$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft File: 2D59905C3FCA5BDA34D7101B088D80451D026C47.mft (raw, json) Hash identifier: ts/PUsbqYNwfOc8iGrCgr19z+FuiKYl/M/WoRDpT1i8= Subject key identifier: 73:37:32:A8:F2:13:05:FC:7B:76:EA:21:B2:DF:24:88:47:81:B2:25 Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 Certificate issuer: /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Certificate serial: 6C66B6DDA89ACC3B952936AFEBC4F5FE9E4136FD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer Subject info access: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft Manifest number: 0248 Signing time: Sun 15 Jun 2025 19:33:48 +0000 Manifest this update: Sun 15 Jun 2025 19:28:48 +0000 Manifest next update: Mon 16 Jun 2025 23:21:48 +0000 Files and hashes: 1: 3137302e38302e3130302e302f32322d3234203d3e20323634323333.roa (hash: GZELRNfuplahvPNzTKoCXKCGe7m/TvcDFJFlJBobK9k=) 2: 3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa (hash: zTSSMFG/lgVqOaFeXf9pCktuzCsj0jIoIIi1uaEYa0I=) 3: 323830343a323439633a3a2f33322d3438203d3e20323634323333.roa (hash: NawnnPEHbMCtTiXRZuqs51ycbe695zSEZpiIfj2SEO8=) 4: 2D59905C3FCA5BDA34D7101B088D80451D026C47.crl (hash: JdoLAK7PnTzswmjUn7FwV7217paFJVDeGo4JC8fHKjo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 23:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:66:b6:dd:a8:9a:cc:3b:95:29:36:af:eb:c4:f5:fe:9e:41:36:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47 Validity Not Before: Jun 15 19:28:48 2025 GMT Not After : Jun 16 23:21:48 2025 GMT Subject: CN=733732A8F21305FC7B76EA21B2DF24884781B225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:05:f1:e7:d0:b5:db:fe:16:24:6b:fe:0b: df:c4:9f:8f:1b:c3:95:c5:22:9c:8a:73:92:29:51: e8:e2:03:c4:7b:08:96:0a:16:dc:22:13:4a:ff:df: f9:f0:98:98:a1:c5:b3:8d:4c:e3:d8:08:3d:af:1d: 7a:2b:aa:98:6c:da:d4:a4:a3:78:0b:a0:29:19:69: 28:42:09:8c:33:9e:31:25:95:21:e8:59:15:f7:18: ff:c8:cd:28:61:b1:33:0e:b9:b9:06:59:f8:ad:82: f2:89:0b:c0:b4:48:56:e3:cb:c4:a2:bf:a3:07:44: 72:b9:67:53:b3:f9:d2:ec:94:84:e2:70:74:b4:b7: 2f:0b:6b:0f:8c:fe:9f:44:3a:f9:b8:4b:d0:0d:82: a3:f7:ad:4b:ec:fd:4f:b0:61:68:5a:71:8f:f1:8a: a2:79:eb:fa:4f:8c:da:f2:dd:5f:82:ae:ec:b8:47: a1:8c:a8:56:12:bb:b1:cb:9a:63:c7:bf:36:3c:3d: 55:1b:a3:74:99:2b:42:0b:72:c3:93:92:6d:b8:79: d0:ab:9e:37:a4:9a:6d:dc:e0:49:db:43:d7:c1:aa: 40:39:3c:cb:f2:e4:e5:fe:f2:d4:7e:f3:0e:27:26: ae:15:8d:41:fb:15:66:83:da:83:1c:77:dc:70:ad: f5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:37:32:A8:F2:13:05:FC:7B:76:EA:21:B2:DF:24:88:47:81:B2:25 