$ rpki-client -vvf rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.mft File: D72D3F46524FD32B12A8857ADA6A36351587C90E.mft (raw, json) Hash identifier: Ob/0iSkmZdfX/bZDMDAefRqje+kpuPJNEgSKyAXKXMM= Subject key identifier: 6A:A4:4E:E5:AE:7F:C0:A6:E6:E1:07:C4:57:09:A2:3B:7B:C1:4B:94 Authority key identifier: D7:2D:3F:46:52:4F:D3:2B:12:A8:85:7A:DA:6A:36:35:15:87:C9:0E Certificate issuer: /CN=D72D3F46524FD32B12A8857ADA6A36351587C90E Certificate serial: 24C804AC01B38B406416E71A597539A8DE41C128 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D72D3F46524FD32B12A8857ADA6A36351587C90E.cer Subject info access: rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.mft Manifest number: 4E Signing time: Wed 02 Jul 2025 05:08:41 +0000 Manifest this update: Wed 02 Jul 2025 05:03:41 +0000 Manifest next update: Thu 03 Jul 2025 07:00:41 +0000 Files and hashes: 1: 3136382e3232372e3133362e302f32322d3234203d3e20323633353236.roa (hash: wxO2HWruIc267ooUXcBOclGbDVuFfgiJr4HNWI0zXcc=) 2: 323830343a313334383a3a2f33322d3438203d3e20323633353236.roa (hash: 4IqY6bCQyoXzC2os25yTR1czK6/VXqAkjmT52V5zXn0=) 3: 3139312e3235332e32302e302f32322d3234203d3e20323633353236.roa (hash: 8VduWI6q3z2//+F/2lXJ91+usvdBT+2WkfCrAhcQiQc=) 4: D72D3F46524FD32B12A8857ADA6A36351587C90E.crl (hash: 4iWsHffXaQlG1LTbWBmYM37MFrqp4IKBjCRj6dE/Sis=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.crl rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D72D3F46524FD32B12A8857ADA6A36351587C90E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 07:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:c8:04:ac:01:b3:8b:40:64:16:e7:1a:59:75:39:a8:de:41:c1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D72D3F46524FD32B12A8857ADA6A36351587C90E Validity Not Before: Jul 2 05:03:41 2025 GMT Not After : Jul 3 07:00:41 2025 GMT Subject: CN=6AA44EE5AE7FC0A6E6E107C45709A23B7BC14B94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:72:7e:34:df:bc:2b:ec:51:c0:55:bb:bf:b4: 33:fc:62:e3:cc:ab:ed:77:e3:71:93:e8:43:53:98: 11:3d:55:f3:c7:4f:27:3d:0c:0a:a2:5b:d3:cd:4a: 58:33:da:5b:8d:8c:16:cf:2e:46:a5:10:f7:07:5d: 3a:1f:36:b0:cd:df:ff:74:de:71:08:d7:20:bf:b1: 30:73:82:ce:eb:4c:95:9e:ea:41:ac:aa:e5:7d:76: 35:ad:c3:1e:e0:50:69:f1:5a:59:16:7f:61:61:7b: 63:d5:cc:89:bc:11:1f:be:7d:cb:0a:2f:39:9e:5f: 0f:36:f1:e0:ff:d7:9d:7f:53:5e:21:e9:94:4f:18: 33:09:5c:de:50:3a:aa:db:f7:f4:f9:a9:ad:bf:cd: ec:bf:f0:c2:2b:33:1d:7e:e7:d5:7c:51:e6:a9:32: 2e:2c:47:79:5c:a8:ec:cd:94:05:43:38:d3:f9:c0: 00:d6:d7:27:c2:8a:74:36:cc:5a:d5:35:08:c3:9e: ec:b1:f0:72:01:d9:e4:05:bf:c0:98:ca:2b:86:70: 1e:d6:ac:f4:01:ab:b7:02:2a:1a:98:51:13:43:a1: 2f:a4:38:ed:4c:ab:2c:0d:b3:f7:ff:d9:d9:1f:06: 8d:25:b7:84:f9:04:e1:4e:b6:b4:01:a8:a0:ea:9f: 96:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A4:4E:E5:AE:7F:C0:A6:E6:E1:07:C4:57:09:A2:3B:7B:C1:4B:94 X509v3 Authority Key Identifier: keyid:D7:2D:3F:46:52:4F:D3:2B:12:A8:85:7A:DA:6A:36:35:15:87:C9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D72D3F46524FD32B12A8857ADA6A36351587C90E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9jjfMxqKUMK46ebydVAjrTXTexiEGnHjBhGVaUWVpcaq/0/D72D3F46524FD32B12A8857ADA6A36351587C90E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:90:52:15:71:94:fa:e6:d5:6c:f3:b9:ae:54:7c:50:d0:68: 04:23:9b:82:0e:ab:0e:2b:67:d2:40:69:e3:9e:d2:a0:be:ff: 58:c6:dc:0d:ce:e9:cb:82:33:a9:65:3d:30:0d:ed:58:c4:5e: db:13:07:91:fd:b5:ae:4b:48:da:7f:21:d9:3f:5d:df:6a:0e: e6:30:76:72:37:fb:4e:17:7f:46:bd:5e:d0:28:9b:f2:b3:63: eb:b4:9c:b5:73:71:c6:4b:c0:31:ff:3b:0f:a5:6c:31:f7:57: 70:1e:ae:b5:03:94:22:cb:62:31:76:0f:48:f3:4e:75:90:f5: 76:26:1b:51:e0:1a:43:cc:57:36:ac:df:46:40:6c:e5:53:ef: f9:28:ba:a3:d1:79:e9:4d:4b:5e:1a:73:94:a5:9b:15:52:8c: 24:15:13:1a:d8:c4:80:03:86:53:dd:c9:e1:19:de:8a:5a:ae: af:26:80:41:31:9a:b4:b4:53:48:de:03:30:21:83:49:28:10: ef:ab:45:c9:bd:22:d5:92:8f:4a:77:a2:a4:b3:4a:64:f1:a2: 75:d1:9a:30:e6:4e:16:02:86:74:b3:46:61:10:b8:76:48:e3: 52:1f:a8:c2:40:6a:1a:1e:40:45:91:5c:55:c3:e6:eb:83:71: 7c:14:36:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUJMgErAGzi0BkFucaWXU5qN5BwSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcyRDNGNDY1MjRGRDMyQjEyQTg4NTdBREE2QTM2MzUx NTg3QzkwRTAeFw0yNTA3MDIwNTAzNDFaFw0yNTA3MDMwNzAwNDFaMDMxMTAvBgNV BAMTKDZBQTQ0RUU1QUU3RkMwQTZFNkUxMDdDNDU3MDlBMjNCN0JDMTRCOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8cn4037wr7FHAVbu/tDP8YuPM q+1343GT6ENTmBE9VfPHTyc9DAqiW9PNSlgz2luNjBbPLkalEPcHXTofNrDN3/90 3nEI1yC/sTBzgs7rTJWe6kGsquV9djWtwx7gUGnxWlkWf2Fhe2PVzIm8ER++fcsK LzmeXw828eD/151/U14h6ZRPGDMJXN5QOqrb9/T5qa2/zey/8MIrMx1+59V8Ueap Mi4sR3lcqOzNlAVDONP5wADW1yfCinQ2zFrVNQjDnuyx8HIB2eQFv8CYyiuGcB7W rPQBq7cCKhqYURNDoS+kOO1MqywNs/f/2dkfBo0lt4T5BOFOtrQBqKDqn5aDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaqRO5a5/wKbm4QfEVwmiO3vBS5QwHwYDVR0j BBgwFoAU1y0/RlJP0ysSqIV62mo2NRWHyQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWpqZk14cUtVTUs0NmVieWRWQWpyVFhUZXhpRUduSGpCaEdWYVVXVnBj YXEvMC9ENzJEM0Y0NjUyNEZEMzJCMTJBODg1N0FEQTZBMzYzNTE1ODdDOTBFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3MkQzRjQ2NTI0RkQzMkIx MkE4ODU3QURBNkEzNjM1MTU4N0M5MEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OWpqZk14cUtVTUs0NmVieWRWQWpyVFhUZXhpRUduSGpCaEdWYVVXVnBjYXEvMC9E NzJEM0Y0NjUyNEZEMzJCMTJBODg1N0FEQTZBMzYzNTE1ODdDOTBFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo5BSFXGU+ubVbPO5rlR8UNBoBCObgg6rDitn0kBp457SoL7/WMbcDc7py4Iz qWU9MA3tWMRe2xMHkf21rktI2n8h2T9d32oO5jB2cjf7Thd/Rr1e0Cib8rNj67Sc tXNxxkvAMf87D6VsMfdXcB6utQOUIstiMXYPSPNOdZD1diYbUeAaQ8xXNqzfRkBs 5VPv+Si6o9F56U1LXhpzlKWbFVKMJBUTGtjEgAOGU93J4RneilquryaAQTGatLRT SN4DMCGDSSgQ76tFyb0i1ZKPSneipLNKZPGiddGaMOZOFgKGdLNGYRC4dkjjUh+o wkBqGh5ARZFcVcPm64NxfBQ2sA== -----END CERTIFICATE-----Generated at Wed Jul 2 23:31:15 2025 by rpki-client