$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft File: 4B238277BD4501DC3B75403E74D8B541B7643097.mft (raw, json) Hash identifier: H/Hw60Z5gwhiurw0vqxmuwKtoV15JSCfDmRkIZwRVOk= Subject key identifier: 60:F8:8F:AB:19:EB:32:AF:33:4B:17:77:5D:F3:0E:8B:14:AB:63:D6 Authority key identifier: 4B:23:82:77:BD:45:01:DC:3B:75:40:3E:74:D8:B5:41:B7:64:30:97 Certificate issuer: /CN=4B238277BD4501DC3B75403E74D8B541B7643097 Certificate serial: 3990DB687AC2447539B9E64C50F7EA7BD3889D4F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B238277BD4501DC3B75403E74D8B541B7643097.cer Subject info access: rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft Manifest number: 86 Signing time: Sun 27 Jul 2025 15:08:40 +0000 Manifest this update: Sun 27 Jul 2025 15:03:40 +0000 Manifest next update: Mon 28 Jul 2025 18:30:40 +0000 Files and hashes: 1: 3138312e3138392e38302e302f32322d3332203d3e20323731363236.roa (hash: 2xtykdlv2HZAR6UC1CtCNk3nexbhm2O6sDYzQQilQhs=) 2: 323830343a376537383a3a2f33322d313238203d3e20323731363236.roa (hash: YxjgGXwxk/DJwwWBvr8NXqtozbxcPEarptqHkvquf/s=) 3: 4B238277BD4501DC3B75403E74D8B541B7643097.crl (hash: NHR6mu0JczrO1LjauvSLhNsgLFY2Dv0HHgGzDTqfRDY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.crl rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B238277BD4501DC3B75403E74D8B541B7643097.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Jul 2025 18:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:90:db:68:7a:c2:44:75:39:b9:e6:4c:50:f7:ea:7b:d3:88:9d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B238277BD4501DC3B75403E74D8B541B7643097 Validity Not Before: Jul 27 15:03:40 2025 GMT Not After : Jul 28 18:30:40 2025 GMT Subject: CN=60F88FAB19EB32AF334B17775DF30E8B14AB63D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c5:8a:5d:aa:2b:72:99:9a:0b:82:e3:24:8d: 70:2d:d4:5e:a7:57:7d:1d:db:20:32:af:84:78:fc: 44:58:aa:64:32:f2:91:47:30:b9:ac:24:2d:c9:24: b5:bc:95:8a:f5:89:67:71:69:25:86:19:b9:5a:fe: 94:17:28:a3:f0:ab:d7:91:94:a4:55:5c:84:39:0b: 91:c5:c8:cc:4f:25:84:40:81:84:d8:e2:a1:75:5e: 0d:be:d8:ba:6a:d6:76:b4:85:24:48:82:eb:3b:1b: a8:c5:c4:dd:a3:df:72:5d:7a:51:26:2e:09:d7:6c: 41:03:9a:6a:8b:d3:7c:a8:28:cb:10:2c:53:08:a3: 46:28:ce:34:f6:e7:d2:65:4d:51:b8:bf:ed:19:9f: 0d:40:ef:73:13:0d:83:f5:65:dd:ab:9a:3b:9d:f2: e8:fe:ec:3b:67:ac:b9:72:01:7d:45:c1:f7:35:79: c3:8a:85:ba:fb:b9:6e:10:e2:7d:04:83:48:fc:b0: 9a:4d:d4:ad:b3:f4:14:b6:8c:1c:48:c7:04:4c:87: 28:0e:ae:70:47:e6:b2:7e:ca:b3:85:77:0a:04:86: 21:4f:15:f3:e7:02:31:b1:ed:38:99:f2:dc:8f:34: 00:1b:ac:f6:f7:19:76:2b:10:d9:2d:5e:50:4f:1a: 02:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F8:8F:AB:19:EB:32:AF:33:4B:17:77:5D:F3:0E:8B:14:AB:63:D6 X509v3 Authority Key Identifier: keyid:4B:23:82:77:BD:45:01:DC:3B:75:40:3E:74:D8:B5:41:B7:64:30:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B238277BD4501DC3B75403E74D8B541B7643097.