$ rpki-client -vvf rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft File: 4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft (raw, json) Hash identifier: 2NdHM13lp9tiCU/BAdEsqXdng3SDfXe/lHN4Fph4t6o= Subject key identifier: 5E:E1:3B:30:8C:F7:A0:D7:A9:37:25:55:68:D3:59:49:4D:1A:3B:0D Authority key identifier: 4F:3B:34:40:57:7D:0E:47:4F:F1:5D:DF:4D:E7:A4:78:CF:07:F3:FB Certificate issuer: /CN=4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB Certificate serial: 2E8FAA1CBDF1C0B0B7A5CDE7F76B5BA93EA7C898 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.cer Subject info access: rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft Manifest number: 0A Signing time: Fri 25 Jul 2025 19:49:14 +0000 Manifest this update: Fri 25 Jul 2025 19:44:14 +0000 Manifest next update: Sat 26 Jul 2025 21:09:14 +0000 Files and hashes: 1: 4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.crl (hash: z6o0EVbFfU/GkGRHGccyso8b7+aHzPEyzFcRB3gfe+I=) 2: 323830343a393239303a3a2f33322d3438203d3e20323734373139.roa (hash: RA5I+vzoQlcGK0NMw5Qd6CqIjhtm9+nKDVEJJYgQHJ8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.crl rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Jul 2025 21:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:8f:aa:1c:bd:f1:c0:b0:b7:a5:cd:e7:f7:6b:5b:a9:3e:a7:c8:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB Validity Not Before: Jul 25 19:44:14 2025 GMT Not After : Jul 26 21:09:14 2025 GMT Subject: CN=5EE13B308CF7A0D7A937255568D359494D1A3B0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d3:9e:a0:c1:e3:57:d5:b9:b2:e8:8d:ad:e6: 0e:74:ee:ec:21:1d:d3:60:3e:9b:b8:32:41:fd:26: 2e:5c:09:41:37:19:1f:26:c7:f4:aa:f2:0c:82:bf: bf:9a:a0:c0:0f:52:34:fe:2c:bf:78:b5:55:e4:01: 05:fd:a0:70:3f:32:f0:d3:bb:55:7f:92:ea:a2:2c: 66:db:b7:bc:a7:9f:c5:b5:a0:e9:db:49:7b:7b:02: 82:d2:2e:e2:77:fe:8e:8d:a6:c5:7e:99:f0:7c:9d: 96:55:8c:81:d5:bc:55:cc:15:0b:6f:12:e0:a1:5f: 97:76:8a:a7:18:e1:fd:da:19:d6:43:e8:dc:3a:70: 31:b9:fc:e9:cd:8b:1c:1f:62:43:32:fe:15:d4:1a: b5:4c:bb:a4:ed:fc:cb:a0:67:11:1d:62:c8:8a:dc: 0a:e2:50:6c:f0:00:2b:c5:c1:6d:f0:21:4d:b6:38: b1:e5:a5:31:28:6e:a2:51:8f:cd:e5:bd:71:f1:bd: 16:10:b6:93:18:32:e5:38:ae:38:52:5c:c5:fa:e1: de:17:48:df:79:9e:0d:cb:6e:a7:06:e2:27:4e:8b: 83:62:3f:6f:fb:66:e4:3b:ae:1d:f5:d7:b4:96:b0: 81:d4:64:bb:f1:88:01:ca:74:23:e0:4e:20:b6:60: 1d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E1:3B:30:8C:F7:A0:D7:A9:37:25:55:68:D3:59:49:4D:1A:3B:0D X509v3 Authority Key Identifier: keyid:4F:3B:34:40:57:7D:0E:47:4F:F1:5D:DF:4D:E7:A4:78:CF:07:F3:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ikPkQmMEbW3uKKo7D2id28LVV94tECs1mDDx8TFqh5i/0/4F3B3440577D0E474FF15DDF4DE7A478CF07F3FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:e5:83:e4:17:55:6c:e6:7d:99:37:dc:cf:0b:25:86:e3:19: 