$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft File: A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft (raw, json) Hash identifier: V2qSvqLKboYnJOokFGZrPS14Y7u+tskpgu/um4jAW7M= Subject key identifier: 8C:DA:89:E3:92:56:51:BA:2E:B0:16:8A:7D:B5:1C:E9:53:4A:FA:4D Authority key identifier: A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3 Certificate issuer: /CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3 Certificate serial: 31F4D6B9B2C86DAD63F5CB4367631E41639201BD Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer Subject info access: rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft Manifest number: 019D Signing time: Wed 11 Jun 2025 03:47:56 +0000 Manifest this update: Wed 11 Jun 2025 03:42:56 +0000 Manifest next update: Thu 12 Jun 2025 06:47:56 +0000 Files and hashes: 1: 323830343a323261303a3a2f33322d3438203d3e20323634313132.roa (hash: xjN6sHaV4vO2I0ogT4RW4ELkCzroQkdpCfyvnk2SDZM=) 2: A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl (hash: Ye8yMu0s1ZASY4aqbSBDbbAJQuwM4iKkJCEGCyGAXVk=) 3: 3137302e38332e3136302e302f32322d3234203d3e20323634313132.roa (hash: Axay2FXOHlab3Zbtc8prF8iZEWyctVL766TnXVI/cRU=) 4: 3133382e39372e32302e302f32322d3234203d3e20323634313132.roa (hash: AhtVw8+m+BE2xIGpEOoG2xLgZpn+7eLrWC9ArM8aH28=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Jun 2025 06:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:f4:d6:b9:b2:c8:6d:ad:63:f5:cb:43:67:63:1e:41:63:92:01:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A09FFB0FDC34DD07961FEDBB79D8593FC28112F3 Validity Not Before: Jun 11 03:42:56 2025 GMT Not After : Jun 12 06:47:56 2025 GMT Subject: CN=8CDA89E3925651BA2EB0168A7DB51CE9534AFA4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2c:38:39:71:e3:e0:32:7e:34:86:93:47:9e: 2f:1e:88:32:fa:a3:ff:5e:39:4f:ed:c4:7b:00:b7: 40:4f:3a:64:da:32:2a:3a:2c:c6:be:ab:c5:ac:00: 48:21:7b:51:ec:7c:44:07:6f:47:d9:7c:70:88:99: e1:1a:40:4e:d8:93:e7:f0:e2:88:7c:e1:d0:43:fb: 53:cf:86:38:63:78:d8:6f:87:b5:54:1f:0d:53:3f: d7:df:da:1b:a9:69:47:2e:14:37:d5:79:a9:b5:c0: ce:9a:0f:90:40:b6:78:5f:0d:c3:47:53:3b:c4:6f: dc:ff:9f:28:e6:fa:49:0c:0e:3f:c4:df:6c:4b:3e: d6:9e:e4:f5:bb:b9:fc:2c:43:f5:65:c9:4a:f2:42: d2:17:71:17:9b:e1:ce:ea:f6:86:c6:68:67:cf:f4: 67:cc:51:b3:e4:71:71:28:9b:a6:29:9e:6d:9d:f4: 08:5c:07:11:0a:70:3d:9c:8d:32:8b:7f:6e:9f:ff: 0f:2f:be:80:d6:76:dd:4e:d5:5c:66:dc:91:81:f3: d1:13:b0:2d:be:6f:e8:4f:c0:a5:b8:3f:09:67:41: 55:f9:80:d6:1b:b9:3b:22:4f:bb:81:87:a3:3d:df: 0a:5e:54:35:a2:82:58:2d:84:8b:11:9e:1d:bd:7d: b5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DA:89:E3:92:56:51:BA:2E:B0:16:8A:7D:B5:1C:E9:53:4A:FA:4D X509v3 Authority Key Identifier: keyid:A0:9F:FB:0F:DC:34:DD:07:96:1F:ED:BB:79:D8:59:3F:C2:81:12:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/0/A09FFB0FDC34DD07961FEDBB79D8593FC28112F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:70:78:ec:59:bd:5c:53:86:ab:ee:af:91:8c:df:4e:d1:e7: 8e:70:5c:91:f4:a2:6d:8d:7c:55:65:cf:7b:bf:ab:88:23:4e: b7:f9:7a:a7:4e:c0:4f:8a:ae:75:59:8e:e7:85:f7:7e:59:7c: c9:a7:98:69:fe:0b:ef:08:b6:de:04:38:ff:40:28:f2:d7:52: bb:1f:a6:e9:f3:c1:3d:ab:b6:37:8c:c4:d3:d3:ce:6d:ee:47: 67:29:3e:86:44:14:f2:a5:f1:c8:56:e5:45:51:4e:61:a1:65: bf:0e:2a:50:b9:6b:16:a6:3f:79:aa:48:5e:fb:f3:52:06:47: c4:7f:31:1b:aa:cd:1e:8f:0c:0a:a9:ad:2f:f2:dc:7e:27:7f: 46:b0:d3:23:6c:22:b9:80:35:91:3e:b6:88:29:ba:83:6f:b7: 2a:0f:b0:39:fd:df:d1:cd:ec:5e:01:bc:3e:33:2b:2d:95:64: ad:eb:ff:11:88:0a:ad:87:4e:a0:6b:8f:eb:10:33:b9:c4:0f: f7:bd:54:fc:7d:0b:af:ab:7a:b9:65:9a:ae:b2:5a:83:94:b3: fc:ac:ef:04:9b:41:a8:7c:6b:7a:52:1a:ed:43:76:8b:25:8a: 26:49:4c:bf:a6:7e:af:5b:cb:23:df:e5:8a:f1:f3:fd:bb:fe: 0b:21:53:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUMfTWubLIba1j9ctDZ2MeQWOSAb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA5RkZCMEZEQzM0REQwNzk2MUZFREJCNzlEODU5M0ZD MjgxMTJGMzAeFw0yNTA2MTEwMzQyNTZaFw0yNTA2MTIwNjQ3NTZaMDMxMTAvBgNV BAMTKDhDREE4OUUzOTI1NjUxQkEyRUIwMTY4QTdEQjUxQ0U5NTM0QUZBNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPLDg5cePgMn40hpNHni8eiDL6 o/9eOU/txHsAt0BPOmTaMio6LMa+q8WsAEghe1HsfEQHb0fZfHCImeEaQE7Yk+fw 4oh84dBD+1PPhjhjeNhvh7VUHw1TP9ff2hupaUcuFDfVeam1wM6aD5BAtnhfDcNH UzvEb9z/nyjm+kkMDj/E32xLPtae5PW7ufwsQ/VlyUryQtIXcReb4c7q9obGaGfP 9GfMUbPkcXEom6Ypnm2d9AhcBxEKcD2cjTKLf26f/w8vvoDWdt1O1Vxm3JGB89ET sC2+b+hPwKW4PwlnQVX5gNYbuTsiT7uBh6M93wpeVDWiglgthIsRnh29fbWjAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUjNqJ45JWUbousBaKfbUc6VNK+k0wHwYDVR0j BBgwFoAUoJ/7D9w03QeWH+27edhZP8KBEvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNE1zTkRwZUFodnY4d2RqV0hnajR5SHR0VkRjVk04UFh5eWR0ellUOWly VVAvMC9BMDlGRkIwRkRDMzRERDA3OTYxRkVEQkI3OUQ4NTkzRkMyODExMkYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwOUZGQjBGREMzNEREMDc5 NjFGRURCQjc5RDg1OTNGQzI4MTEyRjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NE1zTkRwZUFodnY4d2RqV0hnajR5SHR0VkRjVk04UFh5eWR0ellUOWlyVVAvMC9B MDlGRkIwRkRDMzRERDA3OTYxRkVEQkI3OUQ4NTkzRkMyODExMkYzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP3B47Fm9XFOGq+6vkYzfTtHnjnBckfSibY18VWXPe7+riCNOt/l6p07AT4qu dVmO54X3fll8yaeYaf4L7wi23gQ4/0Ao8tdSux+m6fPBPau2N4zE09PObe5HZyk+ hkQU8qXxyFblRVFOYaFlvw4qULlrFqY/eapIXvvzUgZHxH8xG6rNHo8MCqmtL/Lc fid/RrDTI2wiuYA1kT62iCm6g2+3Kg+wOf3f0c3sXgG8PjMrLZVkrev/EYgKrYdO oGuP6xAzucQP971U/H0Lr6t6uWWarrJag5Sz/KzvBJtBqHxrelIa7UN2iyWKJklM v6Z+r1vLI9/livHz/bv+CyFT9Q== -----END CERTIFICATE-----Generated at Wed Jun 11 11:11:25 2025 by rpki-client