$ rpki-client -vvf rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft File: 203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft (raw, json) Hash identifier: wLjPQPCQ6SXzjvlxvFYb7+i5hfjAO8A9+cnnwUz3GNI= Subject key identifier: F6:A8:77:F5:75:2B:A3:AA:1F:64:93:2B:69:83:97:95:F6:CD:A3:F7 Authority key identifier: 20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7 Certificate issuer: /CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7 Certificate serial: 4910418AF0965BB9E6CFA8AE547B57143244F8C8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer Subject info access: rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft Manifest number: 0249 Signing time: Sun 15 Jun 2025 16:18:31 +0000 Manifest this update: Sun 15 Jun 2025 16:13:31 +0000 Manifest next update: Mon 16 Jun 2025 19:06:31 +0000 Files and hashes: 1: 3137372e35342e3234382e302f32312d3234203d3e20323632323939.roa (hash: J9JKS/uOVSTf4lxE2/X712ak1j9CChp3U8mi1+Az2NM=) 2: 203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl (hash: izZM8Pczu5TANlqMeryvEo7oQzbSs+rl821LpsN1CnU=) 3: 3137372e35342e3234302e302f32312d3234203d3e20323632323939.roa (hash: zzuAYXVxZSPy90ckTABafh3wBDFSIA6yCF8t1bKcPTw=) 4: 323830343a6138633a3a2f33322d3438203d3e20323632323939.roa (hash: EeO9rj+ZkVIkb2Nu0/KE+IFQ8hNAOE0eB+Vu/g/K8/8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 16 Jun 2025 19:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:10:41:8a:f0:96:5b:b9:e6:cf:a8:ae:54:7b:57:14:32:44:f8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7 Validity Not Before: Jun 15 16:13:31 2025 GMT Not After : Jun 16 19:06:31 2025 GMT Subject: CN=F6A877F5752BA3AA1F64932B69839795F6CDA3F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:7e:4d:f1:87:c4:43:c3:be:e4:02:78:ab: 10:7b:c4:1f:0e:c1:1a:41:54:a2:b2:36:00:6a:8c: 3a:d2:ae:4a:a9:02:2e:de:2b:67:a1:62:b6:e3:95: 97:f4:ed:cb:4f:5f:8b:2c:27:59:ec:2f:88:95:c6: 13:ff:bb:1e:61:03:8c:32:e7:02:93:b7:e3:4b:57: 23:c5:d5:68:26:ad:49:61:54:0a:89:0e:80:97:af: 36:ab:37:13:7e:c1:80:38:8d:db:06:11:1a:49:65: 5b:d9:4e:da:1c:9a:51:21:a8:ba:cd:01:07:46:62: de:d6:b0:e4:b6:be:fd:78:9d:7d:86:ad:a5:c6:94: 64:98:f7:24:73:7e:da:fe:44:69:b9:dc:ba:38:70: 16:dd:af:0d:1c:cb:e5:98:c7:59:cd:05:8e:fc:44: c8:a4:71:df:e8:4f:82:cd:69:e0:b5:59:92:da:1b: 3c:2e:19:ff:43:19:6b:23:4c:d9:32:19:6a:26:d2: 4b:49:7d:9a:e9:b2:7d:e7:cf:61:1e:1d:c4:b3:8e: 51:1d:a1:98:a0:7b:ad:14:bf:84:6e:e0:85:34:ba: f7:b1:aa:4c:d6:87:3e:66:62:27:fa:e5:e0:85:01: 6a:65:d9:33:01:57:63:8b:10:f8:28:9d:78:a0:b6: f2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A8:77:F5:75:2B:A3:AA:1F:64:93:2B:69:83:97:95:F6:CD:A3:F7 X509v3 Authority Key Identifier: keyid:20:3D:CC:A7:DE:79:C8:C4:DA:BA:A1:0A:6C:A9:E9:3E:A7:D3:9D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBxuLpCf3yae9MGeB2c6TC9axBZGZDV5wcQ5vfFopGSE/1/203DCCA7DE79C8C4DABAA10A6CA9E93EA7D39DF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f2:f8:7f:f0:8a:9e:e2:65:db:e8:14:7c:5e:ee:ca:dc:34: 3c:13:f0:cb:fa:4b:ba:31:bd:73:43:1c:cf:d5:b0:a3:56:00: 14:47:bd:a5:cf:83:4e:69:0c:5a:b0:85:54:9b:5f:cf:c1:10: c8:3c:89:17:5a:43:e1:b5:f3:ea:32:70:22:a2:f5:b1:b2:70: 27:a6:d2:16:db:1e:10:84:9d:10:75:44:5b:4d:b5:66:21:33: 61:2a:7d:ef:2b:45:f4:f2:30:c0:b2:de:9e:90:19:73:b1:cf: 40:b6:92:d6:ba:8a:14:c3:08:50:d2:de:5a:12:f2:f1:3e:46: 08:4a:35:55:9b:28:a8:92:e3:17:f3:24:f0:35:17:a4:9f:5e: 23:74:6a:0d:86:ed:d3:84:0a:2c:47:76:a2:d2:ef:3b:aa:74: 3c:93:60:d4:15:26:8c:44:39:65:50:2a:52:5c:a7:72:13:66: a8:31:99:fd:53:c4:90:87:4e:69:fb:80:f8:56:0d:0a:e2:a6: 11:06:e8:0e:30:f1:1e:c3:0d:0b:1c:63:74:ff:f8:b9:7c:eb: d0:8f:1c:91:e6:0a:9d:4e:ae:01:48:32:3a:98:2b:85:2a:94: 96:a3:88:22:bb:ae:49:93:13:33:51:5c:31:c4:c0:02:df:af: 6f:66:ed:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSRBBivCWW7nmz6iuVHtXFDJE+MgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAzRENDQTdERTc5QzhDNERBQkFBMTBBNkNBOUU5M0VB N0QzOURGNzAeFw0yNTA2MTUxNjEzMzFaFw0yNTA2MTYxOTA2MzFaMDMxMTAvBgNV BAMTKEY2QTg3N0Y1NzUyQkEzQUExRjY0OTMyQjY5ODM5Nzk1RjZDREEzRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4fX5N8YfEQ8O+5AJ4qxB7xB8O wRpBVKKyNgBqjDrSrkqpAi7eK2ehYrbjlZf07ctPX4ssJ1nsL4iVxhP/ux5hA4wy 5wKTt+NLVyPF1WgmrUlhVAqJDoCXrzarNxN+wYA4jdsGERpJZVvZTtocmlEhqLrN AQdGYt7WsOS2vv14nX2GraXGlGSY9yRzftr+RGm53Lo4cBbdrw0cy+WYx1nNBY78 RMikcd/oT4LNaeC1WZLaGzwuGf9DGWsjTNkyGWom0ktJfZrpsn3nz2EeHcSzjlEd oZige60Uv4Ru4IU0uvexqkzWhz5mYif65eCFAWpl2TMBV2OLEPgonXigtvJBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9qh39XUro6ofZJMraYOXlfbNo/cwHwYDVR0j BBgwFoAUID3Mp955yMTauqEKbKnpPqfTnfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BH U0UvMS8yMDNEQ0NBN0RFNzlDOEM0REFCQUExMEE2Q0E5RTkzRUE3RDM5REY3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwM0RDQ0E3REU3OUM4QzRE QUJBQTEwQTZDQTlFOTNFQTdEMzlERjcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkJ4dUxwQ2YzeWFlOU1HZUIyYzZUQzlheEJaR1pEVjV3Y1E1dmZGb3BHU0UvMS8y MDNEQ0NBN0RFNzlDOEM0REFCQUExMEE2Q0E5RTkzRUE3RDM5REY3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGvL4f/CKnuJl2+gUfF7uytw0PBPwy/pLujG9c0Mcz9Wwo1YAFEe9pc+DTmkM WrCFVJtfz8EQyDyJF1pD4bXz6jJwIqL1sbJwJ6bSFtseEISdEHVEW021ZiEzYSp9 7ytF9PIwwLLenpAZc7HPQLaS1rqKFMMIUNLeWhLy8T5GCEo1VZsoqJLjF/Mk8DUX pJ9eI3RqDYbt04QKLEd2otLvO6p0PJNg1BUmjEQ5ZVAqUlynchNmqDGZ/VPEkIdO afuA+FYNCuKmEQboDjDxHsMNCxxjdP/4uXzr0I8ckeYKnU6uAUgyOpgrhSqUlqOI IruuSZMTM1FcMcTAAt+vb2btvA== -----END CERTIFICATE-----Generated at Mon Jun 16 07:00:41 2025 by rpki-client