$ rpki-client -vvf rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.mft File: C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.mft (raw, json) Hash identifier: mlHo1zJIhAIlKWlgF7avFrGr+R1FV32py9pCzG58pcM= Subject key identifier: 1B:F7:0C:4D:88:1F:E2:93:72:9D:A9:CE:5F:6C:47:B0:48:73:75:67 Authority key identifier: C7:34:68:2B:0C:C1:F8:FC:BD:DF:FA:96:85:FF:12:9F:B7:F4:62:41 Certificate issuer: /CN=C734682B0CC1F8FCBDDFFA9685FF129FB7F46241 Certificate serial: 44C90F7035083D510190D414AA1BC93861F2EC70 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.cer Subject info access: rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.mft Manifest number: 021B Signing time: Thu 12 Jun 2025 01:40:05 +0000 Manifest this update: Thu 12 Jun 2025 01:35:05 +0000 Manifest next update: Fri 13 Jun 2025 05:03:05 +0000 Files and hashes: 1: 3133312e302e33322e302f32322d3234203d3e203631383638.roa (hash: feiJymGQIrcrmtgHJoB8oIFAfgt95XgpAtjg5YWcmko=) 2: 34352e3232362e3139322e302f32322d3234203d3e203631383638.roa (hash: pKxJiGWNAf7N2EV+W1YaK1PbuFnvSaKLGorBIR84edk=) 3: 323830343a316139303a3a2f33322d3438203d3e203631383638.roa (hash: 8AUMiSbvef1GcwJXJaP2BBMtQXbzEc0UGXXl9eaKrsI=) 4: C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.crl (hash: Y5UScUeAoaQo0a7nZKZdvh1ZmUrD9Bl9Mqc9sP7F7kk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.crl rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 13 Jun 2025 03:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c9:0f:70:35:08:3d:51:01:90:d4:14:aa:1b:c9:38:61:f2:ec:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C734682B0CC1F8FCBDDFFA9685FF129FB7F46241 Validity Not Before: Jun 12 01:35:05 2025 GMT Not After : Jun 13 05:03:05 2025 GMT Subject: CN=1BF70C4D881FE293729DA9CE5F6C47B048737567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6b:dc:9b:4c:8c:74:f9:8d:9f:86:3b:0c:2c: 1c:76:60:d3:1c:0c:b9:65:8f:5d:f9:5a:22:32:0f: 13:9e:1d:c2:15:28:63:d3:ef:a1:64:e8:de:0f:a0: e2:d2:22:5e:28:84:2a:4f:55:d8:a7:d1:46:56:83: 18:4c:94:58:43:5d:b2:b8:a0:4f:b7:9b:a8:2e:2e: 33:f5:7c:2f:ca:76:1f:95:34:96:37:91:41:e0:31: ea:3e:e8:4d:36:d4:95:c3:f0:a2:f6:1c:5f:84:ff: 5c:e3:d6:8e:58:a5:c4:cf:62:77:da:b7:e3:a3:f1: 9c:0e:e9:51:f9:da:16:31:b7:92:0d:ea:ab:f3:de: 2f:ee:5d:6d:06:8e:cc:0e:6c:b0:a4:7e:75:64:5d: 57:67:55:cc:de:e7:87:0c:91:48:e4:25:63:70:b4: c3:c1:bc:84:41:8c:ee:8f:92:b0:41:e1:3f:88:7e: 11:40:69:43:46:60:c1:ff:bb:94:13:94:87:fa:8f: 8c:75:41:f6:7c:f3:77:5a:90:86:47:98:93:2a:85: cc:0b:bc:e4:ff:f9:20:8c:0c:ff:52:f6:f3:a8:2f: 3c:6c:0d:15:d7:7c:41:dd:c5:8d:51:bc:b6:f8:82: 26:cc:98:59:e4:54:5f:fc:19:89:01:f7:9d:49:71: c0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F7:0C:4D:88:1F:E2:93:72:9D:A9:CE:5F:6C:47:B0:48:73:75:67 X509v3 Authority Key Identifier: keyid:C7:34:68:2B:0C:C1:F8:FC:BD:DF:FA:96:85:FF:12:9F:B7:F4:62:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FTnNMqff3JUznQwY152gBSmofBRwCzY7YfycKBMj7hG/0/C734682B0CC1F8FCBDDFFA9685FF129FB7F46241.