$ rpki-client -vvf rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft File: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft (raw, json) Hash identifier: yOg4y5r9I1P63IfUjIhXd/X//OPBiV55t25SLv065Wg= Subject key identifier: DA:BB:3F:75:23:8E:03:57:E9:90:68:32:6F:15:E2:CF:26:0C:24:65 Authority key identifier: 40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE Certificate issuer: /CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE Certificate serial: 650E2DD29D20AF4137D873CBF553F9DD41ED803A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft Manifest number: 69 Signing time: Tue 01 Jul 2025 00:52:02 +0000 Manifest this update: Tue 01 Jul 2025 00:47:02 +0000 Manifest next update: Wed 02 Jul 2025 02:24:02 +0000 Files and hashes: 1: 34352e3138392e33352e302f32342d3234203d3e20323734373633.roa (hash: 1p2OZ2GU51vARCDd2EzB05jBSXBxDQiaqictJ71WwZg=) 2: 34352e3138392e33322e302f32342d3234203d3e20323734373633.roa (hash: f9h0xJPe6EC4HPN8Q4Vq2DpTHhojeqACv3nqBQ14BsY=) 3: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl (hash: Me4cSi7EtBIv0N1qKuCQudND0g6B5l8aVb2QpOTLqvU=) 4: 323830343a393333343a666630303a3a2f34302d3430203d3e20323734373633.roa (hash: Y/91UtAKoquFsWubq6LOKvQldnEvym4LP9Ysec9nxMw=) 5: 34352e3138392e33342e302f32342d3234203d3e20323734373633.roa (hash: +8SomA8CorpblFccJ5hAIRLE8zYsycHTpbXTAfqfp8w=) 6: 34352e3138392e33332e302f32342d3234203d3e20323734373633.roa (hash: 94RYiufY7USp0r1Hhmx7uAPsAj5eXGZhHiDHteIZcag=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 02 Jul 2025 02:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:0e:2d:d2:9d:20:af:41:37:d8:73:cb:f5:53:f9:dd:41:ed:80:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE Validity Not Before: Jul 1 00:47:02 2025 GMT Not After : Jul 2 02:24:02 2025 GMT Subject: CN=DABB3F75238E0357E99068326F15E2CF260C2465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6d:86:97:15:94:22:c6:f8:a5:08:f8:0c:af: ee:b7:74:02:8f:de:f1:c4:d0:a9:03:8d:db:a1:47: 05:80:b8:3e:ef:c3:3b:04:17:0c:f7:8a:f5:69:10: 7b:bc:fd:dd:5a:85:1d:2e:86:b6:1e:d6:44:bf:a0: 54:56:f9:85:98:fe:ed:a3:7b:d7:c5:9a:d5:1f:66: d6:6d:cb:9f:ce:a0:85:70:33:a4:48:75:fa:81:4a: 87:59:2d:f8:ca:52:3a:0a:d3:fe:0d:5e:58:34:a1: 73:bf:de:5a:e3:05:16:f6:75:e8:66:c7:3c:00:2f: 3c:fc:d9:7f:bf:41:ef:6c:a5:eb:89:66:95:84:c8: bd:4c:74:58:75:27:26:91:34:86:77:ac:67:45:1d: bf:50:7c:67:0d:b0:0d:16:58:bc:77:5d:14:c4:53: 52:59:92:5a:72:9b:5a:d5:62:a2:ea:12:d6:b5:5c: 3a:0f:18:77:27:19:ae:ef:09:54:d3:a0:01:1f:f0: ef:01:ac:b3:3a:d9:c2:fe:2e:2c:96:7e:75:7d:94: ba:f2:b6:20:57:77:f3:44:5e:19:a7:44:a1:28:0e: 09:2e:7b:cb:2f:7a:8f:68:52:a7:e2:ae:e6:75:01: 