$ rpki-client -vvf rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft File: 890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft (raw, json) Hash identifier: /Kkb8B1oXUP3jHx1BxC2kIe0H9vwzYAp7yIolD1EfIU= Subject key identifier: 51:F3:55:D3:BF:7C:A3:A9:3E:03:A4:DE:22:DF:D4:36:0C:94:12:26 Authority key identifier: 89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29 Certificate issuer: /CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629 Certificate serial: 26E4D368FA7BB25AE22629BB1FD6DE56BB299801 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer Subject info access: rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft Manifest number: 024C Signing time: Tue 17 Jun 2025 10:55:52 +0000 Manifest this update: Tue 17 Jun 2025 10:50:52 +0000 Manifest next update: Wed 18 Jun 2025 14:26:52 +0000 Files and hashes: 1: 890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl (hash: s/7DLsWr+7/FJ8scO4QBau+LXgVAQ8GQLv170M6SngU=) 2: 34352e352e38382e302f32322d3232203d3e20323636303834.roa (hash: K84xCId8+1cs5H3nmPDltEdVWLmM3+PGwnAlVZb81fo=) 3: 323830343a336135383a3a2f33322d3332203d3e20323636303834.roa (hash: sEDi9DwKH3RgvOw8jDr36sB6k6gHWPRVR+WX1w3q6W4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 14:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e4:d3:68:fa:7b:b2:5a:e2:26:29:bb:1f:d6:de:56:bb:29:98:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=890AD584C83D44FFB2DFFF955D1BD1C72FF0F629 Validity Not Before: Jun 17 10:50:52 2025 GMT Not After : Jun 18 14:26:52 2025 GMT Subject: CN=51F355D3BF7CA3A93E03A4DE22DFD4360C941226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dd:ab:4a:65:ab:b0:21:f0:99:54:8a:6e:eb: 32:34:7e:01:78:5c:3a:ab:e9:57:6d:61:e6:59:70: 19:87:ea:67:a7:48:72:91:ea:65:9a:4b:46:ad:46: 44:cd:bd:9b:04:6b:85:cf:f0:d0:42:33:dc:ae:32: c1:e6:89:56:84:43:12:2d:1a:96:3e:d9:76:e4:30: 97:14:09:e1:55:50:7b:9e:ea:d7:9c:58:47:f9:24: 5e:2e:82:1a:26:ea:91:a9:aa:cc:48:fb:19:7e:dd: e0:80:d5:55:9b:77:7a:1e:f9:4c:0a:f5:9c:8b:0e: ff:fb:67:d9:39:5a:61:62:a0:4a:10:b5:73:b4:5f: ed:07:5a:21:1c:15:57:66:2d:24:9b:93:eb:09:c3: 1c:d8:db:f7:b4:f7:a0:da:62:0b:2c:39:ae:c8:8e: 4a:6e:a8:ea:94:a8:5e:05:eb:37:84:d6:41:b0:ab: c3:3b:53:07:81:3a:43:7a:8a:2a:c3:6e:aa:bb:a6: 85:95:bd:5f:78:fe:1d:fb:c6:c3:0f:62:90:ce:a0: 98:92:4c:4f:f8:8c:3a:a4:cb:18:65:87:74:dc:4f: 99:88:3e:24:56:bf:bb:ef:b1:7e:d3:ce:5c:e5:8b: 31:bc:1c:b2:5c:48:1b:5c:e8:fe:02:af:29:38:b2: c7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F3:55:D3:BF:7C:A3:A9:3E:03:A4:DE:22:DF:D4:36:0C:94:12:26 X509v3 Authority Key Identifier: keyid:89:0A:D5:84:C8:3D:44:FF:B2:DF:FF:95:5D:1B:D1:C7:2F:F0:F6:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/YDzzzUW69Fne2RGZzbmXZJpmGj9wCdjGCatKDP2MaPU/1/890AD584C83D44FFB2DFFF955D1BD1C72FF0F629.