$ rpki-client -vvf rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10.mft File: 7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10.mft (raw, json) Hash identifier: cmH+JwbPGN3kCyp2tjR74+nOGvVPrNhSrkTxGkhTna8= Subject key identifier: BE:12:D3:73:5B:BB:66:75:20:70:D6:8C:77:39:B6:7F:FE:F3:95:FF Authority key identifier: 7C:F1:1E:9A:95:C2:2F:03:48:D9:4E:FA:1A:4E:95:5D:DE:4E:6D:10 Certificate issuer: /CN=7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10 Certificate serial: 68D886A977A07E31DB18BE4BBBD02848C3D468C2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10.cer Subject info access: rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10.mft Manifest number: 7F Signing time: Fri 20 Jun 2025 11:12:13 +0000 Manifest this update: Fri 20 Jun 2025 11:07:13 +0000 Manifest next update: Sat 21 Jun 2025 14:27:13 +0000 Files and hashes: 1: 7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10.crl (hash: HrnQi4oUQJ1ioNrAX4XLo27AV5/YzECA/65TK/nQyaI=) 2: 323830343a326232383a3a2f33322d313238203d3e20323635313338.roa (hash: rnuP3p5qhA+gMdRSTGLPv5BxgDpABJTSDCMdZ7MpVZQ=) 3: 3134332e3230382e37322e302f32322d3332203d3e20323635313338.roa (hash: 9ngxl1jgeo859D5p35EfHcS1QKyliEX0oBHo4NBKZGI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10.crl rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 14:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d8:86:a9:77:a0:7e:31:db:18:be:4b:bb:d0:28:48:c3:d4:68:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10 Validity Not Before: Jun 20 11:07:13 2025 GMT Not After : Jun 21 14:27:13 2025 GMT Subject: CN=BE12D3735BBB66752070D68C7739B67FFEF395FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a9:bc:8c:33:a4:64:4b:a9:48:4c:a8:ee:f4: 90:0c:41:b1:4b:da:84:5d:fc:e0:d8:6a:f2:9e:1a: d5:e7:55:49:3f:92:e0:d7:0b:a7:09:35:18:8f:ae: 15:af:d4:fb:1c:90:53:21:fa:ef:80:c9:39:7a:71: 1a:3c:db:bc:33:71:06:32:d8:e8:8f:ee:de:82:4e: be:77:6a:05:38:09:49:8e:3b:71:09:cb:23:2e:cd: 3e:0e:41:da:b8:d9:bc:78:9a:08:ad:24:0c:68:bf: 38:31:88:0d:1b:15:f3:43:8a:fb:f2:2b:f7:0a:52: e9:a8:26:12:bc:84:a0:1f:cd:92:5a:23:1e:a6:3e: f5:25:e5:57:51:e5:45:bc:4b:c9:6c:1a:58:a2:4c: ab:bb:cb:be:e3:a2:33:a4:0d:bf:5a:67:63:df:f0: 31:0b:6c:8a:cf:91:19:ca:0c:0b:9f:df:c8:5b:05: fb:ab:7f:06:c2:51:e7:ac:3d:82:b9:fd:a3:7b:11: 67:6c:ae:24:35:5b:9c:87:02:43:07:42:fc:dc:2f: 5d:4f:de:74:a2:5c:6e:49:08:1e:5b:5a:c6:77:a7: 0c:71:96:48:3e:1d:81:8a:13:af:51:c7:2d:cb:1c: 54:c7:db:b2:ed:92:69:19:48:ae:40:af:4b:ce:f5: 48:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:12:D3:73:5B:BB:66:75:20:70:D6:8C:77:39:B6:7F:FE:F3:95:FF X509v3 Authority Key Identifier: