$ rpki-client -vvf rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.mft File: 3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.mft (raw, json) Hash identifier: j7NNj4zufIPMh+uG5Egw2o37Aoxpco9hJaODWOl9qEw= Subject key identifier: 93:0E:66:BA:55:F8:10:18:9E:95:E2:45:5E:C3:B7:C2:79:AB:88:FB Authority key identifier: 32:21:F6:BB:BA:53:17:2B:B7:A2:FE:B9:42:CD:33:35:EA:37:E2:C5 Certificate issuer: /CN=3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5 Certificate serial: 2E5D5E20B14116D46C7F10166EE8412090C2CEF3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.cer Subject info access: rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.mft Manifest number: 012B Signing time: Tue 17 Jun 2025 17:48:02 +0000 Manifest this update: Tue 17 Jun 2025 17:43:02 +0000 Manifest next update: Wed 18 Jun 2025 19:23:02 +0000 Files and hashes: 1: 3137372e36362e3138302e302f32322d3234203d3e203532363735.roa (hash: BXocbtduDtKUEoyzQIrlQ7zD8OQ/jejQej4RLt/lrus=) 2: 3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.crl (hash: Ll8PDSUbqEb6PovEfFusw2o3jO9f2YWgtt/8Ae2PznU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.crl rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 19:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:5d:5e:20:b1:41:16:d4:6c:7f:10:16:6e:e8:41:20:90:c2:ce:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5 Validity Not Before: Jun 17 17:43:02 2025 GMT Not After : Jun 18 19:23:02 2025 GMT Subject: CN=930E66BA55F810189E95E2455EC3B7C279AB88FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1f:92:6c:82:ed:43:c1:ed:35:c5:e8:b3:c0: 66:bf:be:b3:0c:c0:ac:2d:9b:a8:bc:27:f4:cc:91: 88:f1:a5:4c:9b:a1:44:97:80:7e:9b:35:31:54:2e: f2:ee:8b:ad:45:02:8b:34:21:3a:11:0f:57:32:59: fa:3e:f9:8d:83:74:c4:04:71:b3:60:b3:7f:55:ea: 1e:17:c5:9c:07:d8:51:3d:0e:fb:06:9b:6f:cc:30: f4:9b:28:a4:2c:a6:ec:a6:d5:2a:03:71:8c:9c:50: f2:14:40:6f:0b:d4:5f:3a:4c:8b:f3:74:51:b3:a0: 73:a2:f5:10:ad:a4:86:7e:80:22:47:48:c3:f5:7b: 44:af:90:82:67:ca:6f:4f:38:bf:cc:a6:ec:43:9f: 16:0c:57:27:0d:08:07:53:ae:6b:c0:3e:4f:25:5a: 24:dd:ab:f8:d1:bd:96:b5:ed:d6:88:24:4f:4f:3c: 4f:b8:aa:08:c4:03:b3:34:cb:84:43:0c:bc:cd:a0: eb:85:12:0b:c0:b7:91:df:88:67:3c:bd:13:77:f6: e6:38:ec:35:06:c7:6f:dd:57:c3:98:c4:bb:34:4b: 98:6f:e3:d1:08:30:70:bb:41:0d:a7:44:2a:1f:28: ff:68:62:76:bf:f5:f9:cc:81:98:61:71:4c:61:04: 71:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0E:66:BA:55:F8:10:18:9E:95:E2:45:5E:C3:B7:C2:79:AB:88:FB X509v3 Authority Key Identifier: keyid:32:21:F6:BB:BA:53:17:2B:B7:A2:FE:B9:42:CD:33:35:EA:37:E2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpeDoSQktHHXn6EgnEEt5QpSZESv1LirvuEQ64w9hJwN/0/3221F6BBBA53172BB7A2FEB942CD3335EA37E2C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:92:37:25:30:9e:b2:34:ab:c9:47:52:db:00:28:bb:30:2b: 4b:00:2e:d3:67:79:36:86:af:c6:27:c6:04:af:75:61:09:c4: 64:23:d3:80:2c:5d:88:f0:1a:71:04:f0:b7:4f:16:2f:98:20: 87:10:94:d4:69:ca:99:48:a3:f6:f2:a7:a3:41:b3:d5:7a:46: 79:76:eb:08:50:7d:67:25:7d:89:e8:e3:fd:30:2c:0b:c7:93: 92:ad:c0:b5:55:76:47:af:66:7c:aa:67:31:10:7e:9e:6d:18: 5f:e3:ff:2d:ab:b2:9b:40:c7:92:11:30:3e:e0:9d:f8:c8:2f: 64:f5:44:0e:a8:db:3a:9c:0a:8a:95:bf:55:e1:8c:ac:d4:b2: bb:dd:9a:06:f5:a8:54:ae:3b:20:fa:45:c4:75:a8:04:9a:c2: 85:10:b1:e2:cd:00:f8:ec:8d:98:b4:94:36:24:fe:7a:66:c6: 0f:26:ab:68:12:fd:29:78:3a:21:41:89:71:e4:70:77:a0:2a: 5a:5a:00:a6:5f:84:88:42:3f:e3:45:ca:6d:74:04:c2:72:56: 7f:6d:fb:2a:6b:67:27:bd:ea:9b:73:5d:5a:53:62:27:d8:6b: ee:26:b1:16:03:c3:94:5f:03:c3:8a:61:16:fc:42:e0:c1:3b: b7:01:19:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULl1eILFBFtRsfxAWbuhBIJDCzvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIyMUY2QkJCQTUzMTcyQkI3QTJGRUI5NDJDRDMzMzVF QTM3RTJDNTAeFw0yNTA2MTcxNzQzMDJaFw0yNTA2MTgxOTIzMDJaMDMxMTAvBgNV BAMTKDkzMEU2NkJBNTVGODEwMTg5RTk1RTI0NTVFQzNCN0MyNzlBQjg4RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtH5Jsgu1Dwe01xeizwGa/vrMM wKwtm6i8J/TMkYjxpUyboUSXgH6bNTFULvLui61FAos0IToRD1cyWfo++Y2DdMQE cbNgs39V6h4XxZwH2FE9DvsGm2/MMPSbKKQspuym1SoDcYycUPIUQG8L1F86TIvz dFGzoHOi9RCtpIZ+gCJHSMP1e0SvkIJnym9POL/MpuxDnxYMVycNCAdTrmvAPk8l WiTdq/jRvZa17daIJE9PPE+4qgjEA7M0y4RDDLzNoOuFEgvAt5HfiGc8vRN39uY4 7DUGx2/dV8OYxLs0S5hv49EIMHC7QQ2nRCofKP9oYna/9fnMgZhhcUxhBHFpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUkw5mulX4EBieleJFXsO3wnmriPswHwYDVR0j BBgwFoAUMiH2u7pTFyu3ov65Qs0zNeo34sUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3BlRG9TUWt0SEhYbjZFZ25FRXQ1UXBTWkVTdjFMaXJ2dUVRNjR3OWhK d04vMC8zMjIxRjZCQkJBNTMxNzJCQjdBMkZFQjk0MkNEMzMzNUVBMzdFMkM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyMjFGNkJCQkE1MzE3MkJC N0EyRkVCOTQyQ0QzMzM1RUEzN0UyQzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3BlRG9TUWt0SEhYbjZFZ25FRXQ1UXBTWkVTdjFMaXJ2dUVRNjR3OWhKd04vMC8z MjIxRjZCQkJBNTMxNzJCQjdBMkZFQjk0MkNEMzMzNUVBMzdFMkM1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqpI3JTCesjSryUdS2wAouzArSwAu02d5NoavxifGBK91YQnEZCPTgCxdiPAa cQTwt08WL5gghxCU1GnKmUij9vKno0Gz1XpGeXbrCFB9ZyV9iejj/TAsC8eTkq3A tVV2R69mfKpnMRB+nm0YX+P/Lauym0DHkhEwPuCd+MgvZPVEDqjbOpwKipW/VeGM rNSyu92aBvWoVK47IPpFxHWoBJrChRCx4s0A+OyNmLSUNiT+embGDyaraBL9KXg6 IUGJceRwd6AqWloApl+EiEI/40XKbXQEwnJWf237KmtnJ73qm3NdWlNiJ9hr7iax FgPDlF8Dw4phFvxC4ME7twEZtA== -----END CERTIFICATE-----Generated at Wed Jun 18 10:09:51 2025 by rpki-client