$ rpki-client -vvf rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.mft File: 2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.mft (raw, json) Hash identifier: v1Ms9SL83r7h9+PMgJEgjhOuXFbAsLanHJJkbTxSktw= Subject key identifier: 1C:6D:D4:82:39:AA:9E:E8:88:93:62:18:B1:11:B5:20:CB:E2:67:01 Authority key identifier: 2D:48:EA:07:0A:9B:DA:E0:9A:85:0B:3A:4F:0C:79:71:9A:1F:08:DB Certificate issuer: /CN=2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB Certificate serial: 4A27C307F7FCBED87722A1C16279B1CF93927EE1 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.cer Subject info access: rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.mft Manifest number: 4A Signing time: Wed 18 Jun 2025 18:12:01 +0000 Manifest this update: Wed 18 Jun 2025 18:07:01 +0000 Manifest next update: Thu 19 Jun 2025 20:21:01 +0000 Files and hashes: 1: 323830343a323438633a383030303a3a2f33342d3334203d3e20323634323239.roa (hash: +hPnJIBqWPZR8CQNcV7ZbOyO929RfGEvVQZzkpqgA3Y=) 2: 3133382e3131372e35322e302f32342d3234203d3e20323634323239.roa (hash: 0lBR7nRdo3vyX+HYU13MtiobPfunyTGMl5wWuKD0qJE=) 3: 323830343a323438633a343030303a3a2f33342d3334203d3e20323634323239.roa (hash: sA3Nx/pG2mee0gYzaG2v39F1VEfFCH+sPtcN0j8Gksg=) 4: 3133382e3131372e35332e302f32342d3234203d3e20323634323239.roa (hash: Z8IzKSO9VaQh501nuxLIQmJAS66e27f6OHg+tM2ra8c=) 5: 2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.crl (hash: 6Z5vpjspteBPZQI5U7/+V8NS9PXk3V6wBj7o3y16BLM=) 6: 3133382e3131372e35342e302f32332d3233203d3e20323634323239.roa (hash: 8LaiUUHJptxCJniKq3fEYtpdbj7uINznaBTJRX0Uk6M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.crl rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Jun 2025 20:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:27:c3:07:f7:fc:be:d8:77:22:a1:c1:62:79:b1:cf:93:92:7e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB Validity Not Before: Jun 18 18:07:01 2025 GMT Not After : Jun 19 20:21:01 2025 GMT Subject: CN=1C6DD48239AA9EE888936218B111B520CBE26701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:91:6c:41:a3:38:66:4b:5a:e6:77:8e:0b:f4: 7f:6e:bb:a6:85:1d:0b:4d:83:6f:67:85:84:a8:36: 70:45:4b:fa:09:6c:0c:9a:a2:7a:7d:41:88:08:74: d0:9f:b6:93:4c:b5:aa:7e:42:04:47:2e:1f:ce:36: 0b:c8:a0:a9:d2:88:66:47:3a:92:ce:f9:af:cb:8c: d3:9f:53:a9:2a:87:84:8a:1f:5f:47:e6:1a:1d:65: 48:44:1e:3d:e7:c6:0b:08:c6:f6:18:57:d6:4f:4d: a8:5e:17:46:fb:05:96:43:6f:ed:1c:a5:cd:b6:e2: 5d:d0:10:e9:5d:d8:3a:b5:bb:52:c4:18:42:e7:21: 5f:b0:e2:37:59:a6:25:84:0c:55:bc:60:1e:56:c7: 0c:1b:42:47:ba:26:20:21:f9:bb:4c:a2:de:a5:ec: 80:b8:4e:5d:19:01:00:63:db:77:10:30:07:7f:ec: 80:25:43:c3:db:c2:d2:da:10:08:18:52:a5:ae:c5: 0f:80:26:c4:39:96:ce:8f:ab:26:93:68:96:09:64: fa:be:a7:43:81:64:cc:14:05:5a:eb:5d:bb:8d:f2: 94:24:90:d1:a9:00:86:5c:f2:7d:68:47:cf:6b:ac: 35:b3:39:17:e9:74:b2:05:79:0a:bb:6c:71:0a:79: e8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6D:D4:82:39:AA:9E:E8:88:93:62:18:B1:11:B5:20:CB:E2:67:01 X509v3 Authority Key Identifier: keyid:2D:48:EA:07:0A:9B:DA:E0:9A:85:0B:3A:4F:0C:79:71:9A:1F:08:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFUyjxbS6M18sCc3r2SH3D5sBLGXdHHF5tAxCiBGJ55o/0/2D48EA070A9BDAE09A850B3A4F0C79719A1F08DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:e7:60:59:f7:e3:7a:ee:5b:19:a4:be:d9:4f:76:87:ac:14: 62:d0:34:ef:36:99:f9:29:e3:ec:67:a6:27:4d:b8:48:3b:26: a9:91:67:19:37:11:5f:d0:31:37:b8:6e:f1:00:d8:6d:9f:6a: e2:e3:aa:68:88:cd:c9:2a:cf:1d:39:47:72:99:a5:24:86:b0: b4:a5:8f:16:56:89:5f:12:89:28:24:f4:da:ed:83:bb:c5:7e: 78:10:c3:66:9a:45:50:7e:ea:6b:27:3d:32:c8:13:8d:94:a1: 41:13:c0:59:bf:bf:de:24:16:15:8e:14:a2:4d:fb:fe:2a:5c: 80:42:04:d9:65:cf:1e:c2:27:8e:87:dc:1f:5f:02:9e:16:9c: 7a:d7:3d:f7:42:3d:54:a0:97:a7:5d:b9:96:df:b6:b4:73:e9: ee:77:d8:b0:41:1e:c5:87:72:49:c6:d2:2e:a8:dd:9c:33:47: d5:7a:3d:40:d2:58:40:1b:32:18:f4:41:7c:74:d8:1a:22:1d: 69:f5:7a:f9:ed:f5:79:84:93:f4:64:ea:f5:47:70:1f:56:b7: 4c:92:95:5c:d3:5b:d0:05:a5:ae:5f:fc:75:bf:8c:af:eb:9d: ed:e3:4c:4f:59:7c:8e:b7:07:8f:86:f1:83:50:37:11:33:94: 87:4f:9d:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSifDB/f8vth3IqHBYnmxz5OSfuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ0OEVBMDcwQTlCREFFMDlBODUwQjNBNEYwQzc5NzE5 QTFGMDhEQjAeFw0yNTA2MTgxODA3MDFaFw0yNTA2MTkyMDIxMDFaMDMxMTAvBgNV BAMTKDFDNkRENDgyMzlBQTlFRTg4ODkzNjIxOEIxMTFCNTIwQ0JFMjY3MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwkWxBozhmS1rmd44L9H9uu6aF HQtNg29nhYSoNnBFS/oJbAyaonp9QYgIdNCftpNMtap+QgRHLh/ONgvIoKnSiGZH OpLO+a/LjNOfU6kqh4SKH19H5hodZUhEHj3nxgsIxvYYV9ZPTaheF0b7BZZDb+0c pc224l3QEOld2Dq1u1LEGELnIV+w4jdZpiWEDFW8YB5WxwwbQke6JiAh+btMot6l 7IC4Tl0ZAQBj23cQMAd/7IAlQ8PbwtLaEAgYUqWuxQ+AJsQ5ls6PqyaTaJYJZPq+ p0OBZMwUBVrrXbuN8pQkkNGpAIZc8n1oR89rrDWzORfpdLIFeQq7bHEKeehJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHG3UgjmqnuiIk2IYsRG1IMviZwEwHwYDVR0j BBgwFoAULUjqBwqb2uCahQs6Twx5cZofCNswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ0ZVeWp4YlM2TTE4c0NjM3IyU0gzRDVzQkxHWGRISEY1dEF4Q2lCR0o1 NW8vMC8yRDQ4RUEwNzBBOUJEQUUwOUE4NTBCM0E0RjBDNzk3MTlBMUYwOERCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENDhFQTA3MEE5QkRBRTA5 QTg1MEIzQTRGMEM3OTcxOUExRjA4REIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q0ZVeWp4YlM2TTE4c0NjM3IyU0gzRDVzQkxHWGRISEY1dEF4Q2lCR0o1NW8vMC8y RDQ4RUEwNzBBOUJEQUUwOUE4NTBCM0E0RjBDNzk3MTlBMUYwOERCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtOdgWffjeu5bGaS+2U92h6wUYtA07zaZ+Snj7GemJ024SDsmqZFnGTcRX9Ax N7hu8QDYbZ9q4uOqaIjNySrPHTlHcpmlJIawtKWPFlaJXxKJKCT02u2Du8V+eBDD ZppFUH7qayc9MsgTjZShQRPAWb+/3iQWFY4Uok37/ipcgEIE2WXPHsInjofcH18C nhacetc990I9VKCXp125lt+2tHPp7nfYsEEexYdyScbSLqjdnDNH1Xo9QNJYQBsy GPRBfHTYGiIdafV6+e31eYST9GTq9UdwH1a3TJKVXNNb0AWlrl/8db+Mr+ud7eNM T1l8jrcHj4bxg1A3ETOUh0+dsQ== -----END CERTIFICATE-----Generated at Thu Jun 19 14:24:06 2025 by rpki-client