$ rpki-client -vvf rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.mft File: E7D63E8C642CED33A55042FA42DB4DBC8D574437.mft (raw, json) Hash identifier: qAXf4akExpnPtU+BxUPkBHMrkUlxxCAk4juQdjiT9d4= Subject key identifier: A8:24:68:FA:D1:45:12:7F:9B:1F:3A:6C:0F:B5:C9:C3:12:B9:CD:1A Authority key identifier: E7:D6:3E:8C:64:2C:ED:33:A5:50:42:FA:42:DB:4D:BC:8D:57:44:37 Certificate issuer: /CN=E7D63E8C642CED33A55042FA42DB4DBC8D574437 Certificate serial: 4CF17502AEE8DD64C0685A51BD7C49D546CEC4D7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.cer Subject info access: rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.mft Manifest number: 02A2 Signing time: Fri 22 Aug 2025 21:58:20 +0000 Manifest this update: Fri 22 Aug 2025 21:53:20 +0000 Manifest next update: Sat 23 Aug 2025 23:59:20 +0000 Files and hashes: 1: 3133312e302e33362e302f32322d3234203d3e203631383639.roa (hash: qqmoc/mCwk8/qZmMrgPgadFk5hcj1oFTVBnQuSivKHc=) 2: E7D63E8C642CED33A55042FA42DB4DBC8D574437.crl (hash: ZB27VCLG/j4yGI05pCE6++dL5YQFMIGInFTgkY9xz+E=) 3: 3133382e39392e32342e302f32322d3234203d3e203631383639.roa (hash: WgI8Zhb1GLe/K5Bakvg6hlLt+5T+jD5n4GEb0PPSpVQ=) 4: 323830343a316139343a3a2f33322d3438203d3e203631383639.roa (hash: mpL6GhGK6J+O2fxRiEFeXck7mCBVnlY9RqzfrvGdhoc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.crl rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Aug 2025 23:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f1:75:02:ae:e8:dd:64:c0:68:5a:51:bd:7c:49:d5:46:ce:c4:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7D63E8C642CED33A55042FA42DB4DBC8D574437 Validity Not Before: Aug 22 21:53:20 2025 GMT Not After : Aug 23 23:59:20 2025 GMT Subject: CN=A82468FAD145127F9B1F3A6C0FB5C9C312B9CD1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c6:cb:7b:c5:d1:48:c0:38:a6:b4:65:9e:ec: 55:10:d0:b0:8d:a1:f2:15:85:1a:d2:96:aa:68:8a: 16:60:aa:1f:80:a8:83:64:79:d3:ae:e5:c2:1f:01: 1f:78:d3:44:90:14:e7:5c:2e:61:6e:46:a5:20:83: 0b:59:3b:54:7a:38:75:41:68:60:31:da:c7:ad:72: 21:30:5c:13:ae:18:56:0d:1d:33:5a:37:79:af:a1: c2:fa:fd:cf:a3:25:4c:52:f0:f9:64:05:be:50:a6: 72:b0:23:2c:87:b4:36:64:01:b6:83:88:7d:c8:fc: 7c:7f:0c:52:e0:b6:31:99:c2:2b:ea:70:ec:78:53: cc:6e:d1:ed:6a:73:08:eb:4f:cd:b3:2e:4e:9f:b3: 6d:ee:a2:fa:af:43:72:e6:5c:ae:9d:08:51:45:a2: ec:a0:ec:b7:e0:3c:d5:79:f2:7c:f1:84:45:6e:85: 64:9f:17:68:51:45:f1:44:8a:8e:bc:54:6b:c8:60: ee:c3:28:27:55:ce:7e:bf:11:0a:91:3e:cc:99:dd: fa:0a:5e:88:35:a5:62:f4:32:e9:5c:87:41:08:12: 44:20:22:cb:ee:c1:3a:df:c0:42:bc:5d:e4:45:1d: 8f:bb:12:df:b7:02:60:07:bb:1e:f1:2d:9d:81:e2: cd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:24:68:FA:D1:45:12:7F:9B:1F:3A:6C:0F:B5:C9:C3:12:B9:CD:1A X509v3 