$ rpki-client -vvf rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft File: 4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft (raw, json) Hash identifier: lz8VCPis6UuNH7JOJhYrh72lwW1szbSiYhFTyGqgsNI= Subject key identifier: F7:A2:23:9E:AC:19:7F:FD:F8:68:11:62:BB:01:66:F2:26:84:E3:47 Authority key identifier: 4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42 Certificate issuer: /CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642 Certificate serial: 7E0F7D619B7A8AE27AD5E800FA6A60390583522D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer Subject info access: rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft Manifest number: 027E Signing time: Fri 25 Jul 2025 07:40:01 +0000 Manifest this update: Fri 25 Jul 2025 07:35:01 +0000 Manifest next update: Sat 26 Jul 2025 09:15:01 +0000 Files and hashes: 1: 323830343a313732343a3a2f33322d3332203d3e20323633313236.roa (hash: xsPWu5Oyc8zYvFSpUQl6AyPy98auaRdocgkmpbAT+rI=) 2: 4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl (hash: QudJHsHmKoVynXNnSQZO9OPVPs3k9ktyUcyPYtpFC0M=) 3: 3137372e39322e3138342e302f32312d3231203d3e20323633313236.roa (hash: 0afFfPJistXXEZlrXlXusI1hM5eNaq3t1i5SVTRNels=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Jul 2025 09:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:0f:7d:61:9b:7a:8a:e2:7a:d5:e8:00:fa:6a:60:39:05:83:52:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642 Validity Not Before: Jul 25 07:35:01 2025 GMT Not After : Jul 26 09:15:01 2025 GMT Subject: CN=F7A2239EAC197FFDF8681162BB0166F22684E347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:45:eb:c1:0f:db:bf:fb:c1:64:9a:b4:8b:f0: 69:99:87:f9:ab:ac:2a:43:4c:5b:a1:19:66:d8:13: 9a:b6:e8:5a:d2:ad:75:92:df:85:da:8f:c1:18:e7: fe:a5:73:a0:ca:0b:78:77:c0:a0:c3:8b:27:90:c4: 8d:d5:07:ae:bd:e2:d5:08:1e:82:c0:26:9f:a5:97: f6:67:fd:99:ab:94:3d:a3:fd:f4:e9:14:b7:29:5f: f3:29:5b:41:1c:d3:d6:ef:a0:f7:85:2e:14:9a:94: d2:c4:2b:5e:be:3b:4b:64:6b:ff:3e:2e:99:e5:de: f7:3e:ac:4a:8a:27:53:60:31:50:d3:15:fa:99:69: a0:9a:5e:7b:fa:31:2a:16:e2:1b:57:76:c7:e1:ce: 00:97:d8:57:e6:86:2a:d2:7e:87:18:b9:21:fd:d4: 67:2e:b0:be:e2:8c:69:ea:c1:51:c3:10:65:4b:ec: 4d:8d:bc:cc:6f:a0:46:8b:50:f8:bc:e9:44:06:0c: f0:7f:ed:75:00:25:ec:ef:82:19:79:a7:f4:92:80: a8:46:4e:c9:2a:27:b4:e6:53:60:64:9f:a7:70:a5: 6b:ff:48:db:72:04:1b:3a:c5:d6:3f:0c:1c:d2:30: 4d:6c:2a:ea:46:1b:07:e8:b2:6b:8e:f2:3d:b1:c7: be:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A2:23:9E:AC:19:7F:FD:F8:68:11:62:BB:01:66:F2:26:84:E3:47 X509v3 Authority Key Identifier: