$ rpki-client -vvf rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft File: 4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft (raw, json) Hash identifier: t4O/9Yhx9dxweuNo04MkuhpHmp0ubX7/+fNdh8cn4Tw= Subject key identifier: 0D:4C:96:E5:50:E4:56:AB:CA:4C:F9:7D:D0:0F:15:95:51:E1:74:69 Authority key identifier: 4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD Certificate issuer: /CN=4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD Certificate serial: 0925E9214E0BE4D0649FDC64B93574025B467409 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer Subject info access: rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft Manifest number: 13 Signing time: Thu 03 Jul 2025 09:23:17 +0000 Manifest this update: Thu 03 Jul 2025 09:18:17 +0000 Manifest next update: Fri 04 Jul 2025 09:41:17 +0000 Files and hashes: 1: 3230302e3232352e34382e302f32312d3234203d3e203631363130.roa (hash: XDRvlgM7P/xCqIV7RBx9C1F+pF33T02pxj0uA1WTtiQ=) 2: 323830343a386165303a3a2f33322d3335203d3e203631363130.roa (hash: AwoMQtgyt/kdLsTphXgJ7AVOtMROCNU/HFZAamrJt6U=) 3: 4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl (hash: UyLeHJl2KKOB7Gm5MGxHxAiiaXcJpdJisJ1CUR26cFE=) 4: 3230302e3232352e34382e302f32312d3231203d3e203631363130.roa (hash: Z1TvxuhRH7kb/cLP+8aoCk99ncbZQAqvxnCVOVXzibY=) 5: 3138372e38372e32382e302f32322d3234203d3e203631363130.roa (hash: HRl7GP/IvDxrPPvGrR3Hn3nP8WghKvwwk2/180ixE/g=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 04 Jul 2025 09:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:25:e9:21:4e:0b:e4:d0:64:9f:dc:64:b9:35:74:02:5b:46:74:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD Validity Not Before: Jul 3 09:18:17 2025 GMT Not After : Jul 4 09:41:17 2025 GMT Subject: CN=0D4C96E550E456ABCA4CF97DD00F159551E17469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4f:75:27:f8:01:8c:39:63:36:f6:b9:3b:38: fc:a6:28:ea:83:f3:34:23:ba:80:c9:ad:f5:17:be: b1:20:8b:72:d5:e2:32:cf:0c:32:31:b0:c8:06:89: 33:5c:48:df:7d:9a:47:9d:ad:f7:3b:8e:f6:b2:bc: 2d:6f:b3:44:55:c2:2f:c8:39:71:f3:9f:93:c8:8a: ed:f7:db:d0:3b:6f:d6:7b:3e:f3:45:ec:b7:81:ba: b3:fb:34:77:ee:17:18:19:6f:ab:0a:39:d0:da:b8: ec:8a:16:60:db:fe:e4:a6:1b:6e:7e:a7:3f:a0:94: c5:bd:78:b4:a9:9a:db:8f:c7:3c:39:9d:96:2b:f9: 2a:9a:8b:de:8d:27:23:e6:62:96:f8:d3:c3:fb:56: c2:79:78:18:84:c8:28:5a:93:d9:fb:41:ed:fe:69: 14:a7:bf:98:1d:10:67:77:00:59:3c:b7:d7:b2:d6: fa:3c:b4:bf:02:c9:d0:37:5b:54:59:55:64:5b:79: dd:8b:88:96:bd:94:17:51:f3:89:1a:04:37:ed:66: ee:ee:a8:19:27:b1:78:1d:51:de:a0:b2:96:67:3e: 31:9b:0c:4c:d0:be:e4:74:79:db:38:65:f7:bb:92: d6:f0:b7:e4:b7:c4:ed:c0:bb:a3:ae:82:09:26:84: e4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4C:96:E5:50:E4:56:AB:CA:4C:F9:7D:D0:0F:15:95:51:E1:74:69 