$ rpki-client -vvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft File: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft (raw, json) Hash identifier: WL9Xyz5brCg5qBf7p6zj2n5tYAJImrKA07ODKy/9kQw= Subject key identifier: DE:19:78:EB:F4:93:6E:30:31:A0:CB:3D:28:DA:75:28:E8:14:ED:C5 Authority key identifier: 4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 Certificate issuer: /CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Certificate serial: 4B0CC2FAF3BDFB5E8820D09CC14FFDE75C0C0249 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject info access: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft Manifest number: E0 Signing time: Wed 02 Jul 2025 18:03:29 +0000 Manifest this update: Wed 02 Jul 2025 17:58:29 +0000 Manifest next update: Thu 03 Jul 2025 18:14:29 +0000 Files and hashes: 1: 3230312e3135302e3132302e302f32322d3234203d3e203631383632.roa (hash: N7pBzAqFHQXwjW/KS0P1VsU5DUXI/b+mnSTAPuK/6eo=) 2: 323830343a316137633a3a2f33322d3334203d3e203631383632.roa (hash: TJaA5xEZrkse1eozPtBQZAtjZj6iE5o4CDiRrM/8CKc=) 3: 3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa (hash: fxTpR6kGjpzHUi4HM+ey62/lxDfVFp1Mya/83PptAgs=) 4: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl (hash: CCdALu9DAri2kWLuIoVJ0jKB9z8aR0jAF6ymFUTMixE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 03 Jul 2025 18:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:0c:c2:fa:f3:bd:fb:5e:88:20:d0:9c:c1:4f:fd:e7:5c:0c:02:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Validity Not Before: Jul 2 17:58:29 2025 GMT Not After : Jul 3 18:14:29 2025 GMT Subject: CN=DE1978EBF4936E3031A0CB3D28DA7528E814EDC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:69:3b:13:22:c1:f8:08:a2:c2:f0:81:99:c8: 88:a4:9b:76:68:00:52:22:16:18:2a:8c:0c:29:fe: 3b:77:f1:15:1c:3d:76:44:ea:4c:2f:47:9c:e6:2e: 79:18:cf:e9:65:9f:2e:f8:f9:a3:d2:dc:37:20:e9: f6:e0:05:3a:2e:f8:8e:ae:f2:82:94:02:84:9a:24: 08:03:45:c7:0e:17:ca:f7:e2:df:b7:6d:82:b3:07: 22:a0:0f:ba:aa:10:01:93:9a:bb:2d:8d:4c:6a:b7: 19:aa:b2:cd:cb:1b:5e:d5:ee:ee:75:3d:12:c6:e3: 89:c2:ff:88:a0:cc:a7:93:c9:19:40:3f:2d:7d:8c: 67:f6:44:15:3b:65:ef:0f:96:06:51:62:96:8d:5b: e7:3b:91:29:be:af:55:8a:0e:ec:ad:88:cf:aa:93: 24:f9:01:b1:e6:1b:d1:28:e6:d6:f6:11:0a:c7:61: ba:03:db:88:c5:fc:45:d0:7b:ae:ad:30:ec:fd:d3: aa:e3:53:b3:da:65:8c:c9:ba:28:2f:be:37:df:4c: c7:d0:64:13:66:15:52:94:37:75:e2:62:40:4f:27: 67:93:a5:a8:37:19:cc:ea:2c:94:92:2c:a0:cf:63: 4e:76:4a:0e:1b:35:88:9a:b3:fc:d7:bd:d9:1d:18: 44:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:19:78:EB:F4:93:6E:30:31:A0:CB:3D:28:DA:75:28:E8:14:ED:C5 X509v3 