$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft File: 65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft (raw, json) Hash identifier: sICzj1qyWzXb9U5g9otD9ov7fh59k10e7FzzWLWcqSY= Subject key identifier: 61:68:85:A7:65:EB:2E:82:13:F7:60:36:43:EA:64:5E:5B:5A:48:7A Authority key identifier: 65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35 Certificate issuer: /CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35 Certificate serial: 7320237D943C571FC5CF559BF54A8B7D1671EEBB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer Subject info access: rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft Manifest number: 0250 Signing time: Fri 20 Jun 2025 06:34:49 +0000 Manifest this update: Fri 20 Jun 2025 06:29:49 +0000 Manifest next update: Sat 21 Jun 2025 10:08:49 +0000 Files and hashes: 1: 34352e3233312e3234362e302f32342d3234203d3e20323637323239.roa (hash: 5XBvgNC7VdeKasM61QiJSuWCdzuhoDDJBsh9zncimSM=) 2: 34352e3233312e3234372e302f32342d3234203d3e20323637323239.roa (hash: rvvstdgHKBLZiYLtTVjHHFsA+uSpDvcNe0UPKBADsyk=) 3: 34352e3233312e3234342e302f32322d3232203d3e20323637323239.roa (hash: y7s1GJrpBU/41xawr2NW3Z0qH/tHIDGlpxg27bF5HTQ=) 4: 34352e3233312e3234352e302f32342d3234203d3e20323637323239.roa (hash: Kgc6lepf54SQs0P5cfSSwA50mFBjZkxshswJcKadY8k=) 5: 34352e3233312e3234342e302f32342d3234203d3e20323637323239.roa (hash: uIH2mjCVfG7pE20vWSkkLBS63ZJyp6S52kPokhVi1tw=) 6: 65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl (hash: rdvnFBmwa66ecicD1nbfLeSrcb9zGnZGrfcZ3VNSC8E=) 7: 323830343a346134383a3a2f33322d3332203d3e20323637323239.roa (hash: EWD3i/ki1wnJKA/Qo3Ji//c/Z19FeS56qDgcRDssjXg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 07:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:20:23:7d:94:3c:57:1f:c5:cf:55:9b:f5:4a:8b:7d:16:71:ee:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35 Validity Not Before: Jun 20 06:29:49 2025 GMT Not After : Jun 21 10:08:49 2025 GMT Subject: CN=616885A765EB2E8213F7603643EA645E5B5A487A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b6:06:ec:04:bf:e6:85:bd:61:1e:83:c2:10: 93:c7:0b:04:b4:57:b3:62:22:de:e6:69:14:b4:9a: 36:95:27:97:04:d2:70:0c:cf:ab:8a:c1:a4:3c:d4: ce:35:03:d6:9b:3c:94:0e:fe:6b:d6:55:42:e2:a5: 28:d3:50:14:4e:a6:4f:4c:f1:54:97:4b:e3:8e:9d: fe:37:d1:98:bc:e1:7b:ac:64:dc:ce:22:01:1c:cf: b7:2b:ca:fa:39:d9:f2:06:0f:6c:47:4d:87:1a:17: 38:e4:5c:13:92:26:0a:3b:54:7d:40:9d:29:c1:22: 99:94:4e:54:2d:5e:fa:be:b8:0d:3e:32:7d:a4:6c: 79:ec:8b:33:c9:c7:63:c2:45:83:f7:82:62:83:e7: eb:80:78:fc:62:17:df:0f:3b:4b:9c:6f:78:84:05: b9:93:ce:20:4e:19:7a:d8:a7:f1:8e:55:55:de:e9: 81:f8:d8:e9:c9:a3:b1:d0:d2:32:03:6b:7e:96:d4: e9:9f:4b:aa:e9:da:a3:e3:27:f6:ee:67:83:6e:b0: e1:ed:bc:b1:96:99:05:bc:f4:c5:31:5e:e7:a9:81: 73:4f:81:c0:93:52:2a:dd:8b:bc:d3:9f:f3:f5:81: 6c:9c:57:65:3e:b5:b9:15:d0:6e:92:e7:59:ad:a6: c1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:68:85:A7:65:EB:2E:82:13:F7:60:36:43:EA:64:5E:5B:5A:48:7A X509v3 Authority Key Identifier: keyid:65:D2:61:AD:DE:2D:A8:D5:A8:D0:F7:09:C3:80:A3:D9:6D:DC:BA:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/1/65D261ADDE2DA8D5A8D0F709C380A3D96DDCBA35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:0b:2b:64:69:bd:cb:4c:5e:78:d8:b3:b1:7f:61:d8:28:45: 82:c2:62:d0:fd:73:3c:b1:0f:f3:8e:81:15:db:35:bc:59:07: 28:fd:65:4a:74:ef:4e:dc:ef:2b:ee:7d:bf:6b:22:7c:76:b3: 95:4c:f9:36:e9:bd:c7:3d:2f:38:15:81:31:24:67:89:fe:73: 52:3e:e0:01:00:3b:37:cb:04:39:3a:1b:92:b8:4e:77:ce:16: 17:7a:86:b5:e1:11:17:62:62:9f:5d:69:43:0a:b3:fb:45:51: 71:83:30:11:9b:92:d7:88:16:86:b4:77:8c:a0:62:78:ca:a9: e2:0a:18:41:97:a1:15:a9:0a:5d:7f:c9:71:10:fc:c7:63:45: 77:da:fe:f9:4e:9e:01:5c:c8:92:7d:07:5e:8c:3b:2d:b5:e8: c3:54:c0:e5:b7:6f:c3:9c:c0:55:05:47:81:df:4e:26:0c:a2: 45:34:e5:50:08:8d:e2:f1:d3:19:22:5d:a9:c3:3b:38:14:b7: e9:4e:9a:39:fb:cc:aa:c8:35:ba:61:8e:66:d9:32:05:04:ab: 80:a0:88:78:82:83:bb:1c:ea:3d:e6:15:b4:3d:6d:00:20:a6: 7d:4a:86:91:54:10:10:5e:89:48:12:e4:ab:df:28:c0:68:65: 3a:17:cc:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcyAjfZQ8Vx/Fz1Wb9UqLfRZx7rswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVEMjYxQURERTJEQThENUE4RDBGNzA5QzM4MEEzRDk2 RERDQkEzNTAeFw0yNTA2MjAwNjI5NDlaFw0yNTA2MjExMDA4NDlaMDMxMTAvBgNV BAMTKDYxNjg4NUE3NjVFQjJFODIxM0Y3NjAzNjQzRUE2NDVFNUI1QTQ4N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCtgbsBL/mhb1hHoPCEJPHCwS0 V7NiIt7maRS0mjaVJ5cE0nAMz6uKwaQ81M41A9abPJQO/mvWVULipSjTUBROpk9M 8VSXS+OOnf430Zi84XusZNzOIgEcz7cryvo52fIGD2xHTYcaFzjkXBOSJgo7VH1A nSnBIpmUTlQtXvq+uA0+Mn2kbHnsizPJx2PCRYP3gmKD5+uAePxiF98PO0ucb3iE BbmTziBOGXrYp/GOVVXe6YH42OnJo7HQ0jIDa36W1OmfS6rp2qPjJ/buZ4NusOHt vLGWmQW89MUxXuepgXNPgcCTUirdi7zTn/P1gWycV2U+tbkV0G6S51mtpsHvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYWiFp2XrLoIT92A2Q+pkXltaSHowHwYDVR0j BBgwFoAUZdJhrd4tqNWo0PcJw4Cj2W3cujUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQktacFQ0bUFKNkIyenRqeVdVazNqZ1FuWTRGTml4elNHb0xXR3pmdU5h ZXcvMS82NUQyNjFBRERFMkRBOEQ1QThEMEY3MDlDMzgwQTNEOTZERENCQTM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1RDI2MUFEREUyREE4RDVB OEQwRjcwOUMzODBBM0Q5NkREQ0JBMzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QktacFQ0bUFKNkIyenRqeVdVazNqZ1FuWTRGTml4elNHb0xXR3pmdU5hZXcvMS82 NUQyNjFBRERFMkRBOEQ1QThEMEY3MDlDMzgwQTNEOTZERENCQTM1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArgsrZGm9y0xeeNizsX9h2ChFgsJi0P1zPLEP846BFds1vFkHKP1lSnTvTtzv K+59v2sifHazlUz5Num9xz0vOBWBMSRnif5zUj7gAQA7N8sEOTobkrhOd84WF3qG teERF2Jin11pQwqz+0VRcYMwEZuS14gWhrR3jKBieMqp4goYQZehFakKXX/JcRD8 x2NFd9r++U6eAVzIkn0HXow7LbXow1TA5bdvw5zAVQVHgd9OJgyiRTTlUAiN4vHT GSJdqcM7OBS36U6aOfvMqsg1umGOZtkyBQSrgKCIeIKDuxzqPeYVtD1tACCmfUqG kVQQEF6JSBLkq98owGhlOhfMMA== -----END CERTIFICATE-----Generated at Fri Jun 20 12:28:24 2025 by rpki-client