$ rpki-client -vvf rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft File: DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft (raw, json) Hash identifier: Dg+98+oj1OI1VM3OLie+VsaxMpo0q2OuEUYSFncKSqw= Subject key identifier: E7:24:58:A1:7D:75:0B:8D:3B:69:92:57:0D:26:BD:F9:CE:01:A3:D2 Authority key identifier: DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7 Certificate issuer: /CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7 Certificate serial: 67D3C3CD2E704B154673EA3FB0C891B502691A92 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer Subject info access: rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft Manifest number: 026C Signing time: Sat 26 Jul 2025 00:03:04 +0000 Manifest this update: Fri 25 Jul 2025 23:58:04 +0000 Manifest next update: Sun 27 Jul 2025 02:53:04 +0000 Files and hashes: 1: 3139312e3234332e34382e302f32322d3234203d3e20323633343935.roa (hash: 9SsdRo7F/WQKm+zUuXydKWyuBOs8eQuYsJD3wiY7ifQ=) 2: 3137302e3233332e37362e302f32322d3234203d3e20323633343935.roa (hash: Gwy9zblG706ghCX5/JVGDiaxPqAmIwnXEqUmjq1gI0c=) 3: DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl (hash: wBlrWhORr1AbAStUZlPIFD7t9Pr2EAKA/cqM2alf2to=) 4: 323830343a313262633a3a2f33322d3438203d3e20323633343935.roa (hash: lJamWfGsgdftwb6MoUAW/t7o12xx87lvoGqpZkx6hgI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 02:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d3:c3:cd:2e:70:4b:15:46:73:ea:3f:b0:c8:91:b5:02:69:1a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4FC56805C7667E1801854B3C77ADCB64A63DD7 Validity Not Before: Jul 25 23:58:04 2025 GMT Not After : Jul 27 02:53:04 2025 GMT Subject: CN=E72458A17D750B8D3B6992570D26BDF9CE01A3D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:41:79:49:02:53:6d:a2:68:b7:77:28:18:36: c1:cb:a6:f3:20:e4:18:22:46:b1:39:12:21:52:f6: 29:ae:55:b2:eb:97:38:6a:27:00:18:26:3f:96:b6: df:9c:f4:a0:ff:c7:73:38:50:79:1b:15:80:29:13: e1:e5:87:52:eb:32:68:bb:c4:dd:fa:97:81:0e:b6: 7a:1c:74:6a:8f:37:1a:80:ff:ce:3f:4f:db:44:77: a6:a3:92:03:55:e4:e8:80:8c:e2:d1:20:30:d4:4a: aa:94:de:d7:6f:3b:cc:77:31:21:33:88:56:c3:cf: 5f:51:88:45:3b:a3:28:6c:14:49:f1:b7:00:cc:f0: 8a:e6:39:2a:a9:3a:c4:7b:6c:bc:1a:1e:8d:ab:54: 76:95:52:3c:1b:09:9c:21:bc:61:2e:49:de:1b:b7: 77:70:ba:b0:ea:e9:2e:c0:6e:93:8e:4a:d4:52:b3: 93:83:22:6c:5f:ab:a5:47:4d:95:2a:fb:64:ff:9e: 1a:c8:13:72:43:3a:53:eb:de:d1:ef:7c:9e:60:64: 84:39:64:e1:9c:2b:a4:3f:69:3c:12:9c:38:02:e0: bf:aa:9d:5d:e3:f9:b0:e5:82:df:79:dd:bd:48:ee: 7b:a8:13:2b:6d:03:6a:ff:47:27:58:03:ec:b2:40: cd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:24:58:A1:7D:75:0B:8D:3B:69:92:57:0D:26:BD:F9:CE:01:A3:D2 X509v3 Authority Key Identifier: keyid:DE:4F:C5:68:05:C7:66:7E:18:01:85:4B:3C:77:AD:CB:64:A6:3D:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuiyBXWpPUHJzzPZ1BEbSk6YC2utHNAiS5rEoUmofiSY/0/DE4FC56805C7667E1801854B3C77ADCB64A63DD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:41:0e:a9:8b:85:38:de:ae:90:d0:d5:91:0c:a7:df:6e:06: e7:7d:31:c4:5a:29:4f:0a:01:d6:fb:1f:36:7c:56:9c:cb:01: 6b:e9:82:f5:c0:ff:1f:b1:ac:d3:78:bf:01:60:3a:28:90:5d: 77:85:3d:98:4a:2c:cf:ae:0a:e7:42:c6:86:76:de:9f:f3:e8: 98:28:94:82:d8:cf:e7:3b:b5:d9:92:4d:34:3a:de:61:22:dd: 74:d6:2e:d1:30:5a:e1:e5:71:ae:5b:15:47:f6:a6:53:85:e0: 5f:af:54:7a:87:8d:fb:4b:cd:c1:05:ee:8d:80:07:ee:2a:b7: da:7e:42:b2:44:23:9d:a9:99:2c:bd:47:98:c8:95:c8:73:c6: fc:3a:63:bf:9e:e5:8a:15:7f:39:20:7f:83:55:6c:76:12:54: 25:c1:3f:f0:2b:5d:4f:92:30:b4:25:47:d2:e7:ae:8e:e1:ff: 8d:be:04:2c:f3:b0:db:27:ba:7c:f2:bb:c0:12:ed:f9:09:b7: a2:ab:49:50:7d:d5:af:37:79:1a:d2:3c:aa:a5:43:c2:a3:75: d7:fb:c9:d2:83:6d:9f:20:02:1e:44:ae:6b:56:95:6a:50:be: 6e:e4:1e:71:05:c3:14:23:dd:3d:81:d0:1b:e5:c5:34:00:68: 1f:6f:cc:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZ9PDzS5wSxVGc+o/sMiRtQJpGpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RkM1NjgwNUM3NjY3RTE4MDE4NTRCM0M3N0FEQ0I2 NEE2M0RENzAeFw0yNTA3MjUyMzU4MDRaFw0yNTA3MjcwMjUzMDRaMDMxMTAvBgNV BAMTKEU3MjQ1OEExN0Q3NTBCOEQzQjY5OTI1NzBEMjZCREY5Q0UwMUEzRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBQXlJAlNtomi3dygYNsHLpvMg 5BgiRrE5EiFS9imuVbLrlzhqJwAYJj+Wtt+c9KD/x3M4UHkbFYApE+Hlh1LrMmi7 xN36l4EOtnocdGqPNxqA/84/T9tEd6ajkgNV5OiAjOLRIDDUSqqU3tdvO8x3MSEz iFbDz19RiEU7oyhsFEnxtwDM8IrmOSqpOsR7bLwaHo2rVHaVUjwbCZwhvGEuSd4b t3dwurDq6S7AbpOOStRSs5ODImxfq6VHTZUq+2T/nhrIE3JDOlPr3tHvfJ5gZIQ5 ZOGcK6Q/aTwSnDgC4L+qnV3j+bDlgt953b1I7nuoEyttA2r/RydYA+yyQM1zAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5yRYoX11C407aZJXDSa9+c4Bo9IwHwYDVR0j BBgwFoAU3k/FaAXHZn4YAYVLPHety2SmPdcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3VpeUJYV3BQVUhKenpQWjFCRWJTazZZQzJ1dEhOQWlTNXJFb1Vtb2Zp U1kvMC9ERTRGQzU2ODA1Qzc2NjdFMTgwMTg1NEIzQzc3QURDQjY0QTYzREQ3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFNEZDNTY4MDVDNzY2N0Ux ODAxODU0QjNDNzdBRENCNjRBNjNERDcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3VpeUJYV3BQVUhKenpQWjFCRWJTazZZQzJ1dEhOQWlTNXJFb1Vtb2ZpU1kvMC9E RTRGQzU2ODA1Qzc2NjdFMTgwMTg1NEIzQzc3QURDQjY0QTYzREQ3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnkEOqYuFON6ukNDVkQyn324G530xxFopTwoB1vsfNnxWnMsBa+mC9cD/H7Gs 03i/AWA6KJBdd4U9mEosz64K50LGhnben/PomCiUgtjP5zu12ZJNNDreYSLddNYu 0TBa4eVxrlsVR/amU4XgX69UeoeN+0vNwQXujYAH7iq32n5CskQjnamZLL1HmMiV yHPG/Dpjv57lihV/OSB/g1VsdhJUJcE/8CtdT5IwtCVH0ueujuH/jb4ELPOw2ye6 fPK7wBLt+Qm3oqtJUH3Vrzd5GtI8qqVDwqN11/vJ0oNtnyACHkSua1aValC+buQe cQXDFCPdPYHQG+XFNABoH2/MfA== -----END CERTIFICATE-----Generated at Sat Jul 26 10:45:52 2025 by rpki-client