$ rpki-client -vvf rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.mft File: 24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.mft (raw, json) Hash identifier: nKEGb+lBD70wgBmFuEc8ydCvrbg1tKEr6jXREpOfjRY= Subject key identifier: 69:38:28:EE:1E:6A:02:B7:0F:63:65:4C:2D:57:60:50:56:D1:A9:63 Authority key identifier: 24:CB:53:80:EF:2D:E3:39:52:62:F5:E5:DC:8D:8E:B8:96:E9:9F:66 Certificate issuer: /CN=24CB5380EF2DE3395262F5E5DC8D8EB896E99F66 Certificate serial: 2A889BAAF7C6CA67BD789F5BCA7D94FFE0CC179E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.cer Subject info access: rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.mft Manifest number: 024A Signing time: Mon 16 Jun 2025 13:47:36 +0000 Manifest this update: Mon 16 Jun 2025 13:42:36 +0000 Manifest next update: Tue 17 Jun 2025 16:10:36 +0000 Files and hashes: 1: 24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.crl (hash: 1hY+5DZ/6ygJtDww2NyX4c6+4GCbEz0+wpFDOGzydeE=) 2: 323830343a373535303a3a2f33322d3332203d3e20323731303338.roa (hash: ZU2TmHHPMgbSGgCwTIKZUq8xTOkpjKqAUCD10aK4lKA=) 3: 3137372e3132392e3232382e302f32322d3234203d3e20323731303338.roa (hash: rMwcsL5hK5xNXk6RLLlbdBNYnUXf6g5k61gaK66OoyQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.crl rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 16:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:88:9b:aa:f7:c6:ca:67:bd:78:9f:5b:ca:7d:94:ff:e0:cc:17:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24CB5380EF2DE3395262F5E5DC8D8EB896E99F66 Validity Not Before: Jun 16 13:42:36 2025 GMT Not After : Jun 17 16:10:36 2025 GMT Subject: CN=693828EE1E6A02B70F63654C2D57605056D1A963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:a3:93:b8:c9:f9:d3:09:d4:66:a7:36:32: be:78:e7:18:c6:74:e5:05:47:58:1d:6b:6a:7c:39: 8c:a7:88:1f:b8:a2:6b:02:91:52:6c:35:79:70:ab: 73:be:24:89:e3:43:02:61:dc:f0:e7:4e:d4:32:a1: af:67:b8:d1:03:e3:32:56:04:6a:26:07:ce:9a:ad: 5d:73:53:ac:28:d4:a6:4e:71:c9:91:a6:6c:bf:49: e7:b0:27:b0:6d:e0:68:d0:cf:80:76:12:10:10:ce: 94:17:ad:db:bc:0f:8a:8e:45:25:ef:0b:93:d1:66: 17:46:6c:34:0d:63:cc:87:bb:f1:97:75:93:8d:8a: 3a:11:d4:04:b1:a9:cb:f4:11:79:6e:f1:67:82:09: 09:55:47:ce:92:b6:e1:af:85:dd:23:18:49:e0:05: f5:24:03:e3:14:57:b4:92:68:6e:bd:23:dd:ac:44: 40:f0:06:35:ca:e9:48:d5:13:2e:a6:ec:1d:0d:40: 9c:4d:c0:76:50:97:1c:9a:99:15:1e:7e:26:93:04: 3a:22:14:70:a9:71:f7:fe:3a:3c:60:d4:12:dc:0b: c5:76:ff:54:87:b4:67:08:8c:13:f7:16:f2:d7:87: fe:34:d1:2c:69:d3:f6:5a:e1:5a:33:5f:be:bc:2f: 5a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:38:28:EE:1E:6A:02:B7:0F:63:65:4C:2D:57:60:50:56:D1:A9:63 X509v3 Authority Key Identifier: keyid:24:CB:53:80:EF:2D:E3:39:52:62:F5:E5:DC:8D:8E:B8:96:E9:9F:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/73KS4cDAGEzoGtScvyhxYVVqPXCZfBhEyPrzGW7HsWHE/1/24CB5380EF2DE3395262F5E5DC8D8EB896E99F66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:bb:d9:88:d5:50:f5:6e:8f:18:f5:76:d1:8e:f6:f2:15:c5: 3a:15:56:d7:e4:2b:b9:f3:7e:89:b4:8b:ef:e3:00:56:01:2c: bd:7e:7e:49:cc:81:67:c8:5e:cc:fe:8f:b6:d5:b3:b6:72:f1: 8b:d5:1a:b7:2a:99:17:53:ed:6d:bf:10:a0:23:c9:f5:ff:63: 6f:3d:71:46:09:15:c5:4f:03:61:0d:1d:4c:20:c7:f2:e6:53: 83:52:64:24:5c:98:9d:55:16:a8:1b:ac:b3:1f:7d:9f:87:96: f3:13:58:29:27:ef:11:70:d7:49:e5:14:2b:ab:c6:e6:f0:b6: 57:77:c8:77:27:6d:dc:ca:84:6b:75:10:88:4c:ef:2e:3c:ba: 57:4f:48:e0:91:d5:f6:20:ba:ee:be:74:f0:8e:98:01:7e:65: 69:35:cf:38:11:a8:40:fa:f4:12:a5:10:2c:78:5d:e0:c4:7d: c8:70:b8:1f:08:e8:67:18:a4:6f:69:f8:f8:71:e1:a8:c6:89: 2b:29:c9:00:05:63:4f:2e:ed:c1:7c:cd:20:52:fa:e9:ad:28: 4b:37:4f:cf:9d:ae:d0:71:0c:17:af:37:1c:8d:42:81:12:8e: 39:2a:58:58:15:8e:ac:44:30:58:f8:0e:4d:5c:aa:ef:bb:4b: d8:2c:c6:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUKoibqvfGyme9eJ9byn2U/+DMF54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRDQjUzODBFRjJERTMzOTUyNjJGNUU1REM4RDhFQjg5 NkU5OUY2NjAeFw0yNTA2MTYxMzQyMzZaFw0yNTA2MTcxNjEwMzZaMDMxMTAvBgNV BAMTKDY5MzgyOEVFMUU2QTAyQjcwRjYzNjU0QzJENTc2MDUwNTZEMUE5NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9W6OTuMn50wnUZqc2Mr545xjG dOUFR1gda2p8OYyniB+4omsCkVJsNXlwq3O+JInjQwJh3PDnTtQyoa9nuNED4zJW BGomB86arV1zU6wo1KZOccmRpmy/SeewJ7Bt4GjQz4B2EhAQzpQXrdu8D4qORSXv C5PRZhdGbDQNY8yHu/GXdZONijoR1ASxqcv0EXlu8WeCCQlVR86StuGvhd0jGEng BfUkA+MUV7SSaG69I92sREDwBjXK6UjVEy6m7B0NQJxNwHZQlxyamRUefiaTBDoi FHCpcff+Ojxg1BLcC8V2/1SHtGcIjBP3FvLXh/400Sxp0/Za4VozX768L1rzAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaTgo7h5qArcPY2VMLVdgUFbRqWMwHwYDVR0j BBgwFoAUJMtTgO8t4zlSYvXl3I2OuJbpn2YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNzNLUzRjREFHRXpvR3RTY3Z5aHhZVlZxUFhDWmZCaEV5UHJ6R1c3SHNX SEUvMS8yNENCNTM4MEVGMkRFMzM5NTI2MkY1RTVEQzhEOEVCODk2RTk5RjY2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0Q0I1MzgwRUYyREUzMzk1 MjYyRjVFNURDOEQ4RUI4OTZFOTlGNjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NzNLUzRjREFHRXpvR3RTY3Z5aHhZVlZxUFhDWmZCaEV5UHJ6R1c3SHNXSEUvMS8y NENCNTM4MEVGMkRFMzM5NTI2MkY1RTVEQzhEOEVCODk2RTk5RjY2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWLvZiNVQ9W6PGPV20Y728hXFOhVW1+QrufN+ibSL7+MAVgEsvX5+ScyBZ8he zP6PttWztnLxi9UatyqZF1Ptbb8QoCPJ9f9jbz1xRgkVxU8DYQ0dTCDH8uZTg1Jk JFyYnVUWqBussx99n4eW8xNYKSfvEXDXSeUUK6vG5vC2V3fIdydt3MqEa3UQiEzv Ljy6V09I4JHV9iC67r508I6YAX5laTXPOBGoQPr0EqUQLHhd4MR9yHC4HwjoZxik b2n4+HHhqMaJKynJAAVjTy7twXzNIFL66a0oSzdPz52u0HEMF683HI1CgRKOOSpY WBWOrEQwWPgOTVyq77tL2CzGww== -----END CERTIFICATE-----Generated at Mon Jun 16 23:42:45 2025 by rpki-client