$ rpki-client -vvf rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft File: C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft (raw, json) Hash identifier: hu86vOeSr3SXaxyhBf5fDc2mK1qwzH/1HhUSVWLf3Ro= Subject key identifier: 78:5F:EB:E6:DF:38:88:82:9C:12:6E:A0:6B:50:9C:69:56:FC:3E:5C Authority key identifier: C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A Certificate issuer: /CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A Certificate serial: 12C531E4BC07D78C979E47D458D59B3E8E7FB6CA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer Subject info access: rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft Manifest number: 0220 Signing time: Fri 06 Jun 2025 11:27:44 +0000 Manifest this update: Fri 06 Jun 2025 11:22:44 +0000 Manifest next update: Sat 07 Jun 2025 14:06:44 +0000 Files and hashes: 1: 3230312e3135302e3135322e302f32322d3234203d3e203631383334.roa (hash: bQb6OqUWfTVIWbNybHXXMLPCBzgY58GGYHDVLDz95Ug=) 2: C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl (hash: 1CuTLhwR4WbOsmwRwc5oVrVj+Tg20UCHvnRUla3aTb8=) 3: 323830343a316131303a3a2f33322d3438203d3e203631383334.roa (hash: gkUxHP8r9+Fhu5QWQf9DujXsJaThMNFObjuKFQmBFk0=) 4: 3134332e3133372e3138302e302f32322d3234203d3e203631383334.roa (hash: TybVhUEfgBREmL3NJsvdZgicXA/on5VwTBTGR0erAho=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 14:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c5:31:e4:bc:07:d7:8c:97:9e:47:d4:58:d5:9b:3e:8e:7f:b6:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A Validity Not Before: Jun 6 11:22:44 2025 GMT Not After : Jun 7 14:06:44 2025 GMT Subject: CN=785FEBE6DF3888829C126EA06B509C6956FC3E5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b2:be:8c:bf:aa:db:f3:a9:28:4e:d0:da:a1: 5d:19:61:c6:9c:0c:f8:87:43:bf:ef:c7:18:ac:2b: e6:01:e7:c3:62:79:13:75:96:79:76:98:46:17:6d: 9c:91:99:c2:9c:1c:cb:72:60:79:e0:0d:a4:53:92: bc:f1:78:31:ba:0b:ba:a3:2c:6e:19:8e:04:02:8a: 9a:f3:b5:3a:e2:7e:19:0a:c1:85:58:1b:22:8b:65: e9:5d:a0:55:be:d3:0f:75:23:64:da:af:2d:76:8a: 63:34:72:a7:39:ef:7a:aa:7c:fe:5a:0b:4a:ba:7a: fa:85:c0:3c:bb:04:9a:d5:ef:aa:07:6a:4c:c6:38: a4:25:11:9b:06:83:bb:e2:64:5d:04:04:5b:c3:ce: e2:cc:7d:a5:e7:a2:aa:e7:16:82:3b:1a:a6:9f:9e: 79:23:b4:1b:38:56:43:a6:3e:6b:a0:7a:a1:64:71: 7d:c9:7f:6e:6c:2f:c7:53:4a:49:e4:78:84:ab:4b: 55:96:f1:9b:72:c1:00:da:3d:97:34:ed:d0:de:bb: 5e:d4:99:4b:ce:56:0d:fd:07:17:2f:d9:97:a8:cd: 22:3b:82:89:20:3a:84:57:aa:e1:3a:b9:86:2e:68: e3:ea:bd:78:b4:68:b6:d8:5f:23:87:da:f3:e9:3a: 76:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5F:EB:E6:DF:38:88:82:9C:12:6E:A0:6B:50:9C:69:56:FC:3E:5C X509v3 Authority