$ rpki-client -vvf rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft File: C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft (raw, json) Hash identifier: tgyAaElUchbJBLTA3H895bAnSQep//H6vmFAsD+xPoQ= Subject key identifier: 2B:DF:C3:E8:73:5F:BA:4D:7D:FF:59:1C:C8:5E:CB:EA:84:3C:9B:35 Authority key identifier: C1:1F:7C:20:B2:45:6B:A3:6E:BC:C8:92:70:AC:E9:76:DA:CF:C3:5C Certificate issuer: /CN=C11F7C20B2456BA36EBCC89270ACE976DACFC35C Certificate serial: 7C422A7CF60B8A96D28228D4A0CED70B30D450D3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer Subject info access: rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft Manifest number: 01C3 Signing time: Thu 19 Jun 2025 11:08:40 +0000 Manifest this update: Thu 19 Jun 2025 11:03:40 +0000 Manifest next update: Fri 20 Jun 2025 11:51:40 +0000 Files and hashes: 1: 323830343a313234303a3a2f33322d313238203d3e20323633343635.roa (hash: VmhohPCz9KS+aX0cz1omXVFO2DRFWZR9rKAG0HIoc2o=) 2: 3137372e3139302e3232342e302f32302d3332203d3e20323633343635.roa (hash: wKAb1UDvZiPDekR65fEEYenq6zheNgIFDzzMrJdoquA=) 3: C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl (hash: lSHcoPyvZWQYmcckWe6Z+Iitn7bCBrpe+m9NEo+ivv4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 11:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:42:2a:7c:f6:0b:8a:96:d2:82:28:d4:a0:ce:d7:0b:30:d4:50:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C11F7C20B2456BA36EBCC89270ACE976DACFC35C Validity Not Before: Jun 19 11:03:40 2025 GMT Not After : Jun 20 11:51:40 2025 GMT Subject: CN=2BDFC3E8735FBA4D7DFF591CC85ECBEA843C9B35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a9:e1:39:4c:26:ef:ea:46:ee:e5:f9:e9:89: 29:71:14:ed:0e:3b:c3:dd:ef:32:21:47:e2:93:e4: 19:81:cb:b6:aa:98:72:0e:f1:d7:36:68:cb:41:3a: 05:4c:52:12:f8:de:14:e1:85:6d:d2:f1:44:30:3d: 54:e3:43:d9:51:3f:b1:b1:7d:90:04:a4:bd:07:8a: 48:fb:22:bb:df:bd:09:c6:fc:bb:c7:dd:9b:32:98: 13:75:4d:1b:0a:32:53:de:ec:15:bb:34:c8:06:6e: fe:b9:7b:9f:1c:c1:19:b1:8c:7d:7e:d4:e0:84:3d: 2a:16:1e:f4:4d:78:ae:ec:f7:f8:66:e7:64:3d:b1: 75:d7:1b:fc:7f:71:de:cb:39:5a:77:f4:79:a3:16: ed:3f:1f:44:27:c5:49:71:aa:f2:a2:2e:fb:81:0b: e2:e9:53:db:8b:2a:ea:be:ee:f9:28:6b:8f:11:c8: 91:f3:f6:28:79:a6:52:5c:15:ca:93:05:d8:be:28: 0e:86:29:d9:17:64:89:d2:67:dd:90:37:46:54:1c: f2:c6:e0:a7:f8:99:45:af:07:e1:9e:50:12:4b:42: f0:f4:cd:e0:be:fc:c0:92:a0:15:95:d7:f1:24:bf: a7:10:5b:5b:bb:10:9b:b8:40:4c:cd:71:f5:06:17: 5b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DF:C3:E8:73:5F:BA:4D:7D:FF:59:1C:C8:5E:CB:EA:84:3C:9B:35 X509v3 Authority Key Identifier: keyid:C1:1F:7C:20:B2:45:6B:A3:6E:BC:C8:92:70:AC:E9:76:DA:CF:C3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:47:50:71:35:97:2e:ec:68:92:15:27:ed:e8:88:5d:4d:da: 0f:a6:53:64:54:73:a5:31:e8:ca:bf:fb:8d:4e:fe:ba:f5:10: f5:c8:31:02:00:a7:78:23:60:c5:1b:81:1d:2b:7c:06:7b:92: 27:8d:5d:e3:4b:33:a9:12:33:42:26:e4:50:fb:6c:76:b0:e1: 6f:b8:a9:b5:c4:e3:66:af:bb:ca:bd:95:fc:a4:8a:1b:4e:18: c1:e5:9f:ac:a4:3d:4c:9d:d5:94:97:61:4a:42:74:5e:d1:5d: d7:c2:88:f5:0c:39:4b:c4:c7:95:c0:3c:80:54:af:ba:77:bc: 50:4c:13:4a:c6:8d:d4:0f:d6:6f:bd:4a:1f:65:b4:1b:1d:48: 48:0a:3b:8b:92:05:64:66:5c:f8:3d:80:7e:67:63:11:49:a8: e4:57:68:ac:e3:81:2c:0e:f9:d9:e9:6c:c3:48:26:da:13:68: 3f:44:8e:98:fc:46:d1:ac:14:10:a9:79:d2:8b:fe:ea:48:d4: f9:90:f7:ba:a4:e6:e0:e4:25:f4:90:2f:a2:80:51:23:69:53: 7e:5d:df:62:b4:c2:74:08:cd:1a:e9:61:30:ca:08:05:f1:32: db:4a:70:7b:da:2d:0f:0f:86:11:9b:94:95:f7:f7:d8:2c:39: 72:8a:ab:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfEIqfPYLipbSgijUoM7XCzDUUNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzExRjdDMjBCMjQ1NkJBMzZFQkNDODkyNzBBQ0U5NzZE QUNGQzM1QzAeFw0yNTA2MTkxMTAzNDBaFw0yNTA2MjAxMTUxNDBaMDMxMTAvBgNV BAMTKDJCREZDM0U4NzM1RkJBNEQ3REZGNTkxQ0M4NUVDQkVBODQzQzlCMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpqeE5TCbv6kbu5fnpiSlxFO0O O8Pd7zIhR+KT5BmBy7aqmHIO8dc2aMtBOgVMUhL43hThhW3S8UQwPVTjQ9lRP7Gx fZAEpL0Hikj7IrvfvQnG/LvH3ZsymBN1TRsKMlPe7BW7NMgGbv65e58cwRmxjH1+ 1OCEPSoWHvRNeK7s9/hm52Q9sXXXG/x/cd7LOVp39HmjFu0/H0QnxUlxqvKiLvuB C+LpU9uLKuq+7vkoa48RyJHz9ih5plJcFcqTBdi+KA6GKdkXZInSZ92QN0ZUHPLG 4Kf4mUWvB+GeUBJLQvD0zeC+/MCSoBWV1/Ekv6cQW1u7EJu4QEzNcfUGF1tRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUK9/D6HNfuk19/1kcyF7L6oQ8mzUwHwYDVR0j BBgwFoAUwR98ILJFa6NuvMiScKzpdtrPw1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRjJqRVNGbTN5QzFYdU4yZnhZNlBQZkJNUUhzcFJEa2dNS3djd1R5aldV MksvMC9DMTFGN0MyMEIyNDU2QkEzNkVCQ0M4OTI3MEFDRTk3NkRBQ0ZDMzVDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMUY3QzIwQjI0NTZCQTM2 RUJDQzg5MjcwQUNFOTc2REFDRkMzNUMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RjJqRVNGbTN5QzFYdU4yZnhZNlBQZkJNUUhzcFJEa2dNS3djd1R5aldVMksvMC9D MTFGN0MyMEIyNDU2QkEzNkVCQ0M4OTI3MEFDRTk3NkRBQ0ZDMzVDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdEdQcTWXLuxokhUn7eiIXU3aD6ZTZFRzpTHoyr/7jU7+uvUQ9cgxAgCneCNg xRuBHSt8BnuSJ41d40szqRIzQibkUPtsdrDhb7iptcTjZq+7yr2V/KSKG04YweWf rKQ9TJ3VlJdhSkJ0XtFd18KI9Qw5S8THlcA8gFSvune8UEwTSsaN1A/Wb71KH2W0 Gx1ISAo7i5IFZGZc+D2AfmdjEUmo5FdorOOBLA752elsw0gm2hNoP0SOmPxG0awU EKl50ov+6kjU+ZD3uqTm4OQl9JAvooBRI2lTfl3fYrTCdAjNGulhMMoIBfEy20pw e9otDw+GEZuUlff32Cw5coqrug== -----END CERTIFICATE-----Generated at Thu Jun 19 16:10:07 2025 by rpki-client