X509v3 Authority Key Identifier: keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a3:f8:ee:b7:35:81:b8:a1:02:4d:e4:39:0a:28:a0:0b:91: 91:b6:37:6c:84:4d:e7:ce:1b:a3:eb:99:1c:36:93:ea:c2:8d: d7:e1:7e:76:d8:76:e7:c1:cf:11:91:0a:10:53:c1:62:73:52: 86:59:e4:7d:5d:f7:15:6a:33:2a:ab:bd:06:c2:64:27:d5:21: f4:ef:54:b6:2f:ac:87:2f:ec:19:52:fe:c6:37:cb:b3:a8:77: dc:79:29:58:a0:d2:ba:3a:e1:e4:e6:38:c7:fb:c5:38:35:12: 83:64:d0:ce:8d:ba:94:36:ed:35:fa:b7:44:47:95:3e:69:ae: 1a:4c:78:58:fb:96:ae:7b:c9:79:46:a5:51:ce:06:72:c1:60: c3:9f:37:34:d5:7c:3d:99:9b:b7:d0:3b:bf:e6:34:9a:5d:33: 7c:69:29:4d:fd:be:64:e9:eb:e0:cb:41:18:84:9f:cd:c8:e4: 93:ce:f0:84:6a:fd:d1:9a:9f:62:5c:64:a2:1c:e6:d2:88:7b: 15:0b:e7:e6:b8:b3:3e:5f:a0:7a:6a:3f:69:c1:bb:c1:4a:0e: 26:97:21:41:0f:b0:a4:38:64:e0:49:f4:ca:26:df:9f:61:0d: 58:d2:b7:59:bd:70:cb:99:02:85:f4:40:13:6e:f9:b9:7a:9b: 6b:1f:5f:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUbGa23aiazDuVKTav68T1/p5BNv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1OTkwNUMzRkNBNUJEQTM0RDcxMDFCMDg4RDgwNDUx RDAyNkM0NzAeFw0yNTA2MTUxOTI4NDhaFw0yNTA2MTYyMzIxNDhaMDMxMTAvBgNV BAMTKDczMzczMkE4RjIxMzA1RkM3Qjc2RUEyMUIyREYyNDg4NDc4MUIyMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+PQXx59C12/4WJGv+C9/En48b w5XFIpyKc5IpUejiA8R7CJYKFtwiE0r/3/nwmJihxbONTOPYCD2vHXorqphs2tSk o3gLoCkZaShCCYwznjEllSHoWRX3GP/IzShhsTMOubkGWfitgvKJC8C0SFbjy8Si v6MHRHK5Z1Oz+dLslITicHS0ty8Law+M/p9EOvm4S9ANgqP3rUvs/U+wYWhacY/x iqJ56/pPjNry3V+Cruy4R6GMqFYSu7HLmmPHvzY8PVUbo3SZK0ILcsOTkm24edCr njekmm3c4EnbQ9fBqkA5PMvy5OX+8tR+8w4nJq4VjUH7FWaD2oMcd9xwrfWdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUczcyqPITBfx7duohst8kiEeBsiUwHwYDVR0j BBgwFoAULVmQXD/KW9o01xAbCI2ARR0CbEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5 QUgvMS8yRDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENTk5MDVDM0ZDQTVCREEz NEQ3MTAxQjA4OEQ4MDQ1MUQwMjZDNDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5QUgvMS8y RDU5OTA1QzNGQ0E1QkRBMzRENzEwMUIwODhEODA0NTFEMDI2QzQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEASaP47rc1gbihAk3kOQoooAuRkbY3bIRN584bo+uZHDaT6sKN1+F+dth258HP EZEKEFPBYnNShlnkfV33FWozKqu9BsJkJ9Uh9O9Uti+shy/sGVL+xjfLs6h33Hkp WKDSujrh5OY4x/vFODUSg2TQzo26lDbtNfq3REeVPmmuGkx4WPuWrnvJeUalUc4G csFgw583NNV8PZmbt9A7v+Y0ml0zfGkpTf2+ZOnr4MtBGISfzcjkk87whGr90Zqf Ylxkohzm0oh7FQvn5rizPl+gemo/acG7wUoOJpchQQ+wpDhk4En0yibfn2ENWNK3 Wb1wy5kChfRAE275uXqbax9f1Q== -----END CERTIFICATE-----Generated at Mon Jun 16 05:16:09 2025 by rpki-client