$ rpki-client -vvf rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.mft File: C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.mft (raw, json) Hash identifier: WgTX6P34l/ELMWAWPzbJikTm2P0009GssSqP1jOqCps= Subject key identifier: 01:17:AD:54:CB:44:13:C1:3F:6C:3B:0A:FE:32:55:D4:30:B1:42:B3 Authority key identifier: C4:B1:9B:CE:1E:9A:B5:29:72:35:D8:0B:57:CF:3D:D8:2F:EE:D7:51 Certificate issuer: /CN=C4B19BCE1E9AB5297235D80B57CF3DD82FEED751 Certificate serial: 4DBF0D43B52563828DEC9284C77490B005EC06D8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.cer Subject info access: rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.mft Manifest number: 0146 Signing time: Wed 02 Jul 2025 21:00:05 +0000 Manifest this update: Wed 02 Jul 2025 20:55:05 +0000 Manifest next update: Thu 03 Jul 2025 21:06:05 +0000 Files and hashes: 1: 323830343a6636343a3a2f33322d313238203d3e20323633353833.roa (hash: zjtA1CsyTg43dQLPmThoRwD0huUpjb049yIaaiY9FWU=) 2: C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.crl (hash: go26+AKGrPBulwwIlbrPQv+ZkNuQdmYoFB0Xe85YRTY=) 3: 3139302e382e32382e302f32322d3332203d3e20323633353833.roa (hash: GKNOlP0JQj/PIDb59+/P076Q24YQhJp5duDZSWj++hg=) 4: 3137372e3135352e38302e302f32322d3332203d3e20323633353833.roa (hash: ViWqxAKsvHtd+LQe4Wpm6dZfCIp9vVrHL4saDiGbN6Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.crl rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 21:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:bf:0d:43:b5:25:63:82:8d:ec:92:84:c7:74:90:b0:05:ec:06:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4B19BCE1E9AB5297235D80B57CF3DD82FEED751 Validity Not Before: Jul 2 20:55:05 2025 GMT Not After : Jul 3 21:06:05 2025 GMT Subject: CN=0117AD54CB4413C13F6C3B0AFE3255D430B142B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:14:dc:7c:e3:32:d4:f6:e6:aa:0c:ed:9e:71: e7:71:ca:4c:85:38:2e:1b:c3:4d:4a:3b:45:a4:85: fc:62:60:1d:25:58:70:de:ad:7c:88:3b:8b:c2:c1: 92:2b:1c:85:15:13:48:b7:46:a7:e2:3e:b9:c6:cf: 48:bf:7e:5f:a7:56:09:16:aa:dc:15:95:bc:fc:4a: 4d:a0:e3:be:53:b4:f5:27:e8:e7:67:4e:83:f3:1f: ab:9a:7e:3f:bf:2d:c2:d3:08:9b:a8:5a:0b:cd:32: 2c:a9:27:a6:73:4a:9c:c9:64:44:23:f0:e0:96:66: 16:14:73:99:c2:a8:8a:4c:d7:35:da:cc:96:3c:4d: fd:65:d5:a1:26:ec:ae:cb:46:27:38:26:19:f7:28: fb:1d:90:f8:72:4e:68:2c:11:71:71:fb:0d:d9:19: da:f7:83:e8:89:0e:cc:f0:aa:5e:8b:38:e4:d1:ea: 2a:96:f5:21:ba:bf:e4:ab:52:12:01:d4:21:95:e7: 44:6e:8a:04:e0:96:c9:79:5b:6b:44:53:6a:02:c2: c5:c6:97:21:cc:91:dc:e7:96:9b:86:b7:19:50:ba: 04:87:66:21:85:d3:7c:7c:a0:9e:9c:c5:0e:1b:b0: 48:7a:70:08:9a:54:12:aa:f9:b9:3e:5b:39:70:73: c0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:17:AD:54:CB:44:13:C1:3F:6C:3B:0A:FE:32:55:D4:30:B1:42:B3 