$ rpki-client -vvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft File: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft (raw, json) Hash identifier: nbPxj/An+Y7lSP0ozyofaE0l1ZSF/KxQ518W58OCniQ= Subject key identifier: 54:18:4B:EA:38:19:71:33:61:B1:47:BD:40:7F:EE:83:B9:91:B3:81 Authority key identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED Certificate issuer: /CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Certificate serial: 43769FE77A31791FDBE15F77C1375979CFF6B9B2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer Subject info access: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft Manifest number: 0246 Signing time: Mon 16 Jun 2025 17:37:42 +0000 Manifest this update: Mon 16 Jun 2025 17:32:42 +0000 Manifest next update: Tue 17 Jun 2025 21:06:42 +0000 Files and hashes: 1: 323830343a313431633a3a2f33322d313238203d3e203533313330.roa (hash: cjsfM81trhoZs+Ib78YBfAQ97ux0mFDSEJNG8MM4Pa8=) 2: 3138372e3132302e3234302e302f32302d3234203d3e203533313330.roa (hash: BzoyXL30Xsaxt5/GzA+mLV5q6XBxznhdO2qisUbseRg=) 3: 02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl (hash: aGnGbABV3A20rl5lu8tM62cfsffDrVdHcDSbtjp7xKU=) 4: 3139312e372e37322e302f32312d3234203d3e203533313330.roa (hash: uXdeuicJG1GO+GJKUORCb4DqvhzxPyQ2Z5ORNJJFr7Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 21:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:76:9f:e7:7a:31:79:1f:db:e1:5f:77:c1:37:59:79:cf:f6:b9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED Validity Not Before: Jun 16 17:32:42 2025 GMT Not After : Jun 17 21:06:42 2025 GMT Subject: CN=54184BEA3819713361B147BD407FEE83B991B381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:1f:5c:2a:60:a1:e0:9f:c8:11:57:98:6a:93: 87:66:82:e8:14:04:c7:b1:f3:38:92:61:f3:bf:60: cd:0e:9d:72:42:d3:26:a7:6a:e7:b3:59:27:1d:45: 88:b5:1b:59:93:53:83:ae:5b:12:b3:89:94:68:0a: a3:9f:0d:8d:f2:f2:0b:46:6d:db:4a:b7:28:c2:96: f6:e1:4b:58:9e:f1:5b:cc:2a:f6:44:6a:43:d8:f0: 79:6d:fb:3e:65:65:db:59:3b:97:14:3f:83:6a:90: 2e:d5:2a:9a:fb:f6:0c:51:35:0f:4c:1b:df:83:bc: 4e:19:c7:e9:94:25:24:18:81:87:c9:50:a6:33:cb: de:45:09:a1:c7:d7:ba:71:c4:ec:b1:09:0f:98:73: 98:ea:4a:e5:fd:d2:2a:ea:53:a6:37:c3:c9:36:c7: ee:23:9f:99:56:7d:90:ca:ca:db:a4:37:fb:f6:2f: cd:73:2c:ff:67:e9:92:cf:9a:a9:0b:72:bb:94:cd: ac:0e:c8:35:64:82:34:34:75:0b:f8:00:ed:e3:c4: 01:18:e9:6f:eb:8d:63:db:3d:28:84:4a:ac:07:f2: 45:d9:f4:d5:d4:6b:bf:23:d5:55:d2:ab:3a:c7:40: f0:96:32:30:ff:87:93:7b:43:b2:3b:17:1f:55:65: 28:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:18:4B:EA:38:19:71:33:61:B1:47:BD:40:7F:EE:83:B9:91:B3:81 