$ rpki-client -vvf rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.mft File: D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.mft (raw, json) Hash identifier: Azrnz0PsYD41ga0LumprULM6JdH+w8xap2CznmUTX2E= Subject key identifier: 08:07:8B:DE:DE:50:12:B2:F7:79:4B:FF:A3:89:6D:64:30:A0:A6:60 Authority key identifier: D9:3E:5A:3D:61:92:A3:29:B1:CC:3A:94:3D:36:A0:A9:C5:CA:1E:EA Certificate issuer: /CN=D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA Certificate serial: 6BBA5AA47850959842AB2E6419AE1B231AA30BAE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.cer Subject info access: rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.mft Manifest number: 024F Signing time: Thu 19 Jun 2025 15:43:50 +0000 Manifest this update: Thu 19 Jun 2025 15:38:50 +0000 Manifest next update: Fri 20 Jun 2025 16:35:50 +0000 Files and hashes: 1: 34352e3136342e34302e302f32342d3234203d3e20323731373531.roa (hash: PDs75Gn6YsxcIYD9QbxaMZUz+KucYOAVwaJ4s9vMak0=) 2: 323830343a383037343a3a2f33352d3335203d3e20323731373531.roa (hash: CdP3tshGoaMZ4evVosfiACDB4FzsOfn8Ouq+2WqxyBQ=) 3: D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.crl (hash: 4jkjEcKOesPjReGrJ66EMIpsV9fvdAyQkq6jCDp0dx8=) 4: 323830343a383037343a323030303a3a2f33352d3335203d3e20323731373531.roa (hash: ss7KlZH9UvSYKBLzJ0EnRaWIxBi0abU5jLonpqzL87s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.crl rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 16:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ba:5a:a4:78:50:95:98:42:ab:2e:64:19:ae:1b:23:1a:a3:0b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA Validity Not Before: Jun 19 15:38:50 2025 GMT Not After : Jun 20 16:35:50 2025 GMT Subject: CN=08078BDEDE5012B2F7794BFFA3896D6430A0A660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:56:ea:c3:e0:b4:88:74:1a:56:87:c7:fe:28: 52:00:ce:5a:77:ed:fd:57:7a:88:97:c0:9f:c1:dc: 01:25:01:42:e7:d4:10:77:65:3a:3e:1e:e5:21:37: bd:b0:43:cc:e9:08:bf:dd:87:3c:c8:e6:aa:dd:bf: ed:ef:d5:83:62:6f:e6:8a:d8:e3:28:97:05:9a:16: 52:99:d9:f0:b4:ec:e0:6b:fd:8e:dc:81:69:78:1b: 98:1a:ad:a2:52:96:82:de:fb:bb:e2:9b:13:b5:97: e0:c3:4f:dd:74:7c:f7:9c:fa:88:f3:57:9d:34:8c: 95:da:d9:da:24:ac:85:4b:b5:06:a5:d2:cb:24:72: 65:2e:7a:56:b2:a0:77:63:86:f1:2b:e1:97:4e:5b: d7:c1:fc:1e:3d:fa:a4:47:72:1c:69:f4:2d:ff:0c: 68:9e:b9:98:50:68:3e:ad:ad:88:67:26:d9:59:a4: 39:bf:8f:08:f5:04:19:54:d2:01:3d:c7:5d:36:30: d9:e6:18:de:ee:34:bd:95:f6:c7:fb:5a:85:cd:ec: 87:85:f4:b1:d5:1a:1e:3d:07:c6:3a:5b:ea:d1:00: 69:a5:8f:61:67:b2:65:64:fb:60:4b:ea:8c:4d:6b: 2c:f2:15:18:22:a2:a4:b2:32:ca:0b:37:0d:0d:4a: 31:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:07:8B:DE:DE:50:12:B2:F7:79:4B:FF:A3:89:6D:64:30:A0:A6:60 