$ rpki-client -vvf rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft File: D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft (raw, json) Hash identifier: cFOFRR0QvrT86E4/fvTkjqtQb57T9F5V7k3DEpl+THU= Subject key identifier: 41:40:86:60:BA:D5:4C:64:6A:CD:0D:7B:CE:56:32:EF:8A:42:6A:71 Authority key identifier: D3:58:BF:DB:4B:AD:3C:B3:8A:CD:A8:FA:C9:19:A1:A2:4D:ED:EB:5C Certificate issuer: /CN=D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C Certificate serial: 27C47D47EE85C2AA514BCF22403CFAEDA43A38B5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.cer Subject info access: rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft Manifest number: 0246 Signing time: Sun 15 Jun 2025 20:09:34 +0000 Manifest this update: Sun 15 Jun 2025 20:04:34 +0000 Manifest next update: Mon 16 Jun 2025 20:29:34 +0000 Files and hashes: 1: 323830343a333364383a3a2f33322d3332203d3e20323635343230.roa (hash: vEbluKO9WO7Wr/ZFti8PZzzfOsObTPM3B1b8gS1XEcE=) 2: D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.crl (hash: FR1gkAWc/km19mkV4lirwkprhvVkXRmxEsQ45NQHZXo=) 3: 3136382e3139352e34382e302f32322d3234203d3e20323635343230.roa (hash: /1UosB7p/H0IpPArGzy1kLCzKmsTI1n2rZyqgUtb7C8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.crl rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 20:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c4:7d:47:ee:85:c2:aa:51:4b:cf:22:40:3c:fa:ed:a4:3a:38:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C Validity Not Before: Jun 15 20:04:34 2025 GMT Not After : Jun 16 20:29:34 2025 GMT Subject: CN=41408660BAD54C646ACD0D7BCE5632EF8A426A71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:87:17:2d:17:f5:a3:51:92:30:0d:93:a0:14: 94:ec:90:ca:cd:92:c7:83:b1:1c:4d:05:16:cc:3f: 8c:c9:80:d4:ea:ba:bb:9a:18:2f:56:9e:88:08:cb: d4:3c:6e:e6:45:4d:c0:30:0d:8b:ed:a3:49:6b:57: 6b:ab:bd:fa:68:cd:7a:c1:ac:02:f3:00:0b:92:92: 4b:8c:42:43:22:ab:df:cc:b0:28:86:de:d5:21:28: 2b:e9:b5:b3:e5:ac:49:a1:7e:65:8c:3c:59:3f:b0: b9:e4:d3:fa:50:a6:94:5f:f1:d2:b6:9e:bc:d3:f9: b7:4f:77:f5:b0:19:d3:e5:74:71:16:94:3b:b2:f4: 06:08:c3:02:af:29:aa:9c:a2:66:72:81:94:f6:50: f6:77:ee:89:af:ae:95:22:a2:64:1e:6e:09:ba:a5: b1:61:60:a5:73:c1:ab:82:f9:22:0e:b7:ed:d4:eb: 90:d9:ed:5f:d3:a8:6f:e4:ec:2b:a1:16:1e:18:51: 8c:02:eb:15:d0:39:35:8e:90:ad:6a:d2:64:5b:ca: b0:15:6e:cf:21:10:65:22:34:71:c0:a0:a8:85:3c: 74:d7:e1:56:a8:71:7c:41:51:1a:5c:0e:ca:d0:80: 6f:62:b5:ae:30:61:26:07:6d:a6:da:4b:36:76:0e: ab:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:40:86:60:BA:D5:4C:64:6A:CD:0D:7B:CE:56:32:EF:8A:42:6A:71 X509v3 Authority Key Identifier: keyid:D3:58:BF:DB:4B:AD:3C:B3:8A:CD:A8:FA:C9:19:A1:A2:4D:ED:EB:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NsK3febSV4wLMZjWNcWSRKy6PVCe5SAHBXjNjJMDhi2/1/D358BFDB4BAD3CB38ACDA8FAC919A1A24DEDEB5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:72:33:9c:87:46:27:a5:d1:56:2c:3d:59:14:ae:51:8a:6e: a7:62:c9:14:ac:c1:79:ca:45:c9:c6:c3:ce:a7:f2:9a:0b:d4: 8e:31:55:52:46:b1:f4:f0:d2:1b:6d:25:ea:1c:e2:7a:2f:81: 9a:62:c0:cb:5d:c2:f8:de:82:5e:94:3f:cc:e3:43:4d:b4:12: 55:b7:6c:af:9b:91:28:c1:a1:bc:ee:3e:fe:3f:c0:c0:02:da: a2:c8:11:bf:9f:a0:1b:d9:ee:dd:af:bc:66:06:00:d1:5c:07: c0:73:05:50:60:31:68:35:b9:0c:9d:b8:a1:6c:c8:75:6a:cc: 11:a0:f9:bb:f0:84:c6:82:67:ab:b2:48:9d:13:c4:9d:f3:6b: 5f:f2:20:cd:83:9a:aa:38:09:a3:42:9c:06:2d:42:de:3b:4d: 6f:dc:69:64:67:60:c7:c2:57:41:f7:e7:7b:70:fc:ed:d4:c7: fc:8a:b6:a2:ae:df:4d:6b:fa:99:69:a8:7a:fb:92:a4:ac:51: e3:3a:93:5e:c2:af:d4:c3:4d:d3:88:9b:41:b0:6b:ec:79:48: 70:97:01:1c:be:8e:b6:02:1d:a6:f2:9e:9b:f8:ba:9b:47:f2: b9:c5:2e:57:ad:1f:bf:8d:86:b3:a5:70:99:d6:82:81:01:dd: d4:1a:02:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJ8R9R+6FwqpRS88iQDz67aQ6OLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM1OEJGREI0QkFEM0NCMzhBQ0RBOEZBQzkxOUExQTI0 REVERUI1QzAeFw0yNTA2MTUyMDA0MzRaFw0yNTA2MTYyMDI5MzRaMDMxMTAvBgNV BAMTKDQxNDA4NjYwQkFENTRDNjQ2QUNEMEQ3QkNFNTYzMkVGOEE0MjZBNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hxctF/WjUZIwDZOgFJTskMrN kseDsRxNBRbMP4zJgNTquruaGC9WnogIy9Q8buZFTcAwDYvto0lrV2urvfpozXrB rALzAAuSkkuMQkMiq9/MsCiG3tUhKCvptbPlrEmhfmWMPFk/sLnk0/pQppRf8dK2 nrzT+bdPd/WwGdPldHEWlDuy9AYIwwKvKaqcomZygZT2UPZ37omvrpUiomQebgm6 pbFhYKVzwauC+SIOt+3U65DZ7V/TqG/k7CuhFh4YUYwC6xXQOTWOkK1q0mRbyrAV bs8hEGUiNHHAoKiFPHTX4VaocXxBURpcDsrQgG9ita4wYSYHbabaSzZ2DquJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQUCGYLrVTGRqzQ17zlYy74pCanEwHwYDVR0j BBgwFoAU01i/20utPLOKzaj6yRmhok3t61wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM05zSzNmZWJTVjR3TE1aaldOY1dTUkt5NlBWQ2U1U0FIQlhqTmpKTURo aTIvMS9EMzU4QkZEQjRCQUQzQ0IzOEFDREE4RkFDOTE5QTFBMjRERURFQjVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNThCRkRCNEJBRDNDQjM4 QUNEQThGQUM5MTlBMUEyNERFREVCNUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M05zSzNmZWJTVjR3TE1aaldOY1dTUkt5NlBWQ2U1U0FIQlhqTmpKTURoaTIvMS9E MzU4QkZEQjRCQUQzQ0IzOEFDREE4RkFDOTE5QTFBMjRERURFQjVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEnIznIdGJ6XRViw9WRSuUYpup2LJFKzBecpFycbDzqfymgvUjjFVUkax9PDS G20l6hziei+BmmLAy13C+N6CXpQ/zONDTbQSVbdsr5uRKMGhvO4+/j/AwALaosgR v5+gG9nu3a+8ZgYA0VwHwHMFUGAxaDW5DJ24oWzIdWrMEaD5u/CExoJnq7JInRPE nfNrX/IgzYOaqjgJo0KcBi1C3jtNb9xpZGdgx8JXQffne3D87dTH/Iq2oq7fTWv6 mWmoevuSpKxR4zqTXsKv1MNN04ibQbBr7HlIcJcBHL6OtgIdpvKem/i6m0fyucUu V60fv42Gs6VwmdaCgQHd1BoC8w== -----END CERTIFICATE-----Generated at Mon Jun 16 10:50:24 2025 by rpki-client