Authority Key Identifier: keyid:E7:D6:3E:8C:64:2C:ED:33:A5:50:42:FA:42:DB:4D:BC:8D:57:44:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:78:db:b7:b1:49:af:6c:c2:f0:73:da:34:e1:6b:c2:02:24: 00:c4:2f:ec:9e:ff:43:13:a0:45:7f:9e:50:bf:a4:47:f2:30: fc:c9:70:b7:de:78:59:c3:56:99:57:67:f9:c8:62:b6:9c:95: fb:37:ea:5e:9a:b5:20:92:d8:58:54:07:bf:bf:7f:a5:89:90: db:6c:37:c0:f1:85:c2:3b:0e:7e:8e:73:74:04:3f:a2:21:67: 35:b2:53:00:64:15:9c:22:59:6a:da:df:ea:05:51:ad:6a:46: 23:eb:31:18:98:23:19:a8:ac:bc:fb:7d:58:92:79:a6:82:80: b1:09:26:f8:96:82:50:4d:bf:12:8f:bc:33:8b:b8:6d:01:32: c0:1e:34:a6:13:bd:a7:61:2a:0c:ec:4e:8a:3d:67:33:54:68: 92:cb:57:55:36:f3:15:dc:83:4f:51:50:d6:50:ce:1b:10:05: 35:6f:20:bf:0c:a3:37:da:7b:88:63:eb:22:fb:82:56:ee:75: d8:fa:b3:01:cc:de:89:09:98:c4:02:3d:46:5c:6b:be:91:55: 4d:a5:5f:fe:5e:0e:01:3f:fc:d9:04:2e:92:00:32:94:c5:5e: f1:d8:ff:dc:ad:11:6d:0d:78:e6:cf:b1:43:9d:2f:95:54:10: a8:30:12:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTPF1Aq7o3WTAaFpRvXxJ1UbOxNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdENjNFOEM2NDJDRUQzM0E1NTA0MkZBNDJEQjREQkM4 RDU3NDQzNzAeFw0yNTA4MjIyMTUzMjBaFw0yNTA4MjMyMzU5MjBaMDMxMTAvBgNV BAMTKEE4MjQ2OEZBRDE0NTEyN0Y5QjFGM0E2QzBGQjVDOUMzMTJCOUNEMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxst7xdFIwDimtGWe7FUQ0LCN ofIVhRrSlqpoihZgqh+AqINkedOu5cIfAR9400SQFOdcLmFuRqUggwtZO1R6OHVB aGAx2setciEwXBOuGFYNHTNaN3mvocL6/c+jJUxS8PlkBb5QpnKwIyyHtDZkAbaD iH3I/Hx/DFLgtjGZwivqcOx4U8xu0e1qcwjrT82zLk6fs23uovqvQ3LmXK6dCFFF ouyg7LfgPNV58nzxhEVuhWSfF2hRRfFEio68VGvIYO7DKCdVzn6/EQqRPsyZ3foK Xog1pWL0Mulch0EIEkQgIsvuwTrfwEK8XeRFHY+7Et+3AmAHux7xLZ2B4s3NAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqCRo+tFFEn+bHzpsD7XJwxK5zRowHwYDVR0j BBgwFoAU59Y+jGQs7TOlUEL6QttNvI1XRDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHNvWnl0eVh1U1FwTFNKWGVxRWpQQTVpRlVRVzRhUVZLVmhGSjlnMm9W Wm4vMS9FN0Q2M0U4QzY0MkNFRDMzQTU1MDQyRkE0MkRCNERCQzhENTc0NDM3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3RDYzRThDNjQyQ0VEMzNB NTUwNDJGQTQyREI0REJDOEQ1NzQ0MzcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHNvWnl0eVh1U1FwTFNKWGVxRWpQQTVpRlVRVzRhUVZLVmhGSjlnMm9WWm4vMS9F N0Q2M0U4QzY0MkNFRDMzQTU1MDQyRkE0MkRCNERCQzhENTc0NDM3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN3jbt7FJr2zC8HPaNOFrwgIkAMQv7J7/QxOgRX+eUL+kR/Iw/Mlwt954WcNW mVdn+chitpyV+zfqXpq1IJLYWFQHv79/pYmQ22w3wPGFwjsOfo5zdAQ/oiFnNbJT AGQVnCJZatrf6gVRrWpGI+sxGJgjGaisvPt9WJJ5poKAsQkm+JaCUE2/Eo+8M4u4 bQEywB40phO9p2EqDOxOij1nM1RokstXVTbzFdyDT1FQ1lDOGxAFNW8gvwyjN9p7 iGPrIvuCVu512PqzAczeiQmYxAI9RlxrvpFVTaVf/l4OAT/82QQukgAylMVe8dj/ 3K0RbQ145s+xQ50vlVQQqDASeA== -----END CERTIFICATE-----Generated at Sat Aug 23 16:36:50 2025 by rpki-client