$ rpki-client -vvf rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/2557D5F7321503E8A12A274EBA57E5064A6659B8.mft File: 2557D5F7321503E8A12A274EBA57E5064A6659B8.mft (raw, json) Hash identifier: ze9foKNODzxQyuKTqaw0J26APTkPeXlAJnulUoBvrgg= Subject key identifier: C0:D1:61:BF:02:99:67:D2:F6:90:6C:05:30:9B:CA:9B:8D:74:3F:9B Authority key identifier: 25:57:D5:F7:32:15:03:E8:A1:2A:27:4E:BA:57:E5:06:4A:66:59:B8 Certificate issuer: /CN=2557D5F7321503E8A12A274EBA57E5064A6659B8 Certificate serial: 1DF60FD9B3D24EFA1F7E7D820399B5ABB123F9AE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2557D5F7321503E8A12A274EBA57E5064A6659B8.cer Subject info access: rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/2557D5F7321503E8A12A274EBA57E5064A6659B8.mft Manifest number: 4F Signing time: Fri 20 Jun 2025 12:21:23 +0000 Manifest this update: Fri 20 Jun 2025 12:16:23 +0000 Manifest next update: Sat 21 Jun 2025 14:30:23 +0000 Files and hashes: 1: 34352e3138332e302e302f32322d3332203d3e20323639323439.roa (hash: 5r96YMPFiP2kjXBo+cXxhCSWPBYcR+myNCGas8pnzec=) 2: 2557D5F7321503E8A12A274EBA57E5064A6659B8.crl (hash: TGIqpP335XV1Myw7hN8lkHEQs95jdYa8JGwzBYn3TMI=) 3: 323830343a363161633a3a2f33322d313238203d3e20323639323439.roa (hash: WHibLTfnV8c6GNuaXvcXxHY6gCAPxjlE0nDe2V+Tchg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/2557D5F7321503E8A12A274EBA57E5064A6659B8.crl rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/2557D5F7321503E8A12A274EBA57E5064A6659B8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2557D5F7321503E8A12A274EBA57E5064A6659B8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 14:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:f6:0f:d9:b3:d2:4e:fa:1f:7e:7d:82:03:99:b5:ab:b1:23:f9:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2557D5F7321503E8A12A274EBA57E5064A6659B8 Validity Not Before: Jun 20 12:16:23 2025 GMT Not After : Jun 21 14:30:23 2025 GMT Subject: CN=C0D161BF029967D2F6906C05309BCA9B8D743F9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:90:68:22:2c:88:3b:e5:d2:4a:a3:5f:6f:2c: 54:95:42:86:51:d3:12:c3:7f:b5:23:24:0d:67:c3: 71:8d:52:3a:1a:b7:f2:cc:83:8e:7a:d5:51:30:3b: 4b:43:08:8e:8e:4a:b4:dd:e1:1d:09:f2:59:13:32: 5d:fb:02:0e:1d:8e:d1:13:f8:b5:f3:02:cc:3a:6e: 37:c0:be:fb:f7:8b:32:44:71:f7:04:1f:0d:d9:dc: 61:f3:80:e1:93:20:75:c2:2b:d4:4d:f3:bc:55:0e: 5e:17:31:b4:03:80:fd:34:f5:b3:94:25:8b:a1:da: 05:27:48:f1:97:94:7c:3d:9d:cb:38:c1:62:00:e6: e0:9d:58:64:89:a5:54:f0:a2:38:1a:e7:de:8f:28: 2c:be:ab:40:a7:b9:8f:ea:d5:64:f9:f6:f5:69:dd: f9:ae:93:3d:a9:ef:92:64:3c:f7:08:37:a8:6b:c0: 31:4c:d7:7d:a9:e0:97:c1:94:1f:5f:86:34:97:b5: fe:87:2e:2b:ad:0c:cf:90:4c:31:57:2e:b9:ed:ed: 02:d1:1e:90:45:0a:22:be:2d:d9:ce:c4:1e:c5:9f: e1:53:dd:88:6f:ec:75:8f:b6:ae:e2:28:0d:e5:8b: d1:cc:92:58:64:9a:a0:ee:50:6a:d9:9c:a9:77:07: ee:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D1:61:BF:02:99:67:D2:F6:90:6C:05:30:9B:CA:9B:8D:74:3F:9B X509v3 Authority Key