$ rpki-client -vvf rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.mft File: 4CFDB632C8A3E9C823323B2E5907A9238E6B8554.mft (raw, json) Hash identifier: j6D6HPBZsVVM/mvfmHvdEEfSu6Bu7U1JEOTi2WNXi5w= Subject key identifier: 6A:80:6A:FA:86:DA:64:2D:99:68:66:F1:40:E6:01:C4:87:C1:B0:72 Authority key identifier: 4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54 Certificate issuer: /CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554 Certificate serial: 38FEB3ACC6DE1311FF863E81598666196BF2DCC6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer Subject info access: rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.mft Manifest number: B5 Signing time: Wed 02 Jul 2025 11:04:36 +0000 Manifest this update: Wed 02 Jul 2025 10:59:36 +0000 Manifest next update: Thu 03 Jul 2025 13:19:36 +0000 Files and hashes: 1: 323830343a363630343a383130303a3a2f34302d3430203d3e20323639353238.roa (hash: /sZ77TEiaBtcjHNTHWDyU/rdxKv+XLyeYm8ljzt5rMQ=) 2: 34352e3138372e36342e302f32342d3234203d3e20323639353238.roa (hash: YX6mtCkxcil6OllZ1wLr5S17yxVjXzLERsvQa0mpOhk=) 3: 34352e3138372e36352e302f32342d3234203d3e20323639353238.roa (hash: 1dWTEVip5rJMxAJY3MvVnEePwaw2qNkxhQqE71H4DUs=) 4: 34352e3138372e36362e302f32342d3234203d3e20323639353238.roa (hash: II1RzsGPkHnpbxVSJUK9zXey6ZFdJi87qI01L71x/ME=) 5: 323830343a363630343a383030303a3a2f33332d3333203d3e20323639353238.roa (hash: 93nHwgy8FiQR6Co+Hid0rloJ6+WoaspavpiYRXMoTeQ=) 6: 323830343a363630343a3a2f33332d3333203d3e20323639353238.roa (hash: hyDQZK29E+iKuOEQuGkCku98QPjq+YBU349/02+dXzo=) 7: 34352e3138372e36372e302f32342d3234203d3e20323639353238.roa (hash: JfKI3T9GDDh01Rp/qRsbymeyNvU7e82bq+QlApkKLUY=) 8: 4CFDB632C8A3E9C823323B2E5907A9238E6B8554.crl (hash: 6xU/i2BH7xHbu2mn2iwzgLnl18DzLCkMbzVAF0XC3qQ=) 9: 323830343a363630343a393030303a3a2f34302d3430203d3e20323639353238.roa (hash: PItnYmd59ejk+pwYUxn6BWvvCK66WulJqw+Fb9ml88A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.crl rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 13:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:fe:b3:ac:c6:de:13:11:ff:86:3e:81:59:86:66:19:6b:f2:dc:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554 Validity Not Before: Jul 2 10:59:36 2025 GMT Not After : Jul 3 13:19:36 2025 GMT Subject: CN=6A806AFA86DA642D996866F140E601C487C1B072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4f:67:29:9c:5a:59:7a:f4:33:09:c6:ec:10: e5:33:37:b3:c0:87:dd:9d:57:ac:a3:d1:8c:b4:72: 10:d2:aa:10:72:8f:7f:d5:18:4e:50:48:63:ef:d7: b5:21:e5:6e:c6:39:6e:da:ed:6a:2a:b2:97:f0:ba: 2b:75:e8:b3:c8:a1:c5:ef:49:57:5a:03:9a:f6:3b: 1d:95:f9:5b:00:d6:5e:a8:c5:ac:46:9e:6d:f0:87: ec:75:16:19:d8:b2:8c:78:ed:60:cd:f0:84:d7:8f: 3d:3c:11:e1:e0:9b:64:46:fd:da:3c:c9:22:2c:c2: 8c:2a:15:16:64:e3:df:1f:a6:c9:14:88:1e:57:24: 16:c3:a3:99:c3:75:17:4f:cb:b6:d2:7e:97:93:6b: 79:a9:fa:2a:4d:2a:73:d8:91:5c:0e:cc:7f:00:f1: 3a:c4:e0:b8:de:40:cb:de:61:bc:ed:cf:71:e4:0e: 3f:c7:30:f8:0e:6d:64:5e:0a:43:a6:4a:aa:0e:f9: 