$ rpki-client -vvf rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft File: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft (raw, json) Hash identifier: Hy3CbRf1O1eG1QehfEP5hs4U7amKlygD0dV4p5f1cqY= Subject key identifier: BD:35:48:4D:D2:1C:C8:E0:17:25:5A:99:A2:51:54:B8:12:F6:6C:88 Authority key identifier: 2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7 Certificate issuer: /CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7 Certificate serial: 7B63AB12799FC0DD1F6C59B15EA8BD9D8A5ACA86 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer Subject info access: rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft Manifest number: 0125 Signing time: Tue 17 Jun 2025 16:40:26 +0000 Manifest this update: Tue 17 Jun 2025 16:35:26 +0000 Manifest next update: Wed 18 Jun 2025 19:04:26 +0000 Files and hashes: 1: 2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl (hash: ET0tWnIPzjwhQqayW2qZ2I6mA55Hxk+8NkMQLCgvaQg=) 2: 3137392e34382e3133372e302f32342d3234203d3e20323734363430.roa (hash: pQEQlRwKVVCvE7av7lhBHP+xdFaTf6Yo50+yHZSAJFg=) 3: 323830343a393136633a3a2f33322d3335203d3e20323734363430.roa (hash: 5z/9B2lDD9Y2z6ddTWA/M1t9+scwLoPNHb2Cu/S9FHo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 19:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:63:ab:12:79:9f:c0:dd:1f:6c:59:b1:5e:a8:bd:9d:8a:5a:ca:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DF5549CA90B47D8FA5217800F005C7EC0D966E7 Validity Not Before: Jun 17 16:35:26 2025 GMT Not After : Jun 18 19:04:26 2025 GMT Subject: CN=BD35484DD21CC8E017255A99A25154B812F66C88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bc:4a:38:cc:dd:9f:08:2f:26:6d:9d:6d:42: 8b:a7:27:a7:1b:74:16:0f:db:7f:fd:60:7b:cf:37: 4a:ca:7d:72:48:42:4b:4d:9f:b2:e3:88:13:12:f8: 45:03:08:b8:30:d0:62:25:9b:52:f7:0d:c0:b9:87: a4:cd:b5:c2:3e:83:a3:88:b4:b2:2a:40:21:ec:c1: fe:37:6f:d2:f3:88:4a:30:91:d8:59:c7:5c:c0:70: a6:aa:68:59:a9:62:cd:e4:7e:c0:49:8c:62:65:6c: 31:99:1b:83:b7:5d:74:14:c6:b9:97:07:a7:35:8a: f5:0c:e5:08:23:80:50:91:05:1e:71:cf:4c:9f:d2: 3c:81:cb:38:61:11:06:94:64:3d:8c:d4:7f:43:cc: b4:4f:e5:f0:ab:95:48:2c:92:49:e1:b1:4b:3a:a4: 70:81:af:96:a3:41:4f:0f:0f:9a:e2:42:de:f9:2f: d7:59:ff:3e:d3:b1:a7:9e:04:5c:69:a9:5f:e9:ab: 4f:2a:7d:1d:51:d7:e4:57:bb:20:a3:31:d0:f8:ca: 7d:47:5f:d4:5b:bc:73:43:53:85:40:eb:5a:d0:e9: 99:81:f8:08:bf:02:6a:2e:78:3e:a2:9c:c5:ff:96: 89:a4:4d:e2:f9:d8:e0:f2:01:b0:9a:e7:88:5a:59: 25:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:35:48:4D:D2:1C:C8:E0:17:25:5A:99:A2:51:54:B8:12:F6:6C:88 X509v3 Authority Key Identifier: keyid:2D:F5:54:9C:A9:0B:47:D8:FA:52:17:80:0F:00:5C:7E:C0:D9:66:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCn7oU326hBXfHm3QQxEtsbEtNHWVj7MhWWpadKGWQcT/0/2DF5549CA90B47D8FA5217800F005C7EC0D966E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:3d:e8:5a:8e:54:bb:f0:a9:fb:f5:f1:f9:7d:40:bc:6a:24: 13:c6:bb:fd:da:d3:7e:6e:6a:59:7c:88:9d:a6:eb:ee:7e:ac: 31:ad:4f:9d:50:04:ac:0f:35:e4:ea:24:12:2e:2c:8f:b8:89: 33:5f:a6:3c:d3:ed:19:33:b6:e4:98:0f:94:b1:cd:14:fb:2d: 58:f1:8a:a9:69:d2:79:71:b1:fb:4d:1f:20:47:cf:c5:5f:66: 7e:cb:6c:29:13:bf:cf:7f:ce:f4:a5:8b:6e:96:12:c4:02:62: 3c:8e:6c:f8:ae:04:fd:49:d3:31:d2:43:d0:37:fb:c5:56:ce: 30:36:f1:84:15:7a:4f:11:63:f6:56:12:d4:ed:b5:b5:06:b5: 47:a9:a4:ee:ad:0f:a9:24:c1:35:e4:05:f3:32:45:b0:47:30: ff:0e:5c:81:f0:cc:07:b7:81:96:2e:5f:23:9a:5f:0c:a0:b3: c6:58:60:f0:aa:90:7b:b2:1e:05:a8:0b:f1:4e:f7:36:81:b6: 1e:96:23:63:d0:41:3a:fd:69:61:8f:ce:f0:41:52:2f:f4:12: 9f:89:77:c1:e3:b2:af:b4:36:57:40:72:73:8f:a7:8f:8c:5f: c2:cd:69:40:13:68:8e:9c:b5:63:b2:bc:ee:e1:03:3b:e7:8a: 8e:da:d0:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUe2OrEnmfwN0fbFmxXqi9nYpayoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRGNTU0OUNBOTBCNDdEOEZBNTIxNzgwMEYwMDVDN0VD MEQ5NjZFNzAeFw0yNTA2MTcxNjM1MjZaFw0yNTA2MTgxOTA0MjZaMDMxMTAvBgNV BAMTKEJEMzU0ODRERDIxQ0M4RTAxNzI1NUE5OUEyNTE1NEI4MTJGNjZDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0vEo4zN2fCC8mbZ1tQounJ6cb dBYP23/9YHvPN0rKfXJIQktNn7LjiBMS+EUDCLgw0GIlm1L3DcC5h6TNtcI+g6OI tLIqQCHswf43b9LziEowkdhZx1zAcKaqaFmpYs3kfsBJjGJlbDGZG4O3XXQUxrmX B6c1ivUM5QgjgFCRBR5xz0yf0jyByzhhEQaUZD2M1H9DzLRP5fCrlUgskknhsUs6 pHCBr5ajQU8PD5riQt75L9dZ/z7TsaeeBFxpqV/pq08qfR1R1+RXuyCjMdD4yn1H X9RbvHNDU4VA61rQ6ZmB+Ai/AmoueD6inMX/lomkTeL52ODyAbCa54haWSWhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvTVITdIcyOAXJVqZolFUuBL2bIgwHwYDVR0j BBgwFoAULfVUnKkLR9j6UheADwBcfsDZZucwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRENuN29VMzI2aEJYZkhtM1FReEV0c2JFdE5IV1ZqN01oV1dwYWRLR1dR Y1QvMC8yREY1NTQ5Q0E5MEI0N0Q4RkE1MjE3ODAwRjAwNUM3RUMwRDk2NkU3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJERjU1NDlDQTkwQjQ3RDhG QTUyMTc4MDBGMDA1QzdFQzBEOTY2RTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RENuN29VMzI2aEJYZkhtM1FReEV0c2JFdE5IV1ZqN01oV1dwYWRLR1dRY1QvMC8y REY1NTQ5Q0E5MEI0N0Q4RkE1MjE3ODAwRjAwNUM3RUMwRDk2NkU3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMz3oWo5Uu/Cp+/Xx+X1AvGokE8a7/drTfm5qWXyInabr7n6sMa1PnVAErA81 5OokEi4sj7iJM1+mPNPtGTO25JgPlLHNFPstWPGKqWnSeXGx+00fIEfPxV9mfsts KRO/z3/O9KWLbpYSxAJiPI5s+K4E/UnTMdJD0Df7xVbOMDbxhBV6TxFj9lYS1O21 tQa1R6mk7q0PqSTBNeQF8zJFsEcw/w5cgfDMB7eBli5fI5pfDKCzxlhg8KqQe7Ie BagL8U73NoG2HpYjY9BBOv1pYY/O8EFSL/QSn4l3weOyr7Q2V0Byc4+nj4xfws1p QBNojpy1Y7K87uEDO+eKjtrQUw== -----END CERTIFICATE-----Generated at Wed Jun 18 01:30:53 2025 by rpki-client