keyid:7C:F1:1E:9A:95:C2:2F:03:48:D9:4E:FA:1A:4E:95:5D:DE:4E:6D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f9:3d:93:b7:2d:de:1d:a7:15:cc:5e:00:11:40:62:80:28: b7:a8:68:99:e7:6a:d3:98:b8:1f:2d:e4:b6:2f:fa:5f:87:91: 83:e9:50:3f:1c:62:43:24:84:a7:60:d5:f6:45:4c:da:d8:7e: 30:bc:f7:d3:37:62:38:81:41:d1:3c:ee:92:be:5b:fb:63:26: 93:f3:95:c9:62:8f:68:2d:1e:a8:da:ce:6d:4c:1f:b7:4c:8b: 45:4d:47:f8:e6:0f:90:60:03:cb:a9:c5:95:3a:66:e3:ce:17: f2:01:a0:14:fe:02:d5:54:b5:44:4c:25:fb:13:a1:74:aa:54: 7f:bd:c1:5a:b5:21:24:76:42:a5:1d:42:cf:a4:59:89:cc:e6: cd:98:23:d3:3a:5a:88:c4:65:b9:a0:70:e7:b4:50:ba:48:3a: e6:41:93:fd:19:ad:df:22:07:c3:f0:8e:8b:04:60:4e:8c:d4: 20:97:70:ce:77:23:6a:98:4d:7d:2f:32:e4:df:af:30:ed:c4: 48:6e:d3:5c:4f:36:f7:fc:0f:a7:85:26:45:18:e3:58:0c:91: 02:2b:cd:11:a3:17:7c:5b:3e:32:4b:2b:6a:59:61:a5:a2:e8: 14:ba:d1:a4:41:52:99:ba:97:8b:f7:02:7a:74:af:ce:9c:c0: 9a:57:12:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaNiGqXegfjHbGL5Lu9AoSMPUaMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGMTFFOUE5NUMyMkYwMzQ4RDk0RUZBMUE0RTk1NURE RTRFNkQxMDAeFw0yNTA2MjAxMTA3MTNaFw0yNTA2MjExNDI3MTNaMDMxMTAvBgNV BAMTKEJFMTJEMzczNUJCQjY2NzUyMDcwRDY4Qzc3MzlCNjdGRkVGMzk1RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqqbyMM6RkS6lITKju9JAMQbFL 2oRd/ODYavKeGtXnVUk/kuDXC6cJNRiPrhWv1PsckFMh+u+AyTl6cRo827wzcQYy 2OiP7t6CTr53agU4CUmOO3EJyyMuzT4OQdq42bx4mgitJAxovzgxiA0bFfNDivvy K/cKUumoJhK8hKAfzZJaIx6mPvUl5VdR5UW8S8lsGliiTKu7y77jojOkDb9aZ2Pf 8DELbIrPkRnKDAuf38hbBfurfwbCUeesPYK5/aN7EWdsriQ1W5yHAkMHQvzcL11P 3nSiXG5JCB5bWsZ3pwxxlkg+HYGKE69Rxy3LHFTH27LtkmkZSK5Ar0vO9Ui/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvhLTc1u7ZnUgcNaMdzm2f/7zlf8wHwYDVR0j BBgwFoAUfPEempXCLwNI2U76Gk6VXd5ObRAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmtRMW5kcWN6QnlvWGhXcjJ2dlduZnp4TXV5QVp3cFJlaDZSY1VlTU12 ZUEvMC83Q0YxMUU5QTk1QzIyRjAzNDhEOTRFRkExQTRFOTU1RERFNEU2RDEwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDRjExRTlBOTVDMjJGMDM0 OEQ5NEVGQTFBNEU5NTVEREU0RTZEMTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmtRMW5kcWN6QnlvWGhXcjJ2dlduZnp4TXV5QVp3cFJlaDZSY1VlTU12ZUEvMC83 Q0YxMUU5QTk1QzIyRjAzNDhEOTRFRkExQTRFOTU1RERFNEU2RDEwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADvk9k7ct3h2nFcxeABFAYoAot6homedq05i4Hy3kti/6X4eRg+lQPxxiQySE p2DV9kVM2th+MLz30zdiOIFB0Tzukr5b+2Mmk/OVyWKPaC0eqNrObUwft0yLRU1H +OYPkGADy6nFlTpm484X8gGgFP4C1VS1REwl+xOhdKpUf73BWrUhJHZCpR1Cz6RZ iczmzZgj0zpaiMRluaBw57RQukg65kGT/Rmt3yIHw/COiwRgTozUIJdwzncjaphN fS8y5N+vMO3ESG7TXE829/wPp4UmRRjjWAyRAivNEaMXfFs+MksrallhpaLoFLrR pEFSmbqXi/cCenSvzpzAmlcS5w== -----END CERTIFICATE-----Generated at Sat Jun 21 01:40:01 2025 by rpki-client