57:81:bb:74:10:72:cc:f9:72:6e:f2:2e:9d:e3:30: 69:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BB:3F:75:23:8E:03:57:E9:90:68:32:6F:15:E2:CF:26:0C:24:65 X509v3 Authority Key Identifier: keyid:40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:30:81:8f:c8:9b:4b:66:03:59:5e:24:55:b9:cf:92:1a:4a: 3b:1e:34:00:0e:09:fd:97:91:bc:f6:3c:b8:31:5e:43:ae:bd: 79:3d:35:d5:af:48:91:4e:e7:b8:8d:a9:1a:02:03:4b:5e:5a: 1d:e3:a9:e5:50:a7:77:fb:d2:b6:82:67:c0:15:63:8c:12:bd: a1:b9:bc:b4:3f:0d:49:6f:dd:67:f3:ca:c6:3c:5c:05:ec:9c: 29:0f:8a:8f:14:34:08:8c:ee:41:6a:a2:af:a8:fb:cd:3c:10: de:5d:19:9e:9e:4f:46:9f:d9:0f:de:76:e1:5f:3f:8a:ff:1f: 1a:27:d0:2f:09:bc:e3:82:0e:a2:df:fa:8e:7e:b0:8f:7f:dd: a7:a5:50:b5:e1:93:2d:3c:fc:8e:1e:c9:5f:23:62:ea:fe:0a: a6:0d:18:17:66:f7:60:37:fd:51:2b:4c:bc:17:3d:e9:6d:28: b7:c2:2f:3f:80:c5:0a:7c:4d:b5:ab:6c:47:f3:54:00:bd:d2: c3:03:90:11:f2:cc:16:da:34:f8:27:1f:c1:8e:ad:47:22:3a: 72:16:a3:1e:4b:11:3a:4e:6e:ef:96:e6:8c:47:b4:e5:64:b4: 8c:e1:d6:f4:9a:46:da:6b:7d:48:ee:fa:ce:2f:53:ac:0f:d2: e7:5d:3c:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZQ4t0p0gr0E32HPL9VP53UHtgDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCQjE0QTJGRDhCODExMDMwNDJCRjMyRkFDOUIyRDkw QUNGOEFGRTAeFw0yNTA3MDEwMDQ3MDJaFw0yNTA3MDIwMjI0MDJaMDMxMTAvBgNV BAMTKERBQkIzRjc1MjM4RTAzNTdFOTkwNjgzMjZGMTVFMkNGMjYwQzI0NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMbYaXFZQixvilCPgMr+63dAKP 3vHE0KkDjduhRwWAuD7vwzsEFwz3ivVpEHu8/d1ahR0uhrYe1kS/oFRW+YWY/u2j e9fFmtUfZtZty5/OoIVwM6RIdfqBSodZLfjKUjoK0/4NXlg0oXO/3lrjBRb2dehm xzwALzz82X+/Qe9speuJZpWEyL1MdFh1JyaRNIZ3rGdFHb9QfGcNsA0WWLx3XRTE U1JZklpym1rVYqLqEta1XDoPGHcnGa7vCVTToAEf8O8BrLM62cL+LiyWfnV9lLry tiBXd/NEXhmnRKEoDgkue8sveo9oUqfiruZ1AVeBu3QQcsz5cm7yLp3jMGlxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2rs/dSOOA1fpkGgybxXizyYMJGUwHwYDVR0j BBgwFoAUQLsUov2LgRAwQr8y+smy2QrPiv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2 NjIvMC80MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQkIxNEEyRkQ4QjgxMTAz MDQyQkYzMkZBQzlCMkQ5MEFDRjhBRkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2NjIvMC80 MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkzCBj8ibS2YDWV4kVbnPkhpKOx40AA4J/ZeRvPY8uDFeQ669eT011a9IkU7n uI2pGgIDS15aHeOp5VCnd/vStoJnwBVjjBK9obm8tD8NSW/dZ/PKxjxcBeycKQ+K jxQ0CIzuQWqir6j7zTwQ3l0Znp5PRp/ZD9524V8/iv8fGifQLwm844IOot/6jn6w j3/dp6VQteGTLTz8jh7JXyNi6v4Kpg0YF2b3YDf9UStMvBc96W0ot8IvP4DFCnxN tatsR/NUAL3SwwOQEfLMFto0+CcfwY6tRyI6chajHksROk5u75bmjEe05WS0jOHW 9JpG2mt9SO76zi9TrA/S51085g== -----END CERTIFICATE-----Generated at Tue Jul 1 18:29:58 2025 by rpki-client