$ rpki-client -vvf rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.mft File: 4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.mft (raw, json) Hash identifier: 5CcR7M+50upmMzbnpEGiyczPM3BQYIcy9vQvArc3Hh4= Subject key identifier: 1B:3D:5E:FE:4C:0D:3B:CA:8F:16:8F:A8:8C:8A:72:22:F0:81:EB:BA Authority key identifier: 4D:A6:9F:03:DA:36:D1:79:DE:66:AE:4E:0D:1F:75:C4:B6:65:D1:0E Certificate issuer: /CN=4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E Certificate serial: 658FE903BD6F433A77969A48DD89A9120E671EE7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.cer Subject info access: rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.mft Manifest number: 025F Signing time: Wed 02 Jul 2025 06:26:01 +0000 Manifest this update: Wed 02 Jul 2025 06:21:01 +0000 Manifest next update: Thu 03 Jul 2025 06:44:01 +0000 Files and hashes: 1: 4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.crl (hash: tG+1JPdiUAeINutR159aVC/Rrsg9AW+3TT1HmNN+kPU=) 2: 323830343a333239383a3a2f33322d3438203d3e20323635303837.roa (hash: XgrYjO3Np0DZN5TsTq+3EMjDVMp14rLMY4/nvAr55y4=) 3: 3137302e3233332e35362e302f32322d3234203d3e20323635303837.roa (hash: DPEIr9NDimyzhn7QrdumjOv4JD/fvBIRxOnOPYNWjV8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.crl rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 06:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:8f:e9:03:bd:6f:43:3a:77:96:9a:48:dd:89:a9:12:0e:67:1e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E Validity Not Before: Jul 2 06:21:01 2025 GMT Not After : Jul 3 06:44:01 2025 GMT Subject: CN=1B3D5EFE4C0D3BCA8F168FA88C8A7222F081EBBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:87:87:b2:30:f2:f4:0d:88:c7:09:02:3c:9b: 51:28:20:51:42:21:e3:4a:49:eb:e3:7e:91:4d:f6: 3a:8b:8b:ef:7f:7c:57:27:56:b1:6a:e0:4a:02:43: 6e:4b:bb:0a:f4:cb:d4:30:b2:57:56:2f:d4:c3:a2: b1:f8:ec:d0:d0:ba:b2:8c:3f:6d:da:d0:21:42:dc: 81:3f:7f:02:10:92:f3:6b:6c:7d:2d:a2:d0:bb:ca: 47:dd:bf:46:65:fe:1c:d0:b5:e9:42:48:b4:2c:74: 80:96:7c:40:7e:aa:34:86:0b:ca:2e:50:72:eb:a1: 99:b4:5f:86:17:a3:11:a2:e4:e7:30:5d:7d:a4:26: 28:b8:b4:0a:a1:d8:b9:5e:d5:67:52:b2:00:b7:aa: b7:0d:8c:0e:7f:03:f9:dd:bb:b0:ea:ff:52:10:c6: b2:af:7a:40:17:b5:fd:2b:77:6a:5f:f8:31:90:32: b8:21:a7:0b:5d:9c:ba:41:fb:5a:20:9b:13:7f:fb: 5e:5b:4c:a7:87:67:d0:32:04:f3:5a:03:4f:5f:50: 84:a7:81:e5:0f:f6:74:3f:60:91:75:dd:4b:0d:ce: d4:b6:6f:9c:1c:da:90:d8:13:1f:bd:1b:ba:22:de: 93:27:77:a8:b6:e4:96:a4:72:98:cb:69:cb:a7:ca: 3c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3D:5E:FE:4C:0D:3B:CA:8F:16:8F:A8:8C:8A:72:22:F0:81:EB:BA X509v3 Authority Key Identifier: