$ rpki-client -vvf rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft File: 01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft (raw, json) Hash identifier: y1yygUoD6PSss5ECXR+ewxtQGs7UMkqPRmTKpMxI9zw= Subject key identifier: 87:25:07:35:0A:CB:D5:1A:8D:98:FD:73:ED:EA:74:D0:F4:88:65:54 Authority key identifier: 01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C Certificate issuer: /CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C Certificate serial: 72FF1FCDE09E68948F4D14E927DE02C1CE8CC3B7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer Subject info access: rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft Manifest number: 0280 Signing time: Fri 25 Jul 2025 16:34:34 +0000 Manifest this update: Fri 25 Jul 2025 16:29:34 +0000 Manifest next update: Sat 26 Jul 2025 16:34:34 +0000 Files and hashes: 1: 3137392e3130372e35322e302f32322d3234203d3e20323638383234.roa (hash: GXCJwGNSeovJEODltbl+tv+hc1YYl0zHS2TuTav4gew=) 2: 34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa (hash: 0YsTjeqlNRVyQvgwlwqrsgilyPHmCf1iPKM6xbeuc78=) 3: 01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl (hash: hkzAgjj0O+krjbhnk9Osp7/RzMUA19B3nbEgg+XZS20=) 4: 323830343a356233303a3a2f33322d3438203d3e20323638383234.roa (hash: 6f8pVuH01b1SF3mi0On+jZU5yb6oYEzn5QGJJ2ruw7o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 26 Jul 2025 16:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ff:1f:cd:e0:9e:68:94:8f:4d:14:e9:27:de:02:c1:ce:8c:c3:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C Validity Not Before: Jul 25 16:29:34 2025 GMT Not After : Jul 26 16:34:34 2025 GMT Subject: CN=872507350ACBD51A8D98FD73EDEA74D0F4886554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:7d:32:af:d5:19:b9:23:a2:e7:8e:f5:83: 6d:db:df:d2:0c:53:5c:dc:81:24:82:82:2b:1c:8f: 23:0f:19:63:af:1f:7c:28:52:ba:de:0c:ad:9e:ae: 2f:d5:8a:cf:56:b8:7c:a4:3a:21:29:06:22:65:de: 2d:fa:2b:56:ee:09:9d:ce:16:f3:52:f9:69:dd:dc: 8e:64:13:66:d6:73:9f:73:fa:cc:7b:46:d7:fc:51: 34:66:7c:71:58:1b:81:49:75:37:76:38:87:c5:74: be:70:5e:4b:00:f6:76:d2:a5:69:80:4c:70:db:d8: 52:ea:99:07:dc:97:55:87:55:ef:2c:59:bf:b6:58: 8d:6b:90:e0:41:50:00:9c:a9:86:0a:f9:46:3e:39: 0d:40:a8:ad:de:cd:bc:bb:ec:83:94:2e:0c:86:8d: d8:ba:a9:00:77:90:36:05:e8:d5:9e:65:15:68:ca: 14:85:21:08:5f:45:e1:8f:40:14:53:e3:b1:2e:81: 77:85:ed:b5:8d:71:e7:fd:d5:e6:d5:31:30:37:19: ff:35:87:11:e6:25:06:c0:70:a1:b7:ec:4d:d3:0d: fc:85:00:d7:4e:68:7f:55:64:97:e6:ca:9d:0b:75: a5:ae:3e:92:fe:2b:f6:33:c2:d8:16:f9:cf:c6:7f: 22:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:25:07:35:0A:CB:D5:1A:8D:98:FD:73:ED:EA:74:D0:F4:88:65:54 X509v3 