$ rpki-client -vvf rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/D6BFBE91A9C1216A37227717AD547135C4C3280E.mft File: D6BFBE91A9C1216A37227717AD547135C4C3280E.mft (raw, json) Hash identifier: Xvk+lRpwLLCdqvLrLW1myKFkhdjwRi5we90eNx4BOXg= Subject key identifier: 66:25:2D:8A:79:A5:E0:B2:25:05:74:A7:9E:06:47:F0:1A:A9:86:E3 Authority key identifier: D6:BF:BE:91:A9:C1:21:6A:37:22:77:17:AD:54:71:35:C4:C3:28:0E Certificate issuer: /CN=D6BFBE91A9C1216A37227717AD547135C4C3280E Certificate serial: 4665D70FDEDBF0D7B4A5EDA606BEC5F8A969E4B9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BFBE91A9C1216A37227717AD547135C4C3280E.cer Subject info access: rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/D6BFBE91A9C1216A37227717AD547135C4C3280E.mft Manifest number: 0241 Signing time: Mon 16 Jun 2025 14:34:25 +0000 Manifest this update: Mon 16 Jun 2025 14:29:25 +0000 Manifest next update: Tue 17 Jun 2025 18:15:25 +0000 Files and hashes: 1: 3230302e32342e3130382e302f32322d3234203d3e20323731363131.roa (hash: Zle1pT4AI/XVURn0M0QQ7EmdpqBSZzF1l7ayhaMZBiQ=) 2: D6BFBE91A9C1216A37227717AD547135C4C3280E.crl (hash: LDGu1xrBeVTtdQei7z7GTPjBbx+i17lyEtdDXk1tohU=) 3: 323830343a376533633a3a2f33322d3438203d3e20323731363131.roa (hash: FnnUt51cnbcVEDy6mGOqLg8e7zpE7bJ7/P2AG1WsOA4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/D6BFBE91A9C1216A37227717AD547135C4C3280E.crl rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/D6BFBE91A9C1216A37227717AD547135C4C3280E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BFBE91A9C1216A37227717AD547135C4C3280E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 18:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:65:d7:0f:de:db:f0:d7:b4:a5:ed:a6:06:be:c5:f8:a9:69:e4:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6BFBE91A9C1216A37227717AD547135C4C3280E Validity Not Before: Jun 16 14:29:25 2025 GMT Not After : Jun 17 18:15:25 2025 GMT Subject: CN=66252D8A79A5E0B2250574A79E0647F01AA986E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fa:7c:42:3b:53:25:87:13:c5:ef:f0:f9:03: f5:77:82:0c:95:1e:33:a9:93:7f:f1:08:0f:29:fc: ee:e8:4f:c1:e9:ef:e1:a3:01:df:ce:88:f4:b0:33: 68:31:d8:b1:60:df:d6:45:78:35:1d:0b:3a:d4:c8: ce:1b:21:da:33:cb:8d:aa:48:e2:a7:00:94:39:58: 9a:47:38:0d:d0:ff:e4:30:27:d0:ce:d6:c0:f8:bb: 9c:af:90:be:61:23:ab:3e:15:f7:ca:1b:5d:79:7f: 18:82:7f:83:bb:45:ba:29:8b:f4:cc:05:96:07:3f: e4:64:f5:72:51:2a:75:f1:b3:83:37:78:1b:48:f7: 1a:b1:76:0a:12:8f:3d:65:1c:a0:49:25:fc:6f:49: 60:4b:35:4b:81:f8:f4:04:1c:ae:49:3b:6f:96:ad: 63:c0:e6:63:8b:8e:77:ae:7f:de:b6:fd:93:7e:c5: 73:86:61:8e:a0:2f:e5:75:e1:6e:2a:60:09:ca:d7: 2c:b6:b5:fc:6d:d8:a9:69:b9:9e:a1:73:4b:82:7b: 17:71:25:82:8a:5e:15:5d:80:9f:93:95:13:cf:14: 5c:35:d9:16:a9:7b:0e:ec:32:a6:9d:6e:2b:d1:31: 84:ed:a5:65:de:06:96:8d:0d:f0:d8:e6:a6:65:75: 49:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:25:2D:8A:79:A5:E0:B2:25:05:74:A7:9E:06:47:F0:1A:A9:86:E3 X509v3 Authority Key