$ rpki-client -vvf rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.mft File: 4E8B361B95AC54F01D2EE4C16049026E50FE807A.mft (raw, json) Hash identifier: iY3zqajJJFlTAlJzLRWAs+lIRJAKGJccWZ/xs8X9+NE= Subject key identifier: 85:0A:1E:04:ED:83:E0:75:91:76:FD:F8:8F:D5:2E:75:E4:ED:C6:DB Authority key identifier: 4E:8B:36:1B:95:AC:54:F0:1D:2E:E4:C1:60:49:02:6E:50:FE:80:7A Certificate issuer: /CN=4E8B361B95AC54F01D2EE4C16049026E50FE807A Certificate serial: 63ADAEEF78A477A8A659C5651385F9DFD134FA00 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E8B361B95AC54F01D2EE4C16049026E50FE807A.cer Subject info access: rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.mft Manifest number: 90 Signing time: Wed 02 Jul 2025 15:19:40 +0000 Manifest this update: Wed 02 Jul 2025 15:14:40 +0000 Manifest next update: Thu 03 Jul 2025 17:48:40 +0000 Files and hashes: 1: 323830343a363832343a3a2f33322d313238203d3e20323639363731.roa (hash: 1czHTBydR1SpVEjHKNZV5kiq0fVW2I30z+urcSyjKbY=) 2: 4E8B361B95AC54F01D2EE4C16049026E50FE807A.crl (hash: 7EPENYSGxMnI10Kl5tA7EPOUNyB0m3kqQFZbNvFaNX0=) 3: 34352e3139312e3132342e302f32322d3332203d3e20323639363731.roa (hash: 6mJx3EaI4/kttTI8C0WH5cCMzbqxSNFG1eJeT7sazOM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.crl rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E8B361B95AC54F01D2EE4C16049026E50FE807A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 17:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ad:ae:ef:78:a4:77:a8:a6:59:c5:65:13:85:f9:df:d1:34:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E8B361B95AC54F01D2EE4C16049026E50FE807A Validity Not Before: Jul 2 15:14:40 2025 GMT Not After : Jul 3 17:48:40 2025 GMT Subject: CN=850A1E04ED83E0759176FDF88FD52E75E4EDC6DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:11:4f:ab:70:ad:7e:91:8d:a8:e9:c3:16:f6: 8d:55:50:29:e0:1c:7e:7f:96:0b:f9:9f:8a:ed:35: 46:bb:89:48:3e:49:2c:f5:7d:3a:2c:53:bd:b0:4a: ab:a6:1a:22:0d:61:c0:c4:a1:f8:c1:65:47:8c:7b: a7:aa:c3:c2:9c:c9:24:4d:53:ea:64:a3:10:3e:10: ae:56:04:21:4b:e7:55:28:01:ce:a6:4b:7c:44:11: 3c:5c:83:5f:ae:be:45:13:d4:b9:b1:72:69:ef:e5: ce:9c:98:c0:2d:b7:84:84:5c:fc:62:e2:a6:d8:99: a0:47:78:47:e5:d3:e7:98:8c:17:90:68:bf:d6:52: 0a:50:a7:76:f8:a7:ed:90:8e:7f:60:d9:8d:03:e2: 0e:f1:5f:e0:19:1d:65:33:9f:e3:18:e5:77:d5:ca: e7:d1:06:1b:a9:7b:ea:de:fa:ea:5d:dd:0b:c8:b2: 30:c5:cd:b2:e0:11:59:09:d1:3b:8f:2a:31:ea:df: 4b:00:a1:bd:3b:89:c5:7b:1a:a5:20:1b:08:84:18: 5f:93:42:fc:05:f7:f9:60:f0:95:d3:99:a9:b6:c6: 47:bf:3d:dc:5c:21:e7:75:96:3d:82:4b:aa:f3:da: 30:4c:45:29:86:a9:8b:96:81:5c:48:4e:a3:f8:f2: 5c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0A:1E:04:ED:83:E0:75:91:76:FD:F8:8F:D5:2E:75:E4:ED:C6:DB X509v3 Authority Key Identifier: keyid:4E:8B:36:1B:95:AC:54:F0:1D:2E:E4:C1:60:49:02:6E:50:FE:80:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E8B361B95AC54F01D2EE4C16049026E50FE807A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/4E8B361B95AC54F01D2EE4C16049026E50FE807A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:3d:ee:eb:4f:f8:af:fd:49:d9:12:44:0c:6c:28:ae:f7:54: 88:af:6d:3e:aa:90:25:01:af:00:cf:7a:8e:16:99:23:ef:6d: 63:f8:06:0f:5d:1b:5b:fe:26:73:ef:dc:af:15:3b:32:cd:7b: 9a:48:a3:dc:0b:63:ca:c2:fa:42:c9:94:00:99:76:38:58:90: 52:27:e6:f8:71:a0:45:fa:f6:6e:be:b3:24:32:d5:31:dc:d3: 82:21:2a:82:f7:88:74:dc:10:9d:f5:9c:7a:70:db:0f:04:3f: 10:bb:89:32:bf:71:65:d6:89:1e:e2:f3:a8:d7:7f:1a:39:78: 2c:6e:f1:aa:cc:5f:d4:5b:2d:24:46:05:35:e2:6c:15:05:c2: 09:51:6b:f3:20:5e:26:ed:fb:4c:d9:b4:66:be:e2:37:a8:11: 3b:c8:99:d7:8d:da:8b:69:df:18:d9:8c:0c:9d:79:16:f2:0c: 07:36:d5:7a:a6:dd:29:cf:d6:6d:f8:99:82:71:cc:55:36:4b: 87:e4:65:ec:f9:1b:50:11:15:6d:05:01:d4:a3:84:e9:aa:81: 54:f6:ce:8c:8b:fd:6f:cb:14:3d:82:a0:9f:4c:00:20:f2:6b: 32:75:af:06:ce:c5:ac:e5:98:b1:95:7a:2c:1b:36:bc:11:4b: bf:60:7a:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUY62u73ikd6imWcVlE4X539E0+gAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU4QjM2MUI5NUFDNTRGMDFEMkVFNEMxNjA0OTAyNkU1 MEZFODA3QTAeFw0yNTA3MDIxNTE0NDBaFw0yNTA3MDMxNzQ4NDBaMDMxMTAvBgNV BAMTKDg1MEExRTA0RUQ4M0UwNzU5MTc2RkRGODhGRDUyRTc1RTRFREM2REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjEU+rcK1+kY2o6cMW9o1VUCng HH5/lgv5n4rtNUa7iUg+SSz1fTosU72wSqumGiINYcDEofjBZUeMe6eqw8KcySRN U+pkoxA+EK5WBCFL51UoAc6mS3xEETxcg1+uvkUT1Lmxcmnv5c6cmMAtt4SEXPxi 4qbYmaBHeEfl0+eYjBeQaL/WUgpQp3b4p+2Qjn9g2Y0D4g7xX+AZHWUzn+MY5XfV yufRBhupe+re+upd3QvIsjDFzbLgEVkJ0TuPKjHq30sAob07icV7GqUgGwiEGF+T QvwF9/lg8JXTmam2xke/PdxcIed1lj2CS6rz2jBMRSmGqYuWgVxITqP48lwdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhQoeBO2D4HWRdv34j9UudeTtxtswHwYDVR0j BBgwFoAUTos2G5WsVPAdLuTBYEkCblD+gHowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVlKWVJjUlRrY05CaUNEakE0Mk5uU1RnNDNucEVyVzRoV0Jaa29waWlD TFkvMC80RThCMzYxQjk1QUM1NEYwMUQyRUU0QzE2MDQ5MDI2RTUwRkU4MDdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFOEIzNjFCOTVBQzU0RjAx RDJFRTRDMTYwNDkwMjZFNTBGRTgwN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVlKWVJjUlRrY05CaUNEakE0Mk5uU1RnNDNucEVyVzRoV0Jaa29waWlDTFkvMC80 RThCMzYxQjk1QUM1NEYwMUQyRUU0QzE2MDQ5MDI2RTUwRkU4MDdBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcT3u60/4r/1J2RJEDGworvdUiK9tPqqQJQGvAM96jhaZI+9tY/gGD10bW/4m c+/crxU7Ms17mkij3AtjysL6QsmUAJl2OFiQUifm+HGgRfr2br6zJDLVMdzTgiEq gveIdNwQnfWcenDbDwQ/ELuJMr9xZdaJHuLzqNd/Gjl4LG7xqsxf1FstJEYFNeJs FQXCCVFr8yBeJu37TNm0Zr7iN6gRO8iZ143ai2nfGNmMDJ15FvIMBzbVeqbdKc/W bfiZgnHMVTZLh+Rl7PkbUBEVbQUB1KOE6aqBVPbOjIv9b8sUPYKgn0wAIPJrMnWv Bs7FrOWYsZV6LBs2vBFLv2B63w== -----END CERTIFICATE-----Generated at Wed Jul 2 21:04:45 2025 by rpki-client