$ rpki-client -vvf rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft File: 2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft (raw, json) Hash identifier: U65R3e2vorOikG6sn7kKRl3JqDsXdUHOSBrCg2LpVSA= Subject key identifier: F4:AE:95:FA:38:4D:56:58:9B:E0:59:89:B0:C2:26:12:67:AB:41:2D Authority key identifier: 2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B Certificate issuer: /CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B Certificate serial: 4397BDAC1EAB5E71624916E632A657F7AE964F95 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft Manifest number: 024A Signing time: Mon 16 Jun 2025 03:15:29 +0000 Manifest this update: Mon 16 Jun 2025 03:10:29 +0000 Manifest next update: Tue 17 Jun 2025 05:32:29 +0000 Files and hashes: 1: 3137372e38372e34342e302f32322d3234203d3e203532353839.roa (hash: U1bU2vymA1trGo0kqdj5LljKi5zORYlms1D3T/ome8k=) 2: 2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl (hash: St6GXdjdp4Y3oE75am3EvB3oqbaPS5SbfyrBXPfx5Q0=) 3: 323830343a316164383a3a2f33322d3438203d3e203532353839.roa (hash: nM9/FgUa0C68sG38T5nV/uNQ86svUq5vsVkQhqR+lIs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 05:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:97:bd:ac:1e:ab:5e:71:62:49:16:e6:32:a6:57:f7:ae:96:4f:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B Validity Not Before: Jun 16 03:10:29 2025 GMT Not After : Jun 17 05:32:29 2025 GMT Subject: CN=F4AE95FA384D56589BE05989B0C2261267AB412D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:be:4c:30:74:98:12:38:b8:ac:5c:b7:f7:bf: b7:1c:5b:ba:b5:16:ba:69:90:51:45:dc:f4:71:34: ca:6d:75:b7:9b:60:09:f4:dc:9d:55:93:ad:d9:aa: d7:a3:8f:b4:65:51:de:b4:cc:b8:13:37:b5:df:b3: d1:6d:f8:5e:ce:49:7c:84:71:33:10:da:a5:91:a8: 41:b0:fa:30:2c:6a:1d:91:b1:bc:c2:34:59:b9:a7: ff:d1:ee:ee:33:c0:ed:1c:7c:fb:c7:af:c3:54:b1: 15:16:df:80:60:2a:40:22:ce:eb:7b:69:cb:bb:84: 7a:24:58:4c:73:5c:6d:99:8a:4e:3f:e3:a0:03:56: 28:d5:1e:2a:29:1b:cd:09:62:fe:cb:1c:21:9c:1d: a5:75:50:a5:13:f5:be:09:27:a9:cb:d7:8d:ca:4d: 5f:98:16:d3:12:58:3a:9e:60:40:50:61:05:b2:54: 2c:b6:a7:f2:59:40:af:c6:e0:3c:fa:60:97:48:20: d1:f8:90:43:cd:ae:0c:5e:8c:b4:a0:7a:c9:ea:ce: af:ac:83:35:38:d8:e7:d7:e3:05:07:45:ce:11:fc: 7d:ae:0b:79:24:48:78:05:51:d2:b9:dd:1e:c2:61: 0a:de:64:84:86:3a:30:cb:ef:8c:4d:f4:62:38:35: 3a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AE:95:FA:38:4D:56:58:9B:E0:59:89:B0:C2:26:12:67:AB:41:2D X509v3 Authority Key Identifier: keyid:2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:05:bd:b6:a2:f4:f0:6d:60:43:85:c7:39:11:83:c3:ca:c9: