$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft File: 4B238277BD4501DC3B75403E74D8B541B7643097.mft (raw, json) Hash identifier: goUIleJibZJbkHV0Uge46s2GSAXzXeWxQyxTGCmG94Q= Subject key identifier: 70:70:BA:2E:D8:2D:1C:38:AC:FE:2B:87:60:F6:D1:C5:38:38:F3:18 Authority key identifier: 4B:23:82:77:BD:45:01:DC:3B:75:40:3E:74:D8:B5:41:B7:64:30:97 Certificate issuer: /CN=4B238277BD4501DC3B75403E74D8B541B7643097 Certificate serial: 45D65F4FCBB76014257C26D416DAA6117C66F316 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B238277BD4501DC3B75403E74D8B541B7643097.cer Subject info access: rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft Manifest number: 49 Signing time: Tue 10 Jun 2025 11:24:15 +0000 Manifest this update: Tue 10 Jun 2025 11:19:15 +0000 Manifest next update: Wed 11 Jun 2025 12:05:15 +0000 Files and hashes: 1: 323830343a376537383a3a2f33322d313238203d3e20323731363236.roa (hash: YxjgGXwxk/DJwwWBvr8NXqtozbxcPEarptqHkvquf/s=) 2: 4B238277BD4501DC3B75403E74D8B541B7643097.crl (hash: OUp0NDMSylYqMsB707IUdNBlxMk0G2IHN8qGDvpoC48=) 3: 3138312e3138392e38302e302f32322d3332203d3e20323731363236.roa (hash: 2xtykdlv2HZAR6UC1CtCNk3nexbhm2O6sDYzQQilQhs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.crl rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B238277BD4501DC3B75403E74D8B541B7643097.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 11 Jun 2025 12:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d6:5f:4f:cb:b7:60:14:25:7c:26:d4:16:da:a6:11:7c:66:f3:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B238277BD4501DC3B75403E74D8B541B7643097 Validity Not Before: Jun 10 11:19:15 2025 GMT Not After : Jun 11 12:05:15 2025 GMT Subject: CN=7070BA2ED82D1C38ACFE2B8760F6D1C53838F318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5b:42:6c:44:33:9b:05:c6:53:22:93:53:78: 53:c0:a0:3a:1e:9d:94:ef:a4:58:e6:52:18:4a:2f: c3:35:6b:86:28:aa:d6:a3:d8:2d:54:f5:64:73:0a: dc:af:6f:ad:71:0f:66:d0:cc:98:17:6e:50:ba:0c: 90:b1:bb:f0:51:2e:9f:1a:2b:17:ea:7f:c7:d8:fc: 64:f4:df:a2:c8:e6:dd:98:b0:2a:d9:8e:52:43:cb: cc:9b:78:cf:65:a7:5e:ef:9f:ae:cf:03:52:0d:d6: 00:45:87:a8:10:38:bc:f3:2f:00:5b:95:8f:a8:ce: 13:ed:70:9c:bb:8a:09:44:44:d6:cb:43:5a:f9:fd: c4:c6:bc:9a:c0:88:9b:5c:03:43:00:ac:00:f1:2c: df:60:57:19:42:77:ee:74:86:65:b2:40:99:69:b4: 5f:a8:13:f6:f1:eb:cc:eb:c5:ea:60:f0:86:6d:eb: d9:42:90:b9:98:bc:91:24:53:d2:24:1a:18:95:f3: ea:67:80:67:2b:42:13:9a:7f:40:c0:9a:77:95:f1: f4:98:58:12:96:1d:eb:31:76:00:71:f2:a0:dd:cf: bf:11:45:f1:e4:22:0c:35:46:fa:b9:28:bc:7f:f8: f5:a6:1e:5c:0e:d9:b4:0d:41:75:7e:1a:27:23:1e: 6c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:70:BA:2E:D8:2D:1C:38:AC:FE:2B:87:60:F6:D1:C5:38:38:F3:18 X509v3 Authority Key Identifier: keyid:4B:23:82:77:BD:45:01:DC:3B:75:40:3E:74:D8:B5:41:B7:64:30:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B238277BD4501DC3B75403E74D8B541B7643097.