$ rpki-client -vvf rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft File: 5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft (raw, json) Hash identifier: bFwCuGGG8jjs9eg/zoxCSgw2yher0+t/dCBEd1oqEWU= Subject key identifier: 83:D8:92:CC:16:64:E5:C8:A7:0E:09:E0:2C:5C:46:02:62:03:32:0C Authority key identifier: 5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9 Certificate issuer: /CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9 Certificate serial: 2F5A8B21378C3EA580AD264A274D0C95ABB72528 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer Subject info access: rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft Manifest number: 024D Signing time: Tue 17 Jun 2025 05:07:33 +0000 Manifest this update: Tue 17 Jun 2025 05:02:33 +0000 Manifest next update: Wed 18 Jun 2025 08:23:33 +0000 Files and hashes: 1: 3137372e38362e3131362e302f32322d3234203d3e203532353730.roa (hash: OGh0oSMiAuqwOXO84p0Xsd8bUAebLrAgyXg0x2c44tg=) 2: 5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl (hash: nVlIPB8Oy+fsOFmHXBEYKFG4dMznEajQOdaKeH9q3yI=) 3: 3137392e39362e3230302e302f32312d3234203d3e203532353730.roa (hash: ThFay1lLsaEu2jVa7XfNcUJbNcEHJjS8TO7JyZdIDyo=) 4: 323830343a313536343a3a2f33322d3336203d3e203532353730.roa (hash: FC1Wd69RrJidzRZVv4UIal/AXyu4NEituILPDllcaNg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 08:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5a:8b:21:37:8c:3e:a5:80:ad:26:4a:27:4d:0c:95:ab:b7:25:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9 Validity Not Before: Jun 17 05:02:33 2025 GMT Not After : Jun 18 08:23:33 2025 GMT Subject: CN=83D892CC1664E5C8A70E09E02C5C46026203320C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:ba:1c:42:cb:ab:98:29:92:a8:14:15:28: 6a:64:20:cf:19:a4:d5:92:82:30:e0:a0:a3:b2:69: e6:de:e5:8c:13:29:4d:ea:86:e5:d8:8f:80:62:be: 31:ea:c1:56:f8:44:4d:41:32:ad:a8:18:3e:5a:4b: f0:2a:7b:9a:4b:9a:c8:43:e1:12:19:8f:e5:dd:9c: 13:ff:c4:c5:43:6e:11:c1:64:78:25:3d:bf:7e:6c: dc:c7:4f:e4:6f:6b:6d:5f:b6:de:91:e0:e5:52:91: 6c:b7:48:0b:e3:4e:c1:bf:21:6c:a8:b9:49:4c:6c: b6:3c:65:c5:34:13:75:52:69:ff:9c:57:b7:dd:55: c9:81:11:12:f3:aa:e4:8b:2d:af:6c:0a:a6:8b:05: 63:e2:89:d7:b7:cf:90:36:80:5c:5c:b7:0e:cd:22: ed:67:be:01:2d:fb:99:e6:2a:97:43:c0:9c:ab:df: 1e:16:0e:0b:ba:47:ea:48:96:96:ff:c3:ae:2f:24: 0b:44:e5:37:87:b2:be:87:d3:6e:f7:0e:24:72:40: 1c:1f:a9:bc:5e:e7:56:a0:68:0c:c9:08:63:6d:25: d4:8c:64:93:48:69:09:be:4c:0b:90:c4:d4:20:aa: 51:32:35:53:dd:5f:94:4d:9e:6a:e9:42:d9:a1:2a: 1d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D8:92:CC:16:64:E5:C8:A7:0E:09:E0:2C:5C:46:02:62:03:32:0C X509v3 Authority