$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft File: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft (raw, json) Hash identifier: FOE8v04lxJmiHObXAJLsbtwPSU3FRkZiCgxtEe2c6l0= Subject key identifier: 54:D0:42:79:85:43:10:9B:D1:F2:FC:9A:54:7D:54:FE:63:F8:53:24 Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Certificate serial: 5D4C49F576DE79963B46B00630E38024B0880F6B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft Manifest number: 02C3 Signing time: Mon 16 Jun 2025 18:24:25 +0000 Manifest this update: Mon 16 Jun 2025 18:19:25 +0000 Manifest next update: Tue 17 Jun 2025 20:42:25 +0000 Files and hashes: 1: 323830343a3937383a3a2f33322d313238203d3e20323633303837.roa (hash: xlFzvxIG/gYH0KzWQM5/0pJLtz7KgwD/JIoIT+dykDo=) 2: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl (hash: LU400rYIrOKHfb09fi/hVynwFwQd7+FWfgtcFmrVNMg=) 3: 3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa (hash: oPMBUQyiQOvcv4tb1YKSLPGxZ04J+5T7lbQU8TfpNP8=) 4: 3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (hash: AJNOOqPt9YDmVyj7oLMiS+ahRBlnaPrzhm3IG8z6/rY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 20:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4c:49:f5:76:de:79:96:3b:46:b0:06:30:e3:80:24:b0:88:0f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Validity Not Before: Jun 16 18:19:25 2025 GMT Not After : Jun 17 20:42:25 2025 GMT Subject: CN=54D042798543109BD1F2FC9A547D54FE63F85324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:eb:72:1a:0a:5a:44:b4:60:e2:f9:db:e4: 15:22:18:59:d1:e1:ae:4b:8a:78:fd:0a:8f:af:79: cb:41:51:94:0f:83:b0:ec:ff:64:4b:91:43:59:c0: ff:91:8d:02:32:52:d9:3c:b0:fe:f3:8a:f7:ee:e2: 3b:43:24:83:a0:73:c5:98:c1:9f:75:c2:52:17:b9: 9c:9a:1c:8c:2d:e3:01:3d:f0:5e:6d:0a:96:88:6c: 9d:32:25:91:5b:ca:f0:9c:16:99:71:d9:dc:08:73: cd:b1:84:42:5e:8c:3d:b9:5a:31:8a:70:05:97:54: 4f:51:b3:72:20:58:5a:a9:da:a8:c5:5b:2c:17:e7: d0:a2:4e:d8:14:2e:e2:15:b2:06:6c:c9:70:45:6a: 7f:e3:a3:12:e2:db:97:4b:f7:e2:ad:79:d0:94:f8: 45:16:e9:1b:c5:6e:8c:68:4b:44:02:ac:b3:36:7e: 50:6e:c2:ef:63:1e:5a:1c:98:10:9e:45:f5:eb:73: 38:d0:49:2d:21:19:24:1e:be:2e:2c:6a:e0:52:20: f2:59:5c:5e:16:78:c7:c6:a1:02:50:39:26:57:d3: f1:a9:7f:79:f9:68:28:8e:ce:24:12:ae:9d:7f:fc: 3f:aa:94:be:17:c5:28:e7:64:41:27:90:bb:2e:c4: 4f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D0:42:79:85:43:10:9B:D1:F2:FC:9A:54:7D:54:FE:63:F8:53:24 X509v3 Authority Key Identifier: keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7a:ba:8f:4b:56:1e:98:98:fb:45:47:a2:86:59:3f:9c:1a: 