$ rpki-client -vvf rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.mft File: 165D5CE1AD75707F0EBAD74246A8509CC4934DE0.mft (raw, json) Hash identifier: 0K5QZRMEeSEwKf+xn7JZivnv5R4L4Sykd8qnCN7hBZE= Subject key identifier: E7:80:F2:06:BD:FD:41:3B:5E:12:6D:16:90:62:62:2E:80:E8:81:3D Authority key identifier: 16:5D:5C:E1:AD:75:70:7F:0E:BA:D7:42:46:A8:50:9C:C4:93:4D:E0 Certificate issuer: /CN=165D5CE1AD75707F0EBAD74246A8509CC4934DE0 Certificate serial: 01AA5286E1DD4C9F04CFF1425D1900FFFC81A4BC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.cer Subject info access: rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.mft Manifest number: 1D Signing time: Mon 16 Jun 2025 09:14:42 +0000 Manifest this update: Mon 16 Jun 2025 09:09:42 +0000 Manifest next update: Tue 17 Jun 2025 10:44:42 +0000 Files and hashes: 1: 323830343a336336303a3a2f33322d313238203d3e20323636323037.roa (hash: SoUKIEfhbFTW8l3BBJ4UrqfwJxte5BAOwfMb2s2SsNM=) 2: 3231362e39382e3230382e302f32322d3332203d3e20323636323037.roa (hash: +RsS1nEos1cR1/sb/KuovUMN89Yjnr49Lh1CVloHLgk=) 3: 165D5CE1AD75707F0EBAD74246A8509CC4934DE0.crl (hash: Y2db+YY/jNdGLpkmrCL6r/iL/HAhrKEyJxDQSQsmyzE=) 4: 3137302e38302e33362e302f32322d3332203d3e20323636323037.roa (hash: KtrPDzDMt2J5gpUpvNGofwJSiHUxs7c5w1oORXGzWPE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.crl rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 10:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:aa:52:86:e1:dd:4c:9f:04:cf:f1:42:5d:19:00:ff:fc:81:a4:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=165D5CE1AD75707F0EBAD74246A8509CC4934DE0 Validity Not Before: Jun 16 09:09:42 2025 GMT Not After : Jun 17 10:44:42 2025 GMT Subject: CN=E780F206BDFD413B5E126D169062622E80E8813D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:50:13:92:4a:ca:f6:a5:c4:88:c7:00:14:1e: 69:e9:8b:32:93:8e:74:0a:c4:73:bc:0e:06:6b:1c: bf:d3:17:28:04:24:1d:78:6c:a9:05:97:de:73:0c: f1:15:54:52:7f:8d:6c:e8:a2:ad:76:e3:a3:90:2c: fd:3f:ec:91:64:de:04:a2:6e:27:cb:98:99:40:4b: 17:8d:91:d9:52:fc:40:48:82:49:a9:d7:69:40:4c: 0e:bf:8d:45:06:ae:f9:5b:2f:84:c2:04:4d:e8:62: 46:a1:32:26:3a:5f:67:64:0a:c5:c2:64:6a:dc:06: 5f:9c:18:e7:e3:0e:ba:73:87:89:9e:fc:45:79:2f: d7:77:6e:67:12:93:43:b0:52:87:5b:f3:8a:dc:81: 43:6f:f6:4e:a9:dd:f7:34:0d:60:71:9a:13:28:4f: 18:be:02:cd:c0:d3:85:59:92:08:c2:46:5d:0c:0b: 10:3f:25:4f:ee:ce:8e:96:88:04:f4:ec:42:a6:72: 80:4f:1c:8a:6b:f2:7c:3d:02:30:96:3f:98:51:d4: 35:8e:d5:b3:a6:a5:2f:59:da:9a:43:7f:b1:24:83: f8:39:2d:db:a0:0c:5c:ec:c9:ba:7a:a3:dd:95:1b: 03:56:f6:7d:96:07:6d:ee:b1:32:58:b4:ab:c7:9c: 5a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:80:F2:06:BD:FD:41:3B:5E:12:6D:16:90:62:62:2E:80:E8:81:3D