Authority Key Identifier: keyid:01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e4:aa:45:34:5a:75:4b:19:f1:90:88:8c:e4:c0:ac:73:66: 35:c9:60:1d:1d:0d:3b:f4:d8:4c:62:65:35:b3:00:24:13:dc: 41:b3:f5:70:7c:83:78:64:fb:b1:e8:ae:ff:f2:3f:e2:61:cf: 2e:3c:1e:e2:b3:dd:98:9f:2d:6b:f7:8f:a5:9d:ff:bb:0c:64: 9e:1b:70:51:57:6b:71:0e:93:86:22:62:01:55:9d:58:e8:ab: 1d:64:35:b9:2f:c0:e3:c4:a8:cd:1e:01:71:ca:ce:1a:c5:73: ca:ca:4c:a7:e1:39:72:fe:1b:ef:fc:05:28:a4:11:fa:e8:75: e3:a7:ba:3a:72:1c:29:e0:47:25:96:fa:ef:6a:91:b6:1a:59: 5d:5d:dc:5d:40:c1:1b:7f:80:c9:d4:83:31:01:86:80:23:b4: c8:66:94:93:95:78:51:b0:32:b0:ff:6f:3b:06:76:6e:b7:21: df:9b:39:79:bc:8a:dd:d8:40:a1:1f:02:8b:40:71:46:ee:d2: 3e:42:1f:99:05:c7:9c:e5:87:4a:ed:bf:1c:de:1d:36:ef:e1: ba:38:a2:01:fd:9d:e1:f2:45:e4:c2:b6:84:97:c6:fd:62:5e: 71:88:a1:7e:f8:f1:c9:46:97:da:a9:cd:f6:c3:76:aa:28:14: b5:c4:e0:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcv8fzeCeaJSPTRTpJ94Cwc6Mw7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFDQjcxMDhCQkNBMjlGNTU0RDQyMUFDRTAzMkI5NzdB QTFCRjY3QzAeFw0yNTA3MjUxNjI5MzRaFw0yNTA3MjYxNjM0MzRaMDMxMTAvBgNV BAMTKDg3MjUwNzM1MEFDQkQ1MUE4RDk4RkQ3M0VERUE3NEQwRjQ4ODY1NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2I30yr9UZuSOi5471g23b39IM U1zcgSSCgiscjyMPGWOvH3woUrreDK2eri/Vis9WuHykOiEpBiJl3i36K1buCZ3O FvNS+Wnd3I5kE2bWc59z+sx7Rtf8UTRmfHFYG4FJdTd2OIfFdL5wXksA9nbSpWmA THDb2FLqmQfcl1WHVe8sWb+2WI1rkOBBUACcqYYK+UY+OQ1AqK3ezby77IOULgyG jdi6qQB3kDYF6NWeZRVoyhSFIQhfReGPQBRT47EugXeF7bWNcef91ebVMTA3Gf81 hxHmJQbAcKG37E3TDfyFANdOaH9VZJfmyp0LdaWuPpL+K/YzwtgW+c/GfyKDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhyUHNQrL1RqNmP1z7ep00PSIZVQwHwYDVR0j BBgwFoAUActxCLvKKfVU1CGs4DK5d6ob9nwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOUU0Y0d3elR1V21rTWhtakI0enBjV2d6V2JZVlRKRXlkNU02R2JGU2ZV aUIvMS8wMUNCNzEwOEJCQ0EyOUY1NTRENDIxQUNFMDMyQjk3N0FBMUJGNjdDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQ0I3MTA4QkJDQTI5RjU1 NEQ0MjFBQ0UwMzJCOTc3QUExQkY2N0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OUU0Y0d3elR1V21rTWhtakI0enBjV2d6V2JZVlRKRXlkNU02R2JGU2ZVaUIvMS8w MUNCNzEwOEJCQ0EyOUY1NTRENDIxQUNFMDMyQjk3N0FBMUJGNjdDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbeSqRTRadUsZ8ZCIjOTArHNmNclgHR0NO/TYTGJlNbMAJBPcQbP1cHyDeGT7 seiu//I/4mHPLjwe4rPdmJ8ta/ePpZ3/uwxknhtwUVdrcQ6ThiJiAVWdWOirHWQ1 uS/A48SozR4BccrOGsVzyspMp+E5cv4b7/wFKKQR+uh146e6OnIcKeBHJZb672qR thpZXV3cXUDBG3+AydSDMQGGgCO0yGaUk5V4UbAysP9vOwZ2brch35s5ebyK3dhA oR8Ci0BxRu7SPkIfmQXHnOWHSu2/HN4dNu/hujiiAf2d4fJF5MK2hJfG/WJecYih fvjxyUaX2qnN9sN2qigUtcTglw== -----END CERTIFICATE-----Generated at Sat Jul 26 06:31:58 2025 by rpki-client