Identifier: keyid:25:57:D5:F7:32:15:03:E8:A1:2A:27:4E:BA:57:E5:06:4A:66:59:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/2557D5F7321503E8A12A274EBA57E5064A6659B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2557D5F7321503E8A12A274EBA57E5064A6659B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/2557D5F7321503E8A12A274EBA57E5064A6659B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:40:ce:a2:b6:80:f2:d0:b5:69:82:4c:c9:0a:93:ed:74:0f: dd:94:4d:7e:83:4d:0d:52:e7:5c:c7:f2:48:24:6e:a8:0e:9d: 3d:8c:f4:80:29:ff:9d:55:09:98:ed:9c:d1:79:9d:55:8f:6f: 3f:22:f7:a7:17:dd:93:fb:8d:36:66:97:84:d4:bd:52:54:58: dd:3d:36:34:24:60:76:80:49:6d:c4:11:c7:bc:6d:a3:de:99: e4:7b:12:20:ba:d0:87:3b:58:fc:23:20:d8:8c:85:33:de:2a: 47:91:6b:da:eb:32:a3:5b:89:6d:7e:36:f6:2d:3a:62:cb:20: f5:9a:ca:e1:56:71:2b:ba:8d:56:e3:b3:15:d4:bf:12:4c:d1: 1a:64:26:d2:49:39:67:c7:df:28:10:9e:24:54:58:63:5c:ea: 0a:95:af:fc:56:1a:70:9a:1a:5b:58:ce:01:ac:dd:91:69:07: 7a:30:1f:97:04:39:50:85:d4:da:ca:83:19:9d:e1:8d:90:65: 41:21:5b:ab:0a:52:d2:18:4b:55:21:5d:dc:60:e3:d1:0e:d2: 97:ae:40:42:a0:bf:f7:91:c9:b5:a6:43:25:cc:70:ff:f9:9e: 1d:81:62:d5:71:48:2c:f9:c2:f5:a7:ab:97:73:49:73:f7:1d: 13:f6:82:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHfYP2bPSTvoffn2CA5m1q7Ej+a4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1N0Q1RjczMjE1MDNFOEExMkEyNzRFQkE1N0U1MDY0 QTY2NTlCODAeFw0yNTA2MjAxMjE2MjNaFw0yNTA2MjExNDMwMjNaMDMxMTAvBgNV BAMTKEMwRDE2MUJGMDI5OTY3RDJGNjkwNkMwNTMwOUJDQTlCOEQ3NDNGOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjkGgiLIg75dJKo19vLFSVQoZR 0xLDf7UjJA1nw3GNUjoat/LMg4561VEwO0tDCI6OSrTd4R0J8lkTMl37Ag4djtET +LXzAsw6bjfAvvv3izJEcfcEHw3Z3GHzgOGTIHXCK9RN87xVDl4XMbQDgP009bOU JYuh2gUnSPGXlHw9ncs4wWIA5uCdWGSJpVTwojga596PKCy+q0CnuY/q1WT59vVp 3fmukz2p75JkPPcIN6hrwDFM132p4JfBlB9fhjSXtf6HLiutDM+QTDFXLrnt7QLR HpBFCiK+LdnOxB7Fn+FT3Yhv7HWPtq7iKA3li9HMklhkmqDuUGrZnKl3B+7XAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwNFhvwKZZ9L2kGwFMJvKm410P5swHwYDVR0j BBgwFoAUJVfV9zIVA+ihKidOulflBkpmWbgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ1E2Z2RlWWFHcWRwUDZTWTlaSHNLYjVxYzJyRG05WlpZN1lMdzNhZW1y Z1ovMC8yNTU3RDVGNzMyMTUwM0U4QTEyQTI3NEVCQTU3RTUwNjRBNjY1OUI4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1NTdENUY3MzIxNTAzRThB MTJBMjc0RUJBNTdFNTA2NEE2NjU5QjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q1E2Z2RlWWFHcWRwUDZTWTlaSHNLYjVxYzJyRG05WlpZN1lMdzNhZW1yZ1ovMC8y NTU3RDVGNzMyMTUwM0U4QTEyQTI3NEVCQTU3RTUwNjRBNjY1OUI4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQkDOoraA8tC1aYJMyQqT7XQP3ZRNfoNNDVLnXMfySCRuqA6dPYz0gCn/nVUJ mO2c0XmdVY9vPyL3pxfdk/uNNmaXhNS9UlRY3T02NCRgdoBJbcQRx7xto96Z5HsS ILrQhztY/CMg2IyFM94qR5Fr2usyo1uJbX429i06Yssg9ZrK4VZxK7qNVuOzFdS/ EkzRGmQm0kk5Z8ffKBCeJFRYY1zqCpWv/FYacJoaW1jOAazdkWkHejAflwQ5UIXU 2sqDGZ3hjZBlQSFbqwpS0hhLVSFd3GDj0Q7Sl65AQqC/95HJtaZDJcxw//meHYFi 1XFILPnC9aerl3NJc/cdE/aCkA== -----END CERTIFICATE-----Generated at Fri Jun 20 23:53:14 2025 by rpki-client