50:7e:b7:af:8b:f9:45:08:0c:50:94:07:8c:52:62: 24:3a:b9:c1:8d:1a:02:8e:f7:c3:5d:ff:67:fa:4b: 7d:dd:71:78:30:95:1f:59:25:87:44:9e:b7:7a:00: 1f:5a:1f:71:93:d7:46:75:28:fe:85:be:3a:13:d3: 29:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:80:6A:FA:86:DA:64:2D:99:68:66:F1:40:E6:01:C4:87:C1:B0:72 X509v3 Authority Key Identifier: keyid:4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:06:7f:ff:5e:63:95:33:20:1e:ea:11:51:d2:07:67:94:b4: 29:47:62:78:4a:f0:2a:48:d4:e9:5a:04:f4:71:76:20:7e:7e: 2c:31:95:9d:d6:97:46:f0:57:16:7b:8e:a7:eb:46:1c:32:d2: 54:5c:99:88:5b:64:65:52:de:9e:9a:67:30:ce:e1:91:c1:ec: 9b:fe:db:dd:2a:cf:c7:7b:22:02:60:84:0e:c8:02:7e:f0:aa: 75:fc:67:5b:2e:18:33:3e:16:72:96:ea:97:80:49:dd:18:4f: 91:63:38:39:d7:3f:1f:14:b8:54:b3:a5:7f:d6:29:f6:7e:b4: 43:4b:b6:53:57:40:eb:de:36:ac:35:a0:16:ce:df:57:68:ba: 6d:76:c5:a9:31:b5:5c:5d:be:c1:54:f6:66:ba:c3:f3:a2:85: d0:b9:79:71:80:9c:a1:0f:b6:a7:9b:69:1a:b6:20:d6:6e:b0: cf:b3:1b:a1:83:87:3e:b7:f1:6a:f9:eb:aa:4a:c7:5a:2c:f4: d4:5f:2b:01:da:92:1d:d1:ae:80:b3:30:ab:c8:de:55:b9:3a: f6:89:7d:cd:ba:00:ef:85:09:ed:05:86:05:92:a0:0d:9d:a9: 38:14:20:05:91:a9:59:dc:9f:d7:38:dc:12:55:4d:79:6b:d7: 96:c3:2a:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOP6zrMbeExH/hj6BWYZmGWvy3MYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENGREI2MzJDOEEzRTlDODIzMzIzQjJFNTkwN0E5MjM4 RTZCODU1NDAeFw0yNTA3MDIxMDU5MzZaFw0yNTA3MDMxMzE5MzZaMDMxMTAvBgNV BAMTKDZBODA2QUZBODZEQTY0MkQ5OTY4NjZGMTQwRTYwMUM0ODdDMUIwNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfT2cpnFpZevQzCcbsEOUzN7PA h92dV6yj0Yy0chDSqhByj3/VGE5QSGPv17Uh5W7GOW7a7Woqspfwuit16LPIocXv SVdaA5r2Ox2V+VsA1l6oxaxGnm3wh+x1FhnYsox47WDN8ITXjz08EeHgm2RG/do8 ySIswowqFRZk498fpskUiB5XJBbDo5nDdRdPy7bSfpeTa3mp+ipNKnPYkVwOzH8A 8TrE4LjeQMveYbztz3HkDj/HMPgObWReCkOmSqoO+VB+t6+L+UUIDFCUB4xSYiQ6 ucGNGgKO98Nd/2f6S33dcXgwlR9ZJYdEnrd6AB9aH3GT10Z1KP6FvjoT0ynrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaoBq+obaZC2ZaGbxQOYBxIfBsHIwHwYDVR0j BBgwFoAUTP22Msij6cgjMjsuWQepI45rhVQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEQ2enM2ZXZqRVRid0JZc3loSEZlNlJLcEhjTVdFdzhaZzJHalJ3amFT VzIvMC80Q0ZEQjYzMkM4QTNFOUM4MjMzMjNCMkU1OTA3QTkyMzhFNkI4NTU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRkRCNjMyQzhBM0U5Qzgy MzMyM0IyRTU5MDdBOTIzOEU2Qjg1NTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OEQ2enM2ZXZqRVRid0JZc3loSEZlNlJLcEhjTVdFdzhaZzJHalJ3amFTVzIvMC80 Q0ZEQjYzMkM4QTNFOUM4MjMzMjNCMkU1OTA3QTkyMzhFNkI4NTU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyQZ//15jlTMgHuoRUdIHZ5S0KUdieErwKkjU6VoE9HF2IH5+LDGVndaXRvBX FnuOp+tGHDLSVFyZiFtkZVLenppnMM7hkcHsm/7b3SrPx3siAmCEDsgCfvCqdfxn Wy4YMz4Wcpbql4BJ3RhPkWM4Odc/HxS4VLOlf9Yp9n60Q0u2U1dA6942rDWgFs7f V2i6bXbFqTG1XF2+wVT2ZrrD86KF0Ll5cYCcoQ+2p5tpGrYg1m6wz7MboYOHPrfx avnrqkrHWiz01F8rAdqSHdGugLMwq8jeVbk69ol9zboA74UJ7QWGBZKgDZ2pOBQg BZGpWdyf1zjcElVNeWvXlsMqWw== -----END CERTIFICATE-----Generated at Wed Jul 2 22:31:20 2025 by rpki-client