$ rpki-client -vvf rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.mft File: 939B31761D811EC12BDF8456C574E6874A3AAD78.mft (raw, json) Hash identifier: LbDtLBAI1ruc6QZj+haN7TKQCW31aqfHf0oc5FpyzsQ= Subject key identifier: CF:E6:38:AF:18:EE:F6:19:01:CB:5C:C7:57:A4:39:F5:94:8E:55:75 Authority key identifier: 93:9B:31:76:1D:81:1E:C1:2B:DF:84:56:C5:74:E6:87:4A:3A:AD:78 Certificate issuer: /CN=939B31761D811EC12BDF8456C574E6874A3AAD78 Certificate serial: 61B10E6E5BF4085B21884C0BB86BFFF2DFC7DB22 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/939B31761D811EC12BDF8456C574E6874A3AAD78.cer Subject info access: rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.mft Manifest number: CA Signing time: Wed 02 Jul 2025 18:10:49 +0000 Manifest this update: Wed 02 Jul 2025 18:05:49 +0000 Manifest next update: Thu 03 Jul 2025 21:56:49 +0000 Files and hashes: 1: 323830343a363036303a3a2f33322d3332203d3e20323639313633.roa (hash: XdvzsjrTVduK7gKFmmN86hpBolyGt02sb5cx99ef1zA=) 2: 34352e3138312e32342e302f32342d3234203d3e20323639313633.roa (hash: gi8pqk0YG8xuI770HmRS/Gm8wi1gMlrR0AnPzNvnq5o=) 3: 939B31761D811EC12BDF8456C574E6874A3AAD78.crl (hash: UufT64lTgF2ACKXfepJlOU5JydvVZWH//LQ6fdrb8es=) 4: 34352e3138312e32372e302f32342d3234203d3e20323639313633.roa (hash: s71CdDpUcZ4A30shJW5mOVFgvP++dX5FAxSaWex9Ssg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.crl rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/939B31761D811EC12BDF8456C574E6874A3AAD78.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 21:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b1:0e:6e:5b:f4:08:5b:21:88:4c:0b:b8:6b:ff:f2:df:c7:db:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=939B31761D811EC12BDF8456C574E6874A3AAD78 Validity Not Before: Jul 2 18:05:49 2025 GMT Not After : Jul 3 21:56:49 2025 GMT Subject: CN=CFE638AF18EEF61901CB5CC757A439F5948E5575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:21:5e:79:49:19:a9:1b:97:10:06:af:60:ed: f9:2e:2e:8a:07:07:9d:db:3e:9e:9d:6f:5e:ce:4e: 49:33:57:ff:42:1b:bb:ef:86:28:eb:81:ba:10:d6: 2e:e0:de:39:ca:80:0c:f4:a7:d6:2a:f0:31:15:ec: 78:fd:db:0a:d7:ca:ad:a2:71:ff:36:03:34:42:f5: 21:34:a2:0d:78:ea:72:6c:8b:d2:13:8f:cb:7e:ab: 71:59:63:88:bb:a6:02:da:a0:f9:d1:44:78:10:63: 62:78:20:1b:6e:e2:05:2d:9a:72:09:72:d3:25:ad: 28:03:92:54:bd:d5:c8:b3:58:b3:ae:a7:df:55:30: 20:ff:ce:df:bf:0d:20:22:3e:31:bc:42:57:e7:a0: 9b:9e:b8:fe:46:d2:66:76:0f:c1:19:f4:db:59:70: 42:e6:f8:2d:c0:89:d5:8a:af:af:82:7d:66:8b:1c: 01:91:f3:0c:8d:05:bd:99:c1:5d:b3:a2:78:c9:85: 6d:c5:b2:f7:e5:e3:80:7b:d3:46:4c:56:0f:0b:75: 86:b5:3d:7d:5b:18:04:bd:15:ab:90:31:8e:4b:8e: 87:7c:ea:83:9b:eb:8e:18:36:23:6b:80:67:95:45: a5:df:12:aa:e3:e2:ee:3c:7b:70:be:f1:ff:a9:4e: 2d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E6:38:AF:18:EE:F6:19:01:CB:5C:C7:57:A4:39:F5:94:8E:55:75 X509v3 Authority Key Identifier: keyid:93:9B:31:76:1D:81:1E:C1:2B:DF:84:56:C5:74:E6:87:4A:3A:AD:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/939B31761D811EC12BDF8456C574E6874A3AAD78.