$ rpki-client -vvf rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft File: 5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft (raw, json) Hash identifier: 0M2kyUjLonwtGzM7KhymNusaNmGvYRh+YfC25UF0eXM= Subject key identifier: DE:FD:A7:9A:2C:63:04:D7:BD:F7:EF:D8:D4:FB:72:4D:FE:54:7B:94 Authority key identifier: 5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31 Certificate issuer: /CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31 Certificate serial: 5DCE1C8C42658591B316AE10BCA844A61BB7FEE8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer Subject info access: rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft Manifest number: 01F3 Signing time: Wed 02 Jul 2025 16:43:50 +0000 Manifest this update: Wed 02 Jul 2025 16:38:50 +0000 Manifest next update: Thu 03 Jul 2025 17:08:50 +0000 Files and hashes: 1: 3136382e3139362e3130342e302f32322d3234203d3e20323635343531.roa (hash: bm12g2NtqddE/K8ln3akRM5TUAz6D/tgPeBexY7J5sY=) 2: 5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl (hash: UTIffBNv9e/t3Ma1jnofc2HuhVJj4FfYlv2Pn7MnQEw=) 3: 323830343a333435343a323030303a3a2f33352d3335203d3e20323635343531.roa (hash: lWPWAMy2NkMXHq4ex2mIrGhd7zdCsxdT6sdhk5ThXO0=) 4: 323830343a333435343a3a2f33322d3334203d3e20323635343531.roa (hash: r3bCeQ3Va1xBObYctOhmI8el+yMJ561eA1zNaJrdc6A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 17:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ce:1c:8c:42:65:85:91:b3:16:ae:10:bc:a8:44:a6:1b:b7:fe:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31 Validity Not Before: Jul 2 16:38:50 2025 GMT Not After : Jul 3 17:08:50 2025 GMT Subject: CN=DEFDA79A2C6304D7BDF7EFD8D4FB724DFE547B94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:51:d1:c1:1d:27:7c:5a:74:f1:45:9b:b7: 0f:17:ea:bd:d8:6a:52:c7:32:89:31:8f:39:cd:65: e9:b1:25:dc:61:46:99:5e:ee:80:c2:09:3e:71:c2: 1d:75:9b:11:c8:53:a5:03:5d:4b:ba:5b:73:a6:50: ec:c1:4e:12:e7:7d:8b:8b:4a:00:79:be:17:35:78: 91:e0:b3:7e:09:b6:61:2e:6e:88:25:6f:70:1c:92: 78:18:e6:65:bd:40:d2:57:37:e0:98:a2:fd:49:ff: f9:8f:80:2a:64:69:1f:fb:1e:06:f6:9b:15:29:10: 26:b3:7e:9f:68:23:9c:2c:ec:b2:af:97:9f:58:83: cc:f0:b5:2a:60:bb:98:1f:f0:b2:79:68:51:48:aa: af:82:20:58:92:65:34:57:3c:a5:39:1f:bc:de:6f: f7:96:b7:81:0d:09:b6:ed:0e:4f:0d:aa:f5:7f:af: 56:79:d5:10:67:3c:76:50:75:aa:6c:f3:4b:8f:45: 3c:47:a7:a4:e1:6c:92:7b:79:1d:7c:f9:58:0a:69: a2:65:23:b3:06:31:b1:2d:75:52:8f:6f:8c:51:cf: e0:cb:a3:03:45:94:dc:fc:de:3f:1b:e8:a9:9e:33: 2e:11:5a:99:15:ea:9d:ab:cd:d8:79:ed:ff:1b:f3: 5f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FD:A7:9A:2C:63:04:D7:BD:F7:EF:D8:D4:FB:72:4D:FE:54:7B:94 X509v3 