$ rpki-client -vvf rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft File: FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft (raw, json) Hash identifier: TRq0T/7N2k8dcnmDJSn96ty4SJ0uyLvCWn1Q49QhyQs= Subject key identifier: 9F:2F:87:DE:2E:9D:1A:C2:E2:2A:51:EB:98:4A:07:E1:26:E8:E2:96 Authority key identifier: FE:FE:D5:72:32:6D:21:BF:FB:D7:33:CF:A0:CC:79:09:DC:EC:50:6E Certificate issuer: /CN=FEFED572326D21BFFBD733CFA0CC7909DCEC506E Certificate serial: 2F22C45426282BF5D14778E5EF12C2939DA6E5BA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.cer Subject info access: rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft Manifest number: 0240 Signing time: Wed 18 Jun 2025 05:53:18 +0000 Manifest this update: Wed 18 Jun 2025 05:48:18 +0000 Manifest next update: Thu 19 Jun 2025 10:00:18 +0000 Files and hashes: 1: 34352e3136352e3234342e302f32322d3234203d3e20323638363936.roa (hash: 9lPKCbnYvVBettaFi7XsatcA2Q4Rlb6Sn4w7BXynKJ0=) 2: 323830343a353533343a3a2f33322d3438203d3e20323638363936.roa (hash: zP1mUoa6MadGrQiYWWMSC0ue620Jw7dMEBJTFUP49JY=) 3: 3230312e3135392e3136342e302f32322d3234203d3e20323638363936.roa (hash: 23Qxox38N+0YhSohoMOAf1e2FgGS9Y6vrQAHVJYJktM=) 4: FEFED572326D21BFFBD733CFA0CC7909DCEC506E.crl (hash: uGwBnTgoRoRmOF5KMXMwzRy1tdK3SqCXo7wfcBj4NEs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.crl rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Jun 2025 08:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:22:c4:54:26:28:2b:f5:d1:47:78:e5:ef:12:c2:93:9d:a6:e5:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FEFED572326D21BFFBD733CFA0CC7909DCEC506E Validity Not Before: Jun 18 05:48:18 2025 GMT Not After : Jun 19 10:00:18 2025 GMT Subject: CN=9F2F87DE2E9D1AC2E22A51EB984A07E126E8E296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2e:b1:d7:32:51:e8:d6:fb:95:1e:ac:c4:d4: b9:fe:9c:51:88:59:3c:e5:50:94:e0:bf:47:31:09: 1e:57:5e:62:e2:34:4d:32:d4:0f:1a:a0:53:6d:51: 08:4e:ae:c7:65:06:57:dc:bc:c3:9c:72:d6:5f:de: 3e:7f:85:d1:84:40:fc:17:8f:b4:3a:0a:37:a9:0b: 4e:bf:06:89:17:d2:f7:0a:13:95:52:b2:8f:03:8e: 13:1e:80:9a:d7:72:84:d4:93:e3:f8:13:78:7c:c1: 42:57:ab:08:52:bd:5e:30:2d:10:48:e1:74:e6:38: af:a0:bd:ac:45:05:4a:6b:f5:ec:78:69:78:c8:21: e7:5f:f7:05:a8:d2:ec:91:12:6e:6f:d6:2a:60:6a: bb:f5:9f:15:df:db:7b:54:bd:12:43:db:e2:97:46: af:00:ab:2f:60:4f:cf:31:df:7b:f7:1b:cd:db:0f: e7:25:3c:7c:67:16:3c:4b:b9:60:34:31:7a:1d:81: f9:e9:af:15:88:7e:3f:5e:ac:da:dd:3c:95:be:f7: ef:fc:5f:00:b1:0e:90:81:52:88:43:36:c2:9f:e7: 48:b9:03:83:89:69:73:18:de:9a:b2:6b:65:89:63: 99:41:e9:5a:ad:bf:2e:1d:d5:f6:96:0f:26:1e:5e: 17:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2F:87:DE:2E:9D:1A:C2:E2:2A:51:EB:98:4A:07:E1:26:E8:E2:96 X509v3 Authority Key Identifier: keyid:FE:FE:D5:72:32:6D:21:BF:FB:D7:33:CF:A0:CC:79:09:DC:EC:50:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5KacaBLK6sx4ExLVgYrcMaSy4xGUaPMUXBd4e8dYkQCg/0/FEFED572326D21BFFBD733CFA0CC7909DCEC506E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:6b:7b:07:d1:f8:22:59:5e:bb:e2:05:0a:9a:a5:1c:48:43: 6e:ae:a8:ad:28:15:19:c8:3d:70:ff:a6:e3:f0:53:31:7d:a4: 45:56:06:47:4a:bd:42:44:a9:d9:ec:fa:31:df:af:a4:b7:00: fd:90:5a:7a:2a:92:95:76:2d:eb:8c:d2:7a:ca:9b:40:ec:e1: b6:b9:0c:ad:c3:35:d0:1d:50:0c:08:5b:1a:00:c1:f7:d3:1b: 3d:5a:7b:04:7c:34:47:33:48:ac:8c:d8:6c:43:fb:c7:24:34: e2:02:61:60:ad:8a:3c:e4:1f:a9:f8:e0:5f:c2:b6:4c:8e:82: 13:1d:0e:36:a8:11:d7:99:e9:37:3e:33:db:fe:6f:c4:42:79: 45:fb:21:6d:db:ff:43:55:da:9a:4c:d1:69:77:9c:93:64:48: d4:be:3a:83:87:18:11:08:7a:9a:bc:f1:27:69:59:f6:ee:35: e8:03:88:b8:fe:88:97:dc:a2:a2:1c:89:70:30:4c:38:1e:95: f5:dc:5a:d2:5c:f5:c7:6b:98:96:82:b3:cc:64:f5:7e:fd:d1: 27:6a:88:82:d4:52:eb:1a:98:ac:ca:fa:92:f5:45:ae:c2:22: 14:d3:8b:c5:55:26:6f:49:53:d6:b5:62:36:d4:05:c3:58:83: 46:2f:7e:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULyLEVCYoK/XRR3jl7xLCk52m5bowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVGRUQ1NzIzMjZEMjFCRkZCRDczM0NGQTBDQzc5MDlE Q0VDNTA2RTAeFw0yNTA2MTgwNTQ4MThaFw0yNTA2MTkxMDAwMThaMDMxMTAvBgNV BAMTKDlGMkY4N0RFMkU5RDFBQzJFMjJBNTFFQjk4NEEwN0UxMjZFOEUyOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDALrHXMlHo1vuVHqzE1Ln+nFGI WTzlUJTgv0cxCR5XXmLiNE0y1A8aoFNtUQhOrsdlBlfcvMOcctZf3j5/hdGEQPwX j7Q6CjepC06/BokX0vcKE5VSso8DjhMegJrXcoTUk+P4E3h8wUJXqwhSvV4wLRBI 4XTmOK+gvaxFBUpr9ex4aXjIIedf9wWo0uyREm5v1ipgarv1nxXf23tUvRJD2+KX Rq8Aqy9gT88x33v3G83bD+clPHxnFjxLuWA0MXodgfnprxWIfj9erNrdPJW+9+/8 XwCxDpCBUohDNsKf50i5A4OJaXMY3pqya2WJY5lB6Vqtvy4d1faWDyYeXhdHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUny+H3i6dGsLiKlHrmEoH4Sbo4pYwHwYDVR0j BBgwFoAU/v7VcjJtIb/71zPPoMx5CdzsUG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUthY2FCTEs2c3g0RXhMVmdZcmNNYVN5NHhHVWFQTVVYQmQ0ZThkWWtR Q2cvMC9GRUZFRDU3MjMyNkQyMUJGRkJENzMzQ0ZBMENDNzkwOURDRUM1MDZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFRkVENTcyMzI2RDIxQkZG QkQ3MzNDRkEwQ0M3OTA5RENFQzUwNkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUthY2FCTEs2c3g0RXhMVmdZcmNNYVN5NHhHVWFQTVVYQmQ0ZThkWWtRQ2cvMC9G RUZFRDU3MjMyNkQyMUJGRkJENzMzQ0ZBMENDNzkwOURDRUM1MDZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZWt7B9H4Illeu+IFCpqlHEhDbq6orSgVGcg9cP+m4/BTMX2kRVYGR0q9QkSp 2ez6Md+vpLcA/ZBaeiqSlXYt64zSesqbQOzhtrkMrcM10B1QDAhbGgDB99MbPVp7 BHw0RzNIrIzYbEP7xyQ04gJhYK2KPOQfqfjgX8K2TI6CEx0ONqgR15npNz4z2/5v xEJ5Rfshbdv/Q1XamkzRaXeck2RI1L46g4cYEQh6mrzxJ2lZ9u416AOIuP6Il9yi ohyJcDBMOB6V9dxa0lz1x2uYloKzzGT1fv3RJ2qIgtRS6xqYrMr6kvVFrsIiFNOL xVUmb0lT1rViNtQFw1iDRi9+rg== -----END CERTIFICATE-----Generated at Wed Jun 18 08:30:52 2025 by rpki-client