$ rpki-client -vvf rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft File: 2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft (raw, json) Hash identifier: AgxW/OTYrd83mjnmMoHKOaNzoZFlj28HumB1gEaUu/o= Subject key identifier: 59:81:AC:2D:E8:F4:35:CB:26:71:DD:C2:7D:B3:5A:2F:E1:87:20:00 Authority key identifier: 2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1 Certificate issuer: /CN=2A0183D32B891D785CDF1CC86CFD0AE9460250B1 Certificate serial: 386CD25E0F5BE4A02631C1D8EF2788699750E792 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer Subject info access: rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft Manifest number: 0251 Signing time: Sat 21 Jun 2025 12:14:57 +0000 Manifest this update: Sat 21 Jun 2025 12:09:57 +0000 Manifest next update: Sun 22 Jun 2025 15:30:57 +0000 Files and hashes: 1: 3138372e3130332e31362e302f32322d3234203d3e20323730393931.roa (hash: jv5mGEDvNirUNb+ywEWplBQ51qJkA6j3IlJ4XwV4itQ=) 2: 323830343a373439383a3a2f33322d3434203d3e20323730393931.roa (hash: 1nVescDhZB748DPO06KLiKZQV7YLDmgTqov+PIhCxEo=) 3: 2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl (hash: X7RFmucR4suQozcFvt6wzbDQ7VwDQbGHn7hTJHXaNBA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Jun 2025 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6c:d2:5e:0f:5b:e4:a0:26:31:c1:d8:ef:27:88:69:97:50:e7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A0183D32B891D785CDF1CC86CFD0AE9460250B1 Validity Not Before: Jun 21 12:09:57 2025 GMT Not After : Jun 22 15:30:57 2025 GMT Subject: CN=5981AC2DE8F435CB2671DDC27DB35A2FE1872000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:50:69:7f:b5:e1:60:18:71:74:af:68:b5:ef: 79:5c:fe:c0:1a:f1:56:23:e1:ee:b9:a5:a8:43:7c: 53:57:63:4d:71:f9:1b:11:77:8c:3d:64:88:a4:19: da:63:65:25:c3:9e:ac:2b:e2:5d:c7:01:a8:ba:09: 5a:88:dc:9a:fd:1b:6b:bb:bf:fb:8d:85:4e:da:b4: 48:44:9b:ce:5a:71:8f:fc:32:04:dc:fc:41:dd:ed: 7b:df:88:40:6a:67:96:4e:ac:2e:b3:0f:ff:f0:52: 95:f0:64:d0:c1:81:49:97:9b:34:54:94:22:e8:9c: 2c:01:c3:93:69:d1:cf:cf:26:8c:d4:b0:cc:3b:d3: b4:3b:a7:30:85:87:f4:31:d3:3e:a9:74:9c:49:4a: ab:05:ce:26:c1:c3:74:05:43:b4:b4:2c:ad:e8:d1: 29:bb:b3:c7:28:32:e8:0e:ba:b8:cc:80:75:00:27: 45:37:71:0d:e0:ad:09:ad:12:83:19:4c:81:31:97: 15:bf:0f:44:e2:0b:1e:8e:30:7b:8b:bd:fa:ed:09: 37:e0:78:4c:d6:d2:32:b2:c5:93:ad:41:ff:9e:66: 81:00:f1:82:38:78:7f:e6:41:04:c1:6d:b5:01:54: 00:e3:4a:2c:a9:b6:f6:1c:b4:0d:0f:d5:c3:da:b1: cf:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:81:AC:2D:E8:F4:35:CB:26:71:DD:C2:7D:B3:5A:2F:E1:87:20:00 X509v3 Authority Key Identifier: keyid:2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:6c:69:35:c0:a5:1e:02:87:13:f0:dd:a8:2d:95:ce:4c:8b: 5c:f4:e0:58:0f:3c:1e:1f:70:bd:75:9f:67:2c:ce:08:f8:72: 85:37:72:7d:7c:5e:53:62:f8:83:41:e0:27:bf:e2:0f:01:7e: d2:6f:7b:30:9a:de:a9:e5:94:fc:6d:8a:9a:8d:07:7c:7d:fa: 62:55:56:6d:ac:0f:f2:d9:6b:01:e1:43:bd:20:8b:04:9b:cf: d8:9d:e1:3a:c9:1a:12:79:c0:00:4b:38:c8:80:c4:c2:e0:e2: 5c:7c:73:ab:a6:b2:e3:bf:96:3c:bd:8b:92:eb:6b:2e:11:74: 9c:f5:99:bd:17:05:35:47:ad:47:55:fa:cc:18:da:5f:b7:36: 8f:54:04:23:28:ed:b8:43:a5:e9:37:fc:a5:20:ba:aa:f6:7f: 88:f0:8a:1a:aa:ab:a0:80:3c:d0:35:17:5c:9a:31:f7:98:e8: 28:fd:9b:61:be:04:8d:2a:41:bb:6c:af:dc:6e:b3:ec:ed:a6: 50:71:b4:88:20:6d:a6:49:5d:7f:56:90:03:80:ff:5c:5a:38: 52:76:93:1b:4d:ae:89:8d:24:6c:f5:93:2b:02:f9:9d:ca:ae: f8:9f:db:ae:6d:66:ab:0a:48:7b:5c:c1:ca:5c:18:82:64:c3: f9:79:0f:c3 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUOGzSXg9b5KAmMcHY7yeIaZdQ55IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwMTgzRDMyQjg5MUQ3ODVDREYxQ0M4NkNGRDBBRTk0 NjAyNTBCMTAeFw0yNTA2MjExMjA5NTdaFw0yNTA2MjIxNTMwNTdaMDMxMTAvBgNV BAMTKDU5ODFBQzJERThGNDM1Q0IyNjcxRERDMjdEQjM1QTJGRTE4NzIwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsUGl/teFgGHF0r2i173lc/sAa 8VYj4e65pahDfFNXY01x+RsRd4w9ZIikGdpjZSXDnqwr4l3HAai6CVqI3Jr9G2u7 v/uNhU7atEhEm85acY/8MgTc/EHd7XvfiEBqZ5ZOrC6zD//wUpXwZNDBgUmXmzRU lCLonCwBw5Np0c/PJozUsMw707Q7pzCFh/Qx0z6pdJxJSqsFzibBw3QFQ7S0LK3o 0Sm7s8coMugOurjMgHUAJ0U3cQ3grQmtEoMZTIExlxW/D0TiCx6OMHuLvfrtCTfg eEzW0jKyxZOtQf+eZoEA8YI4eH/mQQTBbbUBVADjSiyptvYctA0P1cPasc91AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUWYGsLej0Ncsmcd3CfbNaL+GHIAAwHwYDVR0j BBgwFoAUKgGD0yuJHXhc3xzIbP0K6UYCULEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9rc0tia2F1WHFOZk5oY0IzTTRpOXNvdFNYWEtGRURna1hrUkxNZzJYdk5S LzEvMkEwMTgzRDMyQjg5MUQ3ODVDREYxQ0M4NkNGRDBBRTk0NjAyNTBCMS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQTAxODNEMzJCODkxRDc4NUNE RjFDQzg2Q0ZEMEFFOTQ2MDI1MEIxLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2tz S2JrYXVYcU5mTmhjQjNNNGk5c290U1hYS0ZFRGdrWGtSTE1nMlh2TlIvMS8yQTAx ODNEMzJCODkxRDc4NUNERjFDQzg2Q0ZEMEFFOTQ2MDI1MEIxLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA eGxpNcClHgKHE/DdqC2VzkyLXPTgWA88Hh9wvXWfZyzOCPhyhTdyfXxeU2L4g0Hg J7/iDwF+0m97MJreqeWU/G2Kmo0HfH36YlVWbawP8tlrAeFDvSCLBJvP2J3hOska EnnAAEs4yIDEwuDiXHxzq6ay47+WPL2LkutrLhF0nPWZvRcFNUetR1X6zBjaX7c2 j1QEIyjtuEOl6Tf8pSC6qvZ/iPCKGqqroIA80DUXXJox95joKP2bYb4EjSpBu2yv 3G6z7O2mUHG0iCBtpkldf1aQA4D/XFo4UnaTG02uiY0kbPWTKwL5ncqu+J/brm1m qwpIe1zBylwYgmTD+XkPww== -----END CERTIFICATE-----Generated at Sat Jun 21 16:16:49 2025 by rpki-client