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:25:01:8f:59:1c:b2:37:bb:d0:83:80:68:f7:48:37:f7:16: bb:b8:4c:ff:7a:15:86:cf:d4:bd:4b:a9:04:8d:31:1d:ea:42: 79:6b:c1:71:b8:84:6c:c0:ed:94:01:ec:1d:8e:54:80:e3:78: ad:ce:ce:42:ed:f8:65:02:fb:ad:80:35:94:5f:b7:3f:77:38: 69:58:1b:bb:3d:ee:57:12:f6:75:e3:81:1f:e9:71:a6:e1:6a: cb:08:65:78:61:ff:c1:3c:c8:3b:04:fe:39:6a:d5:cf:6d:e9: e8:79:89:b2:44:c9:f8:45:a5:44:b6:fe:f3:58:e0:66:c2:d8: 1b:0b:2e:df:55:10:f7:87:56:66:09:78:8d:3a:62:7c:04:91: 85:d0:7e:52:59:8b:ec:58:37:95:d8:db:5e:bd:bb:3a:87:a3: 72:31:3e:c8:e3:1d:d0:01:18:ca:c1:28:34:19:43:33:67:90: f1:0f:9b:d5:a4:5a:85:b5:45:2d:e0:09:5d:a4:8f:51:d7:d6: 38:36:30:75:da:5a:44:6a:91:cd:0c:9c:8c:12:41:05:b0:33: c3:0f:84:c1:90:07:69:4f:59:40:fc:f6:f8:15:f9:2f:48:38: 7d:a2:cb:46:08:a5:22:e2:d3:8c:7a:d0:04:f7:03:71:10:ac: 0c:2e:74:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURMkPcDUIPVEBkNQUqhvJOGHy7HAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzczNDY4MkIwQ0MxRjhGQ0JEREZGQTk2ODVGRjEyOUZC N0Y0NjI0MTAeFw0yNTA2MTIwMTM1MDVaFw0yNTA2MTMwNTAzMDVaMDMxMTAvBgNV BAMTKDFCRjcwQzREODgxRkUyOTM3MjlEQTlDRTVGNkM0N0IwNDg3Mzc1NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDa9ybTIx0+Y2fhjsMLBx2YNMc DLllj135WiIyDxOeHcIVKGPT76Fk6N4PoOLSIl4ohCpPVdin0UZWgxhMlFhDXbK4 oE+3m6guLjP1fC/Kdh+VNJY3kUHgMeo+6E021JXD8KL2HF+E/1zj1o5YpcTPYnfa t+Oj8ZwO6VH52hYxt5IN6qvz3i/uXW0GjswObLCkfnVkXVdnVcze54cMkUjkJWNw tMPBvIRBjO6PkrBB4T+IfhFAaUNGYMH/u5QTlIf6j4x1QfZ883dakIZHmJMqhcwL vOT/+SCMDP9S9vOoLzxsDRXXfEHdxY1RvLb4gibMmFnkVF/8GYkB951JccCXAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUG/cMTYgf4pNynanOX2xHsEhzdWcwHwYDVR0j BBgwFoAUxzRoKwzB+Py93/qWhf8Sn7f0YkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEZUbk5NcWZmM0pVem5Rd1kxNTJnQlNtb2ZCUndDelk3WWZ5Y0tCTWo3 aEcvMC9DNzM0NjgyQjBDQzFGOEZDQkRERkZBOTY4NUZGMTI5RkI3RjQ2MjQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3MzQ2ODJCMENDMUY4RkNC RERGRkE5Njg1RkYxMjlGQjdGNDYyNDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEZUbk5NcWZmM0pVem5Rd1kxNTJnQlNtb2ZCUndDelk3WWZ5Y0tCTWo3aEcvMC9D NzM0NjgyQjBDQzFGOEZDQkRERkZBOTY4NUZGMTI5RkI3RjQ2MjQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgiUBj1kcsje70IOAaPdIN/cWu7hM/3oVhs/UvUupBI0xHepCeWvBcbiEbMDt lAHsHY5UgON4rc7OQu34ZQL7rYA1lF+3P3c4aVgbuz3uVxL2deOBH+lxpuFqywhl eGH/wTzIOwT+OWrVz23p6HmJskTJ+EWlRLb+81jgZsLYGwsu31UQ94dWZgl4jTpi fASRhdB+UlmL7Fg3ldjbXr27OoejcjE+yOMd0AEYysEoNBlDM2eQ8Q+b1aRahbVF LeAJXaSPUdfWODYwddpaRGqRzQycjBJBBbAzww+EwZAHaU9ZQPz2+BX5L0g4faLL RgilIuLTjHrQBPcDcRCsDC50pA== -----END CERTIFICATE-----Generated at Thu Jun 12 09:22:47 2025 by rpki-client