$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.mft File: B27B85F02C63CD742721D85E375F5A98C91ED00B.mft (raw, json) Hash identifier: aGPnvvHA/ph7hNjTr+MOuneo7Dcfan+8YCGf4LmWskc= Subject key identifier: AC:9C:D7:0F:95:56:F8:E0:CD:B9:67:B8:58:37:2A:D9:0F:77:2C:9F Authority key identifier: B2:7B:85:F0:2C:63:CD:74:27:21:D8:5E:37:5F:5A:98:C9:1E:D0:0B Certificate issuer: /CN=B27B85F02C63CD742721D85E375F5A98C91ED00B Certificate serial: 195E147445B1F31AD26B7B9561D19A454E7A0602 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27B85F02C63CD742721D85E375F5A98C91ED00B.cer Subject info access: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.mft Manifest number: 4E Signing time: Wed 02 Jul 2025 08:09:40 +0000 Manifest this update: Wed 02 Jul 2025 08:04:40 +0000 Manifest next update: Thu 03 Jul 2025 09:34:40 +0000 Files and hashes: 1: 3137302e38302e36382e302f32322d3234203d3e20323633393035.roa (hash: rbpFePIighvyZfYolRY0ciD0LBZZ3+jrzRt5MfVVy98=) 2: 3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa (hash: 2wuK83kGggWH4E8N6EQeR0Ft9R1UVymLSxczmk6VfBc=) 3: 323830343a323738303a3a2f33322d3334203d3e20323633393035.roa (hash: q++Y8uDb0QZkkc+9358Zhs1Jsl0QBiuDx2Mno5lvNRs=) 4: B27B85F02C63CD742721D85E375F5A98C91ED00B.crl (hash: JV+Regm0ADWem7p4ZkB8TQKk2OaBiNCaE8411bsrQlk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.crl rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27B85F02C63CD742721D85E375F5A98C91ED00B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 09:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:5e:14:74:45:b1:f3:1a:d2:6b:7b:95:61:d1:9a:45:4e:7a:06:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B27B85F02C63CD742721D85E375F5A98C91ED00B Validity Not Before: Jul 2 08:04:40 2025 GMT Not After : Jul 3 09:34:40 2025 GMT Subject: CN=AC9CD70F9556F8E0CDB967B858372AD90F772C9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c9:63:c8:38:69:5e:d1:c8:fa:7d:d7:c0:db: 8d:be:8f:19:e2:d9:e1:cd:20:b9:a3:d1:5b:cb:38: 80:f4:95:be:1d:82:db:c7:09:9f:59:c6:af:b4:d2: 88:b5:65:79:5c:83:3a:22:be:c0:33:3b:45:da:c6: b1:c5:b6:96:ad:c3:e4:26:b5:12:01:6d:65:7f:38: d0:20:d2:49:d8:f4:26:01:86:32:a0:26:41:1a:de: 58:e3:dc:f4:a9:85:67:f2:b1:b3:d8:33:0d:fd:52: d4:59:4a:57:c1:db:64:d7:5f:00:e4:1c:b1:e0:61: 16:5d:9e:d3:8b:8d:2e:fb:9f:32:96:21:fe:b5:b8: 9e:bd:85:a7:d6:12:56:a8:8a:96:63:f1:0e:c8:5a: 05:19:ea:ad:c3:97:36:fb:38:4a:1a:aa:8a:ba:78: 91:e3:8f:f4:ae:7f:a9:8a:2b:d3:ad:e6:35:84:76: 2d:33:25:e1:64:0b:9e:bd:2a:1c:01:3f:4b:cc:a9: 73:be:d9:53:bb:67:c4:d6:dd:29:e6:24:60:de:3f: d1:14:c9:1f:ee:ac:03:33:fa:59:64:82:c5:0a:48: c5:da:e2:7e:d8:de:71:98:b6:11:64:ae:b1:d7:fb: 45:99:bb:3a:48:03:86:70:e2:4d:f1:e9:4c:8b:2c: da:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9C:D7:0F:95:56:F8:E0:CD:B9:67:B8:58:37:2A:D9:0F:77:2C:9F