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:3f:7c:49:36:2f:8a:a6:0f:cf:d6:f3:6d:33:40:a5:31:ca: 40:de:6f:3a:4f:91:ca:8e:f2:74:26:df:a3:c2:87:ca:e9:34: cc:0d:bd:f7:38:8f:69:41:89:1d:dd:24:64:8c:8c:36:28:f8: 89:40:c8:ce:04:4d:26:e9:5d:cf:5d:ec:09:2b:76:31:4d:98: 20:33:d5:05:e8:51:8a:ae:ee:25:00:6b:e7:09:93:2c:ff:e0: d4:2e:11:38:61:c8:6f:f2:7e:4b:6b:97:81:82:81:9f:3c:7c: 4f:42:1b:7c:51:55:4e:7f:91:e7:dd:43:ff:69:49:d5:79:65: 9c:f6:00:a6:1f:17:c5:a8:63:d3:44:53:ff:b8:1a:f4:97:89: e6:af:58:ae:af:7e:7c:22:5d:81:44:89:56:49:dc:07:9f:50: fd:bd:02:ff:4f:d1:c6:e6:4d:df:89:08:4e:7a:ca:a6:80:ff: b5:36:50:23:85:0d:e1:75:77:d3:69:99:3e:7c:af:13:ad:11: e2:d3:d9:2e:c9:de:13:d4:58:6a:3d:e9:1b:e3:59:3d:a0:4f: e9:2a:63:6b:40:1d:df:46:39:b5:f2:a4:f3:30:94:7d:e3:15: bf:da:fe:ba:46:f0:9f:b9:a5:e5:c4:a2:ab:98:04:85:c4:59: 95:7f:ce:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURdZfT8u3YBQlfCbUFtqmEXxm8xYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyMzgyNzdCRDQ1MDFEQzNCNzU0MDNFNzREOEI1NDFC NzY0MzA5NzAeFw0yNTA2MTAxMTE5MTVaFw0yNTA2MTExMjA1MTVaMDMxMTAvBgNV BAMTKDcwNzBCQTJFRDgyRDFDMzhBQ0ZFMkI4NzYwRjZEMUM1MzgzOEYzMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmW0JsRDObBcZTIpNTeFPAoDoe nZTvpFjmUhhKL8M1a4Yoqtaj2C1U9WRzCtyvb61xD2bQzJgXblC6DJCxu/BRLp8a Kxfqf8fY/GT036LI5t2YsCrZjlJDy8ybeM9lp17vn67PA1IN1gBFh6gQOLzzLwBb lY+ozhPtcJy7iglERNbLQ1r5/cTGvJrAiJtcA0MArADxLN9gVxlCd+50hmWyQJlp tF+oE/bx68zrxepg8IZt69lCkLmYvJEkU9IkGhiV8+pngGcrQhOaf0DAmneV8fSY WBKWHesxdgBx8qDdz78RRfHkIgw1Rvq5KLx/+PWmHlwO2bQNQXV+GicjHmxNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcHC6LtgtHDis/iuHYPbRxTg48xgwHwYDVR0j BBgwFoAUSyOCd71FAdw7dUA+dNi1QbdkMJcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVhQWlFVN3BqV3pUd2I0N2E1TXpHdTJNdFNQTkh5RXZrbm9halVnRFBT bmgvMC80QjIzODI3N0JENDUwMURDM0I3NTQwM0U3NEQ4QjU0MUI3NjQzMDk3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCMjM4Mjc3QkQ0NTAxREMz Qjc1NDAzRTc0RDhCNTQxQjc2NDMwOTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVhQWlFVN3BqV3pUd2I0N2E1TXpHdTJNdFNQTkh5RXZrbm9halVnRFBTbmgvMC80 QjIzODI3N0JENDUwMURDM0I3NTQwM0U3NEQ4QjU0MUI3NjQzMDk3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbT98STYviqYPz9bzbTNApTHKQN5vOk+Ryo7ydCbfo8KHyuk0zA299ziPaUGJ Hd0kZIyMNij4iUDIzgRNJuldz13sCSt2MU2YIDPVBehRiq7uJQBr5wmTLP/g1C4R OGHIb/J+S2uXgYKBnzx8T0IbfFFVTn+R591D/2lJ1XllnPYAph8Xxahj00RT/7ga 9JeJ5q9Yrq9+fCJdgUSJVkncB59Q/b0C/0/RxuZN34kITnrKpoD/tTZQI4UN4XV3 02mZPnyvE60R4tPZLsneE9RYaj3pG+NZPaBP6Spja0Ad30Y5tfKk8zCUfeMVv9r+ ukbwn7ml5cSiq5gEhcRZlX/OKw== -----END CERTIFICATE-----Generated at Tue Jun 10 14:22:07 2025 by rpki-client