X509v3 Authority Key Identifier: keyid:4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:ca:a5:56:f9:e0:bc:fb:82:83:19:d0:9b:dc:0b:1c:41:dc: 0d:8c:29:89:57:d9:03:68:ec:f8:2b:fc:56:d3:fd:ff:f7:37: 32:c3:8e:25:a9:82:ba:32:d0:2b:7d:66:42:f1:53:c6:6b:b5: 46:0b:31:2e:c3:7b:ec:3f:b5:3a:8b:6d:7e:01:0d:81:27:25: 8a:b6:a4:f5:64:4f:5e:92:43:24:1c:1c:36:48:fb:0a:e6:cb: 08:fe:e5:c9:ad:29:15:39:59:ea:e0:80:34:22:08:31:c6:db: db:7b:6e:a8:46:fc:38:ea:27:e0:09:3d:f3:34:b6:0e:d2:89: 94:0c:ef:98:bb:05:33:d7:43:65:b0:fd:78:06:45:4e:ec:59: cd:20:03:db:e7:43:00:c9:f9:35:a9:80:b4:24:86:59:92:cf: 36:e5:56:c8:b3:0e:1b:57:b2:a7:e6:39:fa:78:84:ad:4f:f2: c6:ec:59:27:90:63:44:b9:90:9b:38:28:90:e9:9c:df:95:22: 17:30:07:f4:19:28:57:4a:d9:98:22:bc:6e:06:fb:7d:a2:ee: fd:e8:86:94:00:33:d2:7c:f2:89:90:2a:e5:8d:e1:f5:3a:b5: 04:0f:11:7c:05:0a:43:cf:75:9c:90:02:58:54:bb:49:8c:f8: 88:f3:9b:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCSXpIU4L5NBkn9xkuTV0AltGdAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzRkJDMUYzNzIxQjZEMTFFMTFCMUQ4NzlGQzZBQzg5 OTREN0RERDAeFw0yNTA3MDMwOTE4MTdaFw0yNTA3MDQwOTQxMTdaMDMxMTAvBgNV BAMTKDBENEM5NkU1NTBFNDU2QUJDQTRDRjk3REQwMEYxNTk1NTFFMTc0NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUT3Un+AGMOWM29rk7OPymKOqD 8zQjuoDJrfUXvrEgi3LV4jLPDDIxsMgGiTNcSN99mkedrfc7jvayvC1vs0RVwi/I OXHzn5PIiu3329A7b9Z7PvNF7LeBurP7NHfuFxgZb6sKOdDauOyKFmDb/uSmG25+ pz+glMW9eLSpmtuPxzw5nZYr+Sqai96NJyPmYpb408P7VsJ5eBiEyChak9n7Qe3+ aRSnv5gdEGd3AFk8t9ey1vo8tL8CydA3W1RZVWRbed2LiJa9lBdR84kaBDftZu7u qBknsXgdUd6gspZnPjGbDEzQvuR0eds4Zfe7ktbwt+S3xO3Au6OuggkmhORvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDUyW5VDkVqvKTPl90A8VlVHhdGkwHwYDVR0j BBgwFoAUSz+8HzchttEeEbHYefxqyJlNfd0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vODV0QW01bnlMTHZTclVkZ1J0NDRUUFk1dlI5cVRieXpGTVJEVWFUVk51 RlcvMC80QjNGQkMxRjM3MjFCNkQxMUUxMUIxRDg3OUZDNkFDODk5NEQ3RERELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCM0ZCQzFGMzcyMUI2RDEx RTExQjFEODc5RkM2QUM4OTk0RDdEREQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v ODV0QW01bnlMTHZTclVkZ1J0NDRUUFk1dlI5cVRieXpGTVJEVWFUVk51RlcvMC80 QjNGQkMxRjM3MjFCNkQxMUUxMUIxRDg3OUZDNkFDODk5NEQ3RERELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1sqlVvngvPuCgxnQm9wLHEHcDYwpiVfZA2js+Cv8VtP9//c3MsOOJamCujLQ K31mQvFTxmu1RgsxLsN77D+1OottfgENgSclirak9WRPXpJDJBwcNkj7CubLCP7l ya0pFTlZ6uCANCIIMcbb23tuqEb8OOon4Ak98zS2DtKJlAzvmLsFM9dDZbD9eAZF TuxZzSAD2+dDAMn5NamAtCSGWZLPNuVWyLMOG1eyp+Y5+niErU/yxuxZJ5BjRLmQ mzgokOmc35UiFzAH9BkoV0rZmCK8bgb7faLu/eiGlAAz0nzyiZAq5Y3h9Tq1BA8R fAUKQ891nJACWFS7SYz4iPObcg== -----END CERTIFICATE-----Generated at Thu Jul 3 18:36:05 2025 by rpki-client