X509v3 Authority Key Identifier: keyid:B2:7B:85:F0:2C:63:CD:74:27:21:D8:5E:37:5F:5A:98:C9:1E:D0:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27B85F02C63CD742721D85E375F5A98C91ED00B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/B27B85F02C63CD742721D85E375F5A98C91ED00B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:73:b7:fb:62:50:8c:be:92:76:c5:10:1b:9c:68:42:31:b0: 2b:de:02:d3:9a:6f:0b:d7:b0:b0:24:2b:7b:b5:dd:49:18:17: 7f:dc:f3:eb:5e:b0:12:c7:a5:6c:fc:23:90:0a:c5:78:7e:a2: de:85:61:98:99:40:dd:ae:de:77:9a:3c:8b:8d:e3:18:ec:97: dc:75:51:68:3d:85:4c:f1:cf:b6:05:9f:91:89:e6:ba:4d:2e: f9:18:51:80:47:71:79:a4:49:19:4d:8e:30:ab:8f:82:f7:d6: ff:32:3e:7c:a0:ca:b5:c6:7a:3b:f5:89:99:07:2b:b3:8f:5d: 18:68:85:98:cb:4c:54:47:e6:d9:5d:26:35:f1:68:b6:72:dc: 6f:0c:13:86:a3:65:4c:e0:db:f4:8e:20:76:56:02:32:bf:e6: 27:e3:39:b1:37:d6:95:78:51:4a:c0:be:ee:8b:b8:e2:ee:99: 91:d7:71:96:03:38:32:d8:b2:0b:47:99:9f:5c:3c:a8:93:91: 1c:dc:df:d5:26:4d:93:36:ac:6b:4a:17:6d:8d:21:0e:38:74: 53:ab:7a:99:d7:0d:97:ce:7e:a1:ff:1a:64:f6:08:78:5b:48: 7a:07:96:9a:f2:9b:c4:35:31:93:a2:54:c0:49:6b:b5:98:eb: 90:d7:b5:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGV4UdEWx8xrSa3uVYdGaRU56BgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI3Qjg1RjAyQzYzQ0Q3NDI3MjFEODVFMzc1RjVBOThD OTFFRDAwQjAeFw0yNTA3MDIwODA0NDBaFw0yNTA3MDMwOTM0NDBaMDMxMTAvBgNV BAMTKEFDOUNENzBGOTU1NkY4RTBDREI5NjdCODU4MzcyQUQ5MEY3NzJDOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpyWPIOGle0cj6fdfA242+jxni 2eHNILmj0VvLOID0lb4dgtvHCZ9Zxq+00oi1ZXlcgzoivsAzO0XaxrHFtpatw+Qm tRIBbWV/ONAg0knY9CYBhjKgJkEa3ljj3PSphWfysbPYMw39UtRZSlfB22TXXwDk HLHgYRZdntOLjS77nzKWIf61uJ69hafWElaoipZj8Q7IWgUZ6q3Dlzb7OEoaqoq6 eJHjj/Suf6mKK9Ot5jWEdi0zJeFkC569KhwBP0vMqXO+2VO7Z8TW3SnmJGDeP9EU yR/urAMz+llkgsUKSMXa4n7Y3nGYthFkrrHX+0WZuzpIA4Zw4k3x6UyLLNp3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrJzXD5VW+ODNuWe4WDcq2Q93LJ8wHwYDVR0j BBgwFoAUsnuF8CxjzXQnIdheN19amMke0AswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBj eUYvMC9CMjdCODVGMDJDNjNDRDc0MjcyMUQ4NUUzNzVGNUE5OEM5MUVEMDBCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyN0I4NUYwMkM2M0NENzQy NzIxRDg1RTM3NUY1QTk4QzkxRUQwMEIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBjeUYvMC9C MjdCODVGMDJDNjNDRDc0MjcyMUQ4NUUzNzVGNUE5OEM5MUVEMDBCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZXO3+2JQjL6SdsUQG5xoQjGwK94C05pvC9ewsCQre7XdSRgXf9zz616wEsel bPwjkArFeH6i3oVhmJlA3a7ed5o8i43jGOyX3HVRaD2FTPHPtgWfkYnmuk0u+RhR gEdxeaRJGU2OMKuPgvfW/zI+fKDKtcZ6O/WJmQcrs49dGGiFmMtMVEfm2V0mNfFo tnLcbwwThqNlTODb9I4gdlYCMr/mJ+M5sTfWlXhRSsC+7ou44u6ZkddxlgM4Mtiy C0eZn1w8qJORHNzf1SZNkzasa0oXbY0hDjh0U6t6mdcNl85+of8aZPYIeFtIegeW mvKbxDUxk6JUwElrtZjrkNe1XA== -----END CERTIFICATE-----Generated at Thu Jul 3 00:30:25 2025 by rpki-client