Authority Key Identifier: keyid:4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:09:bf:a0:67:58:68:c8:9f:b8:84:5b:1d:89:18:af:4d:f6: 93:79:a2:a5:bc:61:50:c2:55:b8:d0:d2:5a:39:51:82:14:16: 2c:6f:12:ac:cb:3f:94:07:f4:fb:a0:7c:a4:81:37:a2:0a:b8: 55:71:94:a2:a3:1c:50:04:63:15:57:88:7b:e0:e2:82:1e:21: f2:b7:9f:81:9d:a9:b8:4d:52:32:84:ee:ba:52:7e:84:81:49: 8f:6a:09:36:bd:d5:d3:a3:be:75:8a:c9:ab:c3:22:74:21:42: 1a:94:44:82:d8:95:2c:44:c6:89:6c:62:a1:9c:97:28:26:a9: c4:31:31:85:e9:ba:99:77:ef:e8:c7:48:00:fa:ec:b5:1f:c9: 70:ae:4f:fa:b1:ec:cb:da:20:0e:df:1b:db:61:57:f0:64:5c: 2c:7b:92:17:7c:25:8d:cc:9f:d8:ec:19:18:7e:9d:d2:07:15: e1:dc:97:ed:ea:96:5c:fc:a2:82:ff:bb:13:fd:56:86:e4:1b: 6c:ec:d7:9f:64:15:42:39:c4:d9:0d:e4:24:ad:bc:5e:61:23: 25:a2:fe:99:2d:d6:5e:18:13:21:4e:df:46:5d:12:3d:75:42: ee:04:b9:18:7d:6c:6f:07:09:80:5d:4c:9e:a1:6c:2b:80:db: 8b:54:39:8b -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUSwzC+vO9+16IINCcwU/951wMAkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlF NTMwNjM1NTAeFw0yNTA3MDIxNzU4MjlaFw0yNTA3MDMxODE0MjlaMDMxMTAvBgNV BAMTKERFMTk3OEVCRjQ5MzZFMzAzMUEwQ0IzRDI4REE3NTI4RTgxNEVEQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJaTsTIsH4CKLC8IGZyIikm3Zo AFIiFhgqjAwp/jt38RUcPXZE6kwvR5zmLnkYz+llny74+aPS3Dcg6fbgBTou+I6u 8oKUAoSaJAgDRccOF8r34t+3bYKzByKgD7qqEAGTmrstjUxqtxmqss3LG17V7u51 PRLG44nC/4igzKeTyRlAPy19jGf2RBU7Ze8PlgZRYpaNW+c7kSm+r1WKDuytiM+q kyT5AbHmG9Eo5tb2EQrHYboD24jF/EXQe66tMOz906rjU7PaZYzJuigvvjffTMfQ ZBNmFVKUN3XiYkBPJ2eTpag3GczqLJSSLKDPY052Sg4bNYias/zXvdkdGETfAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQU3hl46/STbjAxoMs9KNp1KOgU7cUwHwYDVR0j BBgwFoAUS4CyC9dA34r88PjFpv64ueUwY1UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9Tb2h2akZIS1hwcGtOUWs3UWJxeWVqTjVmUGtaMmNHclA0OXI2dUFRdmNz LzAvNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlFNTMwNjM1NS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjgwQjIwQkQ3NDBERjhBRkNG MEY4QzVBNkZFQjhCOUU1MzA2MzU1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1Nv aHZqRkhLWHBwa05RazdRYnF5ZWpONWZQa1oyY0dyUDQ5cjZ1QVF2Y3MvMC80Qjgw QjIwQkQ3NDBERjhBRkNGMEY4QzVBNkZFQjhCOUU1MzA2MzU1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA nAm/oGdYaMifuIRbHYkYr032k3mipbxhUMJVuNDSWjlRghQWLG8SrMs/lAf0+6B8 pIE3ogq4VXGUoqMcUARjFVeIe+Digh4h8refgZ2puE1SMoTuulJ+hIFJj2oJNr3V 06O+dYrJq8MidCFCGpREgtiVLETGiWxioZyXKCapxDExhem6mXfv6MdIAPrstR/J cK5P+rHsy9ogDt8b22FX8GRcLHuSF3wljcyf2OwZGH6d0gcV4dyX7eqWXPyigv+7 E/1WhuQbbOzXn2QVQjnE2Q3kJK28XmEjJaL+mS3WXhgTIU7fRl0SPXVC7gS5GH1s bwcJgF1MnqFsK4Dbi1Q5iw== -----END CERTIFICATE-----Generated at Thu Jul 3 02:02:45 2025 by rpki-client