$ rpki-client -vvf rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/28542F5ACD485BC6F699A30F45B064F48B14B25D.mft File: 28542F5ACD485BC6F699A30F45B064F48B14B25D.mft (raw, json) Hash identifier: qdLDAmHvSdt+lAI7nnRMh4MmV9XrteONHBY5vJKS8OE= Subject key identifier: EC:B5:72:C4:ED:83:84:2F:0E:A3:E4:2A:5D:B5:8E:B9:17:1E:13:84 Authority key identifier: 28:54:2F:5A:CD:48:5B:C6:F6:99:A3:0F:45:B0:64:F4:8B:14:B2:5D Certificate issuer: /CN=28542F5ACD485BC6F699A30F45B064F48B14B25D Certificate serial: 2D9E18EE0F7F1AC19F26A8D52E7FC1D1C5E25EA3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28542F5ACD485BC6F699A30F45B064F48B14B25D.cer Subject info access: rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/28542F5ACD485BC6F699A30F45B064F48B14B25D.mft Manifest number: 3A Signing time: Sun 22 Jun 2025 07:04:27 +0000 Manifest this update: Sun 22 Jun 2025 06:59:27 +0000 Manifest next update: Mon 23 Jun 2025 08:54:27 +0000 Files and hashes: 1: 28542F5ACD485BC6F699A30F45B064F48B14B25D.crl (hash: sB3RbmDukmnjDxnPGzsxeX4MN6+8xcvaiH3aZ8j1/rc=) 2: 3134332e302e3235322e302f32322d3332203d3e20323634303233.roa (hash: nT1XIhe4G7uuEFU4uYffFK1i58NIw2B74ajcayC4+Kw=) 3: 323830343a323939343a3a2f33322d313238203d3e20323634303233.roa (hash: wkKeQg75M54rY2DbYq8xjRJdAT3SV34dOU2eO4KFPDs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/28542F5ACD485BC6F699A30F45B064F48B14B25D.crl rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/28542F5ACD485BC6F699A30F45B064F48B14B25D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28542F5ACD485BC6F699A30F45B064F48B14B25D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Jun 2025 08:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:9e:18:ee:0f:7f:1a:c1:9f:26:a8:d5:2e:7f:c1:d1:c5:e2:5e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28542F5ACD485BC6F699A30F45B064F48B14B25D Validity Not Before: Jun 22 06:59:27 2025 GMT Not After : Jun 23 08:54:27 2025 GMT Subject: CN=ECB572C4ED83842F0EA3E42A5DB58EB9171E1384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7e:2a:69:fb:c5:03:1b:d6:bd:0b:0a:33:b8: 41:dc:fc:bc:a1:08:40:5a:a3:06:d5:0c:8a:10:02: 25:fc:93:64:84:11:eb:66:fc:de:43:6a:73:fa:6f: 07:db:f8:0e:75:1d:42:4b:a1:53:05:2f:22:3a:5e: b6:96:0f:4e:03:0b:e7:d3:ef:03:42:91:e4:9c:60: bd:c8:17:10:77:ef:0b:f7:5d:20:1b:38:05:b1:00: b8:f5:5d:a1:24:4b:f9:e1:5d:c2:19:4e:b1:9a:3b: ba:11:78:73:80:03:ec:be:7c:ea:5e:91:32:35:06: 6f:7f:3a:6a:e9:53:36:00:94:ba:c2:42:53:73:a8: 79:0b:59:98:3f:dd:2c:9a:48:1d:cf:c4:15:a6:d4: 7b:71:d2:1e:a8:95:d0:4f:0f:d4:ee:91:b5:f5:5d: fc:eb:41:d1:42:13:29:f2:f1:42:8b:16:ff:6d:35: 79:9a:8c:ab:8d:f4:ac:04:e9:a2:3a:fd:d3:62:7e: 54:5d:73:52:13:00:93:8a:f3:56:ae:1c:4c:3f:b4: 6c:f0:fb:41:68:f7:26:24:dc:f5:cb:d9:26:01:85: 2a:23:6d:a1:19:79:8c:c4:a4:7d:fe:f0:e9:06:2b: d7:11:4e:32:2a:03:62:ca:31:69:2e:8a:81:c0:92: 13:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B5:72:C4:ED:83:84:2F:0E:A3:E4:2A:5D:B5:8E:B9:17:1E:13:84 X509v3 Authority Key