$ rpki-client -vvf rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft File: 4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft (raw, json) Hash identifier: 6ByrS3aYVSQ28WlcP6sFBzDVNSxqY4rJoFlqGQOB/BA= Subject key identifier: 13:1C:18:7D:FA:60:7A:B1:F1:E1:55:4E:16:9D:1A:7E:B5:44:7B:88 Authority key identifier: 4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75 Certificate issuer: /CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75 Certificate serial: 41594D300284ACF5073A83E465DA8EFC34F96138 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer Subject info access: rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft Manifest number: 026F Signing time: Wed 02 Jul 2025 18:01:36 +0000 Manifest this update: Wed 02 Jul 2025 17:56:36 +0000 Manifest next update: Thu 03 Jul 2025 21:04:36 +0000 Files and hashes: 1: 323830343a3762383a3a2f33322d3430203d3e20323632333135.roa (hash: 8AHmINNTuIvylE8wzmf4Hk4M9s/xGc0DPLMYiUl530c=) 2: 3137372e3132342e32342e302f32322d3234203d3e20323632333135.roa (hash: rEIptntol3bvN9Apv0evK+bT/pr64GrQa6zIT5wXlrI=) 3: 4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl (hash: DL6kDaMp0Hse1DDxYbJkLJPQ1gysyGht3a+4jQKgAWA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 19:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:59:4d:30:02:84:ac:f5:07:3a:83:e4:65:da:8e:fc:34:f9:61:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75 Validity Not Before: Jul 2 17:56:36 2025 GMT Not After : Jul 3 21:04:36 2025 GMT Subject: CN=131C187DFA607AB1F1E1554E169D1A7EB5447B88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e7:8a:ea:1c:e3:29:77:fe:f1:f6:81:e0:f2: d1:8d:5c:7c:0e:ce:49:6a:d9:4f:80:b9:fe:04:a8: 9e:f2:67:49:cd:4e:12:48:20:10:4b:16:0f:6f:0a: e3:b3:6c:c4:52:fe:0c:2f:dd:f0:91:ea:0f:69:19: 6e:07:db:14:cd:45:28:69:bc:9e:6e:e2:b9:de:09: 56:ed:be:5b:4f:59:70:fd:c4:4a:46:18:c7:fe:dc: 6f:41:f7:5a:5b:5f:3c:94:cf:0a:ae:33:fa:dc:b5: 15:31:fa:21:12:17:c7:84:cc:7a:8c:ea:3a:8c:18: 95:74:9b:47:6a:21:3c:7b:f1:78:96:7d:67:ce:68: 2a:cf:20:94:19:74:85:c3:47:1d:6b:76:ab:b1:a0: 45:d3:c8:9b:f4:60:5e:c7:15:91:3d:78:13:a1:31: ba:0f:e7:49:45:70:77:dd:a2:3c:ff:29:ca:68:a1: 13:c4:e8:7a:c1:da:ab:15:b7:e7:90:3c:9b:55:dc: c5:48:1d:9c:e4:e5:7a:cb:5e:89:05:98:f1:6b:9b: f7:a5:57:f4:fc:02:29:2b:f9:d7:5f:f4:99:6f:c3: 3b:4f:90:5b:f0:fb:d7:c8:e3:bd:6a:5c:4b:38:d8: b3:2a:fd:a3:ff:a5:6b:77:0c:3e:1f:a4:7f:e2:d2: 54:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1C:18:7D:FA:60:7A:B1:F1:E1:55:4E:16:9D:1A:7E:B5:44:7B:88 X509v3 Authority Key Identifier: keyid:4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:74:05:aa:d5:42:11:21:40:a5:e1:b3:f8:64:94:a8:57:a8: 1a:24:b6:1a:21:9f:02:5c:49:2e:d0:9f:9b:c3:fe:f3:55:c7: 94:be:79:cc:cb:22:95:3a:d4:72:ae:59:e3:ca:35:13:0e:c2: 75:03:a5:d8:02:3d:e5:56:e1:10:11:86:a4:46:74:82:0e:05: fd:e3:f1:10:22:65:0d:8d:c6:45:84:f9:e5:2f:6b:a9:35:7f: d9:4b:93:26:66:b5:5d:40:2e:0e:56:99:03:f9:30:73:99:1c: d2:59:d8:2a:8d:ab:21:be:ca:e9:d9:91:cc:18:e1:fc:52:9a: bb:aa:71:67:7c:84:89:83:f3:5b:41:8f:88:be:9c:97:77:a4: 66:2d:c0:e6:2d:8f:19:a5:64:69:ec:77:99:73:12:40:58:3f: 53:b0:78:22:f1:97:47:8b:05:60:8a:45:f1:a0:8b:cf:b9:60: 49:c3:a6:67:b3:76:73:1a:cb:ed:24:06:a2:78:f9:d8:e3:b2: 3b:5a:8e:29:7e:af:09:57:48:ff:2a:9d:e6:73:be:83:a7:77: 4e:36:7e:7c:d1:d8:5a:20:08:fa:ea:df:37:52:f5:dd:67:c4: 75:93:9e:d0:93:91:eb:36:6a:7e:84:62:37:13:7c:4c:99:1e: ca:fe:75:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQVlNMAKErPUHOoPkZdqO/DT5YTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI5QjY1MzAyQTEzNjNGM0RDNzgwRkYzOUNCRUFFQjkw NjM3NEU3NTAeFw0yNTA3MDIxNzU2MzZaFw0yNTA3MDMyMTA0MzZaMDMxMTAvBgNV BAMTKDEzMUMxODdERkE2MDdBQjFGMUUxNTU0RTE2OUQxQTdFQjU0NDdCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC754rqHOMpd/7x9oHg8tGNXHwO zklq2U+Auf4EqJ7yZ0nNThJIIBBLFg9vCuOzbMRS/gwv3fCR6g9pGW4H2xTNRShp vJ5u4rneCVbtvltPWXD9xEpGGMf+3G9B91pbXzyUzwquM/rctRUx+iESF8eEzHqM 6jqMGJV0m0dqITx78XiWfWfOaCrPIJQZdIXDRx1rdquxoEXTyJv0YF7HFZE9eBOh MboP50lFcHfdojz/KcpooRPE6HrB2qsVt+eQPJtV3MVIHZzk5XrLXokFmPFrm/el V/T8Aikr+ddf9JlvwztPkFvw+9fI471qXEs42LMq/aP/pWt3DD4fpH/i0lRVAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUExwYffpgerHx4VVOFp0afrVEe4gwHwYDVR0j BBgwFoAUS5tlMCoTY/PceA/znL6uuQY3TnUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEttVmR2TDFVUFZnbXp2Q3UzNEhQVDM2Y1pjS0tGcGFLSDZCemNKZVQ1 V1kvMS80QjlCNjUzMDJBMTM2M0YzREM3ODBGRjM5Q0JFQUVCOTA2Mzc0RTc1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCOUI2NTMwMkExMzYzRjNE Qzc4MEZGMzlDQkVBRUI5MDYzNzRFNzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEttVmR2TDFVUFZnbXp2Q3UzNEhQVDM2Y1pjS0tGcGFLSDZCemNKZVQ1V1kvMS80 QjlCNjUzMDJBMTM2M0YzREM3ODBGRjM5Q0JFQUVCOTA2Mzc0RTc1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANXQFqtVCESFApeGz+GSUqFeoGiS2GiGfAlxJLtCfm8P+81XHlL55zMsilTrU cq5Z48o1Ew7CdQOl2AI95VbhEBGGpEZ0gg4F/ePxECJlDY3GRYT55S9rqTV/2UuT Jma1XUAuDlaZA/kwc5kc0lnYKo2rIb7K6dmRzBjh/FKau6pxZ3yEiYPzW0GPiL6c l3ekZi3A5i2PGaVkaex3mXMSQFg/U7B4IvGXR4sFYIpF8aCLz7lgScOmZ7N2cxrL 7SQGonj52OOyO1qOKX6vCVdI/yqd5nO+g6d3TjZ+fNHYWiAI+urfN1L13WfEdZOe 0JOR6zZqfoRiNxN8TJkeyv518w== -----END CERTIFICATE-----Generated at Wed Jul 2 21:02:03 2025 by rpki-client