Identifier: keyid:D6:BF:BE:91:A9:C1:21:6A:37:22:77:17:AD:54:71:35:C4:C3:28:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/D6BFBE91A9C1216A37227717AD547135C4C3280E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BFBE91A9C1216A37227717AD547135C4C3280E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/D6BFBE91A9C1216A37227717AD547135C4C3280E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d4:01:f4:27:22:4c:76:b2:56:33:87:eb:e3:ef:6f:70:48: 4d:c9:f7:69:b0:8a:2e:6d:f3:79:b3:e1:df:19:3f:1d:cf:32: 31:aa:c1:82:f0:3c:3f:92:0e:5e:23:25:bd:1f:38:de:7f:b4: 7a:3a:88:dc:64:9c:77:a7:0b:91:88:4e:0c:db:5c:0a:00:3a: 86:08:8c:cc:e5:51:fe:e3:75:aa:1c:12:c6:89:94:59:14:64: 5e:55:16:14:dc:16:7a:1b:47:31:13:11:da:23:c2:5a:da:41: 3c:ec:9f:ce:49:6a:2b:7b:16:c3:e5:57:a8:a5:0e:7d:57:64: 55:4b:8a:01:bd:46:f7:09:1f:8c:1a:53:5b:30:84:64:04:e1: dd:a0:cd:b8:3c:8f:56:57:97:5a:54:49:8a:da:70:90:06:42: bc:d2:7c:88:d3:8e:06:95:1a:c9:e2:7d:f1:16:c0:6b:91:ce: 74:f7:60:70:5f:06:e5:01:6b:12:c6:39:ed:37:d2:45:32:8c: af:11:5e:da:04:1b:32:c6:37:90:6f:51:b8:6b:03:e8:e7:85: 8e:b5:4d:e4:95:cc:8c:1b:39:7a:db:06:b6:12:3f:17:4f:3d: a3:9c:63:cf:39:e4:78:a3:08:82:f2:e6:08:5b:2d:00:cd:8c: 0b:95:ea:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURmXXD97b8Ne0pe2mBr7F+Klp5LkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZCRkJFOTFBOUMxMjE2QTM3MjI3NzE3QUQ1NDcxMzVD NEMzMjgwRTAeFw0yNTA2MTYxNDI5MjVaFw0yNTA2MTcxODE1MjVaMDMxMTAvBgNV BAMTKDY2MjUyRDhBNzlBNUUwQjIyNTA1NzRBNzlFMDY0N0YwMUFBOTg2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+nxCO1MlhxPF7/D5A/V3ggyV HjOpk3/xCA8p/O7oT8Hp7+GjAd/OiPSwM2gx2LFg39ZFeDUdCzrUyM4bIdozy42q SOKnAJQ5WJpHOA3Q/+QwJ9DO1sD4u5yvkL5hI6s+FffKG115fxiCf4O7Rbopi/TM BZYHP+Rk9XJRKnXxs4M3eBtI9xqxdgoSjz1lHKBJJfxvSWBLNUuB+PQEHK5JO2+W rWPA5mOLjneuf962/ZN+xXOGYY6gL+V14W4qYAnK1yy2tfxt2KlpuZ6hc0uCexdx JYKKXhVdgJ+TlRPPFFw12Rapew7sMqadbivRMYTtpWXeBpaNDfDY5qZldUnTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZiUtinml4LIlBXSnngZH8BqphuMwHwYDVR0j BBgwFoAU1r++kanBIWo3IncXrVRxNcTDKA4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMm9ZdU5HVkMzblF3VGFSRVVBeHVRa2poTWtzU1NiVHVzcmI0QzVlallN SlQvMC9ENkJGQkU5MUE5QzEyMTZBMzcyMjc3MTdBRDU0NzEzNUM0QzMyODBFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2QkZCRTkxQTlDMTIxNkEz NzIyNzcxN0FENTQ3MTM1QzRDMzI4MEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mm9ZdU5HVkMzblF3VGFSRVVBeHVRa2poTWtzU1NiVHVzcmI0QzVlallNSlQvMC9E NkJGQkU5MUE5QzEyMTZBMzcyMjc3MTdBRDU0NzEzNUM0QzMyODBFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf9QB9CciTHayVjOH6+Pvb3BITcn3abCKLm3zebPh3xk/Hc8yMarBgvA8P5IO XiMlvR843n+0ejqI3GScd6cLkYhODNtcCgA6hgiMzOVR/uN1qhwSxomUWRRkXlUW FNwWehtHMRMR2iPCWtpBPOyfzklqK3sWw+VXqKUOfVdkVUuKAb1G9wkfjBpTWzCE ZATh3aDNuDyPVleXWlRJitpwkAZCvNJ8iNOOBpUayeJ98RbAa5HOdPdgcF8G5QFr EsY57TfSRTKMrxFe2gQbMsY3kG9RuGsD6OeFjrVN5JXMjBs5etsGthI/F089o5xj zznkeKMIgvLmCFstAM2MC5XqTg== -----END CERTIFICATE-----Generated at Tue Jun 17 11:14:25 2025 by rpki-client