7d:f7:2e:cc:85:22:c5:ea:7c:0b:44:ec:f6:7a:13:74:96:e9: fc:c8:2a:55:55:3b:f4:40:a1:b3:3c:4a:b3:c0:ec:f9:c8:08: 20:5d:17:5f:c2:55:e3:7e:e1:c7:06:37:34:00:59:7d:c5:a6: fa:37:68:46:47:1b:2d:ad:4c:81:d3:d1:d9:3e:5d:e4:55:51: 91:e4:c4:d7:3e:a2:28:b4:8e:92:bc:76:21:68:99:5e:cf:44: 66:ef:c5:b0:9e:b8:ff:17:10:ab:ac:84:7c:59:8d:12:ab:59: 06:15:02:54:cb:5f:47:b1:bd:c3:6c:a6:9c:2b:09:69:8a:a9: 00:17:a7:ff:d9:cb:5d:4b:90:81:93:b6:96:d4:ac:a9:30:87: 4d:73:a3:0f:fe:f0:7c:b4:f1:9c:0f:63:db:05:78:9a:91:cf: 9d:64:c6:ba:45:3c:8b:d7:2f:a8:a1:e5:9f:77:e2:cf:21:0b: e5:98:7e:3f:54:e4:f5:55:73:8a:0d:79:f4:36:c5:4a:a0:8f: 42:d6:85:dc:09:d5:41:12:78:f2:7d:1e:ac:a9:ae:89:05:a3: 0d:22:88:43:41:82:8e:2e:59:4c:cc:d0:38:cb:4c:f8:d3:37: 07:27:d4:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULo+qHL3xwLC3pc3n92tbqT6nyJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYzQjM0NDA1NzdEMEU0NzRGRjE1RERGNERFN0E0NzhD RjA3RjNGQjAeFw0yNTA3MjUxOTQ0MTRaFw0yNTA3MjYyMTA5MTRaMDMxMTAvBgNV BAMTKDVFRTEzQjMwOENGN0EwRDdBOTM3MjU1NTY4RDM1OTQ5NEQxQTNCMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo056gweNX1bmy6I2t5g507uwh HdNgPpu4MkH9Ji5cCUE3GR8mx/Sq8gyCv7+aoMAPUjT+LL94tVXkAQX9oHA/MvDT u1V/kuqiLGbbt7ynn8W1oOnbSXt7AoLSLuJ3/o6NpsV+mfB8nZZVjIHVvFXMFQtv EuChX5d2iqcY4f3aGdZD6Nw6cDG5/OnNixwfYkMy/hXUGrVMu6Tt/MugZxEdYsiK 3AriUGzwACvFwW3wIU22OLHlpTEobqJRj83lvXHxvRYQtpMYMuU4rjhSXMX64d4X SN95ng3LbqcG4idOi4NiP2/7ZuQ7rh3117SWsIHUZLvxiAHKdCPgTiC2YB0BAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXuE7MIz3oNepNyVVaNNZSU0aOw0wHwYDVR0j BBgwFoAUTzs0QFd9DkdP8V3fTeekeM8H8/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNmlrUGtRbU1FYlczdUtLbzdEMmlkMjhMVlY5NHRFQ3MxbUREeDhURnFo NWkvMC80RjNCMzQ0MDU3N0QwRTQ3NEZGMTVEREY0REU3QTQ3OENGMDdGM0ZCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGM0IzNDQwNTc3RDBFNDc0 RkYxNURERjRERTdBNDc4Q0YwN0YzRkIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NmlrUGtRbU1FYlczdUtLbzdEMmlkMjhMVlY5NHRFQ3MxbUREeDhURnFoNWkvMC80 RjNCMzQ0MDU3N0QwRTQ3NEZGMTVEREY0REU3QTQ3OENGMDdGM0ZCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsOWD5BdVbOZ9mTfczwslhuMZffcuzIUixep8C0Ts9noTdJbp/MgqVVU79ECh szxKs8Ds+cgIIF0XX8JV437hxwY3NABZfcWm+jdoRkcbLa1MgdPR2T5d5FVRkeTE 1z6iKLSOkrx2IWiZXs9EZu/FsJ64/xcQq6yEfFmNEqtZBhUCVMtfR7G9w2ymnCsJ aYqpABen/9nLXUuQgZO2ltSsqTCHTXOjD/7wfLTxnA9j2wV4mpHPnWTGukU8i9cv qKHln3fizyEL5Zh+P1Tk9VVzig159DbFSqCPQtaF3AnVQRJ48n0erKmuiQWjDSKI Q0GCji5ZTMzQOMtM+NM3ByfUpQ== -----END CERTIFICATE-----Generated at Sat Jul 26 13:22:35 2025 by rpki-client