X509v3 Authority Key Identifier: keyid:16:5D:5C:E1:AD:75:70:7F:0E:BA:D7:42:46:A8:50:9C:C4:93:4D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:67:e0:f1:bc:4d:de:09:a6:46:d2:8e:d8:21:4b:48:24:30: 75:75:4f:46:36:ff:41:1c:58:cb:ba:55:a7:d0:cb:13:c9:e1: 2a:63:41:17:b8:13:c1:e1:9f:86:8e:90:2d:60:b6:f6:7f:24: 5b:ee:a8:35:85:0e:90:2b:c2:2b:d9:9b:2a:dd:54:31:21:7c: 40:26:ca:ea:c3:51:b5:3a:bf:38:f6:b5:69:1c:1d:41:b8:81: ff:55:f3:6a:c4:0d:e5:9d:47:5c:09:2f:20:8d:29:e7:a7:e2: a4:60:ba:e2:3a:6c:02:79:81:a1:b7:a2:84:b4:72:17:81:51: e0:11:d6:dd:29:73:85:11:9a:07:05:61:11:9f:9e:28:f3:1b: b7:a6:6d:d6:ed:b5:85:16:f1:8d:28:e0:31:fb:b6:36:14:9c: 2f:8a:84:03:19:9d:0e:a9:20:89:75:17:ec:29:71:ff:e3:16: b4:f3:5f:0f:b7:2c:8b:7a:6d:85:8d:ea:ef:6a:03:42:14:9e: 8b:b0:de:db:17:85:e9:b3:70:32:2d:81:f6:76:f1:b7:7d:ec: b5:40:00:bf:fc:54:27:12:5e:5f:13:21:2b:7d:61:eb:73:af: 4c:c6:ec:18:ba:53:55:36:7f:69:ee:f3:e9:fe:ac:ce:3f:ae: 71:ff:5a:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAapShuHdTJ8Ez/FCXRkA//yBpLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1RDVDRTFBRDc1NzA3RjBFQkFENzQyNDZBODUwOUND NDkzNERFMDAeFw0yNTA2MTYwOTA5NDJaFw0yNTA2MTcxMDQ0NDJaMDMxMTAvBgNV BAMTKEU3ODBGMjA2QkRGRDQxM0I1RTEyNkQxNjkwNjI2MjJFODBFODgxM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvUBOSSsr2pcSIxwAUHmnpizKT jnQKxHO8DgZrHL/TFygEJB14bKkFl95zDPEVVFJ/jWzooq1246OQLP0/7JFk3gSi bifLmJlASxeNkdlS/EBIgkmp12lATA6/jUUGrvlbL4TCBE3oYkahMiY6X2dkCsXC ZGrcBl+cGOfjDrpzh4me/EV5L9d3bmcSk0OwUodb84rcgUNv9k6p3fc0DWBxmhMo Txi+As3A04VZkgjCRl0MCxA/JU/uzo6WiAT07EKmcoBPHIpr8nw9AjCWP5hR1DWO 1bOmpS9Z2ppDf7Ekg/g5LdugDFzsybp6o92VGwNW9n2WB23usTJYtKvHnFo9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU54DyBr39QTteEm0WkGJiLoDogT0wHwYDVR0j BBgwFoAUFl1c4a11cH8OutdCRqhQnMSTTeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0QyU1gycjg2TWJRZTJ2Y2dUTHMyamNMcEtUUE1Ua1NLc0VLWDRYRmpF Wk0vMC8xNjVENUNFMUFENzU3MDdGMEVCQUQ3NDI0NkE4NTA5Q0M0OTM0REUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2NUQ1Q0UxQUQ3NTcwN0Yw RUJBRDc0MjQ2QTg1MDlDQzQ5MzRERTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0QyU1gycjg2TWJRZTJ2Y2dUTHMyamNMcEtUUE1Ua1NLc0VLWDRYRmpFWk0vMC8x NjVENUNFMUFENzU3MDdGMEVCQUQ3NDI0NkE4NTA5Q0M0OTM0REUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT2fg8bxN3gmmRtKO2CFLSCQwdXVPRjb/QRxYy7pVp9DLE8nhKmNBF7gTweGf ho6QLWC29n8kW+6oNYUOkCvCK9mbKt1UMSF8QCbK6sNRtTq/OPa1aRwdQbiB/1Xz asQN5Z1HXAkvII0p56fipGC64jpsAnmBobeihLRyF4FR4BHW3SlzhRGaBwVhEZ+e KPMbt6Zt1u21hRbxjSjgMfu2NhScL4qEAxmdDqkgiXUX7Clx/+MWtPNfD7csi3pt hY3q72oDQhSei7De2xeF6bNwMi2B9nbxt33stUAAv/xUJxJeXxMhK31h63OvTMbs GLpTVTZ/ae7z6f6szj+ucf9aUA== -----END CERTIFICATE-----Generated at Mon Jun 16 16:05:15 2025 by rpki-client