$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft File: 42361EAB494B759A64EFEB313189F9E2DF6603C8.mft (raw, json) Hash identifier: El5+D3iSibHZEY4VbKCBS12UCeTYaQD7Wmu9wePKO4E= Subject key identifier: 96:4A:50:26:2E:CF:E3:48:A6:66:C7:6A:82:71:17:46:E0:8E:67:DC Authority key identifier: 42:36:1E:AB:49:4B:75:9A:64:EF:EB:31:31:89:F9:E2:DF:66:03:C8 Certificate issuer: /CN=42361EAB494B759A64EFEB313189F9E2DF6603C8 Certificate serial: 4BCEB764F204F8DACED03F248424655FCCB5F8E3 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer Subject info access: rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft Manifest number: 025E Signing time: Mon 30 Jun 2025 14:59:42 +0000 Manifest this update: Mon 30 Jun 2025 14:54:42 +0000 Manifest next update: Tue 01 Jul 2025 18:58:42 +0000 Files and hashes: 1: 3133382e39372e3230342e302f32322d3234203d3e20323634313936.roa (hash: IYklB/U3RfE/oKJVLy/Xsr2JbD+zmVsGt59LebpV5y4=) 2: 42361EAB494B759A64EFEB313189F9E2DF6603C8.crl (hash: 6wlTTSI7reVyQB1kOKUXk6cID2OTpw9iJH791poJJlc=) 3: 323830343a323366633a3a2f33322d3438203d3e20323634313936.roa (hash: ENkngCJgmku9h/YUGevS0xZQjyUztj3jNjafQ8PFgic=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.crl rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Jul 2025 18:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ce:b7:64:f2:04:f8:da:ce:d0:3f:24:84:24:65:5f:cc:b5:f8:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42361EAB494B759A64EFEB313189F9E2DF6603C8 Validity Not Before: Jun 30 14:54:42 2025 GMT Not After : Jul 1 18:58:42 2025 GMT Subject: CN=964A50262ECFE348A666C76A82711746E08E67DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:93:1c:f9:30:a5:21:32:a6:05:f1:62:dc:88: 0d:3c:03:66:8f:0d:5d:ee:42:8f:2f:f9:d7:10:6a: 24:43:43:67:90:6d:ab:b5:39:98:b6:47:10:33:ae: ee:51:a7:04:fe:05:a7:5c:21:a0:b1:87:08:8c:7e: 14:ae:63:d6:61:c9:5f:e2:59:d9:8d:2c:d2:20:27: fe:c0:1e:39:2a:9e:ab:ad:56:58:04:f1:79:54:68: 8c:16:3c:a4:80:d2:27:68:91:87:6b:17:02:32:65: a2:3b:c1:73:50:3e:44:72:8e:50:b5:96:71:d3:f9: 70:50:c8:cb:4b:4a:0e:30:c1:1c:24:a7:73:cd:44: be:f1:2e:76:f9:1d:25:88:aa:f2:b9:32:43:57:fe: ff:d6:8b:18:ec:cf:29:c5:5f:90:9f:1d:1d:39:c6: 8e:1b:81:89:5d:a8:0c:78:dc:85:0e:60:3d:6f:15: 6b:a6:f5:fe:18:7f:f5:76:13:6c:26:be:30:33:31: 45:87:e3:e6:ec:c0:23:18:d4:b5:57:e1:12:e2:70: ba:24:e0:ad:57:ea:81:cb:af:3c:3f:7c:bb:d9:05: 56:b1:e4:35:6e:10:b6:62:2f:34:f6:0d:98:29:5d: 9a:3a:14:ab:b6:d0:ec:e9:64:05:4a:b7:28:d6:de: ee:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4A:50:26:2E:CF:E3:48:A6:66:C7:6A:82:71:17:46:E0:8E:67:DC X509v3 Authority Key Identifier: keyid:42:36:1E:AB:49:4B:75:9A:64:EF:EB:31:31:89:F9:E2:DF:66:03:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:19:7d:72:fd:21:bb:ae:35:74:e7:74:4a:fd:d3:c2:80:f5: 1a:56:bf:e5:70:df:42:c7:38:17:cd:2a:36:34:71:83:9c:fb: ee:b5:6f:5f:1d:99:3c:cd:44:6c:7e:b0:90:e0:2d:21:4c:11: f3:c0:dc:c5:cb:80:fd:6d:c2:88:e2:a2:64:34:2b:43:98:e2: 28:3e:cd:38:d0:a0:ce:54:85:8f:ab:78:f3:9d:11:b6:d7:58: 50:b0:e6:f0:f7:d9:64:cc:d0:18:7b:a4:2a:8d:3d:3a:3b:a7: 34:35:d8:d2:72:53:91:21:21:04:a1:8a:28:71:dd:c1:bd:d3: 97:2b:08:c8:d6:b8:1c:58:25:2d:97:e5:eb:6c:07:67:23:50: 90:22:ca:d0:5f:d2:b3:fa:e7:65:f4:1c:fd:6a:25:27:41:94: 63:8e:37:53:25:78:4e:26:03:cf:8e:e3:f2:c2:a7:7a:3f:bf: 10:1e:5f:2c:0d:1b:db:6d:8a:e0:6d:b8:49:a3:78:50:9e:dd: 63:0c:97:13:4e:d5:ae:0a:f6:cb:d4:65:7c:04:17:f0:81:6b: 8b:d9:3d:7f:ae:1d:41:59:0a:c6:92:84:43:13:92:d6:3b:7f: b8:74:7c:32:78:a3:aa:2c:5f:89:f9:1c:ca:90:d5:e9:dc:8e: 80:6c:3f:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUS863ZPIE+NrO0D8khCRlX8y1+OMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIzNjFFQUI0OTRCNzU5QTY0RUZFQjMxMzE4OUY5RTJE RjY2MDNDODAeFw0yNTA2MzAxNDU0NDJaFw0yNTA3MDExODU4NDJaMDMxMTAvBgNV BAMTKDk2NEE1MDI2MkVDRkUzNDhBNjY2Qzc2QTgyNzExNzQ2RTA4RTY3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTkxz5MKUhMqYF8WLciA08A2aP DV3uQo8v+dcQaiRDQ2eQbau1OZi2RxAzru5RpwT+BadcIaCxhwiMfhSuY9ZhyV/i WdmNLNIgJ/7AHjkqnqutVlgE8XlUaIwWPKSA0idokYdrFwIyZaI7wXNQPkRyjlC1 lnHT+XBQyMtLSg4wwRwkp3PNRL7xLnb5HSWIqvK5MkNX/v/WixjszynFX5CfHR05 xo4bgYldqAx43IUOYD1vFWum9f4Yf/V2E2wmvjAzMUWH4+bswCMY1LVX4RLicLok 4K1X6oHLrzw/fLvZBVax5DVuELZiLzT2DZgpXZo6FKu20OzpZAVKtyjW3u5PAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlkpQJi7P40imZsdqgnEXRuCOZ9wwHwYDVR0j BBgwFoAUQjYeq0lLdZpk7+sxMYn54t9mA8gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSGg4TEs4Rlpxa0ZNbndhVGE5aGd2RkpRTmNIOGhRRXhQamViazR4ZVpD a2cvMS80MjM2MUVBQjQ5NEI3NTlBNjRFRkVCMzEzMTg5RjlFMkRGNjYwM0M4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyMzYxRUFCNDk0Qjc1OUE2 NEVGRUIzMTMxODlGOUUyREY2NjAzQzguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SGg4TEs4Rlpxa0ZNbndhVGE5aGd2RkpRTmNIOGhRRXhQamViazR4ZVpDa2cvMS80 MjM2MUVBQjQ5NEI3NTlBNjRFRkVCMzEzMTg5RjlFMkRGNjYwM0M4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATBl9cv0hu641dOd0Sv3TwoD1Gla/5XDfQsc4F80qNjRxg5z77rVvXx2ZPM1E bH6wkOAtIUwR88DcxcuA/W3CiOKiZDQrQ5jiKD7NONCgzlSFj6t4850RttdYULDm 8PfZZMzQGHukKo09OjunNDXY0nJTkSEhBKGKKHHdwb3TlysIyNa4HFglLZfl62wH ZyNQkCLK0F/Ss/rnZfQc/WolJ0GUY443UyV4TiYDz47j8sKnej+/EB5fLA0b222K 4G24SaN4UJ7dYwyXE07Vrgr2y9RlfAQX8IFri9k9f64dQVkKxpKEQxOS1jt/uHR8 MnijqixfifkcypDV6dyOgGw/jw== -----END CERTIFICATE-----Generated at Tue Jul 1 07:45:59 2025 by rpki-client