$ rpki-client -vvf rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft File: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft (raw, json) Hash identifier: HGwClKboDpd8by59WnL6vKeYUMlg+6gJj41nTHkgs1g= Subject key identifier: D8:30:BE:0B:4B:79:D4:A0:24:FE:38:D9:9D:31:38:CB:7E:4D:7B:48 Authority key identifier: 2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 Certificate issuer: /CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Certificate serial: 0E1882EA8659655C96BD90DC24C4646587DB2C43 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject info access: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft Manifest number: 0305 Signing time: Tue 05 Aug 2025 11:49:08 +0000 Manifest this update: Tue 05 Aug 2025 11:44:08 +0000 Manifest next update: Wed 06 Aug 2025 13:28:08 +0000 Files and hashes: 1: 3137392e3130392e3136302e302f32302d3332203d3e20323633303837.roa (hash: AJNOOqPt9YDmVyj7oLMiS+ahRBlnaPrzhm3IG8z6/rY=) 2: 323830343a3937383a3a2f33322d313238203d3e20323633303837.roa (hash: xlFzvxIG/gYH0KzWQM5/0pJLtz7KgwD/JIoIT+dykDo=) 3: 2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl (hash: 9gAGtY3R30zV1R5YQbBzTfb4aOYPYcCjIELQz7bMcto=) 4: 3137372e3133372e3230382e302f32302d3332203d3e20323633303837.roa (hash: oPMBUQyiQOvcv4tb1YKSLPGxZ04J+5T7lbQU8TfpNP8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 13:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:18:82:ea:86:59:65:5c:96:bd:90:dc:24:c4:64:65:87:db:2c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94 Validity Not Before: Aug 5 11:44:08 2025 GMT Not After : Aug 6 13:28:08 2025 GMT Subject: CN=D830BE0B4B79D4A024FE38D99D3138CB7E4D7B48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:ea:ae:6b:9a:ce:42:52:4c:16:ee:f8:fc: dc:f0:44:76:cf:21:2b:3f:cc:80:21:c2:66:88:2e: fd:e7:42:b2:f6:d1:f3:07:ec:19:32:9c:01:27:f8: 52:32:f9:b3:57:ee:43:f9:62:dd:37:a7:89:90:3c: 35:44:90:d2:bf:6f:33:98:78:3c:ce:af:a5:c5:73: 86:58:b5:60:71:d8:fc:6b:04:0a:83:8d:89:df:e4: ae:4d:a2:a4:cb:fe:f7:82:7c:67:8e:c0:1d:8b:0e: 1e:ec:ec:a0:76:d8:fb:8f:14:4a:57:92:84:14:a4: b1:b1:58:07:52:33:15:e5:00:42:75:c5:6b:58:ae: 95:25:44:c8:aa:58:59:2c:84:38:51:00:20:79:82: fe:e0:69:88:bf:b4:ee:32:28:18:13:c0:c0:72:34: 0b:b6:02:bb:a8:e3:86:11:d5:d0:97:01:d8:98:0c: 8d:d0:6b:0b:44:32:5d:66:2d:8e:e4:5f:00:59:f5: e1:e9:6c:1a:49:51:40:20:fa:47:f5:21:2b:3a:54: 30:cf:ec:91:d2:bf:23:01:a9:9f:81:6d:0d:40:81: ce:16:1e:af:cf:7f:6d:d9:88:9d:91:91:95:4b:94: fe:f9:ac:a0:dd:10:e1:df:2f:f8:d9:76:a8:c2:81: ad:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:30:BE:0B:4B:79:D4:A0:24:FE:38:D9:9D:31:38:CB:7E:4D:7B:48 X509v3 Authority Key Identifier: keyid:2D:0D:14:8B:DF:2E:D4:FB:DB:EB:80:DB:1E:B3:77:EA:A3:64:3F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/KFe9FG3axHZo5GeHF3fFFbmWC157u5ncTWdc6YAqVmB/0/2D0D148BDF2ED4FBDBEB80DB1EB377EAA3643F94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a5:20:19:aa:8f:d5:05:7b:31:9b:3c:19:1e:49:b9:4f:cc: ea:79:71:86:17:46:5f:da:97:4e:f0:43:a5:69:85:97:5e:8a: 53:59:d2:7a:cf:e1:80:8f:98:11:89:23:64:34:5f:a0:f0:5a: 42:98:fc:32:4c:9d:47:e0:f1:33:2c:20:f8:45:65:2d:5f:15: 4d:b1:20:b6:e8:1a:65:4f:b5:e6:e5:7b:9a:35:6d:4b:89:88: 16:6f:b4:04:fe:30:73:12:bb:ea:25:f3:5b:cd:5a:1b:b9:0e: 26:0d:ee:3d:80:95:62:54:2c:d0:88:a4:e9:cf:c2:ca:e1:0c: 51:52:05:00:d9:f5:c9:4c:e8:4a:24:af:0f:b3:bf:a7:fc:4c: b0:9a:b7:7c:90:f2:f7:6e:03:ec:21:b5:b7:f7:3e:2c:d0:18: 56:f8:09:86:bc:4f:b1:d6:a2:16:5e:c3:b7:13:38:dd:a0:4c: 9d:6d:11:32:7f:7c:16:0d:de:4e:f5:70:ec:92:f2:aa:dd:bc: e2:0b:be:02:03:d5:4b:83:aa:97:e4:4f:c9:26:ee:7e:9e:cc: 4f:9d:80:2f:15:c5:11:d3:5e:f9:d2:26:ca:ae:6e:fa:ea:5a: a1:3e:b3:92:d9:ba:19:d2:c6:93:10:96:e9:c4:35:f9:f9:85: 7f:70:44:20 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUDhiC6oZZZVyWvZDcJMRkZYfbLEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFB MzY0M0Y5NDAeFw0yNTA4MDUxMTQ0MDhaFw0yNTA4MDYxMzI4MDhaMDMxMTAvBgNV BAMTKEQ4MzBCRTBCNEI3OUQ0QTAyNEZFMzhEOTlEMzEzOENCN0U0RDdCNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEAequa5rOQlJMFu74/NzwRHbP ISs/zIAhwmaILv3nQrL20fMH7BkynAEn+FIy+bNX7kP5Yt03p4mQPDVEkNK/bzOY eDzOr6XFc4ZYtWBx2PxrBAqDjYnf5K5NoqTL/veCfGeOwB2LDh7s7KB22PuPFEpX koQUpLGxWAdSMxXlAEJ1xWtYrpUlRMiqWFkshDhRACB5gv7gaYi/tO4yKBgTwMBy NAu2Aruo44YR1dCXAdiYDI3QawtEMl1mLY7kXwBZ9eHpbBpJUUAg+kf1ISs6VDDP 7JHSvyMBqZ+BbQ1Agc4WHq/Pf23ZiJ2RkZVLlP75rKDdEOHfL/jZdqjCga2dAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU2DC+C0t51KAk/jjZnTE4y35Ne0gwHwYDVR0j BBgwFoAULQ0Ui98u1Pvb64DbHrN36qNkP5QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9LRmU5RkczYXhIWm81R2VIRjNmRkZibVdDMTU3dTVuY1RXZGM2WUFxVm1C LzAvMkQwRDE0OEJERjJFRDRGQkRCRUI4MERCMUVCMzc3RUFBMzY0M0Y5NC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yRDBEMTQ4QkRGMkVENEZCREJF QjgwREIxRUIzNzdFQUEzNjQzRjk0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0tG ZTlGRzNheEhabzVHZUhGM2ZGRmJtV0MxNTd1NW5jVFdkYzZZQXFWbUIvMC8yRDBE MTQ4QkRGMkVENEZCREJFQjgwREIxRUIzNzdFQUEzNjQzRjk0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA eKUgGaqP1QV7MZs8GR5JuU/M6nlxhhdGX9qXTvBDpWmFl16KU1nSes/hgI+YEYkj ZDRfoPBaQpj8MkydR+DxMywg+EVlLV8VTbEgtugaZU+15uV7mjVtS4mIFm+0BP4w cxK76iXzW81aG7kOJg3uPYCVYlQs0Iik6c/CyuEMUVIFANn1yUzoSiSvD7O/p/xM sJq3fJDy924D7CG1t/c+LNAYVvgJhrxPsdaiFl7DtxM43aBMnW0RMn98Fg3eTvVw 7JLyqt284gu+AgPVS4Oql+RPySbufp7MT52ALxXFEdNe+dImyq5u+upaoT6zktm6 GdLGkxCW6cQ1+fmFf3BEIA== -----END CERTIFICATE-----Generated at Tue Aug 5 20:14:08 2025 by rpki-client