$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft File: 5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft (raw, json) Hash identifier: 1pMDb9nAzHxUKPmBLRjKUPvNA4xFAY+2W737MsEzWss= Subject key identifier: D4:71:D2:1B:68:D7:BF:B4:9D:7C:63:7D:82:5F:A9:BD:6F:B7:D9:5F Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03 Certificate issuer: /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03 Certificate serial: 515395F3DA394DE538E9D63EFD93D45AB77DD2E0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer Subject info access: rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft Manifest number: 02AA Signing time: Sat 21 Jun 2025 23:50:16 +0000 Manifest this update: Sat 21 Jun 2025 23:45:16 +0000 Manifest next update: Mon 23 Jun 2025 03:37:16 +0000 Files and hashes: 1: 5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl (hash: 9anrATqI82TXpP1UNwXl7/NM6rw4H1TqaNj3ASGOvqs=) 2: 323830343a3830343a3a2f33322d3438203d3e20323632333338.roa (hash: ymdJP8Nbk9jRmYyOWMHk1THgRAKhTi9mQg1JwV1w5V8=) 3: 3137372e3132362e36342e302f32302d3234203d3e20323632333338.roa (hash: JHu+YEvSyZhTF52NbNsxoKk1ovrHwWDZ7McbbiRag8I=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Jun 2025 03:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:53:95:f3:da:39:4d:e5:38:e9:d6:3e:fd:93:d4:5a:b7:7d:d2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03 Validity Not Before: Jun 21 23:45:16 2025 GMT Not After : Jun 23 03:37:16 2025 GMT Subject: CN=D471D21B68D7BFB49D7C637D825FA9BD6FB7D95F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:49:b8:d1:ad:7b:37:ec:0f:e3:16:6d:99:ff: 6f:9b:b9:7f:18:e5:be:da:b3:3e:fe:82:d2:f5:99: 4c:7f:64:c6:05:08:14:fc:a5:0f:94:15:8c:db:48: 42:d6:12:6a:f5:47:7b:05:ad:ff:12:4f:5c:9f:1f: b2:a3:b3:d9:d1:bb:b7:ac:0b:11:0f:81:60:83:b7: dc:59:05:d6:ef:35:d2:b9:57:a1:fd:ea:a3:1f:8e: 92:a1:f8:e3:cb:57:fa:2f:62:09:25:5a:99:74:7f: 04:ad:fe:3f:c3:c7:4e:20:ba:ed:5d:d3:3e:1c:6d: 90:45:a1:58:b7:8d:58:e2:6e:01:42:0e:91:43:d5: 7b:2e:75:cd:eb:18:95:36:6e:ba:86:bd:b6:3b:f1: 48:cd:2e:8b:43:e7:55:93:27:f3:c8:7d:88:9e:5f: 0a:33:02:89:fb:b6:c8:a7:86:d4:33:57:0b:f3:b0: d7:3f:b9:9f:29:96:4f:4f:50:4a:86:b2:4a:c3:9d: cf:56:ba:e8:c4:89:b4:27:f2:ea:84:29:94:34:5e: 5b:c7:be:b8:76:1a:53:6c:62:47:44:41:85:c6:26: 59:48:6f:b7:70:45:a5:8b:02:1c:44:9d:99:57:1c: 83:46:e3:e6:c8:eb:81:32:0f:45:49:c1:22:52:5e: 8e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:71:D2:1B:68:D7:BF:B4:9D:7C:63:7D:82:5F:A9:BD:6F:B7:D9:5F X509v3 Authority Key Identifier: keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:22:9c:a0:1e:a6:5f:d9:8c:e2:45:2c:46:85:93:3a:9a:2e: 4e:3e:54:8e:64:4b:12:1e:4b:48:7e:b1:eb:fd:cb:b8:92:95: 4f:da:5a:91:ca:a9:19:bb:be:9b:17:f2:f6:c8:94:ec:0e:d5: 68:1a:13:50:71:4e:cb:a8:33:ad:6d:8f:3e:34:83:07:3f:89: 1b:3e:0a:b4:b8:55:87:5b:c0:f1:bc:44:2f:c2:3d:29:a1:11: ab:db:22:16:82:12:06:82:cf:62:44:39:90:11:fa:8e:65:0b: 72:a8:53:95:7d:75:fd:8e:03:95:b2:93:d0:57:54:fc:ca:8f: f6:77:44:2b:85:59:ea:4b:7b:bb:2b:53:cd:71:8d:4c:59:53: 39:a8:67:92:38:aa:2f:16:39:c0:6d:94:30:b4:8b:c8:89:e2: 2c:7f:36:7c:7c:3e:16:3c:81:83:7c:6a:e2:5f:d9:c0:66:32: 24:e1:0c:df:bf:5d:bd:a8:d1:64:60:69:94:93:2a:56:6f:4b: 5f:0d:23:91:b2:08:70:57:6f:f4:96:3a:76:4e:6e:b2:0f:c7: e8:f4:72:cf:19:29:86:66:9b:d0:41:27:20:66:be:9c:fc:f1: 83:0c:f7:89:47:4f:60:2c:e0:65:d7:85:1e:56:f2:48:02:22: b5:8a:96:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUVOV89o5TeU46dY+/ZPUWrd90uAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQxQTEyMEQ3MjgxMjVGNjBGRjREQ0JGMUVDN0RBNTRG MERCRUQwMzAeFw0yNTA2MjEyMzQ1MTZaFw0yNTA2MjMwMzM3MTZaMDMxMTAvBgNV BAMTKEQ0NzFEMjFCNjhEN0JGQjQ5RDdDNjM3RDgyNUZBOUJENkZCN0Q5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlSbjRrXs37A/jFm2Z/2+buX8Y 5b7asz7+gtL1mUx/ZMYFCBT8pQ+UFYzbSELWEmr1R3sFrf8ST1yfH7Kjs9nRu7es CxEPgWCDt9xZBdbvNdK5V6H96qMfjpKh+OPLV/ovYgklWpl0fwSt/j/Dx04guu1d 0z4cbZBFoVi3jVjibgFCDpFD1Xsudc3rGJU2brqGvbY78UjNLotD51WTJ/PIfYie XwozAon7tsinhtQzVwvzsNc/uZ8plk9PUEqGskrDnc9WuujEibQn8uqEKZQ0XlvH vrh2GlNsYkdEQYXGJllIb7dwRaWLAhxEnZlXHING4+bI64EyD0VJwSJSXo7vAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1HHSG2jXv7SdfGN9gl+pvW+32V8wHwYDVR0j BBgwFoAUXRoSDXKBJfYP9Ny/HsfaVPDb7QMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOW9rc2Yzc0x4bmJxZ3hQZUNQaENNYXM5dDdqUkFrVjgydm44VGtMUnhH c3YvMC81RDFBMTIwRDcyODEyNUY2MEZGNERDQkYxRUM3REE1NEYwREJFRDAzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEMUExMjBENzI4MTI1RjYw RkY0RENCRjFFQzdEQTU0RjBEQkVEMDMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OW9rc2Yzc0x4bmJxZ3hQZUNQaENNYXM5dDdqUkFrVjgydm44VGtMUnhHc3YvMC81 RDFBMTIwRDcyODEyNUY2MEZGNERDQkYxRUM3REE1NEYwREJFRDAzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuiKcoB6mX9mM4kUsRoWTOpouTj5UjmRLEh5LSH6x6/3LuJKVT9pakcqpGbu+ mxfy9siU7A7VaBoTUHFOy6gzrW2PPjSDBz+JGz4KtLhVh1vA8bxEL8I9KaERq9si FoISBoLPYkQ5kBH6jmULcqhTlX11/Y4DlbKT0FdU/MqP9ndEK4VZ6kt7uytTzXGN TFlTOahnkjiqLxY5wG2UMLSLyIniLH82fHw+FjyBg3xq4l/ZwGYyJOEM379dvajR ZGBplJMqVm9LXw0jkbIIcFdv9JY6dk5usg/H6PRyzxkphmab0EEnIGa+nPzxgwz3 iUdPYCzgZdeFHlbySAIitYqWiA== -----END CERTIFICATE-----Generated at Sun Jun 22 08:55:27 2025 by rpki-client