$ rpki-client -vvf rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft File: C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft (raw, json) Hash identifier: g6NXlrEmJgvvknLr9XvNbaJA3Pp9JDuhhXFP9CoXFIw= Subject key identifier: E4:ED:B9:7F:99:D4:FE:5B:BB:EB:36:3B:3F:5D:2F:3F:AF:90:41:A5 Authority key identifier: C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A Certificate issuer: /CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A Certificate serial: 119A62B24A82514DCEF4E5F7385C96BBE0036B18 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer Subject info access: rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft Manifest number: 023D Signing time: Sat 12 Jul 2025 13:02:53 +0000 Manifest this update: Sat 12 Jul 2025 12:57:53 +0000 Manifest next update: Sun 13 Jul 2025 14:25:53 +0000 Files and hashes: 1: 3230312e3135302e3135322e302f32322d3234203d3e203631383334.roa (hash: bQb6OqUWfTVIWbNybHXXMLPCBzgY58GGYHDVLDz95Ug=) 2: 323830343a316131303a3a2f33322d3438203d3e203631383334.roa (hash: gkUxHP8r9+Fhu5QWQf9DujXsJaThMNFObjuKFQmBFk0=) 3: 3134332e3133372e3138302e302f32322d3234203d3e203631383334.roa (hash: TybVhUEfgBREmL3NJsvdZgicXA/on5VwTBTGR0erAho=) 4: C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl (hash: KpTcO94NvJSfS0pPidhqpJNk/UVmABMv7rsF+ny4HVg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 13 Jul 2025 14:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:9a:62:b2:4a:82:51:4d:ce:f4:e5:f7:38:5c:96:bb:e0:03:6b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A Validity Not Before: Jul 12 12:57:53 2025 GMT Not After : Jul 13 14:25:53 2025 GMT Subject: CN=E4EDB97F99D4FE5BBBEB363B3F5D2F3FAF9041A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:80:66:cd:99:7c:bd:b1:f0:98:31:8b:4d:16: 2c:4a:fc:dc:fb:bc:59:bb:19:70:c4:69:0b:f6:bd: f9:f1:34:e5:cc:5a:e9:a2:0f:4d:60:c0:18:e4:16: ca:f7:73:c5:7b:9b:82:d8:30:e4:8e:d4:09:25:23: 72:7b:be:12:97:cc:4c:07:31:28:c8:f7:fa:eb:92: fc:ed:d5:f9:f3:52:fa:05:18:5e:33:a9:42:df:3b: 6e:08:e1:4a:9a:40:64:28:1f:2c:42:dc:47:0f:12: 57:66:26:b0:be:2a:5b:09:d3:b3:8a:58:64:97:61: f8:e5:80:f9:8e:02:fd:0f:3c:74:6e:1f:a7:6b:4b: a0:9e:fe:7e:f3:43:74:10:1d:3e:e5:d1:ac:0d:f8: 71:0c:c2:e1:ce:70:ea:32:6e:2f:fe:42:91:ef:a3: d1:99:5b:6a:a6:2c:9e:54:c4:60:4f:81:bb:09:63: a9:8f:8e:75:fb:99:56:ac:3e:a1:65:0d:8a:7c:33: 12:1c:20:d5:4f:c4:97:35:d6:d2:2d:83:6e:09:66: b8:d0:47:3b:f8:33:60:c9:b8:0b:39:10:89:29:a3: 29:5b:03:16:0c:14:06:28:77:89:89:26:82:94:e4: 31:d5:38:e2:e6:c5:55:ee:9d:e8:00:0d:6d:71:f0: 0a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:ED:B9:7F:99:D4:FE:5B:BB:EB:36:3B:3F:5D:2F:3F:AF:90:41:A5 