$ rpki-client -vvf rpki-repo.registro.br/repo/7gFdXtY1bs4sWG5vbXCajaQa8xwFEuukrMZyy24VuqrS/0/91732F74DD1620DE8A1DFDD65B90A2BAD2C8D78F.mft File: 91732F74DD1620DE8A1DFDD65B90A2BAD2C8D78F.mft (raw, json) Hash identifier: O9l871iifO8b6jB2ko5YKugwJU7sob6S34L9OlFyZdg= Subject key identifier: 31:B8:78:1F:9C:5B:25:2E:C2:CC:BD:AC:6B:7E:27:05:03:FC:28:C7 Authority key identifier: 91:73:2F:74:DD:16:20:DE:8A:1D:FD:D6:5B:90:A2:BA:D2:C8:D7:8F Certificate issuer: /CN=91732F74DD1620DE8A1DFDD65B90A2BAD2C8D78F Certificate serial: 6074ACF5FEBFE905B68CA5693594DEA566632285 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91732F74DD1620DE8A1DFDD65B90A2BAD2C8D78F.cer Subject info access: rsync://rpki-repo.registro.br/repo/7gFdXtY1bs4sWG5vbXCajaQa8xwFEuukrMZyy24VuqrS/0/91732F74DD1620DE8A1DFDD65B90A2BAD2C8D78F.mft Manifest number: D2 Signing time: Fri 20 Jun 2025 00:25:04 +0000 Manifest this update: Fri 20 Jun 2025 00:20:04 +0000 Manifest next update: Sat 21 Jun 2025 03:14:04 +0000 Files and hashes: 1: 91732F74DD1620DE8A1DFDD65B90A2BAD2C8D78F.crl (hash: p3zbv0dldMyVC5bVm9PT5pAuRZXCoiAQs9BPuCNjPRk=) 2: 323830343a376139383a3a2f33322d313238203d3e20323731333831.roa (hash: CuVi1Rf0hkC9lJ33V5O7iNV4HeVI/1dUqkWP/rOI24g=) 3: 3139312e39382e3233392e302f32342d3332203d3e20323731333831.roa (hash: L+yF2hwtbmoOoAW7z+DudFKknm2UbZiusVQazlxegGo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7gFdXtY1bs4sWG5vbXCajaQa8xwFEuukrMZyy24VuqrS/0/91732F74DD1620DE8A1DFDD65B90A2BAD2C8D78F.crl rsync://rpki-repo.registro.br/repo/7gFdXtY1bs4sWG5vbXCajaQa8xwFEuukrMZyy24VuqrS/0/91732F74DD1620DE8A1DFDD65B90A2BAD2C8D78F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91732F74DD1620DE8A1DFDD65B90A2BAD2C8D78F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 03:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:74:ac:f5:fe:bf:e9:05:b6:8c:a5:69:35:94:de:a5:66:63:22:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91732F74DD1620DE8A1DFDD65B90A2BAD2C8D78F Validity Not Before: Jun 20 00:20:04 2025 GMT Not After : Jun 21 03:14:04 2025 GMT Subject: CN=31B8781F9C5B252EC2CCBDAC6B7E270503FC28C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:af:ee:ce:04:73:2d:a5:69:5d:a7:29:90: a1:68:3a:88:b8:14:a7:65:5b:fa:c6:23:73:d2:88: 1c:6b:22:32:f0:4e:7f:c1:9b:14:d1:bf:7f:f9:d8: a0:cb:ef:98:e0:90:ce:28:56:2f:37:75:0c:cd:50: 91:62:b1:2a:da:b1:77:5e:c3:10:69:40:02:49:e8: c1:96:b2:33:b9:5d:e1:0a:aa:f6:10:7d:b3:b1:bf: 5c:ba:db:81:82:70:c6:3d:c6:b7:ec:bd:20:24:fa: a9:49:9f:dc:bb:06:6e:d5:41:58:2d:da:37:6b:af: b0:95:e2:3c:44:cb:34:e5:55:a6:2f:3f:af:ad:b1: bf:c3:98:2b:10:a7:9b:6c:4a:6f:a5:18:01:d0:28: 00:3c:03:48:58:83:6a:37:aa:0c:54:42:cb:c2:90: e2:80:39:9d:37:93:01:79:b3:27:a6:dc:0a:a1:73: 19:45:c9:96:ad:0c:d6:17:e1:1d:93:8e:34:e4:47: 84:06:cb:b9:59:1d:89:7d:0e:e4:ad:79:11:ae:cd: 06:6f:a9:28:94:4c:3d:94:0d:98:52:d9:e1:84:46: 3a:95:e0:21:cd:d7:7c:19:22:1e:5f:6a:2e:e0:4e: a2:2e:52:79:3c:1c:f3:38:74:6e:9e:f2:e5:80:6f: 8a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B8:78:1F:9C:5B:25:2E:C2:CC:BD:AC:6B:7E:27:05:03:FC:28:C7 X509v3 Authority