$ rpki-client -vvf rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.mft File: 04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.mft (raw, json) Hash identifier: DZrU+L+CMGInhIMALOOBzP1J6EO5FWG5MCeSdzp/IOE= Subject key identifier: E6:54:E4:73:D7:27:E1:3B:2D:77:41:AD:03:25:0D:61:37:BA:F3:9C Authority key identifier: 04:82:1F:F7:3B:C7:A0:F4:56:82:3C:5D:FE:BD:A8:BB:8C:25:EB:87 Certificate issuer: /CN=04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87 Certificate serial: 46E406FCC4ED71AAF286E7711FCD1F57D084044A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.cer Subject info access: rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.mft Manifest number: 1A Signing time: Sun 29 Jun 2025 17:39:52 +0000 Manifest this update: Sun 29 Jun 2025 17:34:52 +0000 Manifest next update: Mon 30 Jun 2025 18:33:52 +0000 Files and hashes: 1: 323830343a346332383a3a2f33322d3438203d3e20323637333533.roa (hash: bmT09xDutoa9PvJahu2aOyeKWMXErbCwcThQLbnkXm0=) 2: 34352e3233342e34382e302f32322d3234203d3e20323637333533.roa (hash: eoUHwMrI3zAiw9wLJNrGheTpcxxSu5ipNJzZq/fBJdU=) 3: 04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.crl (hash: AOBGpiLj9s5VU9FQHbRqmH8PduPIeFEEcmxOPFU4w5o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.crl rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 18:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e4:06:fc:c4:ed:71:aa:f2:86:e7:71:1f:cd:1f:57:d0:84:04:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87 Validity Not Before: Jun 29 17:34:52 2025 GMT Not After : Jun 30 18:33:52 2025 GMT Subject: CN=E654E473D727E13B2D7741AD03250D6137BAF39C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:5a:d4:18:59:1e:13:18:a1:f7:8e:28:46: 94:97:a2:c5:dc:05:0b:01:69:ee:ff:51:6a:da:c8: 4c:3f:de:f5:ff:34:e8:ae:c4:ad:7b:95:8c:2c:1d: 78:f4:d2:a7:e2:8e:91:ce:b4:72:12:2f:cc:08:60: 88:f7:07:a2:61:66:c8:3e:4b:97:4c:66:cb:48:0d: 3c:b3:8e:c6:41:d7:6d:0b:88:13:8c:f4:00:85:3c: 1d:ea:2d:64:b7:a9:50:1e:e1:35:4d:1b:06:4b:4e: c7:d8:10:7c:67:e6:af:53:fe:bb:80:cf:a6:e4:44: f6:3f:5d:6a:43:cb:70:c9:ea:03:23:08:fc:43:5c: a4:22:ca:66:7f:9e:83:3f:0c:a1:d8:17:36:97:22: 2e:1f:ae:23:e9:db:3e:fe:c0:82:73:59:76:cd:04: 68:db:08:15:33:32:8a:b9:33:d7:dd:3a:66:35:cd: 89:72:8b:52:04:a8:a3:60:c6:42:52:ca:75:fd:58: 60:bc:65:ff:28:91:53:01:51:16:24:43:c2:4c:07: ab:7e:4b:f9:9a:23:84:cb:de:1e:91:9f:26:99:d0: 6c:6c:28:38:2f:68:bf:c0:8c:b1:8f:8d:52:a9:98: 66:4a:7d:79:0d:32:a1:6a:56:48:d5:e2:53:93:11: cf:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:54:E4:73:D7:27:E1:3B:2D:77:41:AD:03:25:0D:61:37:BA:F3:9C X509v3 Authority Key Identifier: keyid:04:82:1F:F7:3B:C7:A0:F4:56:82:3C:5D:FE:BD:A8:BB:8C:25:EB:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5c:b4:c5:a1:7f:25:b4:5b:d3:c3:8d:e5:be:84:ec:e3:ef: aa:5a:f8:83:91:1a:11:55:d4:1e:e0:65:b4:e2:62:29:b3:5f: 2c:7a:38:57:5b:e5:5a:18:00:04:0d:a9:96:74:69:c3:40:e1: 97:77:82:14:77:6d:90:e2:26:99:5f:ce:73:24:c0:6a:c8:fc: e2:c9:35:b0:1a:a5:83:2f:99:11:6a:3a:9d:4d:c3:2a:84:82: b2:65:dc:d8:c9:01:39:1c:91:1b:59:e7:fe:83:e2:2f:4f:8d: 7c:f6:a7:cf:e9:e4:1f:41:d0:a9:e2:ca:d5:10:fb:df:27:06: f3:0d:d6:e9:a3:48:d3:30:59:8f:4d:8b:5f:08:62:9c:06:89: 1a:c8:5a:64:d5:c6:75:67:e8:6d:9b:81:aa:9a:95:4c:5d:d5: 18:99:c2:45:53:ec:3d:db:b8:46:b4:4a:f5:3c:7e:68:a3:74: f5:9f:d5:8e:4c:f8:e9:74:fc:2a:ee:d2:45:bd:c0:bf:be:82: a9:b6:16:02:02:e4:66:ed:0c:2a:62:7a:44:a1:18:6b:3d:45: 96:4a:28:63:5d:41:02:f0:ea:2a:cd:f7:6d:1f:30:a6:ed:d4: 03:ec:8e:67:d5:c7:35:65:de:1c:e0:bb:c8:54:50:10:95:5f: 4c:07:04:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURuQG/MTtcaryhudxH80fV9CEBEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4MjFGRjczQkM3QTBGNDU2ODIzQzVERkVCREE4QkI4 QzI1RUI4NzAeFw0yNTA2MjkxNzM0NTJaFw0yNTA2MzAxODMzNTJaMDMxMTAvBgNV BAMTKEU2NTRFNDczRDcyN0UxM0IyRDc3NDFBRDAzMjUwRDYxMzdCQUYzOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBFrUGFkeExih944oRpSXosXc BQsBae7/UWrayEw/3vX/NOiuxK17lYwsHXj00qfijpHOtHISL8wIYIj3B6JhZsg+ S5dMZstIDTyzjsZB120LiBOM9ACFPB3qLWS3qVAe4TVNGwZLTsfYEHxn5q9T/ruA z6bkRPY/XWpDy3DJ6gMjCPxDXKQiymZ/noM/DKHYFzaXIi4friPp2z7+wIJzWXbN BGjbCBUzMoq5M9fdOmY1zYlyi1IEqKNgxkJSynX9WGC8Zf8okVMBURYkQ8JMB6t+ S/maI4TL3h6RnyaZ0GxsKDgvaL/AjLGPjVKpmGZKfXkNMqFqVkjV4lOTEc8DAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5lTkc9cn4Tstd0GtAyUNYTe685wwHwYDVR0j BBgwFoAUBIIf9zvHoPRWgjxd/r2ou4wl64cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlB6bTdMUjlhYVFiekY1WVh0SGF3dmFTbmJEZlh1aGF3OVFFTHV0c3Zj OUUvMC8wNDgyMUZGNzNCQzdBMEY0NTY4MjNDNURGRUJEQThCQjhDMjVFQjg3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0ODIxRkY3M0JDN0EwRjQ1 NjgyM0M1REZFQkRBOEJCOEMyNUVCODcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlB6bTdMUjlhYVFiekY1WVh0SGF3dmFTbmJEZlh1aGF3OVFFTHV0c3ZjOUUvMC8w NDgyMUZGNzNCQzdBMEY0NTY4MjNDNURGRUJEQThCQjhDMjVFQjg3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH1y0xaF/JbRb08ON5b6E7OPvqlr4g5EaEVXUHuBltOJiKbNfLHo4V1vlWhgA BA2plnRpw0Dhl3eCFHdtkOImmV/OcyTAasj84sk1sBqlgy+ZEWo6nU3DKoSCsmXc 2MkBORyRG1nn/oPiL0+NfPanz+nkH0HQqeLK1RD73ycG8w3W6aNI0zBZj02LXwhi nAaJGshaZNXGdWfobZuBqpqVTF3VGJnCRVPsPdu4RrRK9Tx+aKN09Z/Vjkz46XT8 Ku7SRb3Av76CqbYWAgLkZu0MKmJ6RKEYaz1FlkooY11BAvDqKs33bR8wpu3UA+yO Z9XHNWXeHOC7yFRQEJVfTAcE5g== -----END CERTIFICATE-----Generated at Mon Jun 30 06:56:51 2025 by rpki-client