Authority Key Identifier: keyid:5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:85:a0:b1:e2:66:e4:4c:72:d7:11:42:65:01:ba:72:21:21: 09:cb:39:de:b5:cb:db:7f:39:48:80:74:0d:95:4f:cb:6d:c8: c6:7c:09:c6:69:0e:79:81:23:33:48:ff:76:e7:56:02:a2:f5: f3:e8:41:85:1d:95:48:20:a8:61:37:35:e8:14:43:b0:3e:09: d3:fa:46:e0:81:ab:c7:b6:7c:72:1b:16:4b:52:54:14:88:26: 46:0d:a6:7b:3d:b7:5c:56:0e:1d:90:de:bb:a5:c0:3d:80:3d: d4:13:72:df:3d:3c:7e:12:02:06:e2:9b:ff:d1:bd:98:a2:c5: 98:48:d3:50:83:91:b1:83:dc:54:ec:fe:66:11:a9:5d:72:32: 71:5c:eb:cb:69:a1:bb:0d:37:b3:91:88:51:df:7f:e6:33:9e: 16:38:d2:8e:f4:e2:db:3f:58:36:a6:f5:ea:bd:75:0d:66:62: 3c:b9:b6:fa:56:d8:fa:17:54:96:f9:b3:bb:eb:46:6a:21:96: b7:44:25:c3:a8:23:78:41:bb:64:9a:51:3c:e7:b4:58:ec:32: 25:1d:c7:91:3f:26:64:8d:be:84:23:53:a6:ec:78:8c:24:fe: 88:97:bb:b3:8e:4a:a7:6d:a3:0d:ec:3b:e2:ed:91:0f:85:39: a8:ef:90:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXc4cjEJlhZGzFq4QvKhEphu3/ugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURCRjM4OURFODRBODA2OEQ3MkJBN0E1RTAzMEY5MEQ4 RjY3MEQzMTAeFw0yNTA3MDIxNjM4NTBaFw0yNTA3MDMxNzA4NTBaMDMxMTAvBgNV BAMTKERFRkRBNzlBMkM2MzA0RDdCREY3RUZEOEQ0RkI3MjRERkU1NDdCOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+IFHRwR0nfFp08UWbtw8X6r3Y alLHMokxjznNZemxJdxhRple7oDCCT5xwh11mxHIU6UDXUu6W3OmUOzBThLnfYuL SgB5vhc1eJHgs34JtmEuboglb3AckngY5mW9QNJXN+CYov1J//mPgCpkaR/7Hgb2 mxUpECazfp9oI5ws7LKvl59Yg8zwtSpgu5gf8LJ5aFFIqq+CIFiSZTRXPKU5H7ze b/eWt4ENCbbtDk8NqvV/r1Z51RBnPHZQdaps80uPRTxHp6ThbJJ7eR18+VgKaaJl I7MGMbEtdVKPb4xRz+DLowNFlNz83j8b6KmeMy4RWpkV6p2rzdh57f8b81+7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU3v2nmixjBNe99+/Y1PtyTf5Ue5QwHwYDVR0j BBgwFoAUXb84nehKgGjXK6el4DD5DY9nDTEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGs0VWlncXN2Q3BWZUY2b29SYk5tdHY2OW1YVkFWQXhNRlRCclVodEEz R3YvMC81REJGMzg5REU4NEE4MDY4RDcyQkE3QTVFMDMwRjkwRDhGNjcwRDMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEQkYzODlERTg0QTgwNjhE NzJCQTdBNUUwMzBGOTBEOEY2NzBEMzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGs0VWlncXN2Q3BWZUY2b29SYk5tdHY2OW1YVkFWQXhNRlRCclVodEEzR3YvMC81 REJGMzg5REU4NEE4MDY4RDcyQkE3QTVFMDMwRjkwRDhGNjcwRDMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP4WgseJm5Exy1xFCZQG6ciEhCcs53rXL2385SIB0DZVPy23IxnwJxmkOeYEj M0j/dudWAqL18+hBhR2VSCCoYTc16BRDsD4J0/pG4IGrx7Z8chsWS1JUFIgmRg2m ez23XFYOHZDeu6XAPYA91BNy3z08fhICBuKb/9G9mKLFmEjTUIORsYPcVOz+ZhGp XXIycVzry2mhuw03s5GIUd9/5jOeFjjSjvTi2z9YNqb16r11DWZiPLm2+lbY+hdU lvmzu+tGaiGWt0Qlw6gjeEG7ZJpRPOe0WOwyJR3HkT8mZI2+hCNTpux4jCT+iJe7 s45Kp22jDew74u2RD4U5qO+Qzw== -----END CERTIFICATE-----Generated at Wed Jul 2 22:49:01 2025 by rpki-client