$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft File: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft (raw, json) Hash identifier: jbNJilg0pETg4NOgAV8giV8zLjm4icyI+J3EOM8P4Aw= Subject key identifier: 46:64:AD:4B:84:26:10:32:CA:4E:D9:23:46:FB:AF:4F:A0:B0:A0:AF Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB Certificate issuer: /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Certificate serial: 59DE93B3F92099B23D085C803A54F1216B39A7E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft Manifest number: 020F Signing time: Sun 04 May 2025 02:36:50 +0000 Manifest this update: Sun 04 May 2025 02:31:50 +0000 Manifest next update: Mon 05 May 2025 03:47:50 +0000 Files and hashes: 1: 3230382e35322e3136322e302f32332d3234203d3e20323638363238.roa (hash: ltGU9TfadFSytyS3qZ3OpJbFMrYDtGE03CwrDtct9x0=) 2: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl (hash: WaedZrdhhZV2Af42edvdRXnSRTwyhB6UWqmSFpg5Agk=) 3: 323830343a353431383a3a2f33322d3438203d3e20323638363238.roa (hash: hHMhRh5DdSaR5fzUNnHJawbPKzBIyAZaoDmsUo8IWgk=) 4: 34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (hash: MFaOGmG3uk10MnFBlQJ/Pj6U7TcWeAadSbIdDIDPMAE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 04 May 2025 23:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:de:93:b3:f9:20:99:b2:3d:08:5c:80:3a:54:f1:21:6b:39:a7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB Validity Not Before: May 4 02:31:50 2025 GMT Not After : May 5 03:47:50 2025 GMT Subject: CN=4664AD4B84261032CA4ED92346FBAF4FA0B0A0AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2d:f9:2f:ed:21:96:48:3d:f6:bc:7d:9a:3f: cf:47:e4:56:db:6b:7c:b7:a4:70:42:d9:38:13:b9: fe:de:3e:ad:d5:a6:34:6e:87:cb:63:a8:ed:c3:08: 48:9f:90:fa:f5:0f:c1:ff:21:bc:a3:31:d3:00:c6: b0:e6:60:7f:0f:23:58:a3:06:59:72:ce:62:dc:73: 42:f3:0a:77:df:de:b2:32:b4:10:af:a5:c5:68:49: 0d:26:c8:41:13:8e:86:29:be:e9:b4:58:d8:f8:d7: 0a:92:5d:5b:86:7d:31:2b:1f:69:2e:ec:9d:c0:74: 7b:e2:ac:69:f8:9c:ae:2d:96:59:0d:fd:18:03:37: 11:d1:3e:e0:57:ed:8d:42:49:90:5e:13:16:75:f3: d2:b6:bb:39:05:bb:d7:c0:81:76:fc:b9:0b:f3:9f: 76:97:e4:93:6b:97:70:65:47:84:8d:87:ff:fa:6d: 80:29:58:84:f4:a4:6b:fc:b5:43:92:f8:6f:9a:47: 8e:71:9e:93:c2:e5:bb:59:63:9e:f3:a8:8b:5d:43: cc:94:c1:68:3a:bf:7c:65:99:4d:cc:e3:dc:31:a6: 7a:f3:9e:e6:b2:a8:5b:39:8a:74:b5:2d:60:86:1f: d8:02:6b:90:24:1d:2b:79:44:83:7c:1e:0d:eb:60: 77:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:64:AD:4B:84:26:10:32:CA:4E:D9:23:46:FB:AF:4F:A0:B0:A0:AF X509v3 Authority