X509v3 Authority Key Identifier: keyid:C4:B1:9B:CE:1E:9A:B5:29:72:35:D8:0B:57:CF:3D:D8:2F:EE:D7:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:02:b6:85:3c:13:b1:c4:9e:de:52:38:fa:6a:54:59:58:3a: 15:0b:12:7e:24:97:78:73:40:12:b3:fa:93:a1:06:8d:01:86: 30:33:df:ff:eb:26:15:a3:7d:9a:16:76:c6:e8:5c:26:65:82: 24:ec:2d:96:98:56:64:7b:24:6c:d0:75:88:a9:4f:d1:e8:81: 97:25:00:fb:39:70:66:32:fe:4e:de:40:25:b8:f9:20:70:c5: 1d:81:a3:d2:51:a0:7b:35:e4:79:2f:c9:9d:c7:50:78:53:e5: 31:d5:6b:e4:e5:ee:8f:44:b7:47:8b:64:05:29:78:4a:1c:89: cb:f5:d4:5c:40:d2:27:dd:1e:44:33:b2:e4:24:fa:f1:90:50: bd:29:53:b0:fc:e0:2a:5f:cd:f3:b8:e6:6d:3a:c0:d0:06:a5: 50:fc:7b:9c:95:09:ad:c4:52:b9:59:f9:5b:c5:18:2e:f5:d4: 5c:75:d2:c5:76:a2:eb:5a:47:39:67:d4:33:18:32:a3:61:83: 24:c2:06:27:c2:ef:e7:89:f5:6e:b1:89:15:5e:17:54:a2:72: d8:0b:c7:bb:8b:38:68:ff:22:85:87:53:e9:3c:1f:97:8c:1f: 6d:c4:14:ec:1f:fb:5a:f6:f5:c7:86:f7:fe:32:32:7c:fb:e0: b4:e5:92:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTb8NQ7UlY4KN7JKEx3SQsAXsBtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRCMTlCQ0UxRTlBQjUyOTcyMzVEODBCNTdDRjNERDgy RkVFRDc1MTAeFw0yNTA3MDIyMDU1MDVaFw0yNTA3MDMyMTA2MDVaMDMxMTAvBgNV BAMTKDAxMTdBRDU0Q0I0NDEzQzEzRjZDM0IwQUZFMzI1NUQ0MzBCMTQyQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsFNx84zLU9uaqDO2ecedxykyF OC4bw01KO0WkhfxiYB0lWHDerXyIO4vCwZIrHIUVE0i3RqfiPrnGz0i/fl+nVgkW qtwVlbz8Sk2g475TtPUn6OdnToPzH6uafj+/LcLTCJuoWgvNMiypJ6ZzSpzJZEQj 8OCWZhYUc5nCqIpM1zXazJY8Tf1l1aEm7K7LRic4Jhn3KPsdkPhyTmgsEXFx+w3Z Gdr3g+iJDszwql6LOOTR6iqW9SG6v+SrUhIB1CGV50RuigTglsl5W2tEU2oCwsXG lyHMkdznlpuGtxlQugSHZiGF03x8oJ6cxQ4bsEh6cAiaVBKq+bk+Wzlwc8CdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUARetVMtEE8E/bDsK/jJV1DCxQrMwHwYDVR0j BBgwFoAUxLGbzh6atSlyNdgLV8892C/u11EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1Znc3lHcHNKNEhZWGtybjFIenpOYmV3WlllajJqelVLQTh5bWJHdzFU NVYvMC9DNEIxOUJDRTFFOUFCNTI5NzIzNUQ4MEI1N0NGM0REODJGRUVENzUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0QjE5QkNFMUU5QUI1Mjk3 MjM1RDgwQjU3Q0YzREQ4MkZFRUQ3NTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1Znc3lHcHNKNEhZWGtybjFIenpOYmV3WlllajJqelVLQTh5bWJHdzFUNVYvMC9D NEIxOUJDRTFFOUFCNTI5NzIzNUQ4MEI1N0NGM0REODJGRUVENzUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjAK2hTwTscSe3lI4+mpUWVg6FQsSfiSXeHNAErP6k6EGjQGGMDPf/+smFaN9 mhZ2xuhcJmWCJOwtlphWZHskbNB1iKlP0eiBlyUA+zlwZjL+Tt5AJbj5IHDFHYGj 0lGgezXkeS/JncdQeFPlMdVr5OXuj0S3R4tkBSl4ShyJy/XUXEDSJ90eRDOy5CT6 8ZBQvSlTsPzgKl/N87jmbTrA0AalUPx7nJUJrcRSuVn5W8UYLvXUXHXSxXai61pH OWfUMxgyo2GDJMIGJ8Lv54n1brGJFV4XVKJy2AvHu4s4aP8ihYdT6Twfl4wfbcQU 7B/7Wvb1x4b3/jIyfPvgtOWSKg== -----END CERTIFICATE-----Generated at Thu Jul 3 10:34:18 2025 by rpki-client