cf:7b:e2:a9:50:3a:7b:75:2d:14:75:18:68:00:4a:8e:6e:e6: b5:fa:03:89:90:b7:63:b2:04:ac:e3:05:ba:31:09:0a:07:c1: b8:16:4f:51:d8:b5:7f:0d:07:45:bd:9d:31:28:21:b3:41:a7: 91:c4:d3:70:bd:73:b1:8c:4f:23:34:90:48:31:f2:c5:9e:d0: f9:cc:80:12:18:40:b5:65:12:a3:fb:5e:b2:c4:d9:89:a4:41: f9:7a:af:3b:8c:33:32:cf:d4:ea:35:7d:cb:ab:8e:ff:9f:2c: 39:ad:07:fe:6f:4f:e6:e9:9e:8a:99:69:b0:c5:fb:64:76:f0: 0a:72:c1:ab:2c:d5:2c:03:c2:f6:bf:d8:cf:24:7e:10:c2:f4: 31:25:08:89:cf:c6:ca:05:25:67:e1:6f:f6:d9:46:83:61:01: 02:e4:51:f3:e0:7d:ce:58:75:47:fa:a3:ba:32:cf:5b:bf:cd: 27:a0:3c:4b:45:ec:7a:22:14:28:62:2e:33:c8:cd:2d:bc:e3: 2b:84:65:74:60:09:af:f3:32:bb:ea:db:4f:60:63:03:b8:c2: 13:35:d9:87:f4:fe:07:88:66:89:6b:fe:04:75:d0:f6:25:ac: a7:b9:61:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ5e9rB6rXnFiSRbmMqZX966WT5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI0NzBFNUMyMzg4RkQ0RUUyN0ZEMDkzQTE4OERCNTFE NTdDQUQzQjAeFw0yNTA2MTYwMzEwMjlaFw0yNTA2MTcwNTMyMjlaMDMxMTAvBgNV BAMTKEY0QUU5NUZBMzg0RDU2NTg5QkUwNTk4OUIwQzIyNjEyNjdBQjQxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvkwwdJgSOLisXLf3v7ccW7q1 FrppkFFF3PRxNMptdbebYAn03J1Vk63Zqtejj7RlUd60zLgTN7Xfs9Ft+F7OSXyE cTMQ2qWRqEGw+jAsah2RsbzCNFm5p//R7u4zwO0cfPvHr8NUsRUW34BgKkAizut7 acu7hHokWExzXG2Zik4/46ADVijVHiopG80JYv7LHCGcHaV1UKUT9b4JJ6nL143K TV+YFtMSWDqeYEBQYQWyVCy2p/JZQK/G4Dz6YJdIINH4kEPNrgxejLSgesnqzq+s gzU42OfX4wUHRc4R/H2uC3kkSHgFUdK53R7CYQreZISGOjDL74xN9GI4NTqNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9K6V+jhNVlib4FmJsMImEmerQS0wHwYDVR0j BBgwFoAUK0cOXCOI/U7if9CToYjbUdV8rTswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3Y5WHhQRWt5ZXY4ZnNtZDdnZ3dMWE1pUHlOdmdWa2pBckg1UnhHRUpk WDEvMS8yQjQ3MEU1QzIzODhGRDRFRTI3RkQwOTNBMTg4REI1MUQ1N0NBRDNCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNDcwRTVDMjM4OEZENEVF MjdGRDA5M0ExODhEQjUxRDU3Q0FEM0IuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3Y5WHhQRWt5ZXY4ZnNtZDdnZ3dMWE1pUHlOdmdWa2pBckg1UnhHRUpkWDEvMS8y QjQ3MEU1QzIzODhGRDRFRTI3RkQwOTNBMTg4REI1MUQ1N0NBRDNCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKQW9tqL08G1gQ4XHORGDw8rJz3viqVA6e3UtFHUYaABKjm7mtfoDiZC3Y7IE rOMFujEJCgfBuBZPUdi1fw0HRb2dMSghs0GnkcTTcL1zsYxPIzSQSDHyxZ7Q+cyA EhhAtWUSo/tessTZiaRB+XqvO4wzMs/U6jV9y6uO/58sOa0H/m9P5umeiplpsMX7 ZHbwCnLBqyzVLAPC9r/YzyR+EML0MSUIic/GygUlZ+Fv9tlGg2EBAuRR8+B9zlh1 R/qjujLPW7/NJ6A8S0XseiIUKGIuM8jNLbzjK4RldGAJr/Myu+rbT2BjA7jCEzXZ h/T+B4hmiWv+BHXQ9iWsp7lhBA== -----END CERTIFICATE-----Generated at Mon Jun 16 21:20:27 2025 by rpki-client