Key Identifier: keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:19:a1:ce:2f:06:d1:e5:83:f2:9b:ca:60:0b:81:40:f3:a4: 2a:f0:de:2c:64:ac:42:6b:55:67:ee:24:96:10:d4:e2:45:b5: 19:a6:ae:6c:a6:c0:f8:01:71:0f:19:7a:99:da:1c:34:84:b6: 45:8d:9c:bf:c9:df:ed:b3:55:61:51:1e:43:c3:22:4e:7b:80: 5d:ca:49:df:31:40:a1:d7:fe:49:b9:7a:1b:38:5d:21:96:0b: 5f:2b:45:3b:81:99:04:64:eb:97:82:70:5f:07:ea:ee:7b:b8: f5:f9:da:3e:0b:88:85:9e:0c:54:5b:39:09:e7:f6:f6:f7:bb: 32:c0:80:44:eb:00:ce:48:62:bc:7c:a4:89:45:4a:58:d8:d2: bd:ac:ed:b4:77:32:c7:da:99:4b:70:e5:ea:6c:89:7c:a7:30: ab:34:24:a4:eb:65:0e:fd:ff:d6:9a:6f:0d:3f:4d:de:2d:38: 49:70:70:b8:0b:09:ba:d8:be:d2:f2:da:19:b0:71:1a:e2:ba: d1:01:dd:10:e9:8d:0b:98:eb:9f:52:af:9a:2a:26:d5:63:7b: 14:91:6c:22:59:84:f7:02:bd:9b:97:90:2d:24:f9:1f:6e:57: 24:11:ec:1e:f1:23:a0:fc:42:94:80:53:93:fd:0e:a3:d9:fa: 8d:48:3b:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWd6Ts/kgmbI9CFyAOlTxIWs5p+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzU5NEU5MzZFMUUyOEFENUFENzNBNkJGMjhBRTM4 QzAwMjhGQjAeFw0yNTA1MDQwMjMxNTBaFw0yNTA1MDUwMzQ3NTBaMDMxMTAvBgNV BAMTKDQ2NjRBRDRCODQyNjEwMzJDQTRFRDkyMzQ2RkJBRjRGQTBCMEEwQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmLfkv7SGWSD32vH2aP89H5Fbb a3y3pHBC2TgTuf7ePq3VpjRuh8tjqO3DCEifkPr1D8H/IbyjMdMAxrDmYH8PI1ij BllyzmLcc0LzCnff3rIytBCvpcVoSQ0myEETjoYpvum0WNj41wqSXVuGfTErH2ku 7J3AdHvirGn4nK4tllkN/RgDNxHRPuBX7Y1CSZBeExZ189K2uzkFu9fAgXb8uQvz n3aX5JNrl3BlR4SNh//6bYApWIT0pGv8tUOS+G+aR45xnpPC5btZY57zqItdQ8yU wWg6v3xlmU3M49wxpnrznuayqFs5inS1LWCGH9gCa5AkHSt5RIN8Hg3rYHe3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURmStS4QmEDLKTtkjRvuvT6CwoK8wHwYDVR0j BBgwFoAULJxZTpNuHiitWtc6a/KK44wAKPswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpy aEEvMS8yQzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDOUM1OTRFOTM2RTFFMjhB RDVBRDczQTZCRjI4QUUzOEMwMDI4RkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0JGYkRCRWdadVRnY1k5NmFvQzNNZGlkN0JFOHJqamlwZ3luTDNpbXpyaEEvMS8y QzlDNTk0RTkzNkUxRTI4QUQ1QUQ3M0E2QkYyOEFFMzhDMDAyOEZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZRmhzi8G0eWD8pvKYAuBQPOkKvDeLGSsQmtVZ+4klhDU4kW1GaaubKbA+AFx Dxl6mdocNIS2RY2cv8nf7bNVYVEeQ8MiTnuAXcpJ3zFAodf+Sbl6GzhdIZYLXytF O4GZBGTrl4JwXwfq7nu49fnaPguIhZ4MVFs5Cef29ve7MsCAROsAzkhivHykiUVK WNjSvazttHcyx9qZS3Dl6myJfKcwqzQkpOtlDv3/1ppvDT9N3i04SXBwuAsJuti+ 0vLaGbBxGuK60QHdEOmNC5jrn1Kvmiom1WN7FJFsIlmE9wK9m5eQLST5H25XJBHs HvEjoPxClIBTk/0Oo9n6jUg77g== -----END CERTIFICATE-----Generated at Sun May 4 11:26:41 2025 by rpki-client