Key Identifier: keyid:C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:a9:4a:2f:29:78:8b:57:36:32:88:e9:11:bd:bc:a7:c8:76: aa:19:eb:56:ce:50:1d:3d:0b:dc:49:e9:cf:39:f7:c1:27:b2: 64:25:4c:a1:70:2b:6c:f7:b7:10:e8:43:3d:f0:1b:89:45:7b: 2c:6c:92:4d:00:48:27:ff:54:af:eb:90:b9:67:59:c2:6f:4f: 1c:35:a7:49:85:45:ae:cd:3d:cd:fd:a5:e2:3d:77:02:72:e6: d8:2f:76:53:a1:25:51:1e:76:3d:55:66:5f:04:92:4c:9c:03: 7f:49:c3:8a:82:3e:af:c4:74:ee:b7:00:38:ce:b7:36:6b:f7: c2:30:55:d4:cb:67:31:26:32:a2:b2:0d:b8:f4:ef:a9:0f:df: a7:18:99:f8:0c:a0:f3:cf:71:04:ac:c1:d8:4f:68:bc:c4:7f: ab:53:66:80:30:b6:90:da:05:57:08:85:e9:88:ac:27:0d:59: f6:0c:db:73:f1:c5:d1:7c:4c:cd:67:cc:fd:ae:84:be:43:47: 5a:0c:8c:18:5a:4f:70:d3:96:6a:04:c5:60:f6:b5:0f:a0:ed: 33:e3:c4:f9:3e:9c:26:16:21:61:f6:36:dc:56:3c:58:4f:b1: bb:49:37:b4:21:09:22:f2:11:1f:12:c9:69:e5:74:59:70:e2: 1d:26:90:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEsUx5LwH14yXnkfUWNWbPo5/tsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzNkM2NUFBMEJBMzNDNjI2RkFCMEI5QzI2RTAyNkVC OTA4NDU0QTAeFw0yNTA2MDYxMTIyNDRaFw0yNTA2MDcxNDA2NDRaMDMxMTAvBgNV BAMTKDc4NUZFQkU2REYzODg4ODI5QzEyNkVBMDZCNTA5QzY5NTZGQzNFNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCsr6Mv6rb86koTtDaoV0ZYcac DPiHQ7/vxxisK+YB58NieRN1lnl2mEYXbZyRmcKcHMtyYHngDaRTkrzxeDG6C7qj LG4ZjgQCiprztTrifhkKwYVYGyKLZeldoFW+0w91I2Tary12imM0cqc573qqfP5a C0q6evqFwDy7BJrV76oHakzGOKQlEZsGg7viZF0EBFvDzuLMfaXnoqrnFoI7Gqaf nnkjtBs4VkOmPmugeqFkcX3Jf25sL8dTSknkeISrS1WW8ZtywQDaPZc07dDeu17U mUvOVg39Bxcv2ZeozSI7gokgOoRXquE6uYYuaOPqvXi0aLbYXyOH2vPpOnZ9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUeF/r5t84iIKcEm6ga1CcaVb8PlwwHwYDVR0j BBgwFoAUwzbGWqC6M8Ym+rC5wm4CbrkIRUowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNHBIQjFOV25iZVdBaEJLS1VvZFJrcDFVejFacjVQVDJBSlV4a21BMzFq b2svMS9DMzM2QzY1QUEwQkEzM0M2MjZGQUIwQjlDMjZFMDI2RUI5MDg0NTRBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzMzZDNjVBQTBCQTMzQzYy NkZBQjBCOUMyNkUwMjZFQjkwODQ1NEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NHBIQjFOV25iZVdBaEJLS1VvZFJrcDFVejFacjVQVDJBSlV4a21BMzFqb2svMS9D MzM2QzY1QUEwQkEzM0M2MjZGQUIwQjlDMjZFMDI2RUI5MDg0NTRBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXqlKLyl4i1c2MojpEb28p8h2qhnrVs5QHT0L3Enpzzn3wSeyZCVMoXArbPe3 EOhDPfAbiUV7LGySTQBIJ/9Ur+uQuWdZwm9PHDWnSYVFrs09zf2l4j13AnLm2C92 U6ElUR52PVVmXwSSTJwDf0nDioI+r8R07rcAOM63Nmv3wjBV1MtnMSYyorINuPTv qQ/fpxiZ+Ayg889xBKzB2E9ovMR/q1NmgDC2kNoFVwiF6YisJw1Z9gzbc/HF0XxM zWfM/a6EvkNHWgyMGFpPcNOWagTFYPa1D6DtM+PE+T6cJhYhYfY23FY8WE+xu0k3 tCEJIvIRHxLJaeV0WXDiHSaQ9A== -----END CERTIFICATE-----Generated at Sat Jun 7 13:07:29 2025 by rpki-client