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a0:a9:56:9d:2e:f5:30:25:93:6d:55:29:f8:dc:9d:e1:5f: 0b:02:e6:3e:84:33:b4:89:b5:7d:af:d6:4c:df:b2:d5:1b:d7: 0b:9a:22:97:05:ad:26:c9:84:67:82:3b:9e:91:14:60:32:0f: 3c:eb:6b:50:d9:46:08:71:5d:78:2d:f8:d1:ba:6e:92:6a:cc: d1:5b:0b:0c:20:95:0e:67:c2:33:93:7c:50:33:7b:ab:a3:a2: 96:9a:41:2e:10:4a:c9:64:a3:bc:8f:4c:45:1c:6b:73:d9:e1: cd:e0:36:79:a7:b5:12:b4:28:8f:77:67:01:ea:d5:47:14:d9: 75:27:c7:3f:0d:15:e8:f2:de:0d:f0:63:61:aa:6d:59:8e:60: 33:05:08:75:c9:ff:7c:e2:c3:73:39:7e:8e:1d:03:9f:b1:a5: 12:e2:27:c9:87:3b:d8:94:3d:7b:4f:3a:96:de:29:66:ff:52: a6:2f:a1:80:3e:22:bb:ba:04:4f:62:da:8c:c2:44:37:ba:46: 59:18:2d:fa:47:e6:70:2d:81:80:b2:45:15:d5:c4:9f:ae:5b: 6c:90:f2:6c:9c:04:45:6b:16:16:5b:d0:30:5f:e2:64:92:84: 4a:33:d1:39:47:aa:90:70:96:ed:87:4b:04:6c:1f:59:1d:91: 1c:7a:8f:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOZDbaHrCRHU5ueZMUPfqe9OInU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyMzgyNzdCRDQ1MDFEQzNCNzU0MDNFNzREOEI1NDFC NzY0MzA5NzAeFw0yNTA3MjcxNTAzNDBaFw0yNTA3MjgxODMwNDBaMDMxMTAvBgNV BAMTKDYwRjg4RkFCMTlFQjMyQUYzMzRCMTc3NzVERjMwRThCMTRBQjYzRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExYpdqitymZoLguMkjXAt1F6n V30d2yAyr4R4/ERYqmQy8pFHMLmsJC3JJLW8lYr1iWdxaSWGGbla/pQXKKPwq9eR lKRVXIQ5C5HFyMxPJYRAgYTY4qF1Xg2+2Lpq1na0hSRIgus7G6jFxN2j33JdelEm LgnXbEEDmmqL03yoKMsQLFMIo0YozjT259JlTVG4v+0Znw1A73MTDYP1Zd2rmjud 8uj+7DtnrLlyAX1Fwfc1ecOKhbr7uW4Q4n0Eg0j8sJpN1K2z9BS2jBxIxwRMhygO rnBH5rJ+yrOFdwoEhiFPFfPnAjGx7TiZ8tyPNAAbrPb3GXYrENktXlBPGgJDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUYPiPqxnrMq8zSxd3XfMOixSrY9YwHwYDVR0j BBgwFoAUSyOCd71FAdw7dUA+dNi1QbdkMJcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVhQWlFVN3BqV3pUd2I0N2E1TXpHdTJNdFNQTkh5RXZrbm9halVnRFBT bmgvMC80QjIzODI3N0JENDUwMURDM0I3NTQwM0U3NEQ4QjU0MUI3NjQzMDk3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCMjM4Mjc3QkQ0NTAxREMz Qjc1NDAzRTc0RDhCNTQxQjc2NDMwOTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVhQWlFVN3BqV3pUd2I0N2E1TXpHdTJNdFNQTkh5RXZrbm9halVnRFBTbmgvMC80 QjIzODI3N0JENDUwMURDM0I3NTQwM0U3NEQ4QjU0MUI3NjQzMDk3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH6CpVp0u9TAlk21VKfjcneFfCwLmPoQztIm1fa/WTN+y1RvXC5oilwWtJsmE Z4I7npEUYDIPPOtrUNlGCHFdeC340bpukmrM0VsLDCCVDmfCM5N8UDN7q6OilppB LhBKyWSjvI9MRRxrc9nhzeA2eae1ErQoj3dnAerVRxTZdSfHPw0V6PLeDfBjYapt WY5gMwUIdcn/fOLDczl+jh0Dn7GlEuInyYc72JQ9e086lt4pZv9Spi+hgD4iu7oE T2LajMJEN7pGWRgt+kfmcC2BgLJFFdXEn65bbJDybJwERWsWFlvQMF/iZJKESjPR OUeqkHCW7YdLBGwfWR2RHHqPNw== -----END CERTIFICATE-----Generated at Mon Jul 28 02:06:49 2025 by rpki-client