$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft File: CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft (raw, json) Hash identifier: fS/oPNP91np3oXdbd5ZEIrQuLF+xWM+Scd+qXacjncc= Subject key identifier: 6A:A5:B3:48:69:D7:04:95:80:81:D0:54:AD:90:24:53:7F:A9:C5:9E Authority key identifier: CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA Certificate issuer: /CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA Certificate serial: 645FFE405985D917E517CA8BB09D296C474D48A0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer Subject info access: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft Manifest number: 0247 Signing time: Fri 13 Jun 2025 10:23:39 +0000 Manifest this update: Fri 13 Jun 2025 10:18:39 +0000 Manifest next update: Sat 14 Jun 2025 12:50:39 +0000 Files and hashes: 1: 323830343a333661303a3a2f33322d3335203d3e20323636333630.roa (hash: rXszqdwUvQGrhVWf0dQGexOPbYRtVFxMgBAZYV51XYo=) 2: CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl (hash: 8xiIlFiA6GZq1D+ZloAZdSQZFiR0uzV5h+8EQUvk5jY=) 3: 3137302e3233392e3235322e302f32322d3234203d3e20323636333630.roa (hash: N9HuU1W9ryFGU85A3ZfF+Ao4jsgW1hWTRMLA6XPYlk0=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 14 Jun 2025 12:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:5f:fe:40:59:85:d9:17:e5:17:ca:8b:b0:9d:29:6c:47:4d:48:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA Validity Not Before: Jun 13 10:18:39 2025 GMT Not After : Jun 14 12:50:39 2025 GMT Subject: CN=6AA5B34869D704958081D054AD9024537FA9C59E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:de:5b:0f:13:5e:f3:90:19:43:65:95:6b:1c: a3:77:25:fb:44:96:90:6b:4e:09:b4:77:e3:f7:4a: 2b:37:60:0c:aa:53:19:f2:69:de:a0:cd:ae:b7:fc: da:f1:ad:7d:04:49:39:5d:d0:3b:d6:ce:68:6f:95: bb:e0:96:f1:d3:8f:c7:83:27:be:d2:bf:1a:f5:6f: cc:93:7b:26:3e:79:3e:a5:bc:9d:76:f8:69:43:28: 94:9c:10:fb:35:ee:fe:10:8a:61:0f:ef:a9:af:6f: 42:15:04:32:b7:ce:13:10:db:a7:fc:c6:d4:e4:ed: 38:b0:c1:e4:4a:92:84:54:be:fc:13:59:ce:52:c9: e9:08:e6:1e:07:23:a8:a4:3b:b4:4b:fe:d4:43:08: f8:a4:83:69:35:a6:26:a0:d8:a7:3b:88:59:76:42: 5c:86:4a:fb:09:3e:f3:52:7a:6b:34:eb:e0:d0:2e: 11:28:a2:f9:ea:e5:9d:35:e8:2b:ee:80:c3:b5:18: 47:a6:f6:5b:1c:59:6a:c1:1d:61:f6:ba:94:00:8d: 44:aa:89:47:82:38:6d:72:d1:d1:82:f4:bc:b6:62: a4:de:81:f0:93:70:58:ab:00:cd:0f:0f:c3:93:2c: bf:30:1e:a4:f6:e9:15:da:cc:7e:04:02:7b:d3:af: 3e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A5:B3:48:69:D7:04:95:80:81:D0:54:AD:90:24:53:7F:A9:C5:9E X509v3 Authority Key Identifier: keyid:CA:1C:4B:54:62:22:EE:15:6A:0D:43:48:D2:AB:00:43:BD:AB:4B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/1/CA1C4B546222EE156A0D4348D2AB0043BDAB4BEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:00:c4:81:05:0e:87:50:dd:24:a0:4a:86:7a:45:fe:cd:b5: e2:b2:e0:e1:63:19:70:0d:b2:0f:37:fd:11:d5:59:9e:c5:15: 8b:d4:82:25:56:36:a1:44:39:27:b3:14:90:d7:f9:8d:33:a4: 74:95:1a:3a:c6:f2:42:17:8f:51:c8:63:cf:9e:bd:d0:44:ea: 4d:81:10:48:da:e8:99:ef:80:f4:f8:05:c5:fc:d4:8a:9d:31: cd:eb:0f:b6:44:6c:27:60:04:aa:7e:12:28:b1:1f:31:7c:da: 20:cf:40:db:78:4a:9e:1e:1f:61:d0:27:16:fc:f0:5e:a7:26: b0:09:f6:f6:42:f4:31:ab:4e:39:24:3c:8e:77:4d:4c:b2:08: 47:43:30:7f:d0:3c:08:f6:62:e2:a5:00:8f:0c:d8:22:61:fb: 38:dd:2d:95:88:23:3e:75:ea:3a:ae:0c:52:77:8f:25:f6:72: 9f:ee:8c:c3:e3:18:e9:21:91:78:ae:5e:d5:19:a6:3f:cd:38: 6e:e0:93:64:9d:21:4d:6f:82:2b:99:6a:a3:d7:33:28:b5:f3: 5b:dc:9d:12:34:30:08:48:15:be:01:b3:c7:33:ff:75:db:dd: 25:93:53:2a:0e:38:87:b7:ac:6c:1c:bd:1d:33:5b:52:2e:e0: ad:d6:c0:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZF/+QFmF2RflF8qLsJ0pbEdNSKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExQzRCNTQ2MjIyRUUxNTZBMEQ0MzQ4RDJBQjAwNDNC REFCNEJFQTAeFw0yNTA2MTMxMDE4MzlaFw0yNTA2MTQxMjUwMzlaMDMxMTAvBgNV BAMTKDZBQTVCMzQ4NjlENzA0OTU4MDgxRDA1NEFEOTAyNDUzN0ZBOUM1OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf3lsPE17zkBlDZZVrHKN3JftE lpBrTgm0d+P3Sis3YAyqUxnyad6gza63/NrxrX0ESTld0DvWzmhvlbvglvHTj8eD J77Svxr1b8yTeyY+eT6lvJ12+GlDKJScEPs17v4QimEP76mvb0IVBDK3zhMQ26f8 xtTk7TiwweRKkoRUvvwTWc5SyekI5h4HI6ikO7RL/tRDCPikg2k1piag2Kc7iFl2 QlyGSvsJPvNSems06+DQLhEoovnq5Z016CvugMO1GEem9lscWWrBHWH2upQAjUSq iUeCOG1y0dGC9Ly2YqTegfCTcFirAM0PD8OTLL8wHqT26RXazH4EAnvTrz7jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaqWzSGnXBJWAgdBUrZAkU3+pxZ4wHwYDVR0j BBgwFoAUyhxLVGIi7hVqDUNI0qsAQ72rS+owDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBK U1MvMS9DQTFDNEI1NDYyMjJFRTE1NkEwRDQzNDhEMkFCMDA0M0JEQUI0QkVBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBMUM0QjU0NjIyMkVFMTU2 QTBENDM0OEQyQUIwMDQzQkRBQjRCRUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEVOWXhVWEV4dVN5d0U4UmFWNmtEaXZKVVJWdzJKYXBNbkYxR1NaQXBKU1MvMS9D QTFDNEI1NDYyMjJFRTE1NkEwRDQzNDhEMkFCMDA0M0JEQUI0QkVBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWQDEgQUOh1DdJKBKhnpF/s214rLg4WMZcA2yDzf9EdVZnsUVi9SCJVY2oUQ5 J7MUkNf5jTOkdJUaOsbyQhePUchjz5690ETqTYEQSNrome+A9PgFxfzUip0xzesP tkRsJ2AEqn4SKLEfMXzaIM9A23hKnh4fYdAnFvzwXqcmsAn29kL0MatOOSQ8jndN TLIIR0Mwf9A8CPZi4qUAjwzYImH7ON0tlYgjPnXqOq4MUnePJfZyn+6Mw+MY6SGR eK5e1RmmP804buCTZJ0hTW+CK5lqo9czKLXzW9ydEjQwCEgVvgGzxzP/ddvdJZNT Kg44h7esbBy9HTNbUi7grdbACQ== -----END CERTIFICATE-----Generated at Fri Jun 13 14:56:16 2025 by rpki-client