$ rpki-client -vvf rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.mft File: 4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.mft (raw, json) Hash identifier: MqYE26FxTqIFX375pt4V6ramqoKVigUbtbaselPTPTs= Subject key identifier: 71:30:DB:B3:CA:B9:29:DE:7D:AA:29:28:3D:0C:7C:2E:AC:C6:66:15 Authority key identifier: 4A:A9:5A:E7:3A:B9:5B:D0:3B:1B:2A:AF:88:00:57:D0:8E:C2:3A:C0 Certificate issuer: /CN=4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0 Certificate serial: 18901E9BA49991ECF14E9C7567ACDBF83275AB6B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.cer Subject info access: rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.mft Manifest number: 18 Signing time: Fri 04 Jul 2025 06:36:37 +0000 Manifest this update: Fri 04 Jul 2025 06:31:37 +0000 Manifest next update: Sat 05 Jul 2025 07:25:37 +0000 Files and hashes: 1: 4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.crl (hash: xnUhLXiE8jwMY5l33aMUF0aQBbGhxO629ByCLw3c5uY=) 2: 34352e3232372e37322e302f32332d3233203d3e20323637303331.roa (hash: x8mo8V6F/S3U1iId5scZalJatBMt2LCJ4d2LSmLNYq4=) 3: 34352e3232372e37342e302f32342d3234203d3e20323637303331.roa (hash: y732uQCAzRLsDAYnYBumJx62zuGJOtX/UC5dgaxwH/0=) 4: 34352e3232372e37332e302f32342d3234203d3e20323637303331.roa (hash: 4A3PWxVWktYTRTqXWZclN8VVZTur2fp6BRKLeDRaW2c=) 5: 34352e3232372e37352e302f32342d3234203d3e20323637303331.roa (hash: MuXQ6rOhLVVREeTFrm4WG2zoUuyZfkvbRRqiqj+QZsk=) 6: 323830343a343731383a3a2f33322d3332203d3e20323637303331.roa (hash: /Z2cc9omTNOA+CEVhULGBr20Fo1R/QLJKW1oSDibwqM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.crl rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Jul 2025 07:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:90:1e:9b:a4:99:91:ec:f1:4e:9c:75:67:ac:db:f8:32:75:ab:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0 Validity Not Before: Jul 4 06:31:37 2025 GMT Not After : Jul 5 07:25:37 2025 GMT Subject: CN=7130DBB3CAB929DE7DAA29283D0C7C2EACC66615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:44:5c:be:1c:44:3d:b3:56:21:63:47:36:b4: c2:cc:e0:37:1b:f0:70:cf:93:6a:50:26:c3:ea:c8: 73:6f:5c:4f:9f:16:2a:df:26:4f:48:90:0f:db:e0: d1:0e:fa:89:e1:55:78:65:08:5c:bd:94:61:1a:d0: 2a:c7:e4:8a:cb:88:11:bd:22:6f:03:7f:b3:ad:ad: 94:63:13:ff:19:f5:e8:f3:a7:3a:11:a4:d2:b8:d8: f1:a3:3d:bc:b1:8d:d4:c5:bc:b5:cf:fa:fd:5e:12: 03:d3:49:1f:8f:a2:4e:b6:a2:e8:ad:ce:ca:f5:88: d5:3c:c6:53:e8:d2:0d:3c:b2:63:86:5a:52:85:39: 24:59:b4:db:69:c2:10:62:90:a0:05:d6:87:0f:a6: 20:5d:ed:ab:6e:82:b8:f9:3a:af:14:e5:47:b2:06: a7:6d:ad:96:2f:11:81:64:39:3a:4f:44:ef:bd:fe: 1e:60:ff:e8:11:7e:53:6e:75:93:08:c9:4d:3c:e3: 15:a7:51:5f:f7:45:35:f6:d8:c5:8b:a1:50:91:71: 06:d3:6c:dc:24:a5:74:c1:2a:43:45:13:a9:d5:cd: f5:0e:a8:b8:51:3f:a8:02:5f:a2:c0:27:54:7a:0c: 29:24:9d:80:34:b1:2d:3b:7e:87:20:38:d1:86:79: 28:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:30:DB:B3:CA:B9:29:DE:7D:AA:29:28:3D:0C:7C:2E:AC:C6:66:15 X509v3 Authority Key Identifier: keyid:4A:A9:5A:E7:3A:B9:5B:D0:3B:1B:2A:AF:88:00:57:D0:8E:C2:3A:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:13:62:9f:af:d0:cd:28:d4:e4:ef:60:7b:c8:1c:35:e8:ab: 04:9b:27:50:b6:17:1e:9d:28:d3:38:0e:66:da:b3:6a:ca:54: 01:6b:08:38:69:fb:2d:ea:a6:47:fb:71:b8:62:d9:2e:74:10: 10:2d:e3:e6:3c:d9:41:95:4c:13:54:7e:c8:59:60:4f:31:33: 54:78:4c:f1:74:d1:45:38:50:49:f0:9a:7a:7b:69:5e:07:4b: 13:96:c7:8e:99:ed:bd:b4:13:be:c7:2e:53:1f:0e:48:c4:5f: d1:7d:31:49:31:e1:d3:da:63:9e:60:b7:76:a5:0b:bd:1c:60: 57:b4:11:c6:f4:fa:7c:95:1d:27:30:bb:26:c2:5a:54:70:4d: 85:0c:4b:ac:c9:11:67:9a:c6:31:74:be:18:85:b2:08:9d:b1: 3c:60:d0:f6:5f:31:ff:7c:96:24:26:18:c4:d7:62:4b:3c:a7: 6a:dd:e7:55:fe:0a:2e:dc:16:4a:7c:31:75:1f:dc:a5:ac:ed: ff:4e:90:56:9b:13:39:ea:4b:d5:ec:d3:30:0c:43:0f:0e:fa: 15:8d:0a:ab:18:d0:39:2c:64:fc:44:2c:28:b8:ac:4f:eb:ef: 85:84:96:ab:34:6f:f4:e9:90:91:a7:a7:59:65:07:61:31:38: 92:4d:c4:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUGJAem6SZkezxTpx1Z6zb+DJ1q2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBOTVBRTczQUI5NUJEMDNCMUIyQUFGODgwMDU3RDA4 RUMyM0FDMDAeFw0yNTA3MDQwNjMxMzdaFw0yNTA3MDUwNzI1MzdaMDMxMTAvBgNV BAMTKDcxMzBEQkIzQ0FCOTI5REU3REFBMjkyODNEMEM3QzJFQUNDNjY2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiRFy+HEQ9s1YhY0c2tMLM4Dcb 8HDPk2pQJsPqyHNvXE+fFirfJk9IkA/b4NEO+onhVXhlCFy9lGEa0CrH5IrLiBG9 Im8Df7OtrZRjE/8Z9ejzpzoRpNK42PGjPbyxjdTFvLXP+v1eEgPTSR+Pok62ouit zsr1iNU8xlPo0g08smOGWlKFOSRZtNtpwhBikKAF1ocPpiBd7atugrj5Oq8U5Uey BqdtrZYvEYFkOTpPRO+9/h5g/+gRflNudZMIyU084xWnUV/3RTX22MWLoVCRcQbT bNwkpXTBKkNFE6nVzfUOqLhRP6gCX6LAJ1R6DCkknYA0sS07focgONGGeSjJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcTDbs8q5Kd59qikoPQx8LqzGZhUwHwYDVR0j BBgwFoAUSqla5zq5W9A7GyqviABX0I7COsAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDNpenJBNzlpRFVhVWhyaVlOSG8yc0x0ODhndDlBekgzSEtiMTd0dlVO WEwvMC80QUE5NUFFNzNBQjk1QkQwM0IxQjJBQUY4ODAwNTdEMDhFQzIzQUMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBQTk1QUU3M0FCOTVCRDAz QjFCMkFBRjg4MDA1N0QwOEVDMjNBQzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NDNpenJBNzlpRFVhVWhyaVlOSG8yc0x0ODhndDlBekgzSEtiMTd0dlVOWEwvMC80 QUE5NUFFNzNBQjk1QkQwM0IxQjJBQUY4ODAwNTdEMDhFQzIzQUMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaRNin6/QzSjU5O9ge8gcNeirBJsnULYXHp0o0zgOZtqzaspUAWsIOGn7Leqm R/txuGLZLnQQEC3j5jzZQZVME1R+yFlgTzEzVHhM8XTRRThQSfCaentpXgdLE5bH jpntvbQTvscuUx8OSMRf0X0xSTHh09pjnmC3dqULvRxgV7QRxvT6fJUdJzC7JsJa VHBNhQxLrMkRZ5rGMXS+GIWyCJ2xPGDQ9l8x/3yWJCYYxNdiSzynat3nVf4KLtwW SnwxdR/cpazt/06QVpsTOepL1ezTMAxDDw76FY0KqxjQOSxk/EQsKLisT+vvhYSW qzRv9OmQkaenWWUHYTE4kk3EJw== -----END CERTIFICATE-----Generated at Fri Jul 4 14:20:09 2025 by rpki-client