$ rpki-client -vvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft File: F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft (raw, json) Hash identifier: o7yj/2jmfcIrOu+Kv1TAbLC+8F5yNqVySdERzKCSi0E= Subject key identifier: AC:B4:D4:FF:61:94:55:11:53:D8:25:1D:12:06:3E:8C:E8:25:3C:37 Authority key identifier: F3:9F:CE:F7:5A:85:E9:FA:24:47:77:F7:CE:DA:CC:58:2B:7A:BA:29 Certificate issuer: /CN=F39FCEF75A85E9FA244777F7CEDACC582B7ABA29 Certificate serial: 73D0641FF0C97DD1BCBD575258F56A3AD70552B2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.cer Subject info access: rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft Manifest number: 0151 Signing time: Sun 29 Jun 2025 08:38:38 +0000 Manifest this update: Sun 29 Jun 2025 08:33:38 +0000 Manifest next update: Mon 30 Jun 2025 11:14:38 +0000 Files and hashes: 1: F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.crl (hash: gU9wiyuvwsaRdc2XbPyb2je9KdZof3vwy0zorZ2O07E=) 2: 3136382e302e3136352e302f32342d3234203d3e20323633343833.roa (hash: K7GvpcP23FlvcUYDW+06XF+u23S5lyvB473kdUEvaJo=) 3: 3136382e302e3136342e302f32342d3234203d3e20323633343833.roa (hash: WAVHV00hp8kQuY2m5oNryEnxV7rX87TuahPEF3PkZjY=) 4: 3136382e302e3136362e302f32342d3234203d3e20323633343833.roa (hash: xnpHTIXw5NOAsWCdZzalk0/kRTMqwFcZy+7og3ox6hc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.crl rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 30 Jun 2025 11:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:d0:64:1f:f0:c9:7d:d1:bc:bd:57:52:58:f5:6a:3a:d7:05:52:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39FCEF75A85E9FA244777F7CEDACC582B7ABA29 Validity Not Before: Jun 29 08:33:38 2025 GMT Not After : Jun 30 11:14:38 2025 GMT Subject: CN=ACB4D4FF6194551153D8251D12063E8CE8253C37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c6:e2:98:38:5f:23:dc:0d:dd:c2:63:8d:22: 26:2f:f0:0b:3c:64:dc:bb:db:90:5b:2f:84:11:ab: 6d:1e:ce:e1:4a:16:b0:4b:58:c8:96:c8:3c:9c:fe: 4b:a3:73:4e:28:a9:10:3b:be:10:49:72:94:0a:1b: 8b:00:9d:aa:ef:12:72:25:6c:bb:79:77:23:8d:df: c6:7c:db:94:d2:67:02:c7:7a:34:02:e2:25:94:52: 19:f9:76:4a:17:05:ff:7d:6c:ef:29:02:95:12:0f: a2:df:54:34:56:87:7f:49:db:85:02:6a:d5:52:6f: 38:3b:84:43:a6:b1:a3:f6:8b:00:84:e1:2c:8d:08: a9:ab:47:61:de:f0:90:40:f5:c4:55:96:5c:76:f0: 35:54:1e:8e:66:a9:85:74:b0:1e:33:92:bb:8b:aa: ed:55:01:21:76:62:6f:a6:0f:e7:a6:5f:89:4c:05: 01:77:c2:48:84:c4:14:63:df:8e:d2:56:85:c0:76: d6:cb:ad:66:4b:16:58:3b:e7:05:1a:92:61:a4:55: 8f:63:79:41:14:c7:3a:53:cb:60:ec:77:2f:7c:23: c2:ea:de:e2:04:8e:65:84:ac:b5:d2:3f:c7:d1:49: 0b:1d:ea:87:af:61:29:20:f3:fd:00:d5:da:06:a9: 42:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B4:D4:FF:61:94:55:11:53:D8:25:1D:12:06:3E:8C:E8:25:3C:37 