$ rpki-client -vvf rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft File: CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft (raw, json) Hash identifier: OTC5tNIUCvBmXB0VzR2tIB0xnDDgCrx9Mhd28AU1FQs= Subject key identifier: 08:D3:13:1F:C4:13:CF:FA:91:83:F5:2C:4C:77:4F:12:9A:64:BE:8C Authority key identifier: CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE Certificate issuer: /CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE Certificate serial: 7DE86449905719563FEC25CB39030506B2EFD8A5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer Subject info access: rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft Manifest number: 024C Signing time: Mon 16 Jun 2025 20:00:38 +0000 Manifest this update: Mon 16 Jun 2025 19:55:38 +0000 Manifest next update: Tue 17 Jun 2025 21:33:38 +0000 Files and hashes: 1: 3137372e3133302e31362e302f32302d3234203d3e203532373432.roa (hash: 9l8kTSfO14FYIp88kOmGp0EuZJyDmBsCUWflQkx6Kmo=) 2: CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl (hash: LrHXlEXEZCDvBF3zlW6Nv344ezg4L3FBFI5dgJFJQ6o=) 3: 3133382e3131382e3235322e302f32322d3234203d3e203532373432.roa (hash: VlQMtP6NQInhiwVIoJiXBUj4Ie/wB4WGdHL21LfKPc8=) 4: 323830343a6362303a3a2f33322d3438203d3e203532373432.roa (hash: mRxu11XcEscOClSKiTBJjxbSJvEsYBDMWoxEVFfNJj8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 21:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e8:64:49:90:57:19:56:3f:ec:25:cb:39:03:05:06:b2:ef:d8:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE Validity Not Before: Jun 16 19:55:38 2025 GMT Not After : Jun 17 21:33:38 2025 GMT Subject: CN=08D3131FC413CFFA9183F52C4C774F129A64BE8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fc:32:9b:68:e2:ba:fc:69:1c:8f:25:f9:a6: 16:b4:dc:0d:61:96:2a:66:83:8b:1b:c0:33:35:cb: b1:66:e1:11:59:55:88:6e:de:b5:ff:fd:c5:6f:ae: 23:ea:72:0c:b2:a3:3a:a9:b3:f2:46:aa:3d:2c:ae: 08:eb:e7:0a:4d:67:ab:77:ea:f0:0d:6a:7f:fc:5b: b4:fd:d4:4b:df:ce:a2:a5:c9:86:53:f1:61:cf:e6: 5f:59:cf:2c:f3:5a:33:44:c1:4f:d8:f2:f5:32:2d: 63:cd:bc:b1:35:ba:c1:9e:60:64:3c:e6:0c:42:22: 76:34:7e:ba:eb:de:5f:d2:ac:bf:29:e6:2b:70:96: 30:46:0e:15:78:4e:2a:62:8c:bf:f9:bf:c6:f3:37: 02:99:aa:4e:6c:2f:eb:03:58:d1:6f:30:15:df:07: 16:19:81:f5:73:13:a0:01:29:df:a4:b4:c7:b7:f8: 93:af:a1:5a:f0:b9:fc:47:08:81:e1:52:f0:47:4a: 6b:de:29:ef:40:5b:59:96:f9:7a:b4:5c:49:08:78: 4e:a4:33:4d:ac:55:08:5a:15:c3:04:a2:55:f2:74: 02:21:49:00:ff:7f:3a:92:ce:6a:8f:dd:2f:f4:d1: 75:00:f1:1d:fc:ec:96:03:e7:29:0c:ab:ed:1d:c5: 40:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D3:13:1F:C4:13:CF:FA:91:83:F5:2C:4C:77:4F:12:9A:64:BE:8C X509v3 Authority