$ rpki-client -vvf rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft File: 275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft (raw, json) Hash identifier: 7KfBdAyd8Lq6ROkrQE5Soh7begju4hiSq1y66h7EEJE= Subject key identifier: D4:6B:83:E2:89:85:DA:A4:83:C9:A6:0E:21:C9:D1:DC:C1:DC:D7:D7 Authority key identifier: 27:5D:9E:0F:3E:6B:B4:0B:BC:90:C8:BA:26:99:DD:6A:35:6D:A2:AE Certificate issuer: /CN=275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE Certificate serial: 5500224AE5451B2C0F131D5FCF8D9561D0EFA6B7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft Manifest number: 0280 Signing time: Tue 29 Jul 2025 09:55:29 +0000 Manifest this update: Tue 29 Jul 2025 09:50:29 +0000 Manifest next update: Wed 30 Jul 2025 11:40:29 +0000 Files and hashes: 1: 3137372e3232312e3134322e302f32332d3234203d3e20323730373335.roa (hash: Ry4WEHqQ3COy4GFObdDBhjjlH3TTWPjEE+vFu0K5ing=) 2: 275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.crl (hash: 29+NJsPZ4jgKN3tfYl3jmINz8CgHY9QW5rOoLaqGRSE=) 3: 323830343a373039343a3a2f33322d3438203d3e20323730373335.roa (hash: j50q5Q+ow8SJ6PGS5kNHGAOsLKmLHvprt+8f7xkhG/s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.crl rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Jul 2025 11:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:00:22:4a:e5:45:1b:2c:0f:13:1d:5f:cf:8d:95:61:d0:ef:a6:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE Validity Not Before: Jul 29 09:50:29 2025 GMT Not After : Jul 30 11:40:29 2025 GMT Subject: CN=D46B83E28985DAA483C9A60E21C9D1DCC1DCD7D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2f:36:fa:fe:41:5b:6a:3a:1b:b7:38:02:60: 0e:67:da:f2:87:1b:b6:91:10:f7:60:84:56:2d:b4: 8c:91:84:d0:12:fb:23:a7:ce:0c:2e:1d:87:05:74: 40:dd:a1:bd:b1:18:1a:79:9e:c3:2a:5a:77:b0:1f: 94:ea:6c:bf:dd:7c:64:72:38:22:f7:fc:08:af:c1: ae:47:26:3a:47:d1:ef:11:02:ad:35:4a:d0:d9:5c: 03:e7:40:da:66:0a:fe:2f:a0:7b:46:5e:a2:72:69: e2:e6:9c:01:22:32:fa:1e:0c:ac:37:ad:fc:e0:b4: c1:d3:ef:e6:76:7b:89:67:b6:99:1b:5b:b5:83:9f: c5:47:88:5a:3d:f2:9c:1b:16:1e:fe:9f:07:31:84: 16:92:b3:8d:00:62:bf:d2:17:3f:35:45:44:40:1a: 4b:82:d2:2a:b3:85:ca:fc:ac:72:8c:52:36:86:9f: 19:2d:2b:a4:2a:dc:bf:b6:fd:76:c7:7a:3d:b7:fd: f1:d3:f0:30:a5:0e:4c:5e:f2:da:46:e3:17:fd:9f: eb:2c:38:f0:c6:1a:7f:e6:30:85:ef:f8:1a:e6:c2: 6b:c2:21:2b:68:b9:94:31:75:99:3a:ae:18:a0:62: 79:fc:8f:29:61:b5:c9:32:4b:63:27:06:3e:68:72: ea:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6B:83:E2:89:85:DA:A4:83:C9:A6:0E:21:C9:D1:DC:C1:DC:D7:D7 X509v3 Authority Key Identifier: keyid:27:5D:9E:0F:3E:6B:B4:0B:BC:90:C8:BA:26:99:DD:6A:35:6D:A2:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:48:a4:a3:d9:53:8a:c8:97:2f:33:50:8a:20:dc:5b:c0:f2: 40:2f:6a:55:d3:67:55:ed:dc:2c:41:8b:19:a4:1b:45:c9:c2: 7b:c9:a4:ab:ef:6b:34:b9:51:10:ea:05:82:c3:2d:9b:a4:ba: 77:e8:74:e7:fe:9b:f7:bf:50:b1:b7:b8:75:1e:3c:11:de:ac: 84:68:25:3a:4f:86:90:62:31:09:bb:ed:d6:6b:49:d0:10:dd: b4:aa:69:21:0b:6e:ab:2e:42:d8:ac:7b:b0:70:cf:ed:a6:5a: ac:da:e6:83:5e:99:96:fb:9f:63:24:b2:d0:ce:f8:dd:cc:e7: 98:b4:f9:75:80:e7:32:08:11:75:c4:42:c3:5d:29:31:83:14: 0e:32:d4:2c:0e:da:f2:56:95:c8:46:27:a4:88:ff:7c:bd:cc: 20:49:5f:d7:9e:3e:71:4e:f1:42:6a:81:da:f9:8d:72:de:9a: f9:0e:f3:d6:88:df:db:c4:ce:a6:e8:5b:9f:bf:78:7f:49:e2: 21:23:9c:f5:46:5d:04:98:a0:ea:82:31:24:d8:26:f0:d0:c8: 5c:0b:b2:7b:05:3f:7c:26:3b:62:5e:66:f6:f4:77:fd:ab:a1: b1:04:fd:b6:6a:27:8f:e9:8e:ee:8d:c4:13:d6:7e:0e:8f:9b: db:75:00:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVQAiSuVFGywPEx1fz42VYdDvprcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc1RDlFMEYzRTZCQjQwQkJDOTBDOEJBMjY5OURENkEz NTZEQTJBRTAeFw0yNTA3MjkwOTUwMjlaFw0yNTA3MzAxMTQwMjlaMDMxMTAvBgNV BAMTKEQ0NkI4M0UyODk4NURBQTQ4M0M5QTYwRTIxQzlEMURDQzFEQ0Q3RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsLzb6/kFbajobtzgCYA5n2vKH G7aREPdghFYttIyRhNAS+yOnzgwuHYcFdEDdob2xGBp5nsMqWnewH5TqbL/dfGRy OCL3/Aivwa5HJjpH0e8RAq01StDZXAPnQNpmCv4voHtGXqJyaeLmnAEiMvoeDKw3 rfzgtMHT7+Z2e4lntpkbW7WDn8VHiFo98pwbFh7+nwcxhBaSs40AYr/SFz81RURA GkuC0iqzhcr8rHKMUjaGnxktK6Qq3L+2/XbHej23/fHT8DClDkxe8tpG4xf9n+ss OPDGGn/mMIXv+BrmwmvCIStouZQxdZk6rhigYnn8jylhtckyS2MnBj5ocurHAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1GuD4omF2qSDyaYOIcnR3MHc19cwHwYDVR0j BBgwFoAUJ12eDz5rtAu8kMi6JpndajVtoq4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEMzQ1hRckt5c0VEOUFoWm0yelB3R1ZVMXlIS1phVnZlVlVkcjNEeWdu Y1IvMi8yNzVEOUUwRjNFNkJCNDBCQkM5MEM4QkEyNjk5REQ2QTM1NkRBMkFFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3NUQ5RTBGM0U2QkI0MEJC QzkwQzhCQTI2OTlERDZBMzU2REEyQUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEMzQ1hRckt5c0VEOUFoWm0yelB3R1ZVMXlIS1phVnZlVlVkcjNEeWduY1IvMi8y NzVEOUUwRjNFNkJCNDBCQkM5MEM4QkEyNjk5REQ2QTM1NkRBMkFFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi0iko9lTisiXLzNQiiDcW8DyQC9qVdNnVe3cLEGLGaQbRcnCe8mkq+9rNLlR EOoFgsMtm6S6d+h05/6b979Qsbe4dR48Ed6shGglOk+GkGIxCbvt1mtJ0BDdtKpp IQtuqy5C2Kx7sHDP7aZarNrmg16ZlvufYySy0M743cznmLT5dYDnMggRdcRCw10p MYMUDjLULA7a8laVyEYnpIj/fL3MIElf154+cU7xQmqB2vmNct6a+Q7z1ojf28TO puhbn794f0niISOc9UZdBJig6oIxJNgm8NDIXAuyewU/fCY7Yl5m9vR3/auhsQT9 tmonj+mO7o3EE9Z+Do+b23UAtw== -----END CERTIFICATE-----Generated at Wed Jul 30 00:09:07 2025 by rpki-client