$ rpki-client -vvf rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft File: 01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft (raw, json) Hash identifier: y9gNLnt758kkZERFJwevFdwnxyWL3mJ/4DiXzbeAWaA= Subject key identifier: E6:15:FD:58:68:DB:C9:74:A6:9E:E9:8A:0C:A3:5D:E3:A6:06:A7:E5 Authority key identifier: 01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C Certificate issuer: /CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C Certificate serial: 10319F1BC6AD20414B295F8400DA137E21E98FAE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer Subject info access: rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft Manifest number: 024B Signing time: Mon 16 Jun 2025 00:22:09 +0000 Manifest this update: Mon 16 Jun 2025 00:17:09 +0000 Manifest next update: Tue 17 Jun 2025 02:29:09 +0000 Files and hashes: 1: 34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa (hash: 0YsTjeqlNRVyQvgwlwqrsgilyPHmCf1iPKM6xbeuc78=) 2: 323830343a356233303a3a2f33322d3438203d3e20323638383234.roa (hash: 6f8pVuH01b1SF3mi0On+jZU5yb6oYEzn5QGJJ2ruw7o=) 3: 3137392e3130372e35322e302f32322d3234203d3e20323638383234.roa (hash: GXCJwGNSeovJEODltbl+tv+hc1YYl0zHS2TuTav4gew=) 4: 01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl (hash: 9mHC1w4mHwLvFTUfPSoKBHqgmJq993sjohIHy0DvsXM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 22:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:31:9f:1b:c6:ad:20:41:4b:29:5f:84:00:da:13:7e:21:e9:8f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C Validity Not Before: Jun 16 00:17:09 2025 GMT Not After : Jun 17 02:29:09 2025 GMT Subject: CN=E615FD5868DBC974A69EE98A0CA35DE3A606A7E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:c3:f0:1b:f8:e4:9f:6f:a0:b3:51:ae:73: 4a:7d:9c:d4:a5:32:71:7a:02:19:8a:16:7f:5e:58: 7c:48:ef:bf:2a:31:cb:fd:cf:74:be:64:b3:ee:f0: 38:45:7a:b1:8b:7d:68:31:88:d0:0e:1f:db:a5:07: 9a:a7:c7:f3:2c:41:a1:b7:bb:ed:a7:6d:09:f2:23: f6:8e:7c:56:5f:c0:62:fd:5a:81:4c:e0:04:40:16: 0d:c1:3f:48:fc:ac:4d:04:ba:70:b3:9f:74:4e:db: c2:b0:14:99:da:3c:43:e8:b6:f3:06:69:9f:c3:11: 78:bd:98:a6:45:54:b7:e3:24:d5:c2:ee:cb:a6:40: aa:ea:53:12:64:77:42:81:be:7e:35:35:4d:e9:f6: ae:10:06:db:6a:23:c6:92:7a:3c:d2:ca:01:61:12: af:da:2b:98:5b:70:24:45:14:c9:ff:3a:7e:f7:e7: 00:d2:97:5b:dd:76:d4:46:20:6e:5a:52:e6:47:8d: 18:31:22:e0:d3:56:39:d5:03:e9:95:ef:1c:3d:81: 1f:5b:83:ea:12:f4:10:d1:2a:64:7b:c7:d2:45:4b: b5:54:5d:a9:37:b8:fd:97:f9:f8:98:e3:1e:0c:0e: da:ac:5e:ee:7e:52:e2:c0:a8:d4:ba:14:6b:b8:9b: d5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:15:FD:58:68:DB:C9:74:A6:9E:E9:8A:0C:A3:5D:E3:A6:06:A7:E5 X509v3 