X509v3 Authority Key Identifier: keyid:F3:9F:CE:F7:5A:85:E9:FA:24:47:77:F7:CE:DA:CC:58:2B:7A:BA:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:87:18:ed:7c:e5:bf:09:17:69:6c:2a:71:40:52:a8:4c:df: c7:40:5f:fc:52:fa:a5:13:9d:9f:58:1d:ed:5a:16:ec:e2:e7: 81:42:d6:76:4e:3a:58:a5:e9:ad:5f:b9:c3:02:81:c7:90:aa: da:2d:54:c7:1f:de:c4:17:8c:20:f4:e9:cc:56:0b:a6:32:43: b8:4b:da:22:0c:bc:91:f3:cf:f8:da:b4:ec:dd:04:ff:bd:7d: 2c:2c:93:3e:63:98:c5:8a:fe:77:86:26:95:20:fb:6c:d5:dc: 12:fa:14:cb:fc:32:86:68:f5:39:55:75:98:59:07:a6:21:00: 39:b6:ab:4c:7f:b5:a2:e4:12:d0:d3:5f:c1:29:c3:14:08:68: ad:e3:70:a3:e9:69:b7:8b:11:bc:bc:d2:ee:8b:f6:a2:13:e9: c3:b8:d6:c1:a6:f6:e9:26:fc:92:7a:67:c9:c9:1c:83:72:1d: 90:bd:45:82:44:81:38:4e:cd:0e:5c:7a:94:cb:e9:8f:46:82: 24:87:79:9c:a8:d9:a9:67:46:06:ed:26:f3:05:44:e6:d1:c9: 7b:c7:b8:53:aa:33:60:d8:53:ad:f5:cf:b5:84:04:09:af:01: e8:c6:d2:dd:23:0e:df:c0:a0:ad:54:bd:c9:4e:52:58:c6:75: 0b:19:a4:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUc9BkH/DJfdG8vVdSWPVqOtcFUrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5RkNFRjc1QTg1RTlGQTI0NDc3N0Y3Q0VEQUNDNTgy QjdBQkEyOTAeFw0yNTA2MjkwODMzMzhaFw0yNTA2MzAxMTE0MzhaMDMxMTAvBgNV BAMTKEFDQjRENEZGNjE5NDU1MTE1M0Q4MjUxRDEyMDYzRThDRTgyNTNDMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxuKYOF8j3A3dwmONIiYv8As8 ZNy725BbL4QRq20ezuFKFrBLWMiWyDyc/kujc04oqRA7vhBJcpQKG4sAnarvEnIl bLt5dyON38Z825TSZwLHejQC4iWUUhn5dkoXBf99bO8pApUSD6LfVDRWh39J24UC atVSbzg7hEOmsaP2iwCE4SyNCKmrR2He8JBA9cRVllx28DVUHo5mqYV0sB4zkruL qu1VASF2Ym+mD+emX4lMBQF3wkiExBRj347SVoXAdtbLrWZLFlg75wUakmGkVY9j eUEUxzpTy2Dsdy98I8Lq3uIEjmWErLXSP8fRSQsd6oevYSkg8/0A1doGqULbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUrLTU/2GUVRFT2CUdEgY+jOglPDcwHwYDVR0j BBgwFoAU85/O91qF6fokR3f3ztrMWCt6uikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDR4Tlh1OWNaYko5QVd5ZnRYVXpYVGRzbUQ0R3NuQzI1Mms5WkFNZGVB VXAvMC9GMzlGQ0VGNzVBODVFOUZBMjQ0Nzc3RjdDRURBQ0M1ODJCN0FCQTI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzOUZDRUY3NUE4NUU5RkEy NDQ3NzdGN0NFREFDQzU4MkI3QUJBMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDR4Tlh1OWNaYko5QVd5ZnRYVXpYVGRzbUQ0R3NuQzI1Mms5WkFNZGVBVXAvMC9G MzlGQ0VGNzVBODVFOUZBMjQ0Nzc3RjdDRURBQ0M1ODJCN0FCQTI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsIcY7XzlvwkXaWwqcUBSqEzfx0Bf/FL6pROdn1gd7VoW7OLngULWdk46WKXp rV+5wwKBx5Cq2i1Uxx/exBeMIPTpzFYLpjJDuEvaIgy8kfPP+Nq07N0E/719LCyT PmOYxYr+d4YmlSD7bNXcEvoUy/wyhmj1OVV1mFkHpiEAObarTH+1ouQS0NNfwSnD FAhoreNwo+lpt4sRvLzS7ov2ohPpw7jWwab26Sb8knpnyckcg3IdkL1FgkSBOE7N Dlx6lMvpj0aCJId5nKjZqWdGBu0m8wVE5tHJe8e4U6ozYNhTrfXPtYQECa8B6MbS 3SMO38CgrVS9yU5SWMZ1Cxmk5A== -----END CERTIFICATE-----Generated at Mon Jun 30 04:14:52 2025 by rpki-client