$ rpki-client -vvf rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.mft File: C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.mft (raw, json) Hash identifier: NjwerQ7p3Mx3Qqr88xgUfb5lD8mgkINZwV27rZvsS+A= Subject key identifier: 8D:65:A2:4B:81:2F:31:DC:40:69:57:ED:F2:3A:57:60:E1:52:B9:94 Authority key identifier: C4:B1:9B:CE:1E:9A:B5:29:72:35:D8:0B:57:CF:3D:D8:2F:EE:D7:51 Certificate issuer: /CN=C4B19BCE1E9AB5297235D80B57CF3DD82FEED751 Certificate serial: 72372E8750CFC7F6E6943FCA8FDEBB1750C38B5D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.cer Subject info access: rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.mft Manifest number: 0165 Signing time: Sat 26 Jul 2025 07:44:31 +0000 Manifest this update: Sat 26 Jul 2025 07:39:31 +0000 Manifest next update: Sun 27 Jul 2025 11:14:31 +0000 Files and hashes: 1: C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.crl (hash: yrBnE4kEb/dBaQG7J4iurq6GwPXc+XgvVbv3oJ5T96k=) 2: 3139302e382e32382e302f32322d3332203d3e20323633353833.roa (hash: GKNOlP0JQj/PIDb59+/P076Q24YQhJp5duDZSWj++hg=) 3: 323830343a6636343a3a2f33322d313238203d3e20323633353833.roa (hash: zjtA1CsyTg43dQLPmThoRwD0huUpjb049yIaaiY9FWU=) 4: 3137372e3135352e38302e302f32322d3332203d3e20323633353833.roa (hash: ViWqxAKsvHtd+LQe4Wpm6dZfCIp9vVrHL4saDiGbN6Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.crl rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 11:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:37:2e:87:50:cf:c7:f6:e6:94:3f:ca:8f:de:bb:17:50:c3:8b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4B19BCE1E9AB5297235D80B57CF3DD82FEED751 Validity Not Before: Jul 26 07:39:31 2025 GMT Not After : Jul 27 11:14:31 2025 GMT Subject: CN=8D65A24B812F31DC406957EDF23A5760E152B994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:bc:20:0a:81:c8:28:01:b7:56:c5:4f:fe: ad:16:d0:26:f0:7a:71:92:0c:01:93:e9:4f:bf:78: c3:9d:94:9c:62:2e:f5:80:d5:4e:fa:cc:f2:3c:97: f9:71:9b:47:0e:1f:88:66:39:00:7b:c9:fd:03:c8: 36:6c:90:9e:2d:f4:e5:a9:f2:bb:8c:58:e4:fc:ec: 71:01:25:13:a8:76:6d:27:20:54:54:0d:6c:cf:82: cc:ab:e0:7a:7e:a6:c0:f8:0d:4d:60:c8:50:a6:ee: 5a:df:80:ac:94:8e:d0:dd:bb:86:b3:d6:08:cb:21: dc:2d:dd:0f:cd:70:37:8d:d0:39:d4:d0:a3:85:28: cc:19:24:1b:09:0d:8a:c3:0c:b3:02:b4:5b:91:59: 47:9c:d0:83:d4:7a:3a:a2:30:b7:0e:16:f6:f0:c9: 59:f4:85:b1:e6:2c:01:41:73:ea:f4:4b:bb:96:22: 9a:3f:a9:b5:42:69:01:35:ce:38:96:c3:2b:14:c4: e7:54:78:aa:d9:e9:bc:99:f4:df:7a:7c:a2:d6:d3: 27:22:ff:e4:c8:a2:34:2b:5c:82:92:dc:00:5e:cc: b8:0b:60:42:e0:2a:15:19:8e:26:b4:bd:3a:a4:ad: 12:ad:8e:d7:ed:f4:ec:0d:a2:7e:1f:d7:a8:28:6a: 37:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:65:A2:4B:81:2F:31:DC:40:69:57:ED:F2:3A:57:60:E1:52:B9:94 X509v3 Authority Key Identifier: keyid:C4:B1:9B:CE:1E:9A:B5:29:72:35:D8:0B:57:CF:3D:D8:2F:EE:D7:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3VgsyGpsJ4HYXkrn1HzzNbewZYej2jzUKA8ymbGw1T5V/0/C4B19BCE1E9AB5297235D80B57CF3DD82FEED751.