$ rpki-client -vvf rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.mft File: 2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.mft (raw, json) Hash identifier: 4/S3WLCrPgcLjfWcykD/fc7PNAelsty3q5YtmsuGOMk= Subject key identifier: 77:C8:B2:82:63:C1:29:8E:FC:7C:43:EC:97:5E:3D:78:C0:60:5E:96 Authority key identifier: 2A:56:F9:74:D0:1E:D8:CF:D5:D2:40:22:C9:C3:13:E4:A6:7D:0B:82 Certificate issuer: /CN=2A56F974D01ED8CFD5D24022C9C313E4A67D0B82 Certificate serial: 3223058C1C827CC8ACE89CA67209894C526E0767 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.cer Subject info access: rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.mft Manifest number: 024C Signing time: Mon 16 Jun 2025 08:10:27 +0000 Manifest this update: Mon 16 Jun 2025 08:05:27 +0000 Manifest next update: Tue 17 Jun 2025 11:36:27 +0000 Files and hashes: 1: 323830343a386538383a3a2f33322d3438203d3e20323733343332.roa (hash: w+RGFIUO0fkMSWVC+1OJSOxgwJ3XnZ8bhoyISdqC9uM=) 2: 2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.crl (hash: ZUtMEHxso9fk+4gPN60CdlBPE3vzKOM1lZqLq7k8enI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.crl rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 04:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:23:05:8c:1c:82:7c:c8:ac:e8:9c:a6:72:09:89:4c:52:6e:07:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A56F974D01ED8CFD5D24022C9C313E4A67D0B82 Validity Not Before: Jun 16 08:05:27 2025 GMT Not After : Jun 17 11:36:27 2025 GMT Subject: CN=77C8B28263C1298EFC7C43EC975E3D78C0605E96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:32:b7:8a:47:98:9b:00:25:94:df:c4:cf:15: e0:58:e2:10:7b:ab:e0:63:0e:98:27:9c:f5:ee:4b: 09:e5:d5:b7:0f:39:53:f6:93:13:e6:e6:b4:2f:bd: a8:9b:96:e1:1b:19:88:3b:a4:f2:38:e1:89:a4:e0: e8:24:2f:1f:0b:55:53:0b:bb:bb:f7:04:55:6e:3d: 63:4e:91:01:6b:92:45:97:17:16:b9:aa:d1:e3:e2: cf:85:25:7c:66:f2:6a:d9:67:5a:58:ca:a0:3e:2a: b3:e6:07:0b:ca:fc:68:a2:ea:b2:c1:fc:79:9f:a0: fb:0e:26:7d:99:f6:17:c0:6c:5f:2a:1f:b0:13:40: bc:8c:d4:0f:9a:e2:5e:5b:03:89:8f:a9:21:a1:42: 79:12:e0:e0:69:01:c8:eb:8b:88:bd:6f:28:a1:b4: a0:2e:51:59:37:24:33:28:14:8d:44:f6:bd:4c:be: d1:57:be:9d:09:19:70:24:2f:cc:13:2d:67:10:0d: 7b:81:c4:76:4a:63:fe:a6:2a:91:ff:0b:24:0d:60: 8c:49:bf:dd:53:b6:9e:d9:ae:ac:d7:fa:ce:49:5e: ee:3e:51:45:25:1f:5f:9c:2a:50:de:2e:29:6f:60: 85:c0:68:84:3e:c4:89:c8:03:f5:70:9d:80:34:cf: 6b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C8:B2:82:63:C1:29:8E:FC:7C:43:EC:97:5E:3D:78:C0:60:5E:96 X509v3 Authority Key Identifier: keyid:2A:56:F9:74:D0:1E:D8:CF:D5:D2:40:22:C9:C3:13:E4:A6:7D:0B:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:40:67:e9:63:ef:d9:1c:52:6b:3e:b3:62:ae:21:91:6d:9b: dd:33:07:9e:85:49:b6:69:3f:d6:3b:76:aa:bb:ef:c7:92:2d: 6a:7c:77:69:c4:f1:d2:85:23:f8:4a:ae:9b:8b:7c:ef:e4:b6: 29:3f:a3:0b:f6:f7:df:93:86:5f:e0:b2:07:a8:b3:92:56:99: ba:de:54:3f:1a:41:40:04:d3:f5:51:cf:57:28:1b:21:b6:3b: 46:dd:6b:c9:25:34:0d:39:c6:bb:62:18:c3:7f:74:ab:68:cb: 71:10:67:da:ed:3d:f4:93:b0:4c:56:65:2e:79:b4:ee:ab:fb: 4a:66:bd:fc:e4:fd:1a:c8:24:63:5f:e8:45:57:4f:99:86:0e: bc:81:71:8b:43:20:22:5e:c5:2e:b2:df:0f:1f:b1:6f:6c:85: 11:84:98:16:8c:b5:52:3e:d9:e4:da:ca:a1:a4:da:04:34:1a: fc:21:42:9b:72:2c:c3:37:9b:de:eb:c7:b1:99:ca:be:58:4d: fc:24:a8:ec:6d:a7:b6:85:3e:55:9b:ee:d8:c0:30:eb:15:0b: 68:a8:09:b5:a2:0e:f0:b6:66:85:a4:8a:81:29:44:3c:c7:d9: a5:12:15:f3:66:73:69:f3:77:0f:9e:28:91:24:d0:1a:a0:88: b1:9f:72:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMiMFjByCfMis6JymcgmJTFJuB2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE1NkY5NzREMDFFRDhDRkQ1RDI0MDIyQzlDMzEzRTRB NjdEMEI4MjAeFw0yNTA2MTYwODA1MjdaFw0yNTA2MTcxMTM2MjdaMDMxMTAvBgNV BAMTKDc3QzhCMjgyNjNDMTI5OEVGQzdDNDNFQzk3NUUzRDc4QzA2MDVFOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0MreKR5ibACWU38TPFeBY4hB7 q+BjDpgnnPXuSwnl1bcPOVP2kxPm5rQvvaibluEbGYg7pPI44Ymk4OgkLx8LVVML u7v3BFVuPWNOkQFrkkWXFxa5qtHj4s+FJXxm8mrZZ1pYyqA+KrPmBwvK/Gii6rLB /HmfoPsOJn2Z9hfAbF8qH7ATQLyM1A+a4l5bA4mPqSGhQnkS4OBpAcjri4i9byih tKAuUVk3JDMoFI1E9r1MvtFXvp0JGXAkL8wTLWcQDXuBxHZKY/6mKpH/CyQNYIxJ v91Ttp7ZrqzX+s5JXu4+UUUlH1+cKlDeLilvYIXAaIQ+xInIA/VwnYA0z2upAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUd8iygmPBKY78fEPsl149eMBgXpYwHwYDVR0j BBgwFoAUKlb5dNAe2M/V0kAiycMT5KZ9C4IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3dpY0ZyYWhRNUhrd1BDaXJ3VXRENE05QnBhRjJidVB3MWVXYWpTeUxU QkwvMS8yQTU2Rjk3NEQwMUVEOENGRDVEMjQwMjJDOUMzMTNFNEE2N0QwQjgyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNTZGOTc0RDAxRUQ4Q0ZE NUQyNDAyMkM5QzMxM0U0QTY3RDBCODIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3dpY0ZyYWhRNUhrd1BDaXJ3VXRENE05QnBhRjJidVB3MWVXYWpTeUxUQkwvMS8y QTU2Rjk3NEQwMUVEOENGRDVEMjQwMjJDOUMzMTNFNEE2N0QwQjgyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJEBn6WPv2RxSaz6zYq4hkW2b3TMHnoVJtmk/1jt2qrvvx5Itanx3acTx0oUj +Equm4t87+S2KT+jC/b335OGX+CyB6izklaZut5UPxpBQATT9VHPVygbIbY7Rt1r ySU0DTnGu2IYw390q2jLcRBn2u099JOwTFZlLnm07qv7Sma9/OT9GsgkY1/oRVdP mYYOvIFxi0MgIl7FLrLfDx+xb2yFEYSYFoy1Uj7Z5NrKoaTaBDQa/CFCm3Iswzeb 3uvHsZnKvlhN/CSo7G2ntoU+VZvu2MAw6xULaKgJtaIO8LZmhaSKgSlEPMfZpRIV 82ZzafN3D54okSTQGqCIsZ9yRA== -----END CERTIFICATE-----Generated at Mon Jun 16 10:07:07 2025 by rpki-client