:9d: 81:72:4d:4c:de:8c:b0:ee:12:e2:dd:14:09:41:c8: 06:c1:e7:f5:e0:00:c3:de:57:e5:e6:c3:8e:64:0c: 2d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2E:98:44:24:4F:6F:FF:05:D1:C2:2F:95:24:1E:E3:5D:D6:FE:B8 X509v3 Authority Key Identifier: keyid:5B:A4:DD:BB:E9:74:E5:C2:A2:5A:95:2B:F4:43:11:47:F1:D1:95:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2iLVcSZJcuX1bTGeniYv9RW4E9aEgB1ANg8TAr1moVtH/0/5BA4DDBBE974E5C2A25A952BF4431147F1D195BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d8:1e:4c:10:c6:f8:6e:29:3f:5f:80:10:3d:1b:f5:09:b9: 08:2d:f9:0f:bb:59:da:93:0f:8c:7a:44:a6:55:41:ff:9c:07: 3d:eb:fc:bb:91:76:9f:82:cc:63:c0:43:cc:4a:cd:d9:42:1d: 84:13:71:a2:fa:67:56:64:3e:58:c7:2a:29:f9:5b:f9:b6:47: 56:e1:a0:f4:55:04:9a:7d:11:c8:e7:73:db:ce:9c:62:de:0b: e5:fc:1b:41:55:6e:35:bb:71:a5:eb:52:e7:11:36:68:8a:ca: 2f:63:e4:3e:26:58:dc:6b:d2:bf:a4:eb:01:b5:04:14:ed:e2: 65:ee:45:4f:a6:f6:56:3a:45:60:13:21:c7:e6:f5:f7:ac:85: ad:25:a6:34:19:65:9d:22:90:3d:25:7f:3a:93:fe:f8:a8:4b: 99:35:7e:c9:36:37:92:f3:7a:4b:2f:bc:37:01:69:42:5e:cf: 26:9b:3c:05:29:e5:9f:e6:92:85:1d:c6:b9:42:fc:87:ed:31: 4a:c4:4d:e2:be:1e:a6:c2:16:25:15:ea:e5:d1:74:32:ff:7a: 9d:5f:a2:0d:0d:c6:7d:f9:f2:44:4c:11:6e:bb:98:56:09:65: a1:61:8e:72:20:88:11:00:e1:ef:1d:92:92:13:d2:37:a5:ac: 88:1c:a5:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWv4h1xb55mrhDSnDRaYe5eFTttgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJBNEREQkJFOTc0RTVDMkEyNUE5NTJCRjQ0MzExNDdG MUQxOTVCRDAeFw0yNTA2MjAxNzE0MjlaFw0yNTA2MjExOTQyMjlaMDMxMTAvBgNV BAMTKDg4MkU5ODQ0MjQ0RjZGRkYwNUQxQzIyRjk1MjQxRUUzNURENkZFQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkuQ2Xf0IfDJ65KEjIgxHAlnpi gIgKiIDHG9TvMLm+ucr9gowdZRRyBKSIRyjl6WNlvzFoSkZWjddP/8Lug13tIM/9 GbakiAkaJtsYBjWIMQCKei+vspshewQ4NKKdV4sMHFAFZapoEgE0se8K3x9yYusM HVwkEro7Gl784o1x38mHGup7wpstE7YHwRJWQQotxBGNcZoRHsBgfj3vhJxPl74l VLNP2j5VsllOT4Nq+BuIoszNGo9o/7nvYR4kcipYA2BHdJhi5zdnqLerT9XyjmBN NflAsrNxFe22n4RsnYFyTUzejLDuEuLdFAlByAbB5/XgAMPeV+Xmw45kDC3tAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUiC6YRCRPb/8F0cIvlSQe413W/rgwHwYDVR0j BBgwFoAUW6Tdu+l05cKiWpUr9EMRR/HRlb0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmlMVmNTWkpjdVgxYlRHZW5pWXY5Ulc0RTlhRWdCMUFOZzhUQXIxbW9W dEgvMC81QkE0RERCQkU5NzRFNUMyQTI1QTk1MkJGNDQzMTE0N0YxRDE5NUJELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVCQTREREJCRTk3NEU1QzJB MjVBOTUyQkY0NDMxMTQ3RjFEMTk1QkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmlMVmNTWkpjdVgxYlRHZW5pWXY5Ulc0RTlhRWdCMUFOZzhUQXIxbW9WdEgvMC81 QkE0RERCQkU5NzRFNUMyQTI1QTk1MkJGNDQzMTE0N0YxRDE5NUJELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHdgeTBDG+G4pP1+AED0b9Qm5CC35D7tZ2pMPjHpEplVB/5wHPev8u5F2n4LM Y8BDzErN2UIdhBNxovpnVmQ+WMcqKflb+bZHVuGg9FUEmn0RyOdz286cYt4L5fwb QVVuNbtxpetS5xE2aIrKL2PkPiZY3GvSv6TrAbUEFO3iZe5FT6b2VjpFYBMhx+b1 96yFrSWmNBllnSKQPSV/OpP++KhLmTV+yTY3kvN6Sy+8NwFpQl7PJps8BSnln+aS hR3GuUL8h+0xSsRN4r4epsIWJRXq5dF0Mv96nV+iDQ3GffnyREwRbruYVglloWGO ciCIEQDh7x2SkhPSN6WsiBylEA== -----END CERTIFICATE-----Generated at Fri Jun 20 21:12:42 2025 by rpki-client