X509v3 Authority Key Identifier: keyid:C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:81:09:c2:d0:d8:80:19:76:95:39:07:b1:58:ec:eb:b7:d2: 34:15:bb:96:b2:93:17:85:57:85:e8:19:86:4a:fa:bd:2f:7e: 02:8c:3e:90:bf:df:9d:9f:45:45:8e:98:87:10:c4:3d:b0:8a: 7a:5b:79:03:bc:9f:c1:cb:6f:55:da:44:31:4b:89:d7:04:cb: 73:0e:68:d6:ba:3a:44:f5:48:a3:e2:a1:ae:a7:ac:48:f2:9a: 02:0e:80:74:c1:b9:80:e9:b1:a0:82:9b:5a:b0:b9:6b:f1:63: d0:4e:b6:e9:f6:2a:43:e8:83:18:f4:34:d2:a4:32:dc:63:d7: b7:3a:5a:81:b0:12:40:02:a4:14:ac:b7:d9:84:b6:58:39:91: 61:72:ed:70:b9:98:7a:70:40:1b:aa:6b:45:f6:e5:08:39:c5: 93:00:3e:ef:dc:f3:e9:2d:f1:20:fe:c8:95:6e:9c:b7:3a:f5: db:49:a8:13:eb:af:53:b6:4b:5f:1e:2c:7b:ea:5b:0b:e7:ca: a0:75:91:52:f5:ca:ad:fb:4c:cf:b5:54:ba:6a:dc:ca:9c:dc: b9:75:25:43:70:11:e0:47:bb:88:c2:cf:40:18:73:5f:63:6b: 67:ae:f5:a5:0a:da:26:c3:c2:7c:02:4a:e6:f5:59:e4:ec:55: 63:e4:1f:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEZpiskqCUU3O9OX3OFyWu+ADaxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNkM2NUFBMEJBMzNDNjI2RkFCMEI5QzI2RTAyNkVC OTA4NDU0QTAeFw0yNTA3MTIxMjU3NTNaFw0yNTA3MTMxNDI1NTNaMDMxMTAvBgNV BAMTKEU0RURCOTdGOTlENEZFNUJCQkVCMzYzQjNGNUQyRjNGQUY5MDQxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOgGbNmXy9sfCYMYtNFixK/Nz7 vFm7GXDEaQv2vfnxNOXMWumiD01gwBjkFsr3c8V7m4LYMOSO1AklI3J7vhKXzEwH MSjI9/rrkvzt1fnzUvoFGF4zqULfO24I4UqaQGQoHyxC3EcPEldmJrC+KlsJ07OK WGSXYfjlgPmOAv0PPHRuH6drS6Ce/n7zQ3QQHT7l0awN+HEMwuHOcOoybi/+QpHv o9GZW2qmLJ5UxGBPgbsJY6mPjnX7mVasPqFlDYp8MxIcINVPxJc11tItg24JZrjQ Rzv4M2DJuAs5EIkpoylbAxYMFAYod4mJJoKU5DHVOOLmxVXunegADW1x8ArhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5O25f5nU/lu76zY7P10vP6+QQaUwHwYDVR0j BBgwFoAUwzbGWqC6M8Ym+rC5wm4CbrkIRUowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHBIQjFOV25iZVdBaEJLS1VvZFJrcDFVejFacjVQVDJBSlV4a21BMzFq b2svMS9DMzM2QzY1QUEwQkEzM0M2MjZGQUIwQjlDMjZFMDI2RUI5MDg0NTRBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzMzZDNjVBQTBCQTMzQzYy NkZBQjBCOUMyNkUwMjZFQjkwODQ1NEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHBIQjFOV25iZVdBaEJLS1VvZFJrcDFVejFacjVQVDJBSlV4a21BMzFqb2svMS9D MzM2QzY1QUEwQkEzM0M2MjZGQUIwQjlDMjZFMDI2RUI5MDg0NTRBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT4EJwtDYgBl2lTkHsVjs67fSNBW7lrKTF4VXhegZhkr6vS9+Aow+kL/fnZ9F RY6YhxDEPbCKelt5A7yfwctvVdpEMUuJ1wTLcw5o1ro6RPVIo+KhrqesSPKaAg6A dMG5gOmxoIKbWrC5a/Fj0E626fYqQ+iDGPQ00qQy3GPXtzpagbASQAKkFKy32YS2 WDmRYXLtcLmYenBAG6prRfblCDnFkwA+79zz6S3xIP7IlW6ctzr120moE+uvU7ZL Xx4se+pbC+fKoHWRUvXKrftMz7VUumrcypzcuXUlQ3AR4Ee7iMLPQBhzX2NrZ671 pQraJsPCfAJK5vVZ5OxVY+QfaA== -----END CERTIFICATE-----Generated at Sat Jul 12 23:00:53 2025 by rpki-client