$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/944D1D572BAB1051387200BA68477F359EA492CF.mft File: 944D1D572BAB1051387200BA68477F359EA492CF.mft (raw, json) Hash identifier: jcX1j7p18aTqxOKmAi6xenBS1qQhEJZJ4V/wpwRhLBM= Subject key identifier: 1F:60:07:A6:1F:8B:A2:A8:72:2A:8B:44:47:D6:A7:51:BE:ED:5B:0C Authority key identifier: 94:4D:1D:57:2B:AB:10:51:38:72:00:BA:68:47:7F:35:9E:A4:92:CF Certificate issuer: /CN=944D1D572BAB1051387200BA68477F359EA492CF Certificate serial: 9D55717B6B2C81C112A72F714436A6A0475AE8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D1D572BAB1051387200BA68477F359EA492CF.cer Subject info access: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/944D1D572BAB1051387200BA68477F359EA492CF.mft Manifest number: 27 Signing time: Wed 02 Jul 2025 18:09:52 +0000 Manifest this update: Wed 02 Jul 2025 18:04:52 +0000 Manifest next update: Thu 03 Jul 2025 21:36:52 +0000 Files and hashes: 1: 3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa (hash: vM1NLsDp1BOHPyKbkBFOfotfvEFCDxeRwQPWF65L7ho=) 2: 944D1D572BAB1051387200BA68477F359EA492CF.crl (hash: RwkxaSdBb3ARM1ckPeFn1V7kBjxgxHP5iD691HZ3Y+c=) 3: 3133382e33362e3136342e302f32322d3234203d3e20323633343434.roa (hash: uWdSscxu5Cg/i60ubSnRpzkXRWPX6zIcYRGy0xKd06o=) 4: 323830343a313164633a3a2f33322d3336203d3e20323633343434.roa (hash: KI2nY30F25mgW4uEcm8thIQ25osJ2CykXxxz+8eOvLo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/944D1D572BAB1051387200BA68477F359EA492CF.crl rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/944D1D572BAB1051387200BA68477F359EA492CF.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D1D572BAB1051387200BA68477F359EA492CF.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 21:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9d:55:71:7b:6b:2c:81:c1:12:a7:2f:71:44:36:a6:a0:47:5a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=944D1D572BAB1051387200BA68477F359EA492CF Validity Not Before: Jul 2 18:04:52 2025 GMT Not After : Jul 3 21:36:52 2025 GMT Subject: CN=1F6007A61F8BA2A8722A8B4447D6A751BEED5B0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:29:d0:06:46:4a:fb:4d:c4:49:2d:dc:15: 23:a5:b9:93:1b:e3:2d:78:0c:7a:75:7a:c7:79:72: 66:df:43:76:e7:2e:ba:b3:19:26:4a:91:78:2a:9e: d3:f9:91:a0:de:a0:55:16:6e:1e:9b:32:9d:fe:51: 48:69:e0:8e:a6:dc:ef:d6:fe:c2:ea:b8:57:c0:9a: dd:22:d5:ba:2e:32:aa:a3:16:2f:71:91:e3:71:d2: 18:95:77:75:71:97:6e:c2:67:91:08:72:d2:40:32: b2:9f:05:ce:74:c3:9d:17:9d:39:06:88:08:e9:b5: 25:a7:93:c0:c9:c1:4d:68:44:dd:7b:76:71:a2:1d: ba:7f:70:f2:4a:61:52:41:42:ff:32:2b:d1:e6:b2: 8c:f5:21:dd:2b:21:a6:0c:26:a7:1a:05:2a:51:31: 97:a9:9b:27:d5:ca:6c:cc:9e:ff:19:f9:a3:5a:14: ee:6a:bb:b4:8f:ae:09:17:d3:51:e8:4d:6e:bb:50: 27:9d:39:ee:62:e9:8f:8e:e4:d0:2a:39:1c:38:da: 36:a7:fa:12:3a:29:9f:a1:57:eb:33:6e:1b:2b:cb: c7:89:fa:f3:c5:23:0b:1f:dd:21:0d:98:50:90:e2: e3:2c:4a:4f:e5:e5:cb:9e:3f:64:1c:65:f1:13:9f: 8d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:60:07:A6:1F:8B:A2:A8:72:2A:8B:44:47:D6:A7:51:BE:ED:5B:0C