$ rpki-client -vvf rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.mft File: E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.mft (raw, json) Hash identifier: Vsecyh5s+4ecRgLTk/pXbaHsUAAOvKo+XAiE7/8RdzU= Subject key identifier: EB:67:6B:97:2A:C6:22:13:1A:CC:14:E2:19:4B:06:50:4B:87:DD:FD Authority key identifier: E3:23:E2:3C:16:E9:98:B1:FB:AB:1F:A1:C8:5D:27:3E:8D:4F:FE:EE Certificate issuer: /CN=E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE Certificate serial: 417AC90E9AEF5213E3773D64D68FD0D3A95CE691 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.cer Subject info access: rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.mft Manifest number: 0253 Signing time: Mon 23 Jun 2025 10:01:15 +0000 Manifest this update: Mon 23 Jun 2025 09:56:15 +0000 Manifest next update: Tue 24 Jun 2025 10:38:15 +0000 Files and hashes: 1: 323830343a313164383a3a2f33322d3438203d3e20323633343433.roa (hash: y1MN3k5l5ZhjNF9rR3L8krseRnQAtI0KUHDf9pNUMWQ=) 2: E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.crl (hash: lMI3JqC7VBiyfhMG3+c2GIlBX06rOdyoPtUgjNmT2BQ=) 3: 3137372e39312e3133322e302f32322d3234203d3e20323633343433.roa (hash: gYzvr5YFI+HNqr2VzVsFIIyT5cOKj6GHJk9U2jKE010=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.crl rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 24 Jun 2025 10:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7a:c9:0e:9a:ef:52:13:e3:77:3d:64:d6:8f:d0:d3:a9:5c:e6:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE Validity Not Before: Jun 23 09:56:15 2025 GMT Not After : Jun 24 10:38:15 2025 GMT Subject: CN=EB676B972AC622131ACC14E2194B06504B87DDFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d0:3c:e6:6a:77:1a:19:8f:ad:5d:bf:a4:73: c5:c1:4a:65:8d:2d:f3:64:b4:b5:ec:47:56:92:fb: ac:b1:19:9e:02:50:0a:11:0d:e6:8e:96:d4:fe:d4: db:c5:36:e9:d3:18:87:1d:9f:d6:b9:52:26:dc:cc: 5f:ec:29:26:99:87:35:c0:e4:ce:56:c3:88:27:bf: f1:d9:c1:6f:82:b5:a2:c5:76:f0:11:de:50:c6:ab: 3a:e3:3e:79:14:a3:75:7a:93:17:61:9c:9c:ca:84: bc:da:ed:85:e4:5d:a7:a5:33:cb:f0:fe:e0:3b:fd: e6:eb:58:6b:12:4d:7d:c4:74:2a:26:f9:2f:95:3a: 1b:0d:67:38:be:ba:e6:af:c6:f2:5d:52:2d:93:3f: 20:64:4b:2a:a4:40:fd:8d:a5:94:c2:df:44:13:c3: b5:63:cd:d7:96:4b:77:5d:79:85:b2:ae:d3:63:c9: ea:60:38:ef:8a:f3:dc:d0:ed:98:1c:f4:30:1f:86: 0a:57:84:ef:aa:7e:2f:da:9b:f1:36:4c:31:a6:db: 3f:59:cc:19:9a:b8:2a:fb:2d:b7:9d:75:10:fb:63: bf:b3:0b:c5:03:19:69:af:e9:76:56:a5:46:d3:3d: 11:6f:09:61:84:44:f0:89:de:5d:1f:cf:95:87:98: c1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:67:6B:97:2A:C6:22:13:1A:CC:14:E2:19:4B:06:50:4B:87:DD:FD X509v3 Authority Key Identifier: keyid:E3:23:E2:3C:16:E9:98:B1:FB:AB:1F:A1:C8:5D:27:3E:8D:4F:FE:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RthThtZv7rrREVF5bnBaK5YzzMPa25WL1zxy5q8NScu/1/E323E23C16E998B1FBAB1FA1C85D273E8D4FFEEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1b:bc:5b:62:a3:43:d1:05:a7:48:65:3a:3a:48:fd:4d:88: c0:41:e4:9c:d9:ac:4c:b4:5b:9b:8e:e5:f7:77:47:12:17:6a: 45:5c:5d:d8:94:fe:af:93:22:b2:63:00:55:7c:64:5a:5f:f9: 1a:c2:61:2d:03:71:b4:78:93:ed:6a:d5:84:38:dc:8d:d2:08: ef:f1:37:7b:cd:c4:6e:17:3e:ea:34:57:36:5c:e2:14:c8:c7: 32:ee:5a:b8:a4:a8:b6:f2:1b:d0:19:50:16:48:5f:91:55:38: 9b:02:b8:fb:f7:96:33:9e:03:d5:0b:34:38:73:4e:8e:ad:a6: 84:c9:ff:49:c9:fc:34:0a:8a:77:05:24:50:9b:8d:f8:ee:b7: 99:08:3a:25:9e:28:79:01:ac:84:15:8d:bd:af:84:ee:96:00: d2:b2:e9:af:44:b2:aa:7a:84:8f:c5:ad:55:cd:16:8b:62:e1: b3:fe:f2:87:44:b0:e5:b8:a0:44:dd:ac:2c:60:58:22:98:a7: 08:e0:5f:f7:88:89:4e:12:44:d4:bd:05:04:70:79:92:c3:64: 21:f1:93:20:78:f5:e2:03:d0:9b:02:fc:7a:46:3d:51:50:32: e4:a3:e8:55:08:a2:77:8f:2a:b5:6b:94:68:78:c0:39:12:4d: 0f:5b:86:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQXrJDprvUhPjdz1k1o/Q06lc5pEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMyM0UyM0MxNkU5OThCMUZCQUIxRkExQzg1RDI3M0U4 RDRGRkVFRTAeFw0yNTA2MjMwOTU2MTVaFw0yNTA2MjQxMDM4MTVaMDMxMTAvBgNV BAMTKEVCNjc2Qjk3MkFDNjIyMTMxQUNDMTRFMjE5NEIwNjUwNEI4N0RERkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT0DzmancaGY+tXb+kc8XBSmWN LfNktLXsR1aS+6yxGZ4CUAoRDeaOltT+1NvFNunTGIcdn9a5UibczF/sKSaZhzXA 5M5Ww4gnv/HZwW+CtaLFdvAR3lDGqzrjPnkUo3V6kxdhnJzKhLza7YXkXaelM8vw /uA7/ebrWGsSTX3EdCom+S+VOhsNZzi+uuavxvJdUi2TPyBkSyqkQP2NpZTC30QT w7VjzdeWS3ddeYWyrtNjyepgOO+K89zQ7Zgc9DAfhgpXhO+qfi/am/E2TDGm2z9Z zBmauCr7LbeddRD7Y7+zC8UDGWmv6XZWpUbTPRFvCWGERPCJ3l0fz5WHmMFbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU62drlyrGIhMazBTiGUsGUEuH3f0wHwYDVR0j BBgwFoAU4yPiPBbpmLH7qx+hyF0nPo1P/u4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOVJ0aFRodFp2N3JyUkVWRjVibkJhSzVZenpNUGEyNVdMMXp4eTVxOE5T Y3UvMS9FMzIzRTIzQzE2RTk5OEIxRkJBQjFGQTFDODVEMjczRThENEZGRUVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzMjNFMjNDMTZFOTk4QjFG QkFCMUZBMUM4NUQyNzNFOEQ0RkZFRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OVJ0aFRodFp2N3JyUkVWRjVibkJhSzVZenpNUGEyNVdMMXp4eTVxOE5TY3UvMS9F MzIzRTIzQzE2RTk5OEIxRkJBQjFGQTFDODVEMjczRThENEZGRUVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAixu8W2KjQ9EFp0hlOjpI/U2IwEHknNmsTLRbm47l93dHEhdqRVxd2JT+r5Mi smMAVXxkWl/5GsJhLQNxtHiT7WrVhDjcjdII7/E3e83Ebhc+6jRXNlziFMjHMu5a uKSotvIb0BlQFkhfkVU4mwK4+/eWM54D1Qs0OHNOjq2mhMn/Scn8NAqKdwUkUJuN +O63mQg6JZ4oeQGshBWNva+E7pYA0rLpr0SyqnqEj8WtVc0Wi2Lhs/7yh0Sw5big RN2sLGBYIpinCOBf94iJThJE1L0FBHB5ksNkIfGTIHj14gPQmwL8ekY9UVAy5KPo VQiid48qtWuUaHjAORJND1uGbw== -----END CERTIFICATE-----Generated at Mon Jun 23 16:46:35 2025 by rpki-client