keyid:4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:4c:54:92:89:f6:14:63:97:19:92:fe:f9:24:7a:c0:df:f7: 64:31:d4:96:f3:02:f6:9e:64:af:86:74:7b:9f:40:73:ba:42: 7f:24:91:3a:96:b4:3e:b8:7c:5e:a7:06:f1:c3:32:0e:86:77: a2:46:28:eb:86:74:68:c1:e5:2f:28:1e:61:06:99:64:52:5b: 17:10:44:cb:89:84:fe:27:d7:b2:ed:9c:11:05:93:b7:70:74: 90:79:e0:67:93:d7:a7:d7:26:32:02:97:e1:85:60:81:47:db: 35:e0:74:4c:53:9e:dc:c2:69:61:8b:15:01:0d:75:e4:78:39: bb:1f:fc:03:34:24:9d:52:5d:a2:55:12:3b:92:b5:27:ec:cf: 55:91:be:33:96:47:2e:8b:1f:25:8f:d8:8e:3b:ab:59:fc:64: 2f:5f:57:dd:ae:e7:07:07:0c:a9:31:68:7c:14:42:8d:33:81: d7:3b:33:61:53:07:9d:d7:c6:41:4a:30:88:16:6c:43:bd:5b: a5:a2:1f:88:6a:69:71:09:5f:66:ae:2f:9d:85:26:67:86:3a: 77:f3:f3:68:e7:5f:12:e9:78:e4:00:d7:f8:b1:da:d3:7b:48: af:84:42:d4:75:b4:a2:34:f0:5a:0d:ec:e8:02:10:7f:93:f9: f1:f0:bd:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfg99YZt6iuJ61egA+mpgOQWDUi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENBMjFBOEQ5MjhDQUJDMEM5RUYxMzg1MDYzNUIzMUVB RjNDMjY0MjAeFw0yNTA3MjUwNzM1MDFaFw0yNTA3MjYwOTE1MDFaMDMxMTAvBgNV BAMTKEY3QTIyMzlFQUMxOTdGRkRGODY4MTE2MkJCMDE2NkYyMjY4NEUzNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzRevBD9u/+8FkmrSL8GmZh/mr rCpDTFuhGWbYE5q26FrSrXWS34Xaj8EY5/6lc6DKC3h3wKDDiyeQxI3VB6694tUI HoLAJp+ll/Zn/ZmrlD2j/fTpFLcpX/MpW0Ec09bvoPeFLhSalNLEK16+O0tka/8+ Lpnl3vc+rEqKJ1NgMVDTFfqZaaCaXnv6MSoW4htXdsfhzgCX2FfmhirSfocYuSH9 1GcusL7ijGnqwVHDEGVL7E2NvMxvoEaLUPi86UQGDPB/7XUAJezvghl5p/SSgKhG TskqJ7TmU2Bkn6dwpWv/SNtyBBs6xdY/DBzSME1sKupGGwfosmuO8j2xx77TAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU96IjnqwZf/34aBFiuwFm8iaE40cwHwYDVR0j BBgwFoAUTKIajZKMq8DJ7xOFBjWzHq88JkIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDl1VzFrQ2hjRFlBRWpaZWc4RlhxWTdFRXBXWnZCOHozeEQ0aTJQWVZU c2cvMS80Q0EyMUE4RDkyOENBQkMwQzlFRjEzODUwNjM1QjMxRUFGM0MyNjQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDQTIxQThEOTI4Q0FCQzBD OUVGMTM4NTA2MzVCMzFFQUYzQzI2NDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NDl1VzFrQ2hjRFlBRWpaZWc4RlhxWTdFRXBXWnZCOHozeEQ0aTJQWVZUc2cvMS80 Q0EyMUE4RDkyOENBQkMwQzlFRjEzODUwNjM1QjMxRUFGM0MyNjQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANUxUkon2FGOXGZL++SR6wN/3ZDHUlvMC9p5kr4Z0e59Ac7pCfySROpa0Prh8 XqcG8cMyDoZ3okYo64Z0aMHlLygeYQaZZFJbFxBEy4mE/ifXsu2cEQWTt3B0kHng Z5PXp9cmMgKX4YVggUfbNeB0TFOe3MJpYYsVAQ115Hg5ux/8AzQknVJdolUSO5K1 J+zPVZG+M5ZHLosfJY/YjjurWfxkL19X3a7nBwcMqTFofBRCjTOB1zszYVMHndfG QUowiBZsQ71bpaIfiGppcQlfZq4vnYUmZ4Y6d/PzaOdfEul45ADX+LHa03tIr4RC 1HW0ojTwWg3s6AIQf5P58fC9Bw== -----END CERTIFICATE-----Generated at Sat Jul 26 00:25:07 2025 by rpki-client