keyid:4D:A6:9F:03:DA:36:D1:79:DE:66:AE:4E:0D:1F:75:C4:B6:65:D1:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rGiamacFWEyW9ZPS7SSqxHFAYHtvVixF1XePMod1qti/1/4DA69F03DA36D179DE66AE4E0D1F75C4B665D10E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:fc:b2:1e:47:73:3f:48:29:c5:9b:41:c9:ee:f9:e7:63:80: 00:75:04:42:a8:d7:bb:7a:95:67:f7:60:3f:8e:ea:8f:42:af: a3:8a:b7:08:82:3c:66:a2:63:a5:d9:c1:30:dc:ba:01:92:ee: 41:24:ad:76:f9:2c:9f:3d:0d:23:39:c0:26:95:34:9b:2e:31: a9:2d:e9:a5:00:25:45:83:ff:af:5f:ac:b1:75:2d:85:7d:1d: a3:29:d3:ff:07:4a:b7:0d:a9:14:83:9c:9e:df:e7:f5:fb:35: 12:63:48:a8:72:3b:28:c1:e9:9c:19:60:78:79:c9:5b:db:ed: 6c:5b:54:f7:94:18:a1:58:be:4f:b1:3e:90:72:7a:9e:8f:3a: c1:a1:7c:0a:2d:91:68:ee:79:cd:53:db:f0:ef:1c:85:92:06: 36:aa:ba:bd:b5:79:ab:42:e8:e5:4a:5c:03:fd:d0:cc:24:b5: 13:4c:9f:8a:0f:23:e1:04:8c:12:ee:19:d2:4e:8a:16:60:c6: 5b:c6:68:50:46:8c:cb:9b:dd:02:34:2f:24:5a:ab:5c:6a:23: 0e:1b:17:f9:46:ed:36:40:01:92:8a:57:0c:d4:ae:f7:99:6c: 57:ed:02:19:f5:68:12:5e:b6:c5:0a:8d:25:32:b3:83:30:a9: b8:a4:27:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZY/pA71vQzp3lppI3YmpEg5nHucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERBNjlGMDNEQTM2RDE3OURFNjZBRTRFMEQxRjc1QzRC NjY1RDEwRTAeFw0yNTA3MDIwNjIxMDFaFw0yNTA3MDMwNjQ0MDFaMDMxMTAvBgNV BAMTKDFCM0Q1RUZFNEMwRDNCQ0E4RjE2OEZBODhDOEE3MjIyRjA4MUVCQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDch4eyMPL0DYjHCQI8m1EoIFFC IeNKSevjfpFN9jqLi+9/fFcnVrFq4EoCQ25Luwr0y9QwsldWL9TDorH47NDQurKM P23a0CFC3IE/fwIQkvNrbH0totC7ykfdv0Zl/hzQtelCSLQsdICWfEB+qjSGC8ou UHLroZm0X4YXoxGi5OcwXX2kJii4tAqh2Lle1WdSsgC3qrcNjA5/A/ndu7Dq/1IQ xrKvekAXtf0rd2pf+DGQMrghpwtdnLpB+1ogmxN/+15bTKeHZ9AyBPNaA09fUISn geUP9nQ/YJF13UsNztS2b5wc2pDYEx+9G7oi3pMnd6i25JakcpjLacunyjzrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGz1e/kwNO8qPFo+ojIpyIvCB67owHwYDVR0j BBgwFoAUTaafA9o20XneZq5ODR91xLZl0Q4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3JHaWFtYWNGV0V5VzlaUFM3U1NxeEhGQVlIdHZWaXhGMVhlUE1vZDFx dGkvMS80REE2OUYwM0RBMzZEMTc5REU2NkFFNEUwRDFGNzVDNEI2NjVEMTBFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzREQTY5RjAzREEzNkQxNzlE RTY2QUU0RTBEMUY3NUM0QjY2NUQxMEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3JHaWFtYWNGV0V5VzlaUFM3U1NxeEhGQVlIdHZWaXhGMVhlUE1vZDFxdGkvMS80 REE2OUYwM0RBMzZEMTc5REU2NkFFNEUwRDFGNzVDNEI2NjVEMTBFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEArfyyHkdzP0gpxZtBye7552OAAHUEQqjXu3qVZ/dgP47qj0Kvo4q3CII8ZqJj pdnBMNy6AZLuQSStdvksnz0NIznAJpU0my4xqS3ppQAlRYP/r1+ssXUthX0doynT /wdKtw2pFIOcnt/n9fs1EmNIqHI7KMHpnBlgeHnJW9vtbFtU95QYoVi+T7E+kHJ6 no86waF8Ci2RaO55zVPb8O8chZIGNqq6vbV5q0Lo5UpcA/3QzCS1E0yfig8j4QSM Eu4Z0k6KFmDGW8ZoUEaMy5vdAjQvJFqrXGojDhsX+UbtNkABkopXDNSu95lsV+0C GfVoEl62xQqNJTKzgzCpuKQnQQ== -----END CERTIFICATE-----Generated at Wed Jul 2 16:05:39 2025 by rpki-client