$ rpki-client -vvf rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft File: D4B92897692C4F611B738C6728923C318CA5378D.mft (raw, json) Hash identifier: SN+1Kn6tp1oVv9rak/ZgAI93Wv24FgKMsua8ZwwViOE= Subject key identifier: D9:7E:79:30:F8:DA:D8:D2:71:D4:8A:3F:97:00:87:FE:32:57:FF:D6 Authority key identifier: D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D Certificate issuer: /CN=D4B92897692C4F611B738C6728923C318CA5378D Certificate serial: 52FA4396E843E4FACD53432FF21CE5B08284BE25 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer Subject info access: rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft Manifest number: 0242 Signing time: Mon 30 Jun 2025 04:55:12 +0000 Manifest this update: Mon 30 Jun 2025 04:50:12 +0000 Manifest next update: Tue 01 Jul 2025 05:12:12 +0000 Files and hashes: 1: D4B92897692C4F611B738C6728923C318CA5378D.crl (hash: blynKdFUjbSPld3s75fkHf/IT5wezj3K8mmWf0JLx3U=) 2: 323830343a386133343a656330303a3a2f33382d3338203d3e20323733363534.roa (hash: 7nFV3a+hQjLyzppGzpIflRodGqWB/Ue6XkXpTxIfQY4=) 3: 323830343a386133343a3a2f33382d3338203d3e20323733363534.roa (hash: F8C1M9ExsKqvOiXN93YJ+GMs5GM54Va82EHzWjYNmOI=) 4: 323830343a386133343a666330303a3a2f33382d3338203d3e20323733363534.roa (hash: Cz6E9/3ppBWDY1aQmtRNWMr0zzfNkr0yKTQZi86JYiA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.crl rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 05:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:fa:43:96:e8:43:e4:fa:cd:53:43:2f:f2:1c:e5:b0:82:84:be:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4B92897692C4F611B738C6728923C318CA5378D Validity Not Before: Jun 30 04:50:12 2025 GMT Not After : Jul 1 05:12:12 2025 GMT Subject: CN=D97E7930F8DAD8D271D48A3F970087FE3257FFD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:03:00:49:ce:1a:a5:24:71:4a:2b:c2:36:38: 62:54:47:63:76:cb:63:6f:17:01:ce:03:65:94:73: a3:a1:4e:e6:1d:ac:e7:84:30:67:38:07:79:a7:3c: d5:1b:36:81:6a:98:c3:0a:b7:45:c1:64:1e:87:24: 35:75:2d:db:1a:73:67:ca:2c:46:90:0f:d6:61:5e: a2:2b:b2:7f:b7:d2:42:a1:89:32:d2:18:e1:80:32: fd:fb:25:9d:1e:e6:c3:8c:8e:b3:57:51:9c:51:d4: 73:50:9f:6f:21:c2:98:a8:e8:47:c9:6d:f3:a0:64: 60:ac:03:26:e9:a9:2a:89:d7:18:b0:56:d5:12:fa: d6:62:30:dc:40:1f:0d:9d:63:2b:44:de:b7:91:63: 8c:96:4f:8c:2e:45:a0:f6:d1:d3:c3:0c:e6:9a:df: 8f:fd:54:46:34:71:ce:40:2e:96:fc:c1:02:ba:d2: 64:b6:08:6d:eb:8c:b6:aa:7a:f9:a4:f6:47:83:2a: bf:ca:a5:39:07:5f:26:24:dc:d2:2c:cf:48:22:30: db:b7:69:69:b4:8e:18:87:95:f4:bd:b5:91:d4:ff: da:2a:d8:35:98:51:10:52:6b:98:b7:43:e4:15:2b: 38:17:c0:8b:a7:3f:2b:a2:df:ea:f3:62:89:f5:f8: d1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7E:79:30:F8:DA:D8:D2:71:D4:8A:3F:97:00:87:FE:32:57:FF:D6 