$ rpki-client -vvf rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/5D8E291FC4CF478643AB7209C821075FDE56D7A5.mft File: 5D8E291FC4CF478643AB7209C821075FDE56D7A5.mft (raw, json) Hash identifier: SD6fHHMo1LQWtj8tDmX/WiE09t/9eDVTl0EI4UiXr/U= Subject key identifier: C6:2C:79:96:58:66:E2:73:9D:0F:35:6D:22:4A:7B:C3:EB:E3:C8:8E Authority key identifier: 5D:8E:29:1F:C4:CF:47:86:43:AB:72:09:C8:21:07:5F:DE:56:D7:A5 Certificate issuer: /CN=5D8E291FC4CF478643AB7209C821075FDE56D7A5 Certificate serial: 4B4B63154A1781A585CECCA3584EB98114067D07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D8E291FC4CF478643AB7209C821075FDE56D7A5.cer Subject info access: rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/5D8E291FC4CF478643AB7209C821075FDE56D7A5.mft Manifest number: 01CA Signing time: Sat 21 Jun 2025 01:37:41 +0000 Manifest this update: Sat 21 Jun 2025 01:32:41 +0000 Manifest next update: Sun 22 Jun 2025 05:19:41 +0000 Files and hashes: 1: 323830343a373138383a3a2f33322d3333203d3e20323730373935.roa (hash: rqfcJVTWdSt0ihIQEcUr0uEdk6/Gke5b8vMBf/9mBok=) 2: 3138392e33362e3234342e302f32322d3234203d3e20323730373935.roa (hash: zB83DgGFStjvU+aix2aNmkBzVdHeo91wOxMAPdbCnAU=) 3: 5D8E291FC4CF478643AB7209C821075FDE56D7A5.crl (hash: SLv1BAIV35ggrDgX8CB+o7/3Z+d2Od3QDUTsogrR2Bk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/5D8E291FC4CF478643AB7209C821075FDE56D7A5.crl rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/5D8E291FC4CF478643AB7209C821075FDE56D7A5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D8E291FC4CF478643AB7209C821075FDE56D7A5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Jun 2025 05:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4b:63:15:4a:17:81:a5:85:ce:cc:a3:58:4e:b9:81:14:06:7d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D8E291FC4CF478643AB7209C821075FDE56D7A5 Validity Not Before: Jun 21 01:32:41 2025 GMT Not After : Jun 22 05:19:41 2025 GMT Subject: CN=C62C79965866E2739D0F356D224A7BC3EBE3C88E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:38:17:4f:cb:75:11:69:b7:a0:f7:d8:50:e0: 4c:6a:82:45:8b:ec:86:62:68:d8:d1:46:16:a5:e1: 1b:7b:39:8b:3b:10:3f:9e:96:15:a5:24:5b:f1:3f: ee:cf:cf:50:9c:d7:ec:a9:88:a5:92:0b:5c:10:0a: 05:15:b6:b4:f9:43:57:2c:e5:3d:e5:7d:9a:98:9b: 11:25:db:53:d3:c3:a1:50:f3:3c:55:50:bf:fc:60: 0d:23:f1:eb:04:e9:2d:f3:ac:67:2a:92:f7:a7:10: 31:81:55:bc:73:9c:16:ef:f5:d0:f7:d2:7c:9e:bd: 95:ff:b2:4b:8a:3e:14:1c:81:7a:43:b2:66:a2:22: ae:d9:2c:40:85:42:6f:c7:fc:69:71:44:5a:79:74: 7c:c8:31:14:a6:c2:84:48:30:3c:05:d5:e7:fc:fa: d9:df:6f:94:c7:59:38:fc:ed:ed:1e:6f:98:f0:f4: e0:04:1f:6e:60:90:f3:6f:4d:dc:28:75:ce:60:77: 11:b0:c2:00:f4:65:af:4b:51:cb:46:4a:b8:4a:54: c7:83:a2:ea:37:96:45:62:b0:42:9e:d7:68:18:dd: 40:e0:24:6e:fb:89:0c:9a:cd:9c:35:fc:f3:92:32: bf:8e:d2:22:b6:b5:e6:ac:7a:94:c4:8a:b6:4a:57: 59:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2C:79:96:58:66:E2:73:9D:0F:35:6D:22:4A:7B:C3:EB:E3:C8:8E X509v3 Authority Key Identifier: keyid:5D:8E:29:1F:C4:CF:47:86:43:AB:72:09:C8:21:07:5F:DE:56:D7:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/5D8E291FC4CF478643AB7209C821075FDE56D7A5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D8E291FC4CF478643AB7209C821075FDE56D7A5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AG6C24GVPT12BK1Rn9b5jitUrxyCxLsqXPKgxVCTaiTZ/0/5D8E291FC4CF478643AB7209C821075FDE56D7A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:bd:47:30:c6:db:92:62:07:d0:b5:15:71:60:2d:21:a6:f1: 0f:4c:26:09:5b:1c:65:67:f8:5e:3a:2e:be:34:5b:46:8b:92: ac:e1:e5:7f:42:ac:b1:3b:47:d0:36:9a:16:43:3d:d4:e1:66: f5:54:a5:e3:57:86:10:41:6f:5c:ef:ab:de:3c:3f:6a:e1:e3: ed:7e:89:63:38:4e:1d:11:7e:b8:b3:27:e7:79:b0:e0:68:af: 67:90:4f:08:59:1e:3f:a4:57:7f:4d:e0:05:20:c2:dd:48:17: 78:a3:89:da:32:83:7a:5f:b5:34:c4:94:3e:0b:16:25:30:3b: 42:df:33:7d:91:79:54:46:51:00:57:f3:3b:15:83:21:df:ee: 63:da:9f:b2:2f:c3:69:93:cc:da:8b:91:d9:69:2d:29:c6:dc: 35:d6:bc:d5:1b:4e:ae:a8:5d:b1:72:dc:a5:b2:b5:e5:8d:5f: 8c:74:fc:d5:c0:55:cd:b0:4a:e2:4e:24:e2:46:1b:ca:9b:89: 56:52:a8:1f:4a:45:66:b5:97:35:f8:d7:22:89:68:2b:8d:94: 88:7c:30:61:2f:7b:88:67:ff:74:aa:29:84:d2:17:c4:a4:55: d2:39:39:6c:f1:09:c0:a3:42:9d:5f:18:7c:e6:58:ca:4e:68: 05:fd:88:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS0tjFUoXgaWFzsyjWE65gRQGfQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ4RTI5MUZDNENGNDc4NjQzQUI3MjA5QzgyMTA3NUZE RTU2RDdBNTAeFw0yNTA2MjEwMTMyNDFaFw0yNTA2MjIwNTE5NDFaMDMxMTAvBgNV BAMTKEM2MkM3OTk2NTg2NkUyNzM5RDBGMzU2RDIyNEE3QkMzRUJFM0M4OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCOBdPy3URabeg99hQ4ExqgkWL 7IZiaNjRRhal4Rt7OYs7ED+elhWlJFvxP+7Pz1Cc1+ypiKWSC1wQCgUVtrT5Q1cs 5T3lfZqYmxEl21PTw6FQ8zxVUL/8YA0j8esE6S3zrGcqkvenEDGBVbxznBbv9dD3 0nyevZX/skuKPhQcgXpDsmaiIq7ZLECFQm/H/GlxRFp5dHzIMRSmwoRIMDwF1ef8 +tnfb5THWTj87e0eb5jw9OAEH25gkPNvTdwodc5gdxGwwgD0Za9LUctGSrhKVMeD ouo3lkVisEKe12gY3UDgJG77iQyazZw1/POSMr+O0iK2teasepTEirZKV1lFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUxix5llhm4nOdDzVtIkp7w+vjyI4wHwYDVR0j BBgwFoAUXY4pH8TPR4ZDq3IJyCEHX95W16UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUc2QzI0R1ZQVDEyQksxUm45YjVqaXRVcnh5Q3hMc3FYUEtneFZDVGFp VFovMC81RDhFMjkxRkM0Q0Y0Nzg2NDNBQjcyMDlDODIxMDc1RkRFNTZEN0E1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEOEUyOTFGQzRDRjQ3ODY0 M0FCNzIwOUM4MjEwNzVGREU1NkQ3QTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUc2QzI0R1ZQVDEyQksxUm45YjVqaXRVcnh5Q3hMc3FYUEtneFZDVGFpVFovMC81 RDhFMjkxRkM0Q0Y0Nzg2NDNBQjcyMDlDODIxMDc1RkRFNTZEN0E1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASr1HMMbbkmIH0LUVcWAtIabxD0wmCVscZWf4XjouvjRbRouSrOHlf0KssTtH 0DaaFkM91OFm9VSl41eGEEFvXO+r3jw/auHj7X6JYzhOHRF+uLMn53mw4GivZ5BP CFkeP6RXf03gBSDC3UgXeKOJ2jKDel+1NMSUPgsWJTA7Qt8zfZF5VEZRAFfzOxWD Id/uY9qfsi/DaZPM2ouR2WktKcbcNda81RtOrqhdsXLcpbK15Y1fjHT81cBVzbBK 4k4k4kYbypuJVlKoH0pFZrWXNfjXIoloK42UiHwwYS97iGf/dKophNIXxKRV0jk5 bPEJwKNCnV8YfOZYyk5oBf2Icg== -----END CERTIFICATE-----Generated at Sat Jun 21 16:53:56 2025 by rpki-client