$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft File: 19260CFDC65E0274748EF44AA37858B8E34F0C25.mft (raw, json) Hash identifier: OsE0EahM/cNeW7ZTF98LTnZAbEh3pkLjvoNQcSrecow= Subject key identifier: 4E:83:76:DE:C2:6D:B8:96:44:29:7A:7E:4F:33:A6:8A:7C:66:DD:5B Authority key identifier: 19:26:0C:FD:C6:5E:02:74:74:8E:F4:4A:A3:78:58:B8:E3:4F:0C:25 Certificate issuer: /CN=19260CFDC65E0274748EF44AA37858B8E34F0C25 Certificate serial: 1EB2A4FB4240033C90BA31D635C2CC25CD4D07B4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19260CFDC65E0274748EF44AA37858B8E34F0C25.cer Subject info access: rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft Manifest number: 0124 Signing time: Sat 26 Jul 2025 12:46:02 +0000 Manifest this update: Sat 26 Jul 2025 12:41:02 +0000 Manifest next update: Sun 27 Jul 2025 14:22:02 +0000 Files and hashes: 1: 19260CFDC65E0274748EF44AA37858B8E34F0C25.crl (hash: sAv+RThD6FznEk2BuHJZzVKhKgFvEM7UAjAKEa6YYow=) 2: 3138362e3139352e39362e302f32302d3234203d3e20323632373230.roa (hash: syT/Sbgem75/2+FPj7DQALiSeFmma+ew6V2XqT7gzqc=) 3: 323830343a6339343a3a2f33322d3438203d3e20323632373230.roa (hash: p+GTiuuAWFu/8S3EJbQPooQG4K6WnOklzedG1N3D0sA=) 4: 3137372e382e3139322e302f32302d3234203d3e20323632373230.roa (hash: ZoJKSec6k6riogUVp0cHV/6gr5piXlvNZBydTk1teNw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.crl rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19260CFDC65E0274748EF44AA37858B8E34F0C25.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 27 Jul 2025 14:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b2:a4:fb:42:40:03:3c:90:ba:31:d6:35:c2:cc:25:cd:4d:07:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19260CFDC65E0274748EF44AA37858B8E34F0C25 Validity Not Before: Jul 26 12:41:02 2025 GMT Not After : Jul 27 14:22:02 2025 GMT Subject: CN=4E8376DEC26DB89644297A7E4F33A68A7C66DD5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:83:a3:83:35:33:91:2c:b8:d3:b8:42:64:9d: 26:e2:2a:37:dc:c4:7c:c2:0b:05:a3:4b:69:e4:37: 8b:6d:8c:ef:be:2b:63:7e:49:d2:72:fd:1a:83:1c: 20:ab:ab:03:0f:be:56:f4:6b:fc:f1:ee:4b:87:8e: c0:d5:c9:c8:b8:ab:f1:1a:6f:a8:9e:c4:c4:42:a6: 8e:4b:4f:e4:7e:79:71:0a:4e:c4:ed:05:43:54:75: 0c:d4:f9:94:68:01:e1:8c:9a:ce:6b:0c:17:9f:40: 24:8a:8c:f4:bb:1c:e5:fa:0c:5e:2c:ff:b8:d3:5d: 84:60:bc:c4:7f:51:50:64:7a:89:3d:c2:c1:01:e4: 3c:d9:70:34:11:26:83:d6:13:a8:50:1c:8b:ae:b1: 3e:14:36:61:ba:79:6e:1c:55:35:7d:9d:76:39:87: 38:cb:7c:1e:2c:50:83:cf:cb:71:68:53:f5:b4:23: bb:11:de:09:3e:a1:4b:b3:14:b3:cb:ad:bc:69:ff: de:d6:64:30:4f:be:25:a8:8f:2f:d0:87:cc:d4:b3: 94:c0:1a:e6:42:ff:fb:d7:6f:fc:35:b2:bf:60:fd: 08:ac:af:f2:7a:8a:63:b2:3a:e4:53:a1:a2:50:9b: 57:a8:cc:8d:d9:f6:2c:e3:57:bb:1d:8a:2c:34:8e: a0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:83:76:DE:C2:6D:B8:96:44:29:7A:7E:4F:33:A6:8A:7C:66:DD:5B X509v3 Authority Key Identifier: keyid:19:26:0C:FD:C6:5E:02:74:74:8E:F4:4A:A3:78:58:B8:E3:4F:0C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19260CFDC65E0274748EF44AA37858B8E34F0C25.