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a7:0b:10:ce:82:2b:bf:d3:44:62:d3:70:c3:64:9f:87:46: 6b:58:31:fd:4a:3c:cb:5d:52:40:de:1e:8d:cc:76:7b:a4:5a: 8d:89:f6:97:6d:61:83:27:f5:09:de:e7:c8:bc:e8:5e:85:e3: 17:e4:24:e2:c5:16:86:8e:7f:e7:a5:0a:5c:e2:dd:59:92:66: e4:5d:12:b4:da:ac:76:ff:52:0b:de:05:73:c1:93:be:90:7e: 59:2a:57:45:e8:b4:69:e9:0d:6e:9c:33:5b:a6:39:6b:60:ca: 16:82:f5:18:e2:57:fa:73:a8:02:0d:bc:95:d5:2c:10:c0:e9: 48:3d:b3:2d:98:40:23:e1:6f:2d:4b:a6:da:01:62:c6:e3:a8: 44:cf:0c:15:ee:94:8f:6c:07:cc:04:2d:87:f9:36:cd:ec:fb: fa:d8:28:99:3c:3e:12:6b:41:3b:c9:76:78:f9:a5:6b:d1:37: cf:16:27:b5:76:a4:05:61:b2:32:4a:70:72:72:1d:0d:42:08: 88:f9:a5:46:d7:ed:0c:e0:91:fa:46:23:88:b0:78:47:8a:53: b5:3c:d8:53:eb:d5:c8:5d:92:82:63:bf:5f:bd:82:8e:37:c4: b2:8a:22:ef:8a:1d:13:d2:8a:e2:69:74:f4:b4:6a:c5:a1:37: 54:6a:82:75 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUJuTTaPp7slriJim7H9beVrspmAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwQUQ1ODRDODNENDRGRkIyREZGRjk1NUQxQkQxQzcy RkYwRjYyOTAeFw0yNTA2MTcxMDUwNTJaFw0yNTA2MTgxNDI2NTJaMDMxMTAvBgNV BAMTKDUxRjM1NUQzQkY3Q0EzQTkzRTAzQTRERTIyREZENDM2MEM5NDEyMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+3atKZauwIfCZVIpu6zI0fgF4 XDqr6VdtYeZZcBmH6menSHKR6mWaS0atRkTNvZsEa4XP8NBCM9yuMsHmiVaEQxIt GpY+2XbkMJcUCeFVUHue6tecWEf5JF4ughom6pGpqsxI+xl+3eCA1VWbd3oe+UwK 9ZyLDv/7Z9k5WmFioEoQtXO0X+0HWiEcFVdmLSSbk+sJwxzY2/e096DaYgssOa7I jkpuqOqUqF4F6zeE1kGwq8M7UweBOkN6iirDbqq7poWVvV94/h37xsMPYpDOoJiS TE/4jDqkyxhlh3TcT5mIPiRWv7vvsX7TzlzlizG8HLJcSBtc6P4Cryk4ssdNAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUUfNV0798o6k+A6TeIt/UNgyUEiYwHwYDVR0j BBgwFoAUiQrVhMg9RP+y3/+VXRvRxy/w9ikwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9ZRHp6elVXNjlGbmUyUkdaemJtWFpKcG1Hajl3Q2RqR0NhdEtEUDJNYVBV LzEvODkwQUQ1ODRDODNENDRGRkIyREZGRjk1NUQxQkQxQzcyRkYwRjYyOS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84OTBBRDU4NEM4M0Q0NEZGQjJE RkZGOTU1RDFCRDFDNzJGRjBGNjI5LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1lE enp6VVc2OUZuZTJSR1p6Ym1YWkpwbUdqOXdDZGpHQ2F0S0RQMk1hUFUvMS84OTBB RDU4NEM4M0Q0NEZGQjJERkZGOTU1RDFCRDFDNzJGRjBGNjI5Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA FKcLEM6CK7/TRGLTcMNkn4dGa1gx/Uo8y11SQN4ejcx2e6RajYn2l21hgyf1Cd7n yLzoXoXjF+Qk4sUWho5/56UKXOLdWZJm5F0StNqsdv9SC94Fc8GTvpB+WSpXRei0 aekNbpwzW6Y5a2DKFoL1GOJX+nOoAg28ldUsEMDpSD2zLZhAI+FvLUum2gFixuOo RM8MFe6Uj2wHzAQth/k2zez7+tgomTw+EmtBO8l2ePmla9E3zxYntXakBWGyMkpw cnIdDUIIiPmlRtftDOCR+kYjiLB4R4pTtTzYU+vVyF2SgmO/X72CjjfEsooi74od E9KK4ml09LRqxaE3VGqCdQ== -----END CERTIFICATE-----Generated at Tue Jun 17 19:42:36 2025 by rpki-client