$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.mft File: 0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.mft (raw, json) Hash identifier: +lObG1lTD/B9WbmBWEmGFREsq8uSk8BJOomHXr4eWjQ= Subject key identifier: D7:B7:08:50:62:8E:12:21:AA:D3:0F:9B:09:A2:1E:0E:62:59:53:68 Authority key identifier: 0F:2A:26:5C:3F:59:E2:EA:13:0A:D2:C2:44:5A:3F:37:EB:9A:EA:86 Certificate issuer: /CN=0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86 Certificate serial: 76DC71171828DC53D0052F66EF303470E3F54E97 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer Subject info access: rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.mft Manifest number: 04 Signing time: Fri 20 Jun 2025 05:28:51 +0000 Manifest this update: Fri 20 Jun 2025 05:23:51 +0000 Manifest next update: Sat 21 Jun 2025 06:54:51 +0000 Files and hashes: 1: 323830343a383537383a3a2f33332d3333203d3e20323732353831.roa (hash: RKPxE90xeJX3Tr9HwA7KlEeVzghP05bA9MF380RZEjc=) 2: 323830343a383537383a3a2f33322d3332203d3e20323732353831.roa (hash: kFbZUxX/GPkFsRWDwJgKImWD0yVnpCCU7YX4Wsi/lnQ=) 3: 323830343a383537383a383030303a3a2f33332d3333203d3e20323732353831.roa (hash: x0c53G6wS19veWxAUqMY57bBWpAyEqUbguqKbHuzXEQ=) 4: 0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.crl (hash: i4tuOPKM85zBNRTtk3+cEj7YkZ4kfg1ymE0LJHCZeRw=) 5: 323830343a383537383a383030303a3a2f33342d3334203d3e20323732353831.roa (hash: ioH1stFIWSuKnecw4s/7QnAiVPG6wo7B5emgO5WB4FM=) 6: 323830343a383537383a343030303a3a2f33342d3334203d3e20323732353831.roa (hash: JcJr4mdcF3RqXqzqfUnRss/28VStaz75ASIW0Y6TLqc=) 7: 323830343a383537383a633030303a3a2f33342d3334203d3e20323732353831.roa (hash: c1uYt5fcoKgMc/KghroZTfAZnrmCpo+exnVy7t3s5JM=) 8: 323830343a383537383a3a2f33342d3334203d3e20323732353831.roa (hash: E2xyYaEHLMeZBdx+F6/x1jKYRsRH7ARE4RhPIXD2pz8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.crl rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 06:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:dc:71:17:18:28:dc:53:d0:05:2f:66:ef:30:34:70:e3:f5:4e:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86 Validity Not Before: Jun 20 05:23:51 2025 GMT Not After : Jun 21 06:54:51 2025 GMT Subject: CN=D7B70850628E1221AAD30F9B09A21E0E62595368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:58:39:38:0e:32:8a:0c:9d:cd:b1:f7:d1:28: ad:d7:89:7e:b9:08:ba:38:c4:66:73:28:69:2a:9d: 97:d3:19:be:5d:4e:29:18:67:96:b7:25:27:ab:e5: e9:5b:4e:dc:07:7c:de:36:b4:da:5c:ef:61:20:9e: 3e:10:76:d1:e9:72:62:7a:16:79:7c:f0:f5:d0:5c: 48:c6:9b:1b:8f:13:0a:d3:9f:11:bd:82:70:2e:00: 6b:02:4b:2b:df:78:a5:21:0a:1a:93:e8:14:98:14: 0e:69:60:f7:52:d3:4e:b1:1f:ba:a8:6c:32:58:87: e3:3b:33:75:5c:b6:9a:68:3e:be:1d:d2:61:ce:71: 6a:a4:df:4f:95:30:a4:07:4a:26:bd:af:23:79:32: e4:2d:ac:08:86:c4:b4:66:da:a9:32:30:62:1f:fb: 05:b5:31:0f:40:b4:78:00:99:34:34:be:34:38:70: ac:e4:1e:fc:b3:40:f3:68:eb:7d:a6:42:9a:90:f1: 51:2a:9d:86:f8:64:33:c8:f8:fc:71:c0:6f:f4:2f: c7:49:f6:66:68:1b:be:e4:ed:3e:05:8c:e7:9c:64: 10:b1:57:d5:c8:aa:a6:d4:1d:ee:fa:a4:98:83:d9: 5a:5a:9a:ef:ba:03:6f:d1:ee:7b:7b:ec:97:d3:89: de:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B7:08:50:62:8E:12:21:AA:D3:0F:9B:09:A2:1E:0E:62:59:53:68 X509v3 Authority Key Identifier: keyid:0F:2A:26:5C:3F:59:E2:EA:13:0A:D2:C2:44:5A:3F:37:EB:9A:EA:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7e:57:75:9c:8a:9b:f8:87:a3:cf:cf:70:c3:15:9c:e3:b2: 39:61:5c:9b:ab:36:1c:22:7a:dc:dd:67:55:12:7a:ea:99:b7: 26:36:4a:4e:2e:6e:e6:13:9d:8c:c1:e9:5a:54:98:9c:f6:78: 79:07:bc:9c:1a:5e:62:fd:61:f7:9b:ec:22:47:2a:57:df:33: 24:07:9c:c5:e8:2a:a3:b0:ec:38:e9:48:3d:59:5e:74:d3:db: ac:03:71:43:78:5f:01:72:75:8e:ab:93:64:43:d4:91:c7:4a: 13:ef:57:a2:57:51:ea:0b:12:52:25:37:1b:92:53:e1:26:0c: 0b:6f:db:ff:79:4c:51:de:be:c5:e7:94:2d:72:7b:df:ec:ad: b5:e4:14:c8:32:05:a4:4b:f3:34:a8:a5:e6:44:23:d1:9f:07: 66:44:6a:4c:f7:cb:8b:63:a6:c9:23:80:bf:a7:43:a2:12:66: 3b:1d:58:28:57:c5:14:53:6c:7e:f7:61:f6:ad:ea:5b:30:fd: c7:58:f1:30:e1:93:b2:1d:9b:e0:b9:e7:48:37:af:18:d8:fe: 1b:30:92:fc:cf:33:dc:f6:62:54:96:03:49:e8:d2:e7:ca:6c: 5e:57:0e:26:15:fc:63:24:e7:26:fa:39:d3:96:96:94:cb:19: 82:a8:bf:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdtxxFxgo3FPQBS9m7zA0cOP1TpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyQTI2NUMzRjU5RTJFQTEzMEFEMkMyNDQ1QTNGMzdF QjlBRUE4NjAeFw0yNTA2MjAwNTIzNTFaFw0yNTA2MjEwNjU0NTFaMDMxMTAvBgNV BAMTKEQ3QjcwODUwNjI4RTEyMjFBQUQzMEY5QjA5QTIxRTBFNjI1OTUzNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3WDk4DjKKDJ3NsffRKK3XiX65 CLo4xGZzKGkqnZfTGb5dTikYZ5a3JSer5elbTtwHfN42tNpc72Egnj4QdtHpcmJ6 Fnl88PXQXEjGmxuPEwrTnxG9gnAuAGsCSyvfeKUhChqT6BSYFA5pYPdS006xH7qo bDJYh+M7M3VctppoPr4d0mHOcWqk30+VMKQHSia9ryN5MuQtrAiGxLRm2qkyMGIf +wW1MQ9AtHgAmTQ0vjQ4cKzkHvyzQPNo632mQpqQ8VEqnYb4ZDPI+PxxwG/0L8dJ 9mZoG77k7T4FjOecZBCxV9XIqqbUHe76pJiD2Vpamu+6A2/R7nt77JfTid6hAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU17cIUGKOEiGq0w+bCaIeDmJZU2gwHwYDVR0j BBgwFoAUDyomXD9Z4uoTCtLCRFo/N+ua6oYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQUtjWHRWUTRmdEx6WnZjQk02N2I3TW1TYlM3aTRuVnBKQ0Q1VEY5d2ZB OXovMC8wRjJBMjY1QzNGNTlFMkVBMTMwQUQyQzI0NDVBM0YzN0VCOUFFQTg2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGMkEyNjVDM0Y1OUUyRUEx MzBBRDJDMjQ0NUEzRjM3RUI5QUVBODYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QUtjWHRWUTRmdEx6WnZjQk02N2I3TW1TYlM3aTRuVnBKQ0Q1VEY5d2ZBOXovMC8w RjJBMjY1QzNGNTlFMkVBMTMwQUQyQzI0NDVBM0YzN0VCOUFFQTg2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASn5XdZyKm/iHo8/PcMMVnOOyOWFcm6s2HCJ63N1nVRJ66pm3JjZKTi5u5hOd jMHpWlSYnPZ4eQe8nBpeYv1h95vsIkcqV98zJAecxegqo7DsOOlIPVledNPbrANx Q3hfAXJ1jquTZEPUkcdKE+9XoldR6gsSUiU3G5JT4SYMC2/b/3lMUd6+xeeULXJ7 3+ytteQUyDIFpEvzNKil5kQj0Z8HZkRqTPfLi2OmySOAv6dDohJmOx1YKFfFFFNs fvdh9q3qWzD9x1jxMOGTsh2b4LnnSDevGNj+GzCS/M8z3PZiVJYDSejS58psXlcO JhX8YyTnJvo505aWlMsZgqi/9Q== -----END CERTIFICATE-----Generated at Fri Jun 20 22:32:40 2025 by rpki-client