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ad:c4:f9:91:ae:11:11:33:6e:d6:b4:b6:53:5e:3b:bf:fc: cf:14:7d:e3:15:75:ab:55:15:53:70:c1:07:be:b0:d2:eb:9d: 71:27:0b:19:09:40:70:31:76:95:d6:bd:2b:b4:70:72:c4:2a: 45:70:e1:82:03:bd:d4:93:15:d6:12:77:18:10:af:75:99:f7: b6:16:13:7e:8d:cf:f4:81:d1:b8:1a:9d:60:88:69:23:aa:bf: 83:b9:98:75:77:4a:88:69:9e:85:d8:20:f6:b0:64:fd:a4:e7: f0:5f:36:b0:d3:3a:d3:ad:ba:1f:71:15:7f:35:d7:5c:55:75: 2d:9c:95:0c:96:2f:97:83:f1:b1:75:6f:30:e1:9f:b3:95:e5: c2:ab:11:3a:8d:20:45:df:88:1f:5e:10:63:da:34:4b:bf:a7: 57:dc:29:50:26:01:a7:54:42:4a:93:12:02:32:6a:88:37:62: 41:13:17:97:a1:ea:64:0e:46:c1:5a:84:72:e6:67:61:f7:3a: b9:87:eb:76:1a:c3:4d:5b:01:62:1a:46:3a:19:d9:99:26:10: 63:20:32:9b:72:00:15:14:1d:51:f8:fd:9c:62:53:a3:9e:63: 13:ae:89:7b:23:a3:24:ca:18:0c:5e:a6:88:10:8d:76:15:72: 43:cc:79:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHrKk+0JAAzyQujHWNcLMJc1NB7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkyNjBDRkRDNjVFMDI3NDc0OEVGNDRBQTM3ODU4QjhF MzRGMEMyNTAeFw0yNTA3MjYxMjQxMDJaFw0yNTA3MjcxNDIyMDJaMDMxMTAvBgNV BAMTKDRFODM3NkRFQzI2REI4OTY0NDI5N0E3RTRGMzNBNjhBN0M2NkRENUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVg6ODNTORLLjTuEJknSbiKjfc xHzCCwWjS2nkN4ttjO++K2N+SdJy/RqDHCCrqwMPvlb0a/zx7kuHjsDVyci4q/Ea b6iexMRCpo5LT+R+eXEKTsTtBUNUdQzU+ZRoAeGMms5rDBefQCSKjPS7HOX6DF4s /7jTXYRgvMR/UVBkeok9wsEB5DzZcDQRJoPWE6hQHIuusT4UNmG6eW4cVTV9nXY5 hzjLfB4sUIPPy3FoU/W0I7sR3gk+oUuzFLPLrbxp/97WZDBPviWojy/Qh8zUs5TA GuZC//vXb/w1sr9g/Qisr/J6imOyOuRToaJQm1eozI3Z9izjV7sdiiw0jqADAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUToN23sJtuJZEKXp+TzOminxm3VswHwYDVR0j BBgwFoAUGSYM/cZeAnR0jvRKo3hYuONPDCUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFEyVG9xUDJyR0t0M3pIZ1RHNldQTnRDNm5pMUMyZlNmbmUxS0xqRWF4 S2gvMC8xOTI2MENGREM2NUUwMjc0NzQ4RUY0NEFBMzc4NThCOEUzNEYwQzI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5MjYwQ0ZEQzY1RTAyNzQ3 NDhFRjQ0QUEzNzg1OEI4RTM0RjBDMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFEyVG9xUDJyR0t0M3pIZ1RHNldQTnRDNm5pMUMyZlNmbmUxS0xqRWF4S2gvMC8x OTI2MENGREM2NUUwMjc0NzQ4RUY0NEFBMzc4NThCOEUzNEYwQzI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfK3E+ZGuEREzbta0tlNeO7/8zxR94xV1q1UVU3DBB76w0uudcScLGQlAcDF2 lda9K7RwcsQqRXDhggO91JMV1hJ3GBCvdZn3thYTfo3P9IHRuBqdYIhpI6q/g7mY dXdKiGmehdgg9rBk/aTn8F82sNM60626H3EVfzXXXFV1LZyVDJYvl4PxsXVvMOGf s5XlwqsROo0gRd+IH14QY9o0S7+nV9wpUCYBp1RCSpMSAjJqiDdiQRMXl6HqZA5G wVqEcuZnYfc6uYfrdhrDTVsBYhpGOhnZmSYQYyAym3IAFRQdUfj9nGJTo55jE66J eyOjJMoYDF6miBCNdhVyQ8x5zA== -----END CERTIFICATE-----Generated at Sun Jul 27 06:10:36 2025 by rpki-client