X509v3 Authority Key Identifier: keyid:02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:cd:cc:7d:dc:01:c4:31:ab:76:31:4a:77:79:f6:69:1d:48: c3:6c:3d:f4:7c:7c:5c:38:87:c8:38:fe:9d:b3:f6:65:6d:54: a5:2c:3c:bf:8e:e3:a7:fa:c5:cf:43:3f:3d:c5:5a:e7:a5:d5: 44:01:a0:5a:82:88:a3:cb:cc:b0:a0:bc:1c:42:da:3b:3e:14: 38:60:e4:97:46:f6:3b:08:6f:c1:04:83:41:fc:14:65:47:ee: 8f:ca:fd:62:20:0c:fb:d7:ea:b7:3e:c6:a6:d8:da:f1:66:c0: d5:ab:9e:1d:a8:df:cd:6c:3c:93:2b:6b:86:dc:26:c8:f4:b1: a2:91:e1:2a:56:52:0a:42:ff:97:53:ba:19:9b:a8:66:f8:5f: 69:fb:f6:28:f6:b2:7a:8f:f0:d1:78:aa:67:8c:23:9d:47:80: 98:72:3b:cc:37:20:2d:a5:cd:20:a5:0b:d7:5d:5f:7c:12:7a: 4e:29:39:db:ec:11:41:37:5e:26:7b:ac:6e:83:20:e8:5f:13: 86:39:cb:bb:ce:87:6e:75:47:9e:98:4c:64:c4:34:e5:63:b3: 53:df:cf:12:75:73:36:57:71:ed:8c:5a:1e:42:ee:c2:d7:9b: 83:cb:40:94:37:cf:0a:01:03:53:07:e3:a5:bc:5b:6d:f9:fb: e3:d3:9f:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQ3af53oxeR/b4V93wTdZec/2ubIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJDQjk5M0U5NTg1QTUzRkM2QjQwREE3NjJBNzNFQjI4 MjFCRjZFRDAeFw0yNTA2MTYxNzMyNDJaFw0yNTA2MTcyMTA2NDJaMDMxMTAvBgNV BAMTKDU0MTg0QkVBMzgxOTcxMzM2MUIxNDdCRDQwN0ZFRTgzQjk5MUIzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxH1wqYKHgn8gRV5hqk4dmgugU BMex8ziSYfO/YM0OnXJC0yanauezWScdRYi1G1mTU4OuWxKziZRoCqOfDY3y8gtG bdtKtyjClvbhS1ie8VvMKvZEakPY8Hlt+z5lZdtZO5cUP4NqkC7VKpr79gxRNQ9M G9+DvE4Zx+mUJSQYgYfJUKYzy95FCaHH17pxxOyxCQ+Yc5jqSuX90irqU6Y3w8k2 x+4jn5lWfZDKytukN/v2L81zLP9n6ZLPmqkLcruUzawOyDVkgjQ0dQv4AO3jxAEY 6W/rjWPbPSiESqwH8kXZ9NXUa78j1VXSqzrHQPCWMjD/h5N7Q7I7Fx9VZSi3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUVBhL6jgZcTNhsUe9QH/ug7mRs4EwHwYDVR0j BBgwFoAUAsuZPpWFpT/GtA2nYqc+soIb9u0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtM NlovMS8wMkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyQ0I5OTNFOTU4NUE1M0ZD NkI0MERBNzYyQTczRUIyODIxQkY2RUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFI4R1E1QlVkQkg0a3FhQUNjWllRYmpuVUVSS2dQWUNrMk5KaTdKNEtMNlovMS8w MkNCOTkzRTk1ODVBNTNGQzZCNDBEQTc2MkE3M0VCMjgyMUJGNkVELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY83MfdwBxDGrdjFKd3n2aR1Iw2w99Hx8XDiHyDj+nbP2ZW1UpSw8v47jp/rF z0M/PcVa56XVRAGgWoKIo8vMsKC8HELaOz4UOGDkl0b2OwhvwQSDQfwUZUfuj8r9 YiAM+9fqtz7Gptja8WbA1aueHajfzWw8kytrhtwmyPSxopHhKlZSCkL/l1O6GZuo Zvhfafv2KPayeo/w0XiqZ4wjnUeAmHI7zDcgLaXNIKUL111ffBJ6Tik52+wRQTde JnusboMg6F8ThjnLu86HbnVHnphMZMQ05WOzU9/PEnVzNldx7YxaHkLuwtebg8tA lDfPCgEDUwfjpbxbbfn749Of2A== -----END CERTIFICATE-----Generated at Tue Jun 17 01:32:45 2025 by rpki-client