X509v3 Authority Key Identifier: keyid:D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:46:00:b7:16:5a:a1:96:ca:15:ce:5e:97:14:af:bc:56:07: 71:d9:ed:d4:8c:bd:58:62:6c:76:b2:c8:0e:45:5c:57:87:c3: 21:e2:d3:fc:b2:b9:84:bf:47:8b:ca:51:fa:fe:81:8a:c3:bb: bd:da:ee:dc:4b:1f:d7:63:3f:38:9c:b6:67:a5:1d:2c:7e:e0: e1:37:fe:98:71:56:6e:03:a9:d4:3d:b6:1a:f6:ea:a7:79:bc: 54:4d:08:7b:9b:b9:dd:d1:24:1e:a7:8f:81:95:a5:ff:f4:1c: a9:62:a2:4f:1c:44:9d:d9:8c:e0:64:b9:cd:6c:a7:e5:57:bd: a7:53:f0:1a:c5:08:d5:60:93:d3:ae:c5:9c:a5:69:24:3a:f4: 66:5b:06:1f:ce:1c:c3:d9:57:eb:bb:f4:7a:a8:f7:e5:9e:76: a9:09:05:ec:b8:d4:a6:7f:6c:65:f7:1c:24:6d:10:76:1a:8c: b2:5a:b1:45:58:af:aa:f0:7a:b6:a7:0e:4b:2f:33:50:bf:72: aa:1c:f1:74:cc:77:11:20:93:58:f0:85:27:fa:46:b1:05:d7: 59:3a:89:17:1c:af:92:38:fc:8b:2d:62:9a:f8:56:cf:e7:6d: ae:0c:ef:0c:08:1a:c4:32:8a:3b:48:8c:c3:bc:ad:f4:ac:b5: e9:d8:f8:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUvpDluhD5PrNU0Mv8hzlsIKEviUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRCOTI4OTc2OTJDNEY2MTFCNzM4QzY3Mjg5MjNDMzE4 Q0E1Mzc4RDAeFw0yNTA2MzAwNDUwMTJaFw0yNTA3MDEwNTEyMTJaMDMxMTAvBgNV BAMTKEQ5N0U3OTMwRjhEQUQ4RDI3MUQ0OEEzRjk3MDA4N0ZFMzI1N0ZGRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoAwBJzhqlJHFKK8I2OGJUR2N2 y2NvFwHOA2WUc6OhTuYdrOeEMGc4B3mnPNUbNoFqmMMKt0XBZB6HJDV1Ldsac2fK LEaQD9ZhXqIrsn+30kKhiTLSGOGAMv37JZ0e5sOMjrNXUZxR1HNQn28hwpio6EfJ bfOgZGCsAybpqSqJ1xiwVtUS+tZiMNxAHw2dYytE3reRY4yWT4wuRaD20dPDDOaa 34/9VEY0cc5ALpb8wQK60mS2CG3rjLaqevmk9keDKr/KpTkHXyYk3NIsz0giMNu3 aWm0jhiHlfS9tZHU/9oq2DWYURBSa5i3Q+QVKzgXwIunPyui3+rzYon1+NHFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2X55MPja2NJx1Io/lwCH/jJX/9YwHwYDVR0j BBgwFoAU1Lkol2ksT2Ebc4xnKJI8MYylN40wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR2hucUJoRU1oUk5TVnlodmNLbkNjamU0dW9qRDFFTHB3VGREV2ViTUh6 ZzMvMS9ENEI5Mjg5NzY5MkM0RjYxMUI3MzhDNjcyODkyM0MzMThDQTUzNzhELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0QjkyODk3NjkyQzRGNjEx QjczOEM2NzI4OTIzQzMxOENBNTM3OEQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R2hucUJoRU1oUk5TVnlodmNLbkNjamU0dW9qRDFFTHB3VGREV2ViTUh6ZzMvMS9E NEI5Mjg5NzY5MkM0RjYxMUI3MzhDNjcyODkyM0MzMThDQTUzNzhELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAakYAtxZaoZbKFc5elxSvvFYHcdnt1Iy9WGJsdrLIDkVcV4fDIeLT/LK5hL9H i8pR+v6BisO7vdru3Esf12M/OJy2Z6UdLH7g4Tf+mHFWbgOp1D22Gvbqp3m8VE0I e5u53dEkHqePgZWl//QcqWKiTxxEndmM4GS5zWyn5Ve9p1PwGsUI1WCT067FnKVp JDr0ZlsGH84cw9lX67v0eqj35Z52qQkF7LjUpn9sZfccJG0QdhqMslqxRVivqvB6 tqcOSy8zUL9yqhzxdMx3ESCTWPCFJ/pGsQXXWTqJFxyvkjj8iy1imvhWz+dtrgzv DAgaxDKKO0iMw7yt9Ky16dj4aA== -----END CERTIFICATE-----Generated at Mon Jun 30 11:43:34 2025 by rpki-client