Key Identifier: keyid:CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0e:cf:59:aa:75:f8:c0:95:c2:f4:a9:77:2c:cc:34:c9:f4: 06:e9:5d:47:b8:11:96:3a:14:49:f9:aa:16:58:ee:36:40:de: bd:2d:f3:7c:ce:33:a5:31:a9:75:66:2a:88:b8:94:c8:33:55: 2a:37:75:16:49:7e:15:2b:be:10:40:26:a7:33:35:57:a3:28: 02:35:db:fc:8c:e7:72:5d:b1:8b:97:08:db:71:52:3f:93:ef: 61:ae:d7:8a:fb:91:34:1a:13:b9:33:b1:ab:5d:80:ef:bb:2e: 81:6f:38:4b:35:6f:54:9a:ca:a6:2a:92:83:6d:7b:00:db:ec: 7d:03:03:62:85:b7:21:dc:3c:b8:eb:58:08:8e:e3:ed:a6:f2: 0f:78:46:5a:d8:1f:08:30:35:3a:06:29:07:f9:be:57:a5:9d: bc:99:41:f4:f2:fd:3b:04:d6:00:04:f9:d3:28:b7:db:88:2d: b1:5b:22:73:b8:36:44:76:57:d6:51:9d:c2:f8:4d:95:e8:5e: 91:ab:a0:c8:d5:a2:b5:5e:b0:b2:b4:27:60:55:f7:cd:8d:12: fc:e9:bb:43:f1:26:fd:da:4c:6a:f9:6f:b6:03:43:cc:a8:0e: 99:08:1c:21:4f:dd:fd:4b:72:d2:b9:1b:02:64:73:12:03:c1: 6e:13:6c:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfehkSZBXGVY/7CXLOQMFBrLv2KUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCNzU4MkYyODY5OUYzNTEwNjlDOEM3NkNDOTcxNjdC RjdCQjJFRTAeFw0yNTA2MTYxOTU1MzhaFw0yNTA2MTcyMTMzMzhaMDMxMTAvBgNV BAMTKDA4RDMxMzFGQzQxM0NGRkE5MTgzRjUyQzRDNzc0RjEyOUE2NEJFOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/DKbaOK6/GkcjyX5pha03A1h lipmg4sbwDM1y7Fm4RFZVYhu3rX//cVvriPqcgyyozqps/JGqj0srgjr5wpNZ6t3 6vANan/8W7T91EvfzqKlyYZT8WHP5l9ZzyzzWjNEwU/Y8vUyLWPNvLE1usGeYGQ8 5gxCInY0frrr3l/SrL8p5itwljBGDhV4TipijL/5v8bzNwKZqk5sL+sDWNFvMBXf BxYZgfVzE6ABKd+ktMe3+JOvoVrwufxHCIHhUvBHSmveKe9AW1mW+Xq0XEkIeE6k M02sVQhaFcMEolXydAIhSQD/fzqSzmqP3S/00XUA8R387JYD5ykMq+0dxUA1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCNMTH8QTz/qRg/UsTHdPEppkvowwHwYDVR0j BBgwFoAUz7dYLyhpnzUQacjHbMlxZ797su4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQkNuZUR2UkJGU0F6cDdpdzZTSDZOS1V3OW9GamdjTERpSEFMWjNZRVVy VDcvMS9DRkI3NTgyRjI4Njk5RjM1MTA2OUM4Qzc2Q0M5NzE2N0JGN0JCMkVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGQjc1ODJGMjg2OTlGMzUx MDY5QzhDNzZDQzk3MTY3QkY3QkIyRUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QkNuZUR2UkJGU0F6cDdpdzZTSDZOS1V3OW9GamdjTERpSEFMWjNZRVVyVDcvMS9D RkI3NTgyRjI4Njk5RjM1MTA2OUM4Qzc2Q0M5NzE2N0JGN0JCMkVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEADw7PWap1+MCVwvSpdyzMNMn0BuldR7gRljoUSfmqFljuNkDevS3zfM4zpTGp dWYqiLiUyDNVKjd1Fkl+FSu+EEAmpzM1V6MoAjXb/Izncl2xi5cI23FSP5PvYa7X ivuRNBoTuTOxq12A77sugW84SzVvVJrKpiqSg217ANvsfQMDYoW3Idw8uOtYCI7j 7abyD3hGWtgfCDA1OgYpB/m+V6WdvJlB9PL9OwTWAAT50yi324gtsVsic7g2RHZX 1lGdwvhNlehekaugyNWitV6wsrQnYFX3zY0S/Om7Q/Em/dpMavlvtgNDzKgOmQgc IU/d/Uty0rkbAmRzEgPBbhNsLA== -----END CERTIFICATE-----Generated at Tue Jun 17 13:44:58 2025 by rpki-client