$ rpki-client -vvf rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft File: 294426E31AEAEBF273647549DD459DE98A112431.mft (raw, json) Hash identifier: yb4OTLFVpJTozlx9xlJJZ49CF8sb/vjPtaj3/CUEDtM= Subject key identifier: 1E:63:54:75:C3:B7:CD:B1:33:6B:2F:CC:EB:70:E2:CE:5E:F7:53:78 Authority key identifier: 29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31 Certificate issuer: /CN=294426E31AEAEBF273647549DD459DE98A112431 Certificate serial: 661C77FB08DFA96EF814E2E126CA1A7DC07878F8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer Subject info access: rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft Manifest number: 0267 Signing time: Wed 02 Jul 2025 08:26:54 +0000 Manifest this update: Wed 02 Jul 2025 08:21:54 +0000 Manifest next update: Thu 03 Jul 2025 08:27:54 +0000 Files and hashes: 1: 3136382e3139342e3133362e302f32322d3332203d3e20323633333935.roa (hash: tM+Sjx/wcU41RTwQQmeZaLCi88tO8sgzPpP4YPgZE8s=) 2: 294426E31AEAEBF273647549DD459DE98A112431.crl (hash: eFZT3jPhYiCIckMaEXMp/r9dRsFw/Fre4emYfneznEk=) 3: 3137372e3132352e3132342e302f32322d3234203d3e20323633333935.roa (hash: kP3yuOziQGvTs7gAqbrCAHPzpnd0+PYYuQOkH5wNORA=) 4: 323830343a313539303a3a2f33322d313238203d3e20323633333935.roa (hash: 27TRK43DvGzctvUwTwZoruKts8GvTaqt7quiQch6ar4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 08:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:1c:77:fb:08:df:a9:6e:f8:14:e2:e1:26:ca:1a:7d:c0:78:78:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=294426E31AEAEBF273647549DD459DE98A112431 Validity Not Before: Jul 2 08:21:54 2025 GMT Not After : Jul 3 08:27:54 2025 GMT Subject: CN=1E635475C3B7CDB1336B2FCCEB70E2CE5EF75378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4d:d7:90:d7:6a:f1:3d:5f:8e:0c:a0:de:29: eb:e3:60:0c:81:9c:bb:a4:2f:64:5a:ac:db:7c:c2: 2c:fe:39:2d:b8:41:43:48:26:77:1f:ea:31:89:94: 2e:b1:db:90:7b:04:f2:c6:64:43:8b:ff:64:8a:37: 5e:5e:c7:cc:62:80:2d:04:fc:8f:1c:30:e3:35:3f: ae:d4:a8:06:f6:fc:5d:df:48:e1:74:13:35:5a:c3: dd:0b:70:1f:d1:ea:f4:77:16:e6:03:b0:0b:23:48: e8:e3:a2:28:ab:cb:42:ae:ae:e2:e9:9f:1e:6c:e1: e9:d4:6b:a6:56:d4:49:80:d5:08:6e:25:4a:42:c8: fb:a3:bc:31:e2:a3:6f:59:26:7f:35:de:49:c7:06: d9:07:b4:95:c1:9c:e6:5e:2e:01:ef:0a:0f:6b:3c: f3:16:71:cc:74:3e:7b:8d:9b:1b:cf:fe:41:22:d9: c1:e8:4b:d4:83:d9:d5:53:54:2f:56:7e:d0:b3:ed: 43:41:e3:12:c1:90:61:a3:32:26:e4:3f:37:16:08: 31:b3:76:fb:e6:15:4d:a7:12:14:d4:0b:e8:f2:16: 8d:8b:ea:ca:92:f8:38:e7:20:4c:5f:e1:06:5d:81: 4f:f1:43:47:1b:b9:9a:1d:a1:b5:7f:72:53:ae:15: c2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:63:54:75:C3:B7:CD:B1:33:6B:2F:CC:EB:70:E2:CE:5E:F7:53:78 X509v3 Authority Key Identifier: keyid:29:44:26:E3:1A:EA:EB:F2:73:64:75:49:DD:45:9D:E9:8A:11:24:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294426E31AEAEBF273647549DD459DE98A112431.