Key Identifier: keyid:91:73:2F:74:DD:16:20:DE:8A:1D:FD:D6:5B:90:A2:BA:D2:C8:D7:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7gFdXtY1bs4sWG5vbXCajaQa8xwFEuukrMZyy24VuqrS/0/91732F74DD1620DE8A1DFDD65B90A2BAD2C8D78F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91732F74DD1620DE8A1DFDD65B90A2BAD2C8D78F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7gFdXtY1bs4sWG5vbXCajaQa8xwFEuukrMZyy24VuqrS/0/91732F74DD1620DE8A1DFDD65B90A2BAD2C8D78F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:07:c0:99:8e:b1:0f:cd:f6:e3:5f:42:36:0d:1d:52:fc:77: 5a:8b:cf:84:d5:50:ec:55:5d:a3:90:2a:85:dd:d5:74:ff:11: 08:d4:3e:e4:2f:ed:a0:2d:5e:6f:23:3b:c1:34:ce:a6:be:77: 43:2d:a2:87:ea:1f:4f:32:7a:14:b6:41:82:3d:9d:a2:03:c7: 0a:e6:14:b0:33:21:d7:a5:e3:90:28:3b:71:3e:4b:f2:6f:99: db:1a:a1:d9:33:da:19:2b:f5:43:33:ab:5b:09:6f:41:33:8a: 2d:43:53:65:e9:f2:64:2e:ee:52:e6:f5:75:df:59:37:83:5d: 12:fd:13:17:47:45:88:0c:e7:b9:1d:cc:6e:97:5d:42:b2:64: 49:61:51:40:a8:a2:fd:15:08:46:f7:e6:91:43:1b:c3:04:ec: bc:bc:54:94:41:de:27:af:7a:fd:dd:b5:4a:da:2c:ee:9c:2a: 7b:a3:72:2d:26:1e:b2:a3:b2:22:0b:8c:f2:5e:3b:f5:16:3f: 73:ee:bc:f6:43:2e:a9:04:70:10:cc:85:f4:09:2e:c3:0c:10: 98:b9:6f:bc:1a:f8:51:62:85:1c:41:85:4b:41:79:ab:15:68: c1:c0:f0:a5:8b:f1:21:cc:bd:80:8d:a4:99:ca:43:5f:ee:6f: e7:97:77:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYHSs9f6/6QW2jKVpNZTepWZjIoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3MzJGNzRERDE2MjBERThBMURGREQ2NUI5MEEyQkFE MkM4RDc4RjAeFw0yNTA2MjAwMDIwMDRaFw0yNTA2MjEwMzE0MDRaMDMxMTAvBgNV BAMTKDMxQjg3ODFGOUM1QjI1MkVDMkNDQkRBQzZCN0UyNzA1MDNGQzI4QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0RK/uzgRzLaVpXacpkKFoOoi4 FKdlW/rGI3PSiBxrIjLwTn/BmxTRv3/52KDL75jgkM4oVi83dQzNUJFisSrasXde wxBpQAJJ6MGWsjO5XeEKqvYQfbOxv1y624GCcMY9xrfsvSAk+qlJn9y7Bm7VQVgt 2jdrr7CV4jxEyzTlVaYvP6+tsb/DmCsQp5tsSm+lGAHQKAA8A0hYg2o3qgxUQsvC kOKAOZ03kwF5syem3AqhcxlFyZatDNYX4R2TjjTkR4QGy7lZHYl9DuSteRGuzQZv qSiUTD2UDZhS2eGERjqV4CHN13wZIh5fai7gTqIuUnk8HPM4dG6e8uWAb4rRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUMbh4H5xbJS7CzL2sa34nBQP8KMcwHwYDVR0j BBgwFoAUkXMvdN0WIN6KHf3WW5CiutLI148wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2dGZFh0WTFiczRzV0c1dmJYQ2FqYVFhOHh3RkV1dWtyTVp5eTI0VnVx clMvMC85MTczMkY3NEREMTYyMERFOEExREZERDY1QjkwQTJCQUQyQzhENzhGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNzMyRjc0REQxNjIwREU4 QTFERkRENjVCOTBBMkJBRDJDOEQ3OEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2dGZFh0WTFiczRzV0c1dmJYQ2FqYVFhOHh3RkV1dWtyTVp5eTI0VnVxclMvMC85 MTczMkY3NEREMTYyMERFOEExREZERDY1QjkwQTJCQUQyQzhENzhGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALwfAmY6xD832419CNg0dUvx3WovPhNVQ7FVdo5Aqhd3VdP8RCNQ+5C/toC1e byM7wTTOpr53Qy2ih+ofTzJ6FLZBgj2dogPHCuYUsDMh16XjkCg7cT5L8m+Z2xqh 2TPaGSv1QzOrWwlvQTOKLUNTZenyZC7uUub1dd9ZN4NdEv0TF0dFiAznuR3Mbpdd QrJkSWFRQKii/RUIRvfmkUMbwwTsvLxUlEHeJ696/d21Stos7pwqe6NyLSYesqOy IguM8l479RY/c+689kMuqQRwEMyF9AkuwwwQmLlvvBr4UWKFHEGFS0F5qxVowcDw pYvxIcy9gI2kmcpDX+5v55d3SQ== -----END CERTIFICATE-----Generated at Fri Jun 20 16:50:10 2025 by rpki-client