$ rpki-client -vvf rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft File: 45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft (raw, json) Hash identifier: PMPPKFzz+DwF2FOv7jwTy9b+ByhZak2kSusAv2SLddo= Subject key identifier: 85:7D:B9:96:05:2E:54:C1:57:17:0A:B8:87:51:5F:C2:90:70:7A:95 Authority key identifier: 45:E4:3D:2A:72:EE:C8:9D:0C:8D:64:8B:E1:C5:D8:5B:00:9E:B2:16 Certificate issuer: /CN=45E43D2A72EEC89D0C8D648BE1C5D85B009EB216 Certificate serial: 4FC017C37C1639D74F3210AE214735DCE966A881 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.cer Subject info access: rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft Manifest number: 0258 Signing time: Wed 20 Aug 2025 13:02:46 +0000 Manifest this update: Wed 20 Aug 2025 12:57:46 +0000 Manifest next update: Thu 21 Aug 2025 16:07:46 +0000 Files and hashes: 1: 323830343a363433343a3a2f33322d313238203d3e20323639343133.roa (hash: eehfHlz0WhARoSbQARn99KJmMCchoedoMtm9f7fciU8=) 2: 45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.crl (hash: 8YCO7KVI/nHtvweDVjvb/J5nZir5TYV/lSL9XXZeLvs=) 3: 34352e3138362e36302e302f32322d3332203d3e20323639343133.roa (hash: aYLUnaEk5/eEpdjPz/8IX91Zbr9U6MwpviJJOdOEB7c=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.crl rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 21 Aug 2025 16:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c0:17:c3:7c:16:39:d7:4f:32:10:ae:21:47:35:dc:e9:66:a8:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E43D2A72EEC89D0C8D648BE1C5D85B009EB216 Validity Not Before: Aug 20 12:57:46 2025 GMT Not After : Aug 21 16:07:46 2025 GMT Subject: CN=857DB996052E54C157170AB887515FC290707A95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ad:25:cc:1b:f7:0e:5e:8d:2f:5b:fb:10:08: 6e:97:5a:b4:e3:7d:56:71:53:ed:93:f1:94:91:1c: 76:34:4b:0b:fd:ad:22:1d:63:0f:b1:4b:03:3c:32: 6a:51:3e:ee:20:a7:b6:5b:88:31:05:c3:2c:11:46: 64:b7:3f:b1:b7:29:b9:94:a6:e9:4b:99:16:97:05: ff:a2:d0:3f:f5:c7:b4:e6:5e:ef:39:66:cf:14:1a: bd:49:20:62:af:c3:64:aa:7d:10:0f:f6:83:b4:82: 0f:f4:a0:c5:1e:98:72:45:bd:cf:95:de:22:98:02: 78:59:2c:c3:1f:04:c4:a0:36:e9:51:ee:6a:5f:45: fa:9b:55:62:9a:d4:33:63:4c:cd:c2:ff:d9:ae:28: c9:b2:be:82:95:9e:86:5a:99:36:a5:c2:19:bd:7a: 2a:b3:17:11:ab:d0:5a:92:85:e1:3a:3e:80:d4:97: 2a:5c:b6:d0:ee:f5:5d:6e:04:1b:9b:0f:89:42:ee: a6:6e:b3:d2:fa:eb:f3:f9:cd:4d:87:98:8f:c4:a2: b1:17:69:69:41:90:1f:bc:91:49:c3:2d:fe:d8:66: e8:8d:af:10:1f:bf:c5:ae:6c:0c:84:32:cf:61:c9: bf:9a:0e:29:98:5a:e5:7d:66:fd:ae:5a:87:cb:c6: fa:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7D:B9:96:05:2E:54:C1:57:17:0A:B8:87:51:5F:C2:90:70:7A:95 X509v3 Authority Key Identifier: keyid:45:E4:3D:2A:72:EE:C8:9D:0C:8D:64:8B:E1:C5:D8:5B:00:9E:B2:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e8:4b:16:e5:8f:d3:a1:1a:07:7d:a9:62:33:c8:25:2b:8f: da:fa:9a:02:02:84:e0:21:e1:ba:52:65:43:90:03:a5:33:54: aa:d8:08:c9:17:79:73:c1:06:eb:ab:73:7f:5e:95:4f:d4:ac: ad:22:da:5f:85:04:6a:2c:2a:d3:e2:88:49:1f:66:15:01:ad: 4e:a8:f9:3d:7d:5e:ed:e6:33:24:d0:42:1f:fc:ad:96:de:57: 26:ee:c8:a5:89:64:8b:ca:13:9c:31:93:37:76:b8:f5:8a:fe: 78:ce:6d:c7:40:10:f5:c5:04:dc:9d:76:a3:24:9d:43:90:33: 39:53:b0:06:1a:34:37:b5:10:31:f2:39:99:74:79:c1:ac:4d: 31:76:a3:c2:76:6c:72:5b:43:66:5e:a7:3b:63:cd:54:86:22: 23:d9:d7:07:2e:90:45:64:eb:ff:41:15:86:3c:56:bb:a1:7d: 42:62:9f:51:8d:32:87:fe:96:a3:33:8e:4b:16:03:7e:c2:f8: d5:c9:b6:f5:41:41:bb:63:bd:e5:37:82:75:1e:75:58:e8:34: ce:04:ce:27:7b:dd:46:37:6e:d7:75:e6:e7:51:2b:45:a8:1e: a6:27:8c:0f:ad:1f:4d:d7:e8:50:17:f5:3f:9d:24:ac:fb:5c: ea:ce:48:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUT8AXw3wWOddPMhCuIUc13OlmqIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFNDNEMkE3MkVFQzg5RDBDOEQ2NDhCRTFDNUQ4NUIw MDlFQjIxNjAeFw0yNTA4MjAxMjU3NDZaFw0yNTA4MjExNjA3NDZaMDMxMTAvBgNV BAMTKDg1N0RCOTk2MDUyRTU0QzE1NzE3MEFCODg3NTE1RkMyOTA3MDdBOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBrSXMG/cOXo0vW/sQCG6XWrTj fVZxU+2T8ZSRHHY0Swv9rSIdYw+xSwM8MmpRPu4gp7ZbiDEFwywRRmS3P7G3KbmU pulLmRaXBf+i0D/1x7TmXu85Zs8UGr1JIGKvw2SqfRAP9oO0gg/0oMUemHJFvc+V 3iKYAnhZLMMfBMSgNulR7mpfRfqbVWKa1DNjTM3C/9muKMmyvoKVnoZamTalwhm9 eiqzFxGr0FqSheE6PoDUlypcttDu9V1uBBubD4lC7qZus9L66/P5zU2HmI/EorEX aWlBkB+8kUnDLf7YZuiNrxAfv8WubAyEMs9hyb+aDimYWuV9Zv2uWofLxvqLAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhX25lgUuVMFXFwq4h1FfwpBwepUwHwYDVR0j BBgwFoAUReQ9KnLuyJ0MjWSL4cXYWwCeshYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0pMaHpmSm1HZ1ZrWmQ0aGtDWXN1dXpVOUFlb1BTelhMQmcyNno3ck5T OG8vMC80NUU0M0QyQTcyRUVDODlEMEM4RDY0OEJFMUM1RDg1QjAwOUVCMjE2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1RTQzRDJBNzJFRUM4OUQw QzhENjQ4QkUxQzVEODVCMDA5RUIyMTYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0pMaHpmSm1HZ1ZrWmQ0aGtDWXN1dXpVOUFlb1BTelhMQmcyNno3ck5TOG8vMC80 NUU0M0QyQTcyRUVDODlEMEM4RDY0OEJFMUM1RDg1QjAwOUVCMjE2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHuhLFuWP06EaB32pYjPIJSuP2vqaAgKE4CHhulJlQ5ADpTNUqtgIyRd5c8EG 66tzf16VT9SsrSLaX4UEaiwq0+KISR9mFQGtTqj5PX1e7eYzJNBCH/ytlt5XJu7I pYlki8oTnDGTN3a49Yr+eM5tx0AQ9cUE3J12oySdQ5AzOVOwBho0N7UQMfI5mXR5 waxNMXajwnZscltDZl6nO2PNVIYiI9nXBy6QRWTr/0EVhjxWu6F9QmKfUY0yh/6W ozOOSxYDfsL41cm29UFBu2O95TeCdR51WOg0zgTOJ3vdRjdu13Xm51ErRagepieM D60fTdfoUBf1P50krPtc6s5IHA== -----END CERTIFICATE-----Generated at Wed Aug 20 18:29:45 2025 by rpki-client