$ rpki-client -vvf rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft File: 5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft (raw, json) Hash identifier: eI7O8lAZKpybk/Pt9h9gGGxPEj+NMK3XQW6qC2Mtztw= Subject key identifier: 1D:57:36:DE:2B:EA:95:C1:21:07:94:9D:BD:E4:FA:CB:DE:AC:66:ED Authority key identifier: 5D:43:AF:2F:C3:A0:BD:09:5F:D0:62:62:5C:5E:CE:34:B8:4A:95:23 Certificate issuer: /CN=5D43AF2FC3A0BD095FD062625C5ECE34B84A9523 Certificate serial: 0FF08F4D5B20DFDE6770B980627658D95A02EA3C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.cer Subject info access: rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft Manifest number: 024E Signing time: Wed 18 Jun 2025 18:26:20 +0000 Manifest this update: Wed 18 Jun 2025 18:21:20 +0000 Manifest next update: Thu 19 Jun 2025 21:48:20 +0000 Files and hashes: 1: 3137372e35322e3137302e302f32342d3234203d3e20323632343439.roa (hash: 7nYq6K8fdw4ZRybGXDs4Kkd0F3fRmBUFACD2hQSjlMM=) 2: 5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.crl (hash: qvJJEGJUIFs4O1Q8r0H/ppjKS8rEci5u3naES6vvMrA=) 3: 3137372e35322e3136382e302f32322d3232203d3e20323632343439.roa (hash: +7GsRgs7NRIZR5WPMQvqtfPP2hg4idIHIzt0q9r+wrk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.crl rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Jun 2025 21:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f0:8f:4d:5b:20:df:de:67:70:b9:80:62:76:58:d9:5a:02:ea:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D43AF2FC3A0BD095FD062625C5ECE34B84A9523 Validity Not Before: Jun 18 18:21:20 2025 GMT Not After : Jun 19 21:48:20 2025 GMT Subject: CN=1D5736DE2BEA95C12107949DBDE4FACBDEAC66ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:11:4a:32:c2:59:1b:9c:04:b7:e8:ab:e9: a7:af:46:d6:7f:aa:e9:db:db:cd:1f:60:b3:9b:0a: 52:92:7e:df:c1:c4:b7:61:24:f8:1f:03:a2:9a:06: 5e:d6:03:6a:b8:0a:d3:64:15:0e:73:1b:4f:7d:0b: c5:4c:94:d6:60:ee:d2:4d:f9:79:64:b0:ce:ab:8f: 1c:42:3f:d4:53:36:58:bc:02:c2:52:46:e0:31:0e: b3:d9:e0:fc:40:e9:91:20:f3:da:be:cb:b8:95:24: c8:28:13:09:98:0b:2e:c6:85:c2:6c:91:27:db:f4: 57:77:7a:b2:37:73:16:a8:ec:67:32:25:74:cd:0a: 4a:d5:06:1a:a5:72:52:c8:96:45:b5:bf:ca:1c:d1: 60:61:bb:7b:27:f5:58:97:6a:50:d0:0b:5a:eb:36: 99:54:4c:b8:3d:c7:42:1d:01:8a:0e:ca:fc:f1:96: b0:fa:e0:4b:a0:15:8a:02:b6:69:11:28:49:a6:db: 45:28:8a:6c:54:4c:a3:65:0d:a8:71:4d:62:03:1e: 65:8c:43:6c:b6:41:36:3a:89:a0:50:fd:99:3f:bd: 0f:f6:8f:8a:14:47:b2:3d:2f:6a:3e:39:e0:9b:74: 1e:64:e3:8a:95:08:60:e0:1d:e0:46:7a:54:bb:1f: 95:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:57:36:DE:2B:EA:95:C1:21:07:94:9D:BD:E4:FA:CB:DE:AC:66:ED X509v3 Authority Key Identifier: keyid:5D:43:AF:2F:C3:A0:BD:09:5F:D0:62:62:5C:5E:CE:34:B8:4A:95:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CsVsXngGrjgZif4HJ7BYP1Gujs35DZX6SDDjeC5YbQ6G/1/5D43AF2FC3A0BD095FD062625C5ECE34B84A9523.