$ rpki-client -vvf rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft File: 233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft (raw, json) Hash identifier: B7PnonkpqDDwrnwrcwftmU5hZo0BGsOkdEhSlDN7jWM= Subject key identifier: F6:7B:E6:F6:0B:DD:3A:D0:29:45:63:B7:8E:99:CF:A2:D8:F4:DF:4F Authority key identifier: 23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41 Certificate issuer: /CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41 Certificate serial: 0452DCD702E925BF91CF25A7253AE23478824A81 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer Subject info access: rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft Manifest number: 0251 Signing time: Sun 22 Jun 2025 04:11:36 +0000 Manifest this update: Sun 22 Jun 2025 04:06:36 +0000 Manifest next update: Mon 23 Jun 2025 05:08:36 +0000 Files and hashes: 1: 34352e3136312e3137362e302f32322d3332203d3e20323638343730.roa (hash: V1QDtG5/6mZyaom0qLY64DZx50lLzCOOwWYYnxJfjIY=) 2: 323830343a353162303a3a2f33322d313238203d3e20323638343730.roa (hash: 0+yYrRYF3DnkZpf5I1MIj3HpO9zYE9gRE6VsrC5/q7A=) 3: 233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl (hash: Odq7kNIWsEhqfNd5ujSvjwvx/KDyZnh+l1W3qb3TwQU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Jun 2025 05:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:52:dc:d7:02:e9:25:bf:91:cf:25:a7:25:3a:e2:34:78:82:4a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41 Validity Not Before: Jun 22 04:06:36 2025 GMT Not After : Jun 23 05:08:36 2025 GMT Subject: CN=F67BE6F60BDD3AD0294563B78E99CFA2D8F4DF4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d8:62:ee:a3:e4:a9:19:a7:c3:fa:a1:a0:74: e6:08:59:dd:53:2c:f3:b9:7d:82:c7:42:e8:3f:58: 47:0f:b5:64:42:65:3f:1d:a9:9c:0a:e6:39:d1:0d: 0c:9c:b1:4d:90:42:07:4b:00:94:ae:13:ad:d6:7e: 5f:c9:0c:9b:7f:f2:cf:54:fe:5b:45:8a:76:c9:79: 45:80:0c:90:2b:8c:02:dc:09:fb:9a:ef:8b:4e:7f: f7:b6:1f:bd:69:d2:28:3e:69:cc:e0:f3:b3:69:1b: 2e:a9:37:81:5c:e3:70:0f:8b:24:05:bd:4d:f0:9f: 4f:19:63:45:60:72:f4:30:05:52:29:6a:ce:56:86: 8f:92:51:f2:4c:6a:07:65:d1:8b:5c:20:6e:b3:df: d6:2c:c9:54:f5:ef:be:03:1a:fd:89:a1:a0:18:c5: be:5f:ce:01:10:37:45:cd:11:7b:50:29:d1:27:54: c3:09:39:f6:00:7f:3c:6d:79:22:26:a2:53:37:40: c7:bd:4a:f6:b1:80:da:09:d9:67:04:c2:35:10:84: f0:e5:c6:90:48:ac:9f:5a:bf:4a:97:2d:ca:9e:10: 3e:31:ca:81:35:f8:23:61:82:86:36:c4:f5:ae:d2: 91:3d:d4:63:c0:cf:8c:14:c7:c7:8c:aa:84:17:a2: 4d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7B:E6:F6:0B:DD:3A:D0:29:45:63:B7:8E:99:CF:A2:D8:F4:DF:4F X509v3 Authority Key Identifier: keyid:23:3C:0F:0B:57:1F:DA:1C:33:13:BF:8A:F7:D6:86:C7:4B:AF:CB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xhQ1KwSpMTjQ8HThRnC897n64JYBWpL8UYinasNaAf3/1/233C0F0B571FDA1C3313BF8AF7D686C74BAFCB41.