Key Identifier: keyid:5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:0f:11:3b:62:90:8d:ba:9b:74:72:55:f6:8d:be:3e:cd:93: c1:de:a8:28:c4:5c:f9:db:cf:4b:1a:e0:74:5a:33:f4:26:3a: 60:87:07:01:c2:e1:76:7c:8a:36:15:8e:20:3e:e8:92:2c:29: 19:cb:92:55:f1:80:ca:24:65:65:1c:be:b4:3a:79:3c:59:56: db:6f:a9:f4:3b:b9:73:e6:02:49:5c:32:e7:51:84:35:bf:91: 72:03:d8:0e:78:74:00:78:cf:20:ea:9f:8e:a1:44:93:80:9b: fd:ff:cf:c8:f4:4e:93:97:f2:75:f9:50:92:54:2a:7a:78:e7: cb:3f:ba:22:a9:96:d9:63:69:0e:8f:f2:1d:a3:91:14:ef:dc: ae:43:71:49:d3:b9:7c:84:87:a1:97:13:ab:d7:42:94:55:e5: c7:b0:4f:0d:de:d9:5a:5b:7d:c5:5a:39:34:35:a2:53:9d:09: f3:56:5f:a2:8b:0b:04:1e:ae:28:77:7f:e1:22:43:43:d8:1c: 22:28:7e:6e:cb:2f:cd:69:36:83:42:95:34:09:99:e5:a3:90: 95:b6:15:1b:b6:a1:8a:10:47:0e:57:30:bb:d7:20:97:46:44: 35:ba:d6:0d:ec:01:09:85:5e:1a:34:27:2c:19:5e:5f:dd:ec: 3a:95:05:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUL1qLITeMPqWArSZKJ00Mlau3JSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNURDMjJDOUYzOEU0QjNBNUZGQUNDNzY4OUM2RUI1 MkE2NURCOTAeFw0yNTA2MTcwNTAyMzNaFw0yNTA2MTgwODIzMzNaMDMxMTAvBgNV BAMTKDgzRDg5MkNDMTY2NEU1QzhBNzBFMDlFMDJDNUM0NjAyNjIwMzMyMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIT7ocQsurmCmSqBQVKGpkIM8Z pNWSgjDgoKOyaebe5YwTKU3qhuXYj4BivjHqwVb4RE1BMq2oGD5aS/Aqe5pLmshD 4RIZj+XdnBP/xMVDbhHBZHglPb9+bNzHT+Rva21ftt6R4OVSkWy3SAvjTsG/IWyo uUlMbLY8ZcU0E3VSaf+cV7fdVcmBERLzquSLLa9sCqaLBWPiide3z5A2gFxctw7N Iu1nvgEt+5nmKpdDwJyr3x4WDgu6R+pIlpb/w64vJAtE5TeHsr6H0273DiRyQBwf qbxe51agaAzJCGNtJdSMZJNIaQm+TAuQxNQgqlEyNVPdX5RNnmrpQtmhKh2ZAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUg9iSzBZk5cinDgngLFxGAmIDMgwwHwYDVR0j BBgwFoAUX/XcIsnzjks6X/rMdonG61KmXbkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1J1UkxMYXVhenpxUWQ3NUdpWkxpdE5hUVp4bWRVcTZMREpaajhmcWV5 ZDIvMS81RkY1REMyMkM5RjM4RTRCM0E1RkZBQ0M3Njg5QzZFQjUyQTY1REI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGRjVEQzIyQzlGMzhFNEIz QTVGRkFDQzc2ODlDNkVCNTJBNjVEQjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1J1UkxMYXVhenpxUWQ3NUdpWkxpdE5hUVp4bWRVcTZMREpaajhmcWV5ZDIvMS81 RkY1REMyMkM5RjM4RTRCM0E1RkZBQ0M3Njg5QzZFQjUyQTY1REI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArA8RO2KQjbqbdHJV9o2+Ps2Twd6oKMRc+dvPSxrgdFoz9CY6YIcHAcLhdnyK NhWOID7okiwpGcuSVfGAyiRlZRy+tDp5PFlW22+p9Du5c+YCSVwy51GENb+RcgPY Dnh0AHjPIOqfjqFEk4Cb/f/PyPROk5fydflQklQqenjnyz+6IqmW2WNpDo/yHaOR FO/crkNxSdO5fISHoZcTq9dClFXlx7BPDd7ZWlt9xVo5NDWiU50J81ZfoosLBB6u KHd/4SJDQ9gcIih+bssvzWk2g0KVNAmZ5aOQlbYVG7ahihBHDlcwu9cgl0ZENbrW DewBCYVeGjQnLBleX93sOpUFYA== -----END CERTIFICATE-----Generated at Tue Jun 17 09:05:21 2025 by rpki-client