$ rpki-client -vvf rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft File: CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft (raw, json) Hash identifier: gQrlyzRxbi229Z/yOsePe6o0czPg4609j9spWfgh6gA= Subject key identifier: 47:F3:62:CF:A6:37:8C:04:EB:AC:A8:72:79:A3:EC:D0:CD:AC:7F:1B Authority key identifier: CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42 Certificate issuer: /CN=CDEF1FD6690DCCED5205338EE0BC7D0E188DE842 Certificate serial: 1609FC3B1EDCF12414D8592392E79BD5BED53A6C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer Subject info access: rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft Manifest number: D0 Signing time: Fri 20 Jun 2025 05:19:20 +0000 Manifest this update: Fri 20 Jun 2025 05:14:20 +0000 Manifest next update: Sat 21 Jun 2025 05:52:20 +0000 Files and hashes: 1: 323830343a366262343a663030303a3a2f34312d3431203d3e20323730343138.roa (hash: N2nTtvb8JXqHz8HSxYE4bRZRkUdpeFoYlVaINLv7iHM=) 2: 323830343a366262343a3a2f33322d3336203d3e20323730343138.roa (hash: iXw8eyww30FtkaY4pIbyQVccKqIHDDzs1Oowd0Qxomg=) 3: CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl (hash: H0FNUHb38yhh0nTBQz/1TDtsoOebBRnfxnn8UA88IEg=) 4: 3139302e3131312e3136382e302f32322d3234203d3e20323730343138.roa (hash: mJq4dFqiva5H7E/DVQTNnmaU+jNCkwWuNtHA92VtrOU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 05:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:09:fc:3b:1e:dc:f1:24:14:d8:59:23:92:e7:9b:d5:be:d5:3a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDEF1FD6690DCCED5205338EE0BC7D0E188DE842 Validity Not Before: Jun 20 05:14:20 2025 GMT Not After : Jun 21 05:52:20 2025 GMT Subject: CN=47F362CFA6378C04EBACA87279A3ECD0CDAC7F1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6c:1f:0e:29:78:f4:a2:bf:4e:b6:b8:da:b3: 00:8f:94:48:5e:67:e7:4b:11:0e:f6:34:3f:d7:e7: ed:60:40:df:7b:fd:b2:ba:b6:f1:3d:f2:c2:4f:ae: bf:6f:30:67:3b:29:cd:55:d5:31:4c:d8:bd:20:14: 30:92:a2:07:db:b8:be:c6:3c:83:73:d6:d4:39:b6: d6:e0:d0:3f:ed:2d:29:32:05:4f:40:8d:b7:e6:0e: 8a:b1:8a:cc:8c:91:ea:fe:bf:15:44:49:69:bf:1b: 0d:98:92:1b:d2:2c:ac:bc:6d:1b:40:42:4e:8b:ef: ec:e6:93:7d:46:bf:24:d8:65:5d:ac:9d:15:a3:ab: fd:29:73:2e:bf:e4:82:11:f2:63:30:b1:20:56:6e: 87:56:70:bf:1b:a5:1f:9f:37:00:7d:dd:ae:0c:a0: c5:5e:98:00:07:40:16:3b:b1:44:e3:35:b6:df:49: 27:9b:6f:6c:63:77:9c:37:69:68:2d:6a:7f:67:49: a7:48:da:bb:94:af:3d:7c:35:6b:66:90:e4:a4:bd: 31:ef:14:dd:b6:13:5b:8b:0c:cf:5d:7f:94:96:cc: 52:8d:b3:bb:d4:e9:7a:c3:f3:c1:7d:31:b2:4a:d0: bd:7b:39:bc:8c:97:e8:fd:f0:ba:0c:df:fe:33:46: b2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F3:62:CF:A6:37:8C:04:EB:AC:A8:72:79:A3:EC:D0:CD:AC:7F:1B X509v3 Authority Key Identifier: keyid:CD:EF:1F:D6:69:0D:CC:ED:52:05:33:8E:E0:BC:7D:0E:18:8D:E8:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/CDEF1FD6690DCCED5205338EE0BC7D0E188DE842.