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/1/294426E31AEAEBF273647549DD459DE98A112431.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:2a:d7:35:69:1b:05:35:ce:8d:aa:a3:9f:8d:28:0a:79:a3: 76:03:89:2f:fb:62:27:d2:ab:b0:28:a3:79:4b:81:46:fd:a9: 56:7c:eb:6f:81:27:f6:d7:42:b1:49:4a:56:8e:e2:1f:b7:19: 5d:2c:27:a3:bd:19:ec:52:19:bf:8c:06:5c:2e:ed:3a:29:96: 68:9c:62:ee:42:22:a7:49:79:2f:5f:f5:a4:f7:79:bf:2d:59: 28:15:75:f2:88:45:14:10:a5:3c:31:a5:d2:e1:51:26:fe:d5: 53:c8:df:00:b8:85:ad:08:df:c0:36:be:5d:1c:91:7a:73:01: 00:38:2c:f2:61:64:d6:8a:99:4a:33:c7:7f:c4:07:63:a8:fc: 93:55:57:dd:22:be:5e:cc:cc:26:f0:1f:86:92:1b:4e:1b:5a: ed:4b:6f:10:93:e2:1d:a4:7b:99:7b:85:8c:8b:d7:c2:fb:a7: 70:2e:4b:f5:1f:10:f6:e8:3d:9c:fc:d6:6e:33:91:c4:73:20: 70:bb:ff:1a:be:c7:9f:83:c9:93:e1:cc:13:fa:4e:65:1f:b8: 5a:a2:16:41:7e:b3:bd:79:ce:02:54:8a:d2:cd:fa:3f:83:ea: a2:0e:d4:6b:63:c0:e6:5b:1b:8d:fe:6b:5d:b1:95:da:4c:f1: be:f6:0b:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZhx3+wjfqW74FOLhJsoafcB4ePgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0NDI2RTMxQUVBRUJGMjczNjQ3NTQ5REQ0NTlERTk4 QTExMjQzMTAeFw0yNTA3MDIwODIxNTRaFw0yNTA3MDMwODI3NTRaMDMxMTAvBgNV BAMTKDFFNjM1NDc1QzNCN0NEQjEzMzZCMkZDQ0VCNzBFMkNFNUVGNzUzNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYTdeQ12rxPV+ODKDeKevjYAyB nLukL2RarNt8wiz+OS24QUNIJncf6jGJlC6x25B7BPLGZEOL/2SKN15ex8xigC0E /I8cMOM1P67UqAb2/F3fSOF0EzVaw90LcB/R6vR3FuYDsAsjSOjjoiiry0KuruLp nx5s4enUa6ZW1EmA1QhuJUpCyPujvDHio29ZJn813knHBtkHtJXBnOZeLgHvCg9r PPMWccx0PnuNmxvP/kEi2cHoS9SD2dVTVC9WftCz7UNB4xLBkGGjMibkPzcWCDGz dvvmFU2nEhTUC+jyFo2L6sqS+DjnIExf4QZdgU/xQ0cbuZodobV/clOuFcJJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHmNUdcO3zbEzay/M63Dizl73U3gwHwYDVR0j BBgwFoAUKUQm4xrq6/JzZHVJ3UWd6YoRJDEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRkZvRnFCeDd4U3ZTcmozMlpGMnpKdEJxQ0xpdEVFR0QyeDQ5VnFkUTVT bjQvMS8yOTQ0MjZFMzFBRUFFQkYyNzM2NDc1NDlERDQ1OURFOThBMTEyNDMxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5NDQyNkUzMUFFQUVCRjI3 MzY0NzU0OURENDU5REU5OEExMTI0MzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RkZvRnFCeDd4U3ZTcmozMlpGMnpKdEJxQ0xpdEVFR0QyeDQ5VnFkUTVTbjQvMS8y OTQ0MjZFMzFBRUFFQkYyNzM2NDc1NDlERDQ1OURFOThBMTEyNDMxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtirXNWkbBTXOjaqjn40oCnmjdgOJL/tiJ9KrsCijeUuBRv2pVnzrb4En9tdC sUlKVo7iH7cZXSwno70Z7FIZv4wGXC7tOimWaJxi7kIip0l5L1/1pPd5vy1ZKBV1 8ohFFBClPDGl0uFRJv7VU8jfALiFrQjfwDa+XRyRenMBADgs8mFk1oqZSjPHf8QH Y6j8k1VX3SK+XszMJvAfhpIbThta7UtvEJPiHaR7mXuFjIvXwvuncC5L9R8Q9ug9 nPzWbjORxHMgcLv/Gr7Hn4PJk+HME/pOZR+4WqIWQX6zvXnOAlSK0s36P4Pqog7U a2PA5lsbjf5rXbGV2kzxvvYLtA== -----END CERTIFICATE-----Generated at Wed Jul 2 20:03:05 2025 by rpki-client