$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft File: 433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft (raw, json) Hash identifier: PYUq3Wxbb1M5sUrllJpyE+OCD7PN5CYoCob9lYN1bjY= Subject key identifier: E6:BA:44:7C:A5:B3:D7:AF:E9:AD:99:5E:C6:38:D9:DA:EC:6B:CD:F5 Authority key identifier: 43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72 Certificate issuer: /CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72 Certificate serial: 201558CE18EE41A6D3EC7253B4B766F103057F0D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer Subject info access: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft Manifest number: 025D Signing time: Tue 01 Jul 2025 22:45:32 +0000 Manifest this update: Tue 01 Jul 2025 22:40:31 +0000 Manifest next update: Thu 03 Jul 2025 01:27:31 +0000 Files and hashes: 1: 34352e3232392e37302e302f32332d3233203d3e20323637323232.roa (hash: YImMQr+RMDsH/GDqY6kCVtep65OxcR2ekjIL8Y2gbew=) 2: 34352e3232392e36382e302f32322d3232203d3e20323637323232.roa (hash: Nsf+Md4t/x2sYg0OO0lur7GyFGxQJtAf2WVPKyN2VSE=) 3: 433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl (hash: QwDWbnQnMjg4GPc54Se3sffgVGT5/bcG3JMy09BOdzw=) 4: 34352e3232392e36392e302f32342d3234203d3e20323637323232.roa (hash: KB81wjFs9ztD8dGkHE2D/VsScjjuO/L+1/K7dgHU48I=) 5: 323830343a346132633a3a2f33322d3438203d3e20323637323232.roa (hash: K65c6CQDYmeBQFWU/ufGUImXBQEHhvkmt5bgL91Dh7s=) 6: 34352e3232392e36382e302f32342d3234203d3e20323637323232.roa (hash: OqeJB+mozeDEhDovDsxXjuzpU5+h4/FmiYTzQoaLAFc=) 7: 34352e3232392e37302e302f32342d3234203d3e20323637323232.roa (hash: 2CIXDHlG3wiwLu0oPaWa0tJIZ6+F0sTe9D4EQaQ59wc=) 8: 34352e3232392e37312e302f32342d3234203d3e20323637323232.roa (hash: uFzjyJPTQCmSwhW7HJ86POCK4QcKTF3sb1TVogNfEdw=) 9: 34352e3232392e36382e302f32332d3233203d3e20323637323232.roa (hash: UifxwEG7vJxx646ArwKrEjuPH/DVz2naB23cASE80ZE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 01:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:15:58:ce:18:ee:41:a6:d3:ec:72:53:b4:b7:66:f1:03:05:7f:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72 Validity Not Before: Jul 1 22:40:31 2025 GMT Not After : Jul 3 01:27:31 2025 GMT Subject: CN=E6BA447CA5B3D7AFE9AD995EC638D9DAEC6BCDF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e9:67:7d:66:e0:6b:3b:35:1b:60:af:e0:f9: 6f:33:ef:d8:3c:fa:59:49:44:dc:ca:f3:aa:1e:06: c9:56:32:a3:11:e3:51:e0:7d:02:53:c0:da:79:1e: e9:ee:cf:65:31:e6:47:af:3d:5d:c4:4b:e4:15:80: a1:35:b6:2b:f1:59:8f:23:f1:92:ba:ed:bc:fe:b8: 87:86:30:7d:76:30:75:32:99:3e:34:1e:9a:01:b4: 17:8c:b3:e9:c5:bb:24:2b:0f:d8:a8:64:49:5d:a3: c9:84:f1:6e:b6:83:cd:3a:92:e6:e1:54:2c:b5:ba: 47:d8:54:0b:46:a1:9b:ef:45:9e:71:95:3e:9e:5c: d7:15:aa:f8:b2:f1:d8:c8:aa:40:8c:cb:5d:f5:3e: 36:80:e0:c4:d3:e4:f7:2b:93:b6:53:a7:57:fa:ab: 34:b2:5d:ca:8e:58:ac:fb:86:3c:60:50:30:16:ed: f8:0f:ae:ab:fb:a7:b4:3d:e0:ba:61:bd:da:98:50: 69:cf:a8:04:5e:20:8d:39:d7:e9:45:0c:dc:ee:97: 83:89:29:5e:54:00:77:67:f1:4e:60:44:17:25:52: 1c:fe:aa:33:4f:e0:8b:6a:eb:f3:e7:e8:8e:95:c1: 44:3a:ca:25:33:c5:6c:68:8a:0a:d4:2b:d0:be:a8: a8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BA:44:7C:A5:B3:D7:AF:E9:AD:99:5E:C6:38:D9:DA:EC:6B:CD:F5 X509v3 Authority Key Identifier: keyid:43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:dc:74:db:3c:f7:ad:72:ba:6e:19:bc:27:a1:b7:e8:00:ea: bb:c7:d7:c7:00:82:73:5f:89:6b:41:8d:d2:ea:0f:d8:b0:43: 48:8c:18:7c:bb:41:2c:3b:3e:fe:9f:a7:ad:08:1b:87:ac:1c: 18:1c:de:07:68:22:09:de:9f:73:36:0e:8d:1c:e3:e4:7b:f6: 42:07:6c:af:a0:9c:b0:6c:60:e6:fc:03:39:a0:30:87:89:b8: a7:a2:35:52:65:1c:3b:30:5a:35:e5:03:bb:5a:ba:3a:2c:28: 28:b1:8b:57:f7:be:01:4a:77:35:07:74:1f:ac:5b:cc:30:f4: 28:fc:87:68:32:49:69:1f:91:94:4e:1b:44:0a:fe:96:73:cf: d4:46:fa:e2:8b:40:7d:d5:a5:de:6e:08:e3:eb:29:a2:55:20: 39:ad:a5:fa:f1:d3:b6:02:5a:6d:0a:36:08:5f:20:37:f1:f2: e0:4e:d6:5b:8e:0e:70:f0:99:72:81:66:ae:5e:a6:d3:19:63: b6:68:af:75:11:c5:28:e9:2e:01:23:8f:98:a0:ed:91:e4:c8: e6:52:8d:13:96:de:0d:10:c8:2d:09:54:03:56:0b:36:b6:8a: cb:60:86:3f:70:aa:8b:43:f8:f5:90:2b:d0:78:02:ad:52:3c: e4:f8:a4:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUIBVYzhjuQabT7HJTtLdm8QMFfw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzQkQ0Njk0ODQ1QkE2NUNBNEFFMUJGNjIyQTFDNTk5 Q0I1M0Y3MjAeFw0yNTA3MDEyMjQwMzFaFw0yNTA3MDMwMTI3MzFaMDMxMTAvBgNV BAMTKEU2QkE0NDdDQTVCM0Q3QUZFOUFEOTk1RUM2MzhEOURBRUM2QkNERjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR6Wd9ZuBrOzUbYK/g+W8z79g8 +llJRNzK86oeBslWMqMR41HgfQJTwNp5Hunuz2Ux5kevPV3ES+QVgKE1tivxWY8j 8ZK67bz+uIeGMH12MHUymT40HpoBtBeMs+nFuyQrD9ioZEldo8mE8W62g806kubh VCy1ukfYVAtGoZvvRZ5xlT6eXNcVqviy8djIqkCMy131PjaA4MTT5Pcrk7ZTp1f6 qzSyXcqOWKz7hjxgUDAW7fgPrqv7p7Q94LphvdqYUGnPqAReII051+lFDNzul4OJ KV5UAHdn8U5gRBclUhz+qjNP4Itq6/Pn6I6VwUQ6yiUzxWxoigrUK9C+qKidAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5rpEfKWz16/prZlexjjZ2uxrzfUwHwYDVR0j BBgwFoAUQzvUaUhFumXKSuG/YiocWZy1P3IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1o a2UvMS80MzNCRDQ2OTQ4NDVCQTY1Q0E0QUUxQkY2MjJBMUM1OTlDQjUzRjcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzM0JENDY5NDg0NUJBNjVD QTRBRTFCRjYyMkExQzU5OUNCNTNGNzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1oa2UvMS80 MzNCRDQ2OTQ4NDVCQTY1Q0E0QUUxQkY2MjJBMUM1OTlDQjUzRjcyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcdx02zz3rXK6bhm8J6G36ADqu8fXxwCCc1+Ja0GN0uoP2LBDSIwYfLtBLDs+ /p+nrQgbh6wcGBzeB2giCd6fczYOjRzj5Hv2Qgdsr6CcsGxg5vwDOaAwh4m4p6I1 UmUcOzBaNeUDu1q6OiwoKLGLV/e+AUp3NQd0H6xbzDD0KPyHaDJJaR+RlE4bRAr+ lnPP1Eb64otAfdWl3m4I4+spolUgOa2l+vHTtgJabQo2CF8gN/Hy4E7WW44OcPCZ coFmrl6m0xljtmivdRHFKOkuASOPmKDtkeTI5lKNE5beDRDILQlUA1YLNraKy2CG P3Cqi0P49ZAr0HgCrVI85PikFQ== -----END CERTIFICATE-----Generated at Thu Jul 3 01:13:27 2025 by rpki-client