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:94:b3:5e:5c:90:8c:29:62:78:6e:4b:cd:bf:d4:b9:7c:7d: ea:ae:35:79:df:3b:30:a7:1e:48:e4:b2:92:f9:8d:49:3f:fc: 2a:22:63:f9:82:f0:f3:c9:80:a7:23:2e:2d:15:59:80:79:47: a5:c9:f1:4b:1e:f6:71:85:7d:5c:b2:ca:17:dc:8a:23:25:ea: 0c:c6:ac:dc:9b:db:95:ec:b4:25:d2:cb:06:92:e4:6f:1c:3d: c9:3b:71:14:b0:f8:64:d5:4a:75:ee:82:2a:2c:21:18:f6:30: f9:59:52:2b:c0:a1:9c:aa:4d:80:d6:aa:8f:12:4f:b7:ce:8d: a4:c3:69:22:4a:de:49:03:03:b7:30:28:52:ce:75:96:12:8a: e9:60:63:a2:c2:8b:de:5d:80:e4:24:6d:67:ec:6d:5b:92:2b: b3:4d:9e:36:b9:df:ba:80:74:70:4b:eb:61:58:9f:f9:8e:78: 8c:7b:d0:c6:5f:26:0f:7e:ec:71:6b:c1:be:8d:2e:a9:93:39: 67:ca:f9:a8:39:31:7b:04:06:bb:f5:fa:ad:1e:0b:d7:d9:dd: 06:64:92:2b:38:96:64:dd:1a:90:51:87:f1:47:d3:c7:ef:e3: ec:0b:df:cd:80:c0:20:1f:06:d3:42:f8:62:74:cd:09:b6:c6: 42:1c:04:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUFgn8Ox7c8SQU2Fkjkueb1b7VOmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RFRjFGRDY2OTBEQ0NFRDUyMDUzMzhFRTBCQzdEMEUx ODhERTg0MjAeFw0yNTA2MjAwNTE0MjBaFw0yNTA2MjEwNTUyMjBaMDMxMTAvBgNV BAMTKDQ3RjM2MkNGQTYzNzhDMDRFQkFDQTg3Mjc5QTNFQ0QwQ0RBQzdGMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUbB8OKXj0or9OtrjaswCPlEhe Z+dLEQ72ND/X5+1gQN97/bK6tvE98sJPrr9vMGc7Kc1V1TFM2L0gFDCSogfbuL7G PINz1tQ5ttbg0D/tLSkyBU9AjbfmDoqxisyMker+vxVESWm/Gw2YkhvSLKy8bRtA Qk6L7+zmk31GvyTYZV2snRWjq/0pcy6/5IIR8mMwsSBWbodWcL8bpR+fNwB93a4M oMVemAAHQBY7sUTjNbbfSSebb2xjd5w3aWgtan9nSadI2ruUrz18NWtmkOSkvTHv FN22E1uLDM9df5SWzFKNs7vU6XrD88F9MbJK0L17ObyMl+j98LoM3/4zRrKdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUR/Niz6Y3jATrrKhyeaPs0M2sfxswHwYDVR0j BBgwFoAUze8f1mkNzO1SBTOO4Lx9DhiN6EIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUsxQjVEaU1zaHBDdHh3empXVTlXeGN5UkRaRzJ4SjhESkdyeXFCTDZ5 YUcvMC9DREVGMUZENjY5MERDQ0VENTIwNTMzOEVFMEJDN0QwRTE4OERFODQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NERUYxRkQ2NjkwRENDRUQ1 MjA1MzM4RUUwQkM3RDBFMTg4REU4NDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUsxQjVEaU1zaHBDdHh3empXVTlXeGN5UkRaRzJ4SjhESkdyeXFCTDZ5YUcvMC9D REVGMUZENjY5MERDQ0VENTIwNTMzOEVFMEJDN0QwRTE4OERFODQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATpSzXlyQjClieG5Lzb/UuXx96q41ed87MKceSOSykvmNST/8KiJj+YLw88mA pyMuLRVZgHlHpcnxSx72cYV9XLLKF9yKIyXqDMas3Jvbley0JdLLBpLkbxw9yTtx FLD4ZNVKde6CKiwhGPYw+VlSK8ChnKpNgNaqjxJPt86NpMNpIkreSQMDtzAoUs51 lhKK6WBjosKL3l2A5CRtZ+xtW5Irs02eNrnfuoB0cEvrYVif+Y54jHvQxl8mD37s cWvBvo0uqZM5Z8r5qDkxewQGu/X6rR4L19ndBmSSKziWZN0akFGH8UfTx+/j7Avf zYDAIB8G00L4YnTNCbbGQhwEMw== -----END CERTIFICATE-----Generated at Fri Jun 20 21:58:35 2025 by rpki-client