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/939B31761D811EC12BDF8456C574E6874A3AAD78.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:50:38:e0:c7:0c:94:81:57:82:9d:4e:dc:8c:d7:aa:3f:38: d3:5b:78:a6:76:ef:77:6e:f8:62:d3:d8:67:b6:1d:90:ae:62: 0c:3d:d4:69:74:0b:41:72:26:75:9b:61:4e:e7:a2:b6:0e:74: 0b:10:d1:e9:b4:95:82:c7:99:7c:e2:b4:cb:0a:76:50:2c:ab: 37:03:28:81:eb:4b:4f:59:50:96:39:c8:0f:37:a7:ed:45:e5: 01:b7:31:de:bf:f4:15:93:d2:ca:36:c0:15:36:5c:2d:f1:a1: f0:41:c4:98:74:92:d7:ce:ee:3e:68:7c:9a:ff:2b:3d:e9:68: d6:82:dc:d0:11:c1:48:9f:2c:78:1f:ed:68:bc:10:54:8b:08: d7:5e:c8:4e:80:ef:36:ea:87:a1:58:39:dc:80:85:bf:2a:45: 1c:af:16:71:89:ca:dc:50:49:c8:11:24:36:9d:f7:e6:9a:89: 67:13:8d:db:a9:46:a3:60:9b:84:ad:2f:bc:28:5d:3c:c8:a9: c1:3a:a9:25:0b:b1:1c:1b:99:e1:55:6d:e6:ef:6d:73:b5:db: 11:f3:ac:78:44:ee:8e:c9:54:37:c5:a7:31:66:df:10:94:a2: b4:68:70:55:67:de:7e:20:32:b9:29:ea:ee:4e:df:57:b8:a7: fe:1c:42:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYbEOblv0CFshiEwLuGv/8t/H2yIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTM5QjMxNzYxRDgxMUVDMTJCREY4NDU2QzU3NEU2ODc0 QTNBQUQ3ODAeFw0yNTA3MDIxODA1NDlaFw0yNTA3MDMyMTU2NDlaMDMxMTAvBgNV BAMTKENGRTYzOEFGMThFRUY2MTkwMUNCNUNDNzU3QTQzOUY1OTQ4RTU1NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgIV55SRmpG5cQBq9g7fkuLooH B53bPp6db17OTkkzV/9CG7vvhijrgboQ1i7g3jnKgAz0p9Yq8DEV7Hj92wrXyq2i cf82AzRC9SE0og146nJsi9ITj8t+q3FZY4i7pgLaoPnRRHgQY2J4IBtu4gUtmnIJ ctMlrSgDklS91cizWLOup99VMCD/zt+/DSAiPjG8QlfnoJueuP5G0mZ2D8EZ9NtZ cELm+C3AidWKr6+CfWaLHAGR8wyNBb2ZwV2zonjJhW3Fsvfl44B700ZMVg8LdYa1 PX1bGAS9FauQMY5Ljod86oOb644YNiNrgGeVRaXfEqrj4u48e3C+8f+pTi2XAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUz+Y4rxju9hkBy1zHV6Q59ZSOVXUwHwYDVR0j BBgwFoAUk5sxdh2BHsEr34RWxXTmh0o6rXgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE43TmlRQU1WMWd5eHJ5emt5TDE3OTRYb1d4SHFoWmljVmd6VDdtYjhx M3ovMC85MzlCMzE3NjFEODExRUMxMkJERjg0NTZDNTc0RTY4NzRBM0FBRDc4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzOUIzMTc2MUQ4MTFFQzEy QkRGODQ1NkM1NzRFNjg3NEEzQUFENzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE43TmlRQU1WMWd5eHJ5emt5TDE3OTRYb1d4SHFoWmljVmd6VDdtYjhxM3ovMC85 MzlCMzE3NjFEODExRUMxMkJERjg0NTZDNTc0RTY4NzRBM0FBRDc4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMFA44McMlIFXgp1O3IzXqj8401t4pnbvd274YtPYZ7YdkK5iDD3UaXQLQXIm dZthTueitg50CxDR6bSVgseZfOK0ywp2UCyrNwMogetLT1lQljnIDzen7UXlAbcx 3r/0FZPSyjbAFTZcLfGh8EHEmHSS187uPmh8mv8rPelo1oLc0BHBSJ8seB/taLwQ VIsI117IToDvNuqHoVg53ICFvypFHK8WcYnK3FBJyBEkNp335pqJZxON26lGo2Cb hK0vvChdPMipwTqpJQuxHBuZ4VVt5u9tc7XbEfOseETujslUN8WnMWbfEJSitGhw VWfefiAyuSnq7k7fV7in/hxCtQ== -----END CERTIFICATE-----Generated at Thu Jul 3 10:41:38 2025 by rpki-client