$ rpki-client -vvf rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/4130195A850DBB00999B6AA1A1580CED92CE55E0.mft File: 4130195A850DBB00999B6AA1A1580CED92CE55E0.mft (raw, json) Hash identifier: ELQiFxEXputZAao3LvqRQn9dx8WjIP55CxCZb3Tkylk= Subject key identifier: CD:89:1B:00:B7:24:34:EB:06:52:66:07:3B:B6:36:BD:36:AA:E5:EA Authority key identifier: 41:30:19:5A:85:0D:BB:00:99:9B:6A:A1:A1:58:0C:ED:92:CE:55:E0 Certificate issuer: /CN=4130195A850DBB00999B6AA1A1580CED92CE55E0 Certificate serial: 7243A709E2AD31E3B5781355D49BB2FD6C138C9B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130195A850DBB00999B6AA1A1580CED92CE55E0.cer Subject info access: rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/4130195A850DBB00999B6AA1A1580CED92CE55E0.mft Manifest number: 0A Signing time: Wed 02 Jul 2025 19:57:59 +0000 Manifest this update: Wed 02 Jul 2025 19:52:59 +0000 Manifest next update: Thu 03 Jul 2025 22:49:59 +0000 Files and hashes: 1: 4130195A850DBB00999B6AA1A1580CED92CE55E0.crl (hash: aDVAAClhFBvdeCjgrgSLcczmR9Fzw0Aye1nnS/xeIIc=) 2: 323830343a393437343a3a2f33322d3332203d3e20323734383433.roa (hash: bIPMCPvUueptaQJiAaxfSkRglTHFfHoB/c6hsICk6K0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/4130195A850DBB00999B6AA1A1580CED92CE55E0.crl rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/4130195A850DBB00999B6AA1A1580CED92CE55E0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130195A850DBB00999B6AA1A1580CED92CE55E0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 22:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:43:a7:09:e2:ad:31:e3:b5:78:13:55:d4:9b:b2:fd:6c:13:8c:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4130195A850DBB00999B6AA1A1580CED92CE55E0 Validity Not Before: Jul 2 19:52:59 2025 GMT Not After : Jul 3 22:49:59 2025 GMT Subject: CN=CD891B00B72434EB065266073BB636BD36AAE5EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7a:00:98:79:21:28:77:1b:67:6a:e3:5a:15: 20:ab:82:42:63:3a:64:93:52:5d:76:78:0f:c3:86: 08:dd:48:12:0f:72:e8:29:50:8e:06:6e:d5:c9:00: e3:65:8f:4a:f0:33:70:6b:40:7e:ad:71:23:17:5f: 24:7c:23:68:8e:a0:b6:10:5e:61:91:fb:00:87:cc: 79:24:b4:fb:89:c8:ce:1a:e1:1f:e4:c4:aa:07:07: d6:6f:5a:6a:a5:69:cb:dd:a7:ca:62:c1:61:7f:50: ec:c6:6b:ce:d9:e3:e4:2a:be:80:a7:c1:c5:33:a5: e5:05:c7:3a:81:b2:4a:ca:dc:08:10:10:59:29:22: 15:f9:bd:96:4d:f3:ad:ec:97:c4:cf:76:a7:b0:a6: 9b:03:1b:71:07:90:a9:df:e8:bb:5a:f8:d0:18:a7: 2c:ec:40:d8:21:3e:17:c7:86:2f:25:4b:dd:ee:70: 80:73:00:28:94:2b:1a:4d:7b:a7:98:82:a3:ff:9a: 95:ff:29:41:55:4e:53:e6:6c:58:f6:84:13:db:e5: c2:1b:fb:b8:8f:48:6c:e2:b2:ec:32:99:78:66:61: 3a:8c:5e:d7:87:1d:7b:b0:de:73:51:b4:c5:54:e2: 82:1c:92:d7:cd:64:e7:46:5f:43:44:2f:ae:3c:e2: 09:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:89:1B:00:B7:24:34:EB:06:52:66:07:3B:B6:36:BD:36:AA:E5:EA X509v3 Authority Key Identifier: keyid:41:30:19:5A:85:0D:BB:00:99:9B:6A:A1:A1:58:0C:ED:92:CE:55:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/4130195A850DBB00999B6AA1A1580CED92CE55E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130195A850DBB00999B6AA1A1580CED92CE55E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/4130195A850DBB00999B6AA1A1580CED92CE55E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:0c:36:46:b2:22:76:36:41:d4:ae:02:36:da:01:67:99:78: 0a:2d:80:b3:b0:0c:45:87:a8:77:43:96:d5:6f:75:09:67:f0: d3:45:91:ee:96:ba:a9:38:8d:28:a1:dc:63:f3:89:3a:a8:25: 77:32:88:03:5c:9a:99:7e:a9:f7:68:16:ca:46:04:97:16:69: 7f:75:89:cc:55:9f:eb:52:96:c9:49:80:b5:ee:a5:98:01:a5: ac:bf:f1:1a:53:c6:d6:b9:08:e0:b1:76:16:ae:9f:23:43:c5: 0e:48:87:dc:4a:92:e5:eb:26:03:96:8c:10:c0:66:56:2e:62: 76:9b:f7:46:e0:74:86:7d:01:f4:42:b8:74:a1:b7:20:2c:98: 15:9c:43:bc:7d:e3:aa:65:9a:ed:b9:e8:46:c2:c9:6b:97:9e: f3:02:f9:e7:45:1a:0c:7f:42:4f:ef:77:06:d5:dd:53:35:bd: 1a:64:7a:92:89:27:df:b1:32:6b:80:e9:10:69:7a:ec:69:d4: 0e:16:6f:63:79:86:eb:e8:84:13:87:a9:a1:e7:2f:e8:03:7e: 8f:79:c3:0d:e8:78:3f:36:91:c1:41:f5:00:79:6e:13:23:65: ad:6c:cd:7f:59:72:1c:fd:60:27:c5:3f:fa:c2:b7:94:b6:d0: 5d:c5:25:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUckOnCeKtMeO1eBNV1Juy/WwTjJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEzMDE5NUE4NTBEQkIwMDk5OUI2QUExQTE1ODBDRUQ5 MkNFNTVFMDAeFw0yNTA3MDIxOTUyNTlaFw0yNTA3MDMyMjQ5NTlaMDMxMTAvBgNV BAMTKENEODkxQjAwQjcyNDM0RUIwNjUyNjYwNzNCQjYzNkJEMzZBQUU1RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTegCYeSEodxtnauNaFSCrgkJj OmSTUl12eA/DhgjdSBIPcugpUI4GbtXJAONlj0rwM3BrQH6tcSMXXyR8I2iOoLYQ XmGR+wCHzHkktPuJyM4a4R/kxKoHB9ZvWmqlacvdp8piwWF/UOzGa87Z4+QqvoCn wcUzpeUFxzqBskrK3AgQEFkpIhX5vZZN863sl8TPdqewppsDG3EHkKnf6Lta+NAY pyzsQNghPhfHhi8lS93ucIBzACiUKxpNe6eYgqP/mpX/KUFVTlPmbFj2hBPb5cIb +7iPSGzisuwymXhmYTqMXteHHXuw3nNRtMVU4oIcktfNZOdGX0NEL6484gkRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUzYkbALckNOsGUmYHO7Y2vTaq5eowHwYDVR0j BBgwFoAUQTAZWoUNuwCZm2qhoVgM7ZLOVeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHhXenM2aXN6bUpxaFBUZkhwakFDc2o0dzU3cUR4ZE1VU1ZpdUprTGZG N1UvMC80MTMwMTk1QTg1MERCQjAwOTk5QjZBQTFBMTU4MENFRDkyQ0U1NUUwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxMzAxOTVBODUwREJCMDA5 OTlCNkFBMUExNTgwQ0VEOTJDRTU1RTAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHhXenM2aXN6bUpxaFBUZkhwakFDc2o0dzU3cUR4ZE1VU1ZpdUprTGZGN1UvMC80 MTMwMTk1QTg1MERCQjAwOTk5QjZBQTFBMTU4MENFRDkyQ0U1NUUwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuQw2RrIidjZB1K4CNtoBZ5l4Ci2As7AMRYeod0OW1W91CWfw00WR7pa6qTiN KKHcY/OJOqgldzKIA1yamX6p92gWykYElxZpf3WJzFWf61KWyUmAte6lmAGlrL/x GlPG1rkI4LF2Fq6fI0PFDkiH3EqS5esmA5aMEMBmVi5idpv3RuB0hn0B9EK4dKG3 ICyYFZxDvH3jqmWa7bnoRsLJa5ee8wL550UaDH9CT+93BtXdUzW9GmR6kokn37Ey a4DpEGl67GnUDhZvY3mG6+iEE4epoecv6AN+j3nDDeh4PzaRwUH1AHluEyNlrWzN f1lyHP1gJ8U/+sK3lLbQXcUlZQ== -----END CERTIFICATE-----Generated at Thu Jul 3 00:24:09 2025 by rpki-client