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:54:45:aa:6d:bc:bd:9a:04:a5:99:36:da:3d:c3:aa:16:34: 06:dd:d2:7c:6e:62:c1:9e:21:e4:7f:5f:c7:1c:1a:1e:a6:65: f8:ae:d7:e4:d4:79:22:bd:31:70:e7:19:00:55:61:d6:56:25: 58:79:d4:e9:bc:29:da:bb:0a:67:b8:dd:46:46:4a:b7:43:23: 96:d1:82:74:5c:29:4d:0a:70:09:03:c9:be:f4:9f:8e:9e:0f: b6:d4:06:dc:46:b1:84:04:e1:60:62:57:d8:d0:53:20:72:dd: 12:c8:8b:4f:60:52:69:b8:be:6b:4b:55:be:58:c2:be:2a:1e: 94:10:83:83:b2:a6:6c:39:f7:ec:cc:19:b3:97:bd:b6:41:94: 32:85:98:c5:6d:4c:77:f3:2e:48:f9:4b:27:c6:91:e1:a9:3c: 83:5d:c0:27:fd:c7:ff:aa:e0:5d:7f:dd:e4:0b:3d:2c:c8:d8: 30:b5:7b:15:a5:0f:a8:4a:60:7b:41:d3:e0:63:df:b4:a8:fa: 96:b7:3a:b6:55:b7:7a:54:3f:3e:b9:a5:ee:19:1d:25:3f:27: 91:37:a3:43:52:ac:a2:d1:6f:6c:35:22:fd:e3:53:c4:99:b5: e4:ff:7f:0c:8f:a6:21:5d:90:24:84:2f:03:51:12:d8:ee:76: b8:47:7c:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBFLc1wLpJb+RzyWnJTriNHiCSoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQzBGMEI1NzFGREExQzMzMTNCRjhBRjdENjg2Qzc0 QkFGQ0I0MTAeFw0yNTA2MjIwNDA2MzZaFw0yNTA2MjMwNTA4MzZaMDMxMTAvBgNV BAMTKEY2N0JFNkY2MEJERDNBRDAyOTQ1NjNCNzhFOTlDRkEyRDhGNERGNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW2GLuo+SpGafD+qGgdOYIWd1T LPO5fYLHQug/WEcPtWRCZT8dqZwK5jnRDQycsU2QQgdLAJSuE63Wfl/JDJt/8s9U /ltFinbJeUWADJArjALcCfua74tOf/e2H71p0ig+aczg87NpGy6pN4Fc43APiyQF vU3wn08ZY0VgcvQwBVIpas5Who+SUfJMagdl0YtcIG6z39YsyVT1774DGv2JoaAY xb5fzgEQN0XNEXtQKdEnVMMJOfYAfzxteSImolM3QMe9SvaxgNoJ2WcEwjUQhPDl xpBIrJ9av0qXLcqeED4xyoE1+CNhgoY2xPWu0pE91GPAz4wUx8eMqoQXok09AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9nvm9gvdOtApRWO3jpnPotj0308wHwYDVR0j BBgwFoAUIzwPC1cf2hwzE7+K99aGx0uvy0EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXhoUTFLd1NwTVRqUThIVGhSbkM4OTduNjRKWUJXcEw4VVlpbmFzTmFB ZjMvMS8yMzNDMEYwQjU3MUZEQTFDMzMxM0JGOEFGN0Q2ODZDNzRCQUZDQjQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzM0MwRjBCNTcxRkRBMUMz MzEzQkY4QUY3RDY4NkM3NEJBRkNCNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OXhoUTFLd1NwTVRqUThIVGhSbkM4OTduNjRKWUJXcEw4VVlpbmFzTmFBZjMvMS8y MzNDMEYwQjU3MUZEQTFDMzMxM0JGOEFGN0Q2ODZDNzRCQUZDQjQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAelRFqm28vZoEpZk22j3DqhY0Bt3SfG5iwZ4h5H9fxxwaHqZl+K7X5NR5Ir0x cOcZAFVh1lYlWHnU6bwp2rsKZ7jdRkZKt0MjltGCdFwpTQpwCQPJvvSfjp4PttQG 3EaxhAThYGJX2NBTIHLdEsiLT2BSabi+a0tVvljCvioelBCDg7KmbDn37MwZs5e9 tkGUMoWYxW1Md/MuSPlLJ8aR4ak8g13AJ/3H/6rgXX/d5As9LMjYMLV7FaUPqEpg e0HT4GPftKj6lrc6tlW3elQ/Prml7hkdJT8nkTejQ1KsotFvbDUi/eNTxJm15P9/ DI+mIV2QJIQvA1ES2O52uEd84Q== -----END CERTIFICATE-----Generated at Sun Jun 22 20:22:05 2025 by rpki-client