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:64:ec:ad:00:28:ee:9f:77:3b:7b:71:46:70:4e:40:6a:2d: c6:ae:24:08:af:07:31:a1:05:5b:bc:ce:5f:f1:7d:4d:f1:95: e4:1c:66:e8:2a:cc:ab:1a:31:a9:83:e8:76:25:7e:43:86:fa: 16:eb:5b:60:5d:e1:1b:62:09:32:4d:4e:60:a1:51:c5:c8:c1: db:21:71:9c:62:6a:85:e9:fb:d5:f8:24:82:7d:2d:90:6a:58: 7b:1e:e1:23:ed:43:4d:5c:96:a8:5c:3b:43:3e:1c:73:15:3c: 08:fa:b0:01:88:73:e9:33:ad:82:44:62:65:ef:62:66:32:e2: bc:a0:a5:18:10:84:eb:c8:7e:be:2c:21:ed:7f:40:4b:af:65: ca:06:8b:a4:d9:df:da:57:22:19:79:2f:dd:b6:3e:47:65:f5: 6d:8b:77:11:ff:05:a4:00:c0:e9:af:8b:41:63:09:ad:de:81: e9:0f:75:81:13:59:b9:7b:72:ee:00:8e:96:d8:db:c0:94:50: 88:31:d7:ba:ce:7c:c3:ef:a2:28:30:da:78:f7:e2:86:aa:d8: 72:8e:82:27:60:28:94:73:fe:5f:e6:61:f7:e3:6a:8a:05:40: 1a:6f:2a:33:38:6c:53:e8:43:dd:9c:2e:46:fc:6d:bc:a5:3d: 22:89:cf:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcjcuh1DPx/bmlD/Kj967F1DDi10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRCMTlCQ0UxRTlBQjUyOTcyMzVEODBCNTdDRjNERDgy RkVFRDc1MTAeFw0yNTA3MjYwNzM5MzFaFw0yNTA3MjcxMTE0MzFaMDMxMTAvBgNV BAMTKDhENjVBMjRCODEyRjMxREM0MDY5NTdFREYyM0E1NzYwRTE1MkI5OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs/LwgCoHIKAG3VsVP/q0W0Cbw enGSDAGT6U+/eMOdlJxiLvWA1U76zPI8l/lxm0cOH4hmOQB7yf0DyDZskJ4t9OWp 8ruMWOT87HEBJROodm0nIFRUDWzPgsyr4Hp+psD4DU1gyFCm7lrfgKyUjtDdu4az 1gjLIdwt3Q/NcDeN0DnU0KOFKMwZJBsJDYrDDLMCtFuRWUec0IPUejqiMLcOFvbw yVn0hbHmLAFBc+r0S7uWIpo/qbVCaQE1zjiWwysUxOdUeKrZ6byZ9N96fKLW0yci /+TIojQrXIKS3ABezLgLYELgKhUZjia0vTqkrRKtjtft9OwNon4f16goajdxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjWWiS4EvMdxAaVft8jpXYOFSuZQwHwYDVR0j BBgwFoAUxLGbzh6atSlyNdgLV8892C/u11EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1Znc3lHcHNKNEhZWGtybjFIenpOYmV3WlllajJqelVLQTh5bWJHdzFU NVYvMC9DNEIxOUJDRTFFOUFCNTI5NzIzNUQ4MEI1N0NGM0REODJGRUVENzUxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0QjE5QkNFMUU5QUI1Mjk3 MjM1RDgwQjU3Q0YzREQ4MkZFRUQ3NTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1Znc3lHcHNKNEhZWGtybjFIenpOYmV3WlllajJqelVLQTh5bWJHdzFUNVYvMC9D NEIxOUJDRTFFOUFCNTI5NzIzNUQ4MEI1N0NGM0REODJGRUVENzUxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUmTsrQAo7p93O3txRnBOQGotxq4kCK8HMaEFW7zOX/F9TfGV5Bxm6CrMqxox qYPodiV+Q4b6FutbYF3hG2IJMk1OYKFRxcjB2yFxnGJqhen71fgkgn0tkGpYex7h I+1DTVyWqFw7Qz4ccxU8CPqwAYhz6TOtgkRiZe9iZjLivKClGBCE68h+viwh7X9A S69lygaLpNnf2lciGXkv3bY+R2X1bYt3Ef8FpADA6a+LQWMJrd6B6Q91gRNZuXty 7gCOltjbwJRQiDHXus58w++iKDDaePfihqrYco6CJ2AolHP+X+Zh9+NqigVAGm8q MzhsU+hD3ZwuRvxtvKU9IonP1w== -----END CERTIFICATE-----Generated at Sat Jul 26 12:09:37 2025 by rpki-client