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:36:17:bb:e2:7b:3c:2a:54:54:86:65:8d:16:5c:64:57:62: 71:89:4f:53:79:24:e7:33:48:d3:e6:0b:52:81:01:13:e5:70: f4:2e:87:f9:31:f4:6c:dc:92:dd:12:fd:12:0f:71:bc:52:3f: 28:50:5a:94:09:16:b4:5c:ff:df:22:20:a3:43:b7:4a:f2:1a: bb:26:c5:09:58:eb:08:31:1b:63:61:c1:26:ab:6d:b7:a3:26: 9f:66:ea:99:33:f2:ab:75:ab:b6:34:2b:ef:56:dd:22:ae:f6: 1e:26:d6:b9:7e:61:a8:64:12:f5:af:2a:1b:55:a5:6f:58:84: dd:6b:df:2c:c3:0c:ce:58:d7:b2:80:fb:34:b8:dd:27:3c:31: 55:69:58:26:8c:1a:0a:a1:8f:7f:f3:63:75:7c:5f:62:d9:1c: 46:fb:fa:99:cb:58:0a:ef:0c:f3:6e:4c:6a:72:2c:a0:fc:d3: 4d:67:3e:f8:4a:47:e7:13:2e:f9:37:a4:6e:a8:4e:4d:2b:2a: 7f:3e:7a:16:e7:d8:82:81:8a:51:78:3e:46:9b:60:c2:32:83: aa:98:37:33:c6:aa:b2:d2:01:86:3f:76:57:17:8b:ab:21:98: a9:32:34:75:fa:5c:c9:07:59:e0:be:8f:9b:28:8a:4a:d9:6a: 56:35:b6:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD/CPTVsg395ncLmAYnZY2VoC6jwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ0M0FGMkZDM0EwQkQwOTVGRDA2MjYyNUM1RUNFMzRC ODRBOTUyMzAeFw0yNTA2MTgxODIxMjBaFw0yNTA2MTkyMTQ4MjBaMDMxMTAvBgNV BAMTKDFENTczNkRFMkJFQTk1QzEyMTA3OTQ5REJERTRGQUNCREVBQzY2RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAhFKMsJZG5wEt+ir6aevRtZ/ qunb280fYLObClKSft/BxLdhJPgfA6KaBl7WA2q4CtNkFQ5zG099C8VMlNZg7tJN +XlksM6rjxxCP9RTNli8AsJSRuAxDrPZ4PxA6ZEg89q+y7iVJMgoEwmYCy7GhcJs kSfb9Fd3erI3cxao7GcyJXTNCkrVBhqlclLIlkW1v8oc0WBhu3sn9ViXalDQC1rr NplUTLg9x0IdAYoOyvzxlrD64EugFYoCtmkRKEmm20UoimxUTKNlDahxTWIDHmWM Q2y2QTY6iaBQ/Zk/vQ/2j4oUR7I9L2o+OeCbdB5k44qVCGDgHeBGelS7H5WJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHVc23ivqlcEhB5SdveT6y96sZu0wHwYDVR0j BBgwFoAUXUOvL8OgvQlf0GJiXF7ONLhKlSMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3NWc1huZ0dyamdaaWY0SEo3QllQMUd1anMzNURaWDZTRERqZUM1WWJR NkcvMS81RDQzQUYyRkMzQTBCRDA5NUZEMDYyNjI1QzVFQ0UzNEI4NEE5NTIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVENDNBRjJGQzNBMEJEMDk1 RkQwNjI2MjVDNUVDRTM0Qjg0QTk1MjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3NWc1huZ0dyamdaaWY0SEo3QllQMUd1anMzNURaWDZTRERqZUM1WWJRNkcvMS81 RDQzQUYyRkMzQTBCRDA5NUZEMDYyNjI1QzVFQ0UzNEI4NEE5NTIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYzYXu+J7PCpUVIZljRZcZFdicYlPU3kk5zNI0+YLUoEBE+Vw9C6H+TH0bNyS 3RL9Eg9xvFI/KFBalAkWtFz/3yIgo0O3SvIauybFCVjrCDEbY2HBJqttt6Mmn2bq mTPyq3WrtjQr71bdIq72HibWuX5hqGQS9a8qG1Wlb1iE3WvfLMMMzljXsoD7NLjd JzwxVWlYJowaCqGPf/NjdXxfYtkcRvv6mctYCu8M825ManIsoPzTTWc++EpH5xMu +TekbqhOTSsqfz56FufYgoGKUXg+RptgwjKDqpg3M8aqstIBhj92VxeLqyGYqTI0 dfpcyQdZ4L6PmyiKStlqVjW2lw== -----END CERTIFICATE-----Generated at Thu Jun 19 15:46:23 2025 by rpki-client