X509v3 Authority Key Identifier: keyid:94:4D:1D:57:2B:AB:10:51:38:72:00:BA:68:47:7F:35:9E:A4:92:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/944D1D572BAB1051387200BA68477F359EA492CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D1D572BAB1051387200BA68477F359EA492CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/944D1D572BAB1051387200BA68477F359EA492CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:1d:e9:80:3c:78:38:39:58:86:d2:6e:90:78:8e:e2:12:6f: 63:58:9a:40:09:f7:f0:0c:9d:5e:d3:1c:8b:39:1f:ed:1b:88: 39:e2:69:55:da:3f:6d:0a:7d:65:7f:50:19:38:73:b6:60:2f: b9:ae:2b:1f:9b:28:35:ad:e1:34:5b:3f:0c:54:b5:0f:08:2d: fd:52:e7:b3:32:46:aa:e2:9b:01:6a:a0:18:37:6a:35:1e:2b: c6:dc:af:2f:b0:e0:f4:cc:8f:2e:98:7d:23:ac:bf:41:8e:8a: 60:a3:a9:3a:5f:70:52:38:57:c7:45:ce:26:c7:25:ae:23:50: 72:0f:9f:3e:f0:3e:14:28:8b:86:bc:71:ab:73:91:83:01:3a: 0c:2d:7a:de:c1:18:5e:92:ba:07:dd:55:e0:1a:cf:36:61:36: 7f:93:40:77:06:68:72:18:b2:27:ad:a4:5b:e7:4d:81:6b:3a: 88:87:94:0a:79:1d:3f:5e:98:6b:cd:08:78:d1:9a:82:23:01: 7d:38:c2:e3:17:c4:fd:ea:8f:d1:11:47:2a:8b:c1:f9:89:c6: e0:fb:ed:56:90:d4:a6:f2:94:56:09:db:46:fe:21:1b:c9:ec: a2:bd:b1:b0:47:48:b2:5a:e7:84:cb:a0:fd:76:b9:92:59:7b: 83:ce:f4:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAJ1VcXtrLIHBEqcvcUQ2pqBHWugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ0RDFENTcyQkFCMTA1MTM4NzIwMEJBNjg0NzdGMzU5 RUE0OTJDRjAeFw0yNTA3MDIxODA0NTJaFw0yNTA3MDMyMTM2NTJaMDMxMTAvBgNV BAMTKDFGNjAwN0E2MUY4QkEyQTg3MjJBOEI0NDQ3RDZBNzUxQkVFRDVCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIzynQBkZK+03ESS3cFSOluZMb 4y14DHp1esd5cmbfQ3bnLrqzGSZKkXgqntP5kaDeoFUWbh6bMp3+UUhp4I6m3O/W /sLquFfAmt0i1bouMqqjFi9xkeNx0hiVd3Vxl27CZ5EIctJAMrKfBc50w50XnTkG iAjptSWnk8DJwU1oRN17dnGiHbp/cPJKYVJBQv8yK9Hmsoz1Id0rIaYMJqcaBSpR MZepmyfVymzMnv8Z+aNaFO5qu7SPrgkX01HoTW67UCedOe5i6Y+O5NAqORw42jan +hI6KZ+hV+szbhsry8eJ+vPFIwsf3SENmFCQ4uMsSk/l5cueP2QcZfETn41zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUH2AHph+LoqhyKotER9anUb7tWwwwHwYDVR0j BBgwFoAUlE0dVyurEFE4cgC6aEd/NZ6kks8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtO dUMvMC85NDREMUQ1NzJCQUIxMDUxMzg3MjAwQkE2ODQ3N0YzNTlFQTQ5MkNGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0NEQxRDU3MkJBQjEwNTEz ODcyMDBCQTY4NDc3RjM1OUVBNDkyQ0YuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OXpNOXJ6aG9MaWRZdHdVc1RHd3dYTHkyRjNhRlFlWUZzREg0OVlMcGtOdUMvMC85 NDREMUQ1NzJCQUIxMDUxMzg3MjAwQkE2ODQ3N0YzNTlFQTQ5MkNGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUB3pgDx4ODlYhtJukHiO4hJvY1iaQAn38AydXtMcizkf7RuIOeJpVdo/bQp9 ZX9QGThztmAvua4rH5soNa3hNFs/DFS1Dwgt/VLnszJGquKbAWqgGDdqNR4rxtyv L7Dg9MyPLph9I6y/QY6KYKOpOl9wUjhXx0XOJsclriNQcg+fPvA+FCiLhrxxq3OR gwE6DC163sEYXpK6B91V4BrPNmE2f5NAdwZochiyJ62kW+dNgWs6iIeUCnkdP16Y a80IeNGagiMBfTjC4xfE/eqP0RFHKovB+YnG4PvtVpDUpvKUVgnbRv4hG8nsor2x sEdIslrnhMug/Xa5kll7g870Ag== -----END CERTIFICATE-----Generated at Thu Jul 3 07:56:15 2025 by rpki-client