X509v3 Authority Key Identifier: keyid:D9:3E:5A:3D:61:92:A3:29:B1:CC:3A:94:3D:36:A0:A9:C5:CA:1E:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:3e:18:74:4d:57:74:29:14:7b:54:98:44:f2:a1:49:40:dc: 66:7f:3b:9c:f8:d3:a2:98:8d:53:7a:99:90:4a:40:ef:aa:00: 07:6c:78:59:aa:a7:de:b4:c1:b8:2b:2e:57:48:39:a8:67:36: 98:72:a7:0a:a2:b5:77:23:36:f6:18:ca:79:2b:28:d7:75:c3: 6f:e6:ec:8a:ef:7a:12:f7:b6:67:31:1e:d5:96:65:03:aa:b0: 9e:9e:be:80:28:6c:2c:fc:db:1e:67:5b:1f:50:c8:9a:cc:17: 3d:f1:eb:db:be:92:e6:a8:d3:69:cc:1c:0a:94:70:6b:65:83: f5:cb:80:f8:52:ed:e0:1d:e3:18:ef:d7:15:2f:2a:0a:9a:59: 10:65:3b:b2:ec:c2:9c:f6:cf:ad:58:36:a9:ec:31:44:ec:7e: 08:d2:6a:4f:4a:28:04:23:5b:86:9e:fb:11:79:e0:f8:df:ff: b9:c3:99:68:64:84:9f:f0:bc:66:e7:80:24:c5:4e:35:27:a0: 6c:5f:d1:75:01:f4:9b:07:c6:9a:02:69:98:2a:8e:a8:6b:cb: 5d:81:cf:d3:35:ee:94:4f:45:d4:f4:2c:28:73:9b:e4:b3:76: 05:c4:19:e2:53:f4:a2:04:be:30:0d:ae:82:3e:7d:45:9e:36: 3d:26:b2:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUa7papHhQlZhCqy5kGa4bIxqjC64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkzRTVBM0Q2MTkyQTMyOUIxQ0MzQTk0M0QzNkEwQTlD NUNBMUVFQTAeFw0yNTA2MTkxNTM4NTBaFw0yNTA2MjAxNjM1NTBaMDMxMTAvBgNV BAMTKDA4MDc4QkRFREU1MDEyQjJGNzc5NEJGRkEzODk2RDY0MzBBMEE2NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIVurD4LSIdBpWh8f+KFIAzlp3 7f1XeoiXwJ/B3AElAULn1BB3ZTo+HuUhN72wQ8zpCL/dhzzI5qrdv+3v1YNib+aK 2OMolwWaFlKZ2fC07OBr/Y7cgWl4G5garaJSloLe+7vimxO1l+DDT910fPec+ojz V500jJXa2dokrIVLtQal0sskcmUuelayoHdjhvEr4ZdOW9fB/B49+qRHchxp9C3/ DGieuZhQaD6trYhnJtlZpDm/jwj1BBlU0gE9x102MNnmGN7uNL2V9sf7WoXN7IeF 9LHVGh49B8Y6W+rRAGmlj2FnsmVk+2BL6oxNayzyFRgioqSyMsoLNw0NSjGbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUCAeL3t5QErL3eUv/o4ltZDCgpmAwHwYDVR0j BBgwFoAU2T5aPWGSoymxzDqUPTagqcXKHuowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSFozV2ZqUHVHOFpNQmQ5clZFeWV4emg1bXQyVmdVa0dTQVpoOEM1Q3E0 Z3YvMS9EOTNFNUEzRDYxOTJBMzI5QjFDQzNBOTQzRDM2QTBBOUM1Q0ExRUVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5M0U1QTNENjE5MkEzMjlC MUNDM0E5NDNEMzZBMEE5QzVDQTFFRUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SFozV2ZqUHVHOFpNQmQ5clZFeWV4emg1bXQyVmdVa0dTQVpoOEM1Q3E0Z3YvMS9E OTNFNUEzRDYxOTJBMzI5QjFDQzNBOTQzRDM2QTBBOUM1Q0ExRUVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoz4YdE1XdCkUe1SYRPKhSUDcZn87nPjTopiNU3qZkEpA76oAB2x4Waqn3rTB uCsuV0g5qGc2mHKnCqK1dyM29hjKeSso13XDb+bsiu96Eve2ZzEe1ZZlA6qwnp6+ gChsLPzbHmdbH1DImswXPfHr276S5qjTacwcCpRwa2WD9cuA+FLt4B3jGO/XFS8q CppZEGU7suzCnPbPrVg2qewxROx+CNJqT0ooBCNbhp77EXng+N//ucOZaGSEn/C8 ZueAJMVONSegbF/RdQH0mwfGmgJpmCqOqGvLXYHP0zXulE9F1PQsKHOb5LN2BcQZ 4lP0ogS+MA2ugj59RZ42PSay0w== -----END CERTIFICATE-----Generated at Thu Jun 19 18:44:53 2025 by rpki-client