$ rpki-client -vvf rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft File: 2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft (raw, json) Hash identifier: YTnaLEB1FQcewwZSrN/xImfhLiBFjRRO+0mEj9f0Wqw= Subject key identifier: BF:D4:40:42:0D:6C:93:E2:24:A9:D2:39:19:EE:F7:7D:46:2E:CE:7C Authority key identifier: 2A:9F:90:A6:C0:E7:A9:D2:C5:E1:C1:68:81:55:36:53:46:26:06:85 Certificate issuer: /CN=2A9F90A6C0E7A9D2C5E1C1688155365346260685 Certificate serial: 225038AD2234136E05D5DAC03FDF8C0D2598016B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer Subject info access: rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft Manifest number: 024F Signing time: Sat 21 Jun 2025 02:45:17 +0000 Manifest this update: Sat 21 Jun 2025 02:40:17 +0000 Manifest next update: Sun 22 Jun 2025 04:12:17 +0000 Files and hashes: 1: 323830343a373330383a3a2f33322d313238203d3e20323730383931.roa (hash: TFXsRnDBKiVgFfiHrP4nBxeZLl85ER7J0/zeEqj5uFw=) 2: 3133382e3132312e34302e302f32322d3332203d3e20323730383931.roa (hash: 0TP0X4N5B/kB0sXJtzuafX2ea3uKpmvm4dgyq0U0O6A=) 3: 2A9F90A6C0E7A9D2C5E1C1688155365346260685.crl (hash: h6tfIYqEUAbhh48xh9hsTaoqd2jYueZ4swYzzIDmv+0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.crl rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Jun 2025 04:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:50:38:ad:22:34:13:6e:05:d5:da:c0:3f:df:8c:0d:25:98:01:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A9F90A6C0E7A9D2C5E1C1688155365346260685 Validity Not Before: Jun 21 02:40:17 2025 GMT Not After : Jun 22 04:12:17 2025 GMT Subject: CN=BFD440420D6C93E224A9D23919EEF77D462ECE7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:61:96:a2:f9:1b:de:20:fb:6e:67:7d:91:46: 97:59:52:07:f9:f6:d2:28:e2:6b:d8:57:ec:d1:6d: 12:1b:4c:ac:1c:6a:74:ad:d4:b5:0b:0e:fd:18:ce: 94:07:ec:2a:83:5c:63:af:05:bd:db:5b:bc:d3:09: be:eb:33:3a:63:f7:ea:26:86:3a:eb:01:0d:31:f8: 3b:8c:39:45:54:5e:c9:ff:65:37:0b:ea:97:14:e0: 91:e7:bc:42:4e:5b:34:f9:ff:16:da:54:e1:2c:cf: 27:5a:4f:e0:1b:62:06:b8:7c:f3:e1:73:18:7d:ee: 81:b0:c0:0c:0b:12:3c:6c:0d:34:19:9a:c6:62:cb: 45:1d:66:bb:73:f1:8e:5d:bf:64:3f:92:24:af:5c: 33:16:14:47:ac:8a:75:2b:f6:42:a3:8b:a0:7f:37: 2b:87:67:ca:a8:97:df:aa:a3:84:3d:f7:ec:f3:f8: 67:fc:f1:43:a6:64:f8:0b:31:43:e8:4c:11:bd:9f: 81:de:e1:ee:f3:68:c4:1a:5a:95:7b:67:87:a8:bb: 7d:f8:1f:3e:4e:fc:76:ca:0e:32:e3:0a:b1:54:15: de:7c:db:1b:de:b1:e4:aa:35:c9:39:72:aa:0d:ac: 5d:78:96:19:a3:94:60:15:44:8b:9b:a4:78:7c:36: a1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D4:40:42:0D:6C:93:E2:24:A9:D2:39:19:EE:F7:7D:46:2E:CE:7C X509v3 Authority Key Identifier: keyid:2A:9F:90:A6:C0:E7:A9:D2:C5:E1:C1:68:81:55:36:53:46:26:06:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:06:fd:fe:b4:74:37:ca:9e:c9:0b:34:92:ba:35:6d:e9:32: 8a:5f:90:a6:6c:f4:97:db:de:ba:f9:5e:a9:c0:bf:91:44:56: 57:f4:c1:85:d9:3c:67:b4:24:a8:89:b5:ea:5a:a2:fd:09:01: fd:bd:03:d8:0b:8d:49:b2:a7:20:43:d6:9d:98:ad:1f:6d:42: c4:42:88:4c:9c:cc:03:ee:f1:e0:75:a9:2b:92:31:ec:5a:17: 50:80:12:40:17:af:f2:41:3a:15:9c:fa:59:70:08:c6:84:eb: 55:11:95:32:f4:85:98:64:70:54:4b:45:43:91:15:77:ab:17: 8a:2b:ef:95:64:40:e9:d8:62:cc:73:9e:ff:8d:b1:08:24:db: f8:9a:a5:32:51:f9:97:13:57:e1:a1:ea:72:2c:f8:b3:4c:46: 4a:a9:3d:fd:93:5f:97:f0:20:ad:b6:49:74:e3:48:8e:23:b3: a5:2d:06:a5:94:e3:63:de:80:c0:9e:2b:3f:37:37:66:91:c7: 28:43:5c:c5:81:72:65:fe:b9:fa:9a:8b:41:46:64:9e:74:cf: 80:c7:a2:25:95:31:75:05:60:d1:e0:6f:e9:54:dd:cb:60:bc: 56:43:4d:2b:6b:98:37:47:58:4e:0f:b6:f1:cd:8c:7d:d1:6b: 3c:1d:ec:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIlA4rSI0E24F1drAP9+MDSWYAWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE5RjkwQTZDMEU3QTlEMkM1RTFDMTY4ODE1NTM2NTM0 NjI2MDY4NTAeFw0yNTA2MjEwMjQwMTdaFw0yNTA2MjIwNDEyMTdaMDMxMTAvBgNV BAMTKEJGRDQ0MDQyMEQ2QzkzRTIyNEE5RDIzOTE5RUVGNzdENDYyRUNFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoYZai+RveIPtuZ32RRpdZUgf5 9tIo4mvYV+zRbRIbTKwcanSt1LULDv0YzpQH7CqDXGOvBb3bW7zTCb7rMzpj9+om hjrrAQ0x+DuMOUVUXsn/ZTcL6pcU4JHnvEJOWzT5/xbaVOEszydaT+AbYga4fPPh cxh97oGwwAwLEjxsDTQZmsZiy0UdZrtz8Y5dv2Q/kiSvXDMWFEesinUr9kKji6B/ NyuHZ8qol9+qo4Q99+zz+Gf88UOmZPgLMUPoTBG9n4He4e7zaMQaWpV7Z4eou334 Hz5O/HbKDjLjCrFUFd582xveseSqNck5cqoNrF14lhmjlGAVRIubpHh8NqHvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUv9RAQg1sk+IkqdI5Ge73fUYuznwwHwYDVR0j BBgwFoAUKp+QpsDnqdLF4cFogVU2U0YmBoUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNENmbWN2WTRXcU52enF5cWZUckJ0SkhwZFVGOUtzM2hrRzF0OWZiQktr VnYvMS8yQTlGOTBBNkMwRTdBOUQyQzVFMUMxNjg4MTU1MzY1MzQ2MjYwNjg1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBOUY5MEE2QzBFN0E5RDJD NUUxQzE2ODgxNTUzNjUzNDYyNjA2ODUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NENmbWN2WTRXcU52enF5cWZUckJ0SkhwZFVGOUtzM2hrRzF0OWZiQktrVnYvMS8y QTlGOTBBNkMwRTdBOUQyQzVFMUMxNjg4MTU1MzY1MzQ2MjYwNjg1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqwb9/rR0N8qeyQs0kro1bekyil+Qpmz0l9veuvleqcC/kURWV/TBhdk8Z7Qk qIm16lqi/QkB/b0D2AuNSbKnIEPWnZitH21CxEKITJzMA+7x4HWpK5Ix7FoXUIAS QBev8kE6FZz6WXAIxoTrVRGVMvSFmGRwVEtFQ5EVd6sXiivvlWRA6dhizHOe/42x CCTb+JqlMlH5lxNX4aHqciz4s0xGSqk9/ZNfl/AgrbZJdONIjiOzpS0GpZTjY96A wJ4rPzc3ZpHHKENcxYFyZf65+pqLQUZknnTPgMeiJZUxdQVg0eBv6VTdy2C8VkNN K2uYN0dYTg+28c2MfdFrPB3sNQ== -----END CERTIFICATE-----Generated at Sat Jun 21 15:14:29 2025 by rpki-client