Authority Key Identifier: keyid:01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:1c:bd:1f:26:b4:30:8c:b9:4a:d2:ee:08:3b:87:dd:fa:f3: 78:e9:4f:4c:fe:00:ef:33:1b:2d:f4:96:5e:2b:05:33:89:51: 35:9e:d0:c5:6b:b1:99:cb:02:54:61:1e:db:8e:97:25:bc:c2: 11:1c:13:4c:ed:38:76:5a:02:68:cc:5f:b3:cb:b2:a0:da:38: 83:15:30:13:41:a8:b0:1e:61:13:16:5a:75:69:bb:8c:1c:f3: 3e:85:a4:e3:f0:a2:19:45:ed:c2:eb:e8:02:aa:c1:1e:e0:82: 93:da:4b:0a:ef:3b:7b:85:0e:0e:2b:56:89:42:7d:94:88:fd: b7:46:bd:df:1a:c3:e9:2f:e6:e1:29:e5:15:98:e8:56:f1:0c: bb:d9:e3:0c:41:a0:f5:5d:e8:80:6c:e7:25:e1:27:31:1d:b0: c8:fc:7a:4c:d1:89:95:aa:8d:2e:fa:25:07:d8:f1:70:b4:28: cb:db:f5:bd:c3:ed:54:ad:c4:e1:89:2e:d7:2c:ac:9c:43:81: ce:ee:dc:2c:5e:8f:c8:c8:4f:5a:68:14:52:8d:da:00:77:8b: db:5a:fe:6a:db:2c:ae:5d:da:2e:01:0f:6e:0c:62:7e:7d:e2: e4:72:a8:64:7f:3d:ab:ec:48:14:96:3a:45:ed:2e:a3:17:25: 60:bf:68:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEDGfG8atIEFLKV+EANoTfiHpj64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFDQjcxMDhCQkNBMjlGNTU0RDQyMUFDRTAzMkI5NzdB QTFCRjY3QzAeFw0yNTA2MTYwMDE3MDlaFw0yNTA2MTcwMjI5MDlaMDMxMTAvBgNV BAMTKEU2MTVGRDU4NjhEQkM5NzRBNjlFRTk4QTBDQTM1REUzQTYwNkE3RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+68PwG/jkn2+gs1Guc0p9nNSl MnF6AhmKFn9eWHxI778qMcv9z3S+ZLPu8DhFerGLfWgxiNAOH9ulB5qnx/MsQaG3 u+2nbQnyI/aOfFZfwGL9WoFM4ARAFg3BP0j8rE0EunCzn3RO28KwFJnaPEPotvMG aZ/DEXi9mKZFVLfjJNXC7sumQKrqUxJkd0KBvn41NU3p9q4QBttqI8aSejzSygFh Eq/aK5hbcCRFFMn/On735wDSl1vddtRGIG5aUuZHjRgxIuDTVjnVA+mV7xw9gR9b g+oS9BDRKmR7x9JFS7VUXak3uP2X+fiY4x4MDtqsXu5+UuLAqNS6FGu4m9VnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5hX9WGjbyXSmnumKDKNd46YGp+UwHwYDVR0j BBgwFoAUActxCLvKKfVU1CGs4DK5d6ob9nwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUU0Y0d3elR1V21rTWhtakI0enBjV2d6V2JZVlRKRXlkNU02R2JGU2ZV aUIvMS8wMUNCNzEwOEJCQ0EyOUY1NTRENDIxQUNFMDMyQjk3N0FBMUJGNjdDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQ0I3MTA4QkJDQTI5RjU1 NEQ0MjFBQ0UwMzJCOTc3QUExQkY2N0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUU0Y0d3elR1V21rTWhtakI0enBjV2d6V2JZVlRKRXlkNU02R2JGU2ZVaUIvMS8w MUNCNzEwOEJCQ0EyOUY1NTRENDIxQUNFMDMyQjk3N0FBMUJGNjdDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFhy9Hya0MIy5StLuCDuH3frzeOlPTP4A7zMbLfSWXisFM4lRNZ7QxWuxmcsC VGEe246XJbzCERwTTO04dloCaMxfs8uyoNo4gxUwE0GosB5hExZadWm7jBzzPoWk 4/CiGUXtwuvoAqrBHuCCk9pLCu87e4UODitWiUJ9lIj9t0a93xrD6S/m4SnlFZjo VvEMu9njDEGg9V3ogGznJeEnMR2wyPx6TNGJlaqNLvolB9jxcLQoy9v1vcPtVK3E 4Yku1yysnEOBzu7cLF6PyMhPWmgUUo3aAHeL21r+atssrl3aLgEPbgxifn3i5HKo ZH89q+xIFJY6Re0uoxclYL9ojA== -----END CERTIFICATE-----Generated at Mon Jun 16 02:56:34 2025 by rpki-client