Identifier: keyid:28:54:2F:5A:CD:48:5B:C6:F6:99:A3:0F:45:B0:64:F4:8B:14:B2:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/28542F5ACD485BC6F699A30F45B064F48B14B25D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28542F5ACD485BC6F699A30F45B064F48B14B25D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/28542F5ACD485BC6F699A30F45B064F48B14B25D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:6a:ef:3f:2f:d2:0d:57:c4:a1:14:e4:41:bc:d9:9d:79:57: e4:e3:1c:6b:88:eb:1a:1a:13:7a:80:b6:37:7e:ed:4e:ca:3d: 0e:a3:a2:61:0f:ee:52:94:c6:3d:6c:74:52:69:97:86:b7:17: 90:d8:fe:df:a7:59:29:d2:06:00:3c:73:41:6d:78:c5:9a:85: 56:3c:61:30:a2:ed:d2:85:e2:af:b0:bf:28:4b:b8:84:08:5c: ff:43:94:96:ac:18:90:7e:c7:4d:e6:06:f0:42:b1:41:8d:44: a7:f0:bd:8d:72:7c:20:ff:b8:f0:41:2b:9c:1e:77:ae:0f:38: e5:7d:76:67:8f:18:61:02:70:47:b5:aa:e4:6c:f1:b2:d9:34: 46:f4:87:c1:24:2f:8d:93:ca:87:ee:75:7e:17:14:07:0f:47: 0d:70:54:a4:d2:e3:f6:5e:06:d6:0b:32:6e:67:b9:b3:f0:9c: fc:4d:8f:0b:8c:96:73:c0:d7:a5:62:dc:40:46:78:b7:25:a9: fa:d9:78:2e:b3:fd:72:0d:4d:04:1f:7a:4f:fa:21:31:2b:e2: 38:b7:8c:82:d9:b7:d5:33:d4:08:2c:25:c1:6e:2c:da:62:a3: 22:2b:c5:fb:22:aa:5f:db:1c:2c:fb:22:a8:de:57:c7:fe:bf: 8b:ce:c4:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULZ4Y7g9/GsGfJqjVLn/B0cXiXqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1NDJGNUFDRDQ4NUJDNkY2OTlBMzBGNDVCMDY0RjQ4 QjE0QjI1RDAeFw0yNTA2MjIwNjU5MjdaFw0yNTA2MjMwODU0MjdaMDMxMTAvBgNV BAMTKEVDQjU3MkM0RUQ4Mzg0MkYwRUEzRTQyQTVEQjU4RUI5MTcxRTEzODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClfipp+8UDG9a9CwozuEHc/Lyh CEBaowbVDIoQAiX8k2SEEetm/N5DanP6bwfb+A51HUJLoVMFLyI6XraWD04DC+fT 7wNCkeScYL3IFxB37wv3XSAbOAWxALj1XaEkS/nhXcIZTrGaO7oReHOAA+y+fOpe kTI1Bm9/OmrpUzYAlLrCQlNzqHkLWZg/3SyaSB3PxBWm1Htx0h6oldBPD9TukbX1 XfzrQdFCEyny8UKLFv9tNXmajKuN9KwE6aI6/dNiflRdc1ITAJOK81auHEw/tGzw +0Fo9yYk3PXL2SYBhSojbaEZeYzEpH3+8OkGK9cRTjIqA2LKMWkuioHAkhPBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU7LVyxO2DhC8Oo+QqXbWOuRceE4QwHwYDVR0j BBgwFoAUKFQvWs1IW8b2maMPRbBk9IsUsl0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzJmdlJidUFZa1dmVVY4RjRjVGQ0VkJmYjRIZnhYS3pXTlhoaUFBQUs3 aDcvMC8yODU0MkY1QUNENDg1QkM2RjY5OUEzMEY0NUIwNjRGNDhCMTRCMjVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4NTQyRjVBQ0Q0ODVCQzZG Njk5QTMwRjQ1QjA2NEY0OEIxNEIyNUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QzJmdlJidUFZa1dmVVY4RjRjVGQ0VkJmYjRIZnhYS3pXTlhoaUFBQUs3aDcvMC8y ODU0MkY1QUNENDg1QkM2RjY5OUEzMEY0NUIwNjRGNDhCMTRCMjVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhmrvPy/SDVfEoRTkQbzZnXlX5OMca4jrGhoTeoC2N37tTso9DqOiYQ/uUpTG PWx0UmmXhrcXkNj+36dZKdIGADxzQW14xZqFVjxhMKLt0oXir7C/KEu4hAhc/0OU lqwYkH7HTeYG8EKxQY1Ep/C9jXJ8IP+48EErnB53rg845X12Z48YYQJwR7Wq5Gzx stk0RvSHwSQvjZPKh+51fhcUBw9HDXBUpNLj9l4G1gsybme5s/Cc/E2PC4yWc8DX pWLcQEZ4tyWp+tl4LrP9cg1NBB96T/ohMSviOLeMgtm31TPUCCwlwW4s2mKjIivF +yKqX9scLPsiqN5Xx/6/i87EdQ== -----END CERTIFICATE-----Generated at Sun Jun 22 15:44:11 2025 by rpki-client