56:4f:cf:59:80:9a:f6:32:4c:ed:f2:1e:61:2c:bc:d7:11:68: 15:4f:88:39:86:2c:c2:43:96:cd:21:ec:ae:00:7f:75:67:db: 34:1c:c6:43:bb:e5:e9:df:57:ef:80:7a:29:61:a5:8c:70:d3: 05:30:ac:09:62:9c:b3:3c:12:d9:66:48:5c:97:60:83:9d:8d: 59:ac:bd:52:88:e3:ac:54:89:61:be:f8:6b:e6:b7:1e:71:70: 67:7b:2b:87:45:e8:a3:10:c0:37:c1:51:bb:aa:f6:88:a0:0d: 06:f2:26:9f:bc:69:4f:ab:fe:0f:98:78:27:d6:03:59:6c:ea: ca:f5:07:f7:27:66:45:f5:72:a4:7b:5d:df:2f:f3:9f:f8:9e: 76:41:d7:87:55:ae:6b:60:20:46:40:f5:77:48:e2:8b:d8:1b: 50:d0:7e:f3:f8:88:dc:46:cd:19:e1:b0:dc:4c:91:e2:eb:cd: 02:f9:6a:31:9f:1c:e7:75:35:6e:af:7b:ea:12:f1:9b:75:63: f2:c1:de:d3:d2:b5:be:4f:b3:d6:37:d1:15:65:1c:c5:81:d6: 1d:ae:ba:7c:5a:e9:e9:4d:f6:40:1e:5d:86:4e:d8:5b:17:c3: c5:b8:95:99 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUXUxJ9XbeeZY7RrAGMOOAJLCID2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFB MzY0M0Y5NDAeFw0yNTA2MTYxODE5MjVaFw0yNTA2MTcyMDQyMjVaMDMxMTAvBgNV BAMTKDU0RDA0Mjc5ODU0MzEwOUJEMUYyRkM5QTU0N0Q1NEZFNjNGODUzMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0etyGgpaRLRg4vnb5BUiGFnR 4a5Linj9Co+vectBUZQPg7Ds/2RLkUNZwP+RjQIyUtk8sP7zivfu4jtDJIOgc8WY wZ91wlIXuZyaHIwt4wE98F5tCpaIbJ0yJZFbyvCcFplx2dwIc82xhEJejD25WjGK cAWXVE9Rs3IgWFqp2qjFWywX59CiTtgULuIVsgZsyXBFan/joxLi25dL9+KtedCU +EUW6RvFboxoS0QCrLM2flBuwu9jHlocmBCeRfXrczjQSS0hGSQevi4sauBSIPJZ XF4WeMfGoQJQOSZX0/Gpf3n5aCiOziQSrp1//D+qlL4XxSjnZEEnkLsuxE8hAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUVNBCeYVDEJvR8vyaVH1U/mP4UyQwHwYDVR0j BBgwFoAULQ0Ui98u1Pvb64DbHrN36qNkP5QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9LRmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1C LzAvMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFBMzY0M0Y5NC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yRDBEMTQ4QkRGMkVENEZCREJF QjgwREIxRUIzNzdFQUEzNjQzRjk0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0tG ZTlGRzNheEhabzVHZUhGM2ZGRmJtV0MxNTd1NW5jVFdkYzZZQXFWbUIvMC8yRDBE MTQ4QkRGMkVENEZCREJFQjgwREIxRUIzNzdFQUEzNjQzRjk0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA fXq6j0tWHpiY+0VHooZZP5waVk/PWYCa9jJM7fIeYSy81xFoFU+IOYYswkOWzSHs rgB/dWfbNBzGQ7vl6d9X74B6KWGljHDTBTCsCWKcszwS2WZIXJdgg52NWay9Uojj rFSJYb74a+a3HnFwZ3srh0XooxDAN8FRu6r2iKANBvImn7xpT6v+D5h4J9YDWWzq yvUH9ydmRfVypHtd3y/zn/iedkHXh1Wua2AgRkD1d0jii9gbUNB+8/iI3EbNGeGw 3EyR4uvNAvlqMZ8c53U1bq976hLxm3Vj8sHe09K1vk+z1jfRFWUcxYHWHa66fFrp 6U32QB5dhk7YWxfDxbiVmQ== -----END CERTIFICATE-----Generated at Tue Jun 17 12:58:33 2025 by rpki-client