$ rpki-client -vvf rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.mft File: 4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.mft (raw, json) Hash identifier: rfHzluTRpEl3LbjvyYVnCOuam2p5Mj96MwHj/QIgs6I= Subject key identifier: 65:BF:6E:23:77:2B:F0:B7:04:45:E1:BF:D4:EF:84:96:E4:C5:91:24 Authority key identifier: 4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36 Certificate issuer: /CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236 Certificate serial: 782C43EBCB44A8276DC9A2DC9CBF437E665649FF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer Subject info access: rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.mft Manifest number: 01F9 Signing time: Wed 11 Jun 2025 10:41:33 +0000 Manifest this update: Wed 11 Jun 2025 10:36:33 +0000 Manifest next update: Thu 12 Jun 2025 15:05:33 +0000 Files and hashes: 1: 3133382e39342e3232302e302f32322d3234203d3e203238363730.roa (hash: h1KDDGDVQAgZw5iIAifKnPGr+0QAvRH1L3EFE/AtEWs=) 2: 3133312e37322e3134342e302f32322d3234203d3e203238363730.roa (hash: DDYbUZ/G5/VfQZctagP1EkWJOnq7ubdr8WJh/py7js8=) 3: 3138392e382e39362e302f32302d3234203d3e203238363730.roa (hash: lxFKXnJTpYmiLdDbRAAQ5xOWwBGNBDHEmEdgXYCWC/o=) 4: 3133312e37322e3134372e302f32342d3234203d3e20323732323132.roa (hash: 8Ga4iO6HA088M7DMHkz0qswMZpEcuNs5onXQMygnvoc=) 5: 323830343a316332343a3a2f33322d3438203d3e203238363730.roa (hash: +TDxYAnVsPID27nBhQMm7/l7Ah845871Q9Ijswo4tW4=) 6: 4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl (hash: darYgpSmeXSrrAOtR9t5vwIj44YBhb8f+oLTolVmTvo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Jun 2025 15:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:2c:43:eb:cb:44:a8:27:6d:c9:a2:dc:9c:bf:43:7e:66:56:49:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E7EB31B6D4532D1C10444DB3B88D1F6D002F236 Validity Not Before: Jun 11 10:36:33 2025 GMT Not After : Jun 12 15:05:33 2025 GMT Subject: CN=65BF6E23772BF0B70445E1BFD4EF8496E4C59124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e4:c0:ba:66:f3:91:5a:c2:80:50:93:6c:91: 56:0f:71:4e:c6:0f:36:a9:b8:e9:3f:49:20:62:c6: 5b:0b:7b:01:aa:06:1d:61:02:21:07:e6:24:3b:5c: 0f:1f:2a:0b:a0:3c:41:53:6c:ac:ce:2e:a8:d7:f4: 7e:94:3e:94:aa:8e:64:0f:13:6a:be:82:b3:de:7d: 3a:66:90:5c:bb:6f:95:7e:0e:1a:70:49:fd:a7:08: 0d:e2:f9:c4:56:a2:8e:9e:ce:ba:a7:e7:c5:ae:95: ae:e1:e0:b9:e6:f6:0c:a8:61:88:0e:74:a1:29:96: e0:00:88:8a:d7:34:c2:bd:a3:54:c5:74:68:d3:35: 7e:7f:e2:d2:2f:43:66:16:54:62:a6:2e:f2:dd:b4: 82:76:b3:68:cf:75:fd:2d:53:85:92:e5:51:7b:6b: 24:7d:7e:d6:05:80:28:2f:e0:23:32:22:00:30:cc: bc:7d:fd:2c:48:f2:67:eb:b2:7b:d3:5a:6b:76:e4: 2d:92:17:2e:18:f0:85:97:88:5f:dc:9c:e0:fe:87: 02:c5:04:73:ed:48:72:cf:b8:b5:1f:fb:2b:b1:9c: fe:c9:f5:43:7d:82:64:4b:07:11:f2:14:ac:ee:52: 80:67:5f:f0:89:b4:4c:81:e2:c0:af:3d:f5:64:e6: 50:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BF:6E:23:77:2B:F0:B7:04:45:E1:BF:D4:EF:84:96:E4:C5:91:24 X509v3 Authority Key Identifier: keyid:4E:7E:B3:1B:6D:45:32:D1:C1:04:44:DB:3B:88:D1:F6:D0:02:F2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rWzxYscjhTjRL9GaUX3FmTzizvznBeSRLG7i62FnZPL/0/4E7EB31B6D4532D1C10444DB3B88D1F6D002F236.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:16:a7:2f:9b:38:bd:9c:97:a5:fa:4e:d9:ec:66:eb:21:a9: 87:80:d1:33:7e:c1:53:38:16:d0:d4:f7:48:7d:16:29:8d:f8: 02:ee:49:23:b3:6c:43:3e:07:34:fa:cc:12:47:b9:5b:bc:e2: 43:fe:21:7c:8e:4f:7e:a4:bb:ee:b2:0a:66:38:c0:1f:d2:2a: a4:b2:06:8c:2f:c2:fc:f9:22:61:d7:cc:f5:2b:33:fc:1c:1d: 8a:57:45:10:13:b6:e7:48:9c:08:ed:89:4c:70:2d:a1:2e:d9: 4a:73:f5:26:a8:6d:96:bf:e8:f8:55:0f:35:7a:6e:c2:4b:09: 59:75:a9:1d:8b:fa:a2:d5:26:15:2b:43:b0:8c:24:03:26:fa: fb:55:80:83:39:5e:df:aa:63:75:df:d8:0e:1c:0e:dd:c4:02: 6d:b9:6b:5c:e8:c1:c3:21:86:57:ea:36:7d:65:6d:70:05:e4: 55:67:32:85:2a:e4:97:c7:f2:a8:ee:64:3f:b2:d1:40:89:c2: d9:fa:a3:a1:b5:68:99:f0:e6:5c:7f:b4:7c:fa:c8:df:62:63: c4:86:aa:11:52:bd:47:df:a5:d8:c4:da:db:0b:d7:5c:14:d2: 4d:a6:b7:64:1a:3b:d5:c7:a2:58:bd:30:64:b9:95:01:7f:cd: e4:45:f7:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeCxD68tEqCdtyaLcnL9DfmZWSf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU3RUIzMUI2RDQ1MzJEMUMxMDQ0NERCM0I4OEQxRjZE MDAyRjIzNjAeFw0yNTA2MTExMDM2MzNaFw0yNTA2MTIxNTA1MzNaMDMxMTAvBgNV BAMTKDY1QkY2RTIzNzcyQkYwQjcwNDQ1RTFCRkQ0RUY4NDk2RTRDNTkxMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ5MC6ZvORWsKAUJNskVYPcU7G DzapuOk/SSBixlsLewGqBh1hAiEH5iQ7XA8fKgugPEFTbKzOLqjX9H6UPpSqjmQP E2q+grPefTpmkFy7b5V+DhpwSf2nCA3i+cRWoo6ezrqn58Wula7h4Lnm9gyoYYgO dKEpluAAiIrXNMK9o1TFdGjTNX5/4tIvQ2YWVGKmLvLdtIJ2s2jPdf0tU4WS5VF7 ayR9ftYFgCgv4CMyIgAwzLx9/SxI8mfrsnvTWmt25C2SFy4Y8IWXiF/cnOD+hwLF BHPtSHLPuLUf+yuxnP7J9UN9gmRLBxHyFKzuUoBnX/CJtEyB4sCvPfVk5lABAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZb9uI3cr8LcEReG/1O+EluTFkSQwHwYDVR0j BBgwFoAUTn6zG21FMtHBBETbO4jR9tAC8jYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNnJXenhZc2NqaFRqUkw5R2FVWDNGbVR6aXp2em5CZVNSTEc3aTYyRm5a UEwvMC80RTdFQjMxQjZENDUzMkQxQzEwNDQ0REIzQjg4RDFGNkQwMDJGMjM2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFN0VCMzFCNkQ0NTMyRDFD MTA0NDREQjNCODhEMUY2RDAwMkYyMzYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NnJXenhZc2NqaFRqUkw5R2FVWDNGbVR6aXp2em5CZVNSTEc3aTYyRm5aUEwvMC80 RTdFQjMxQjZENDUzMkQxQzEwNDQ0REIzQjg4RDFGNkQwMDJGMjM2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAxanL5s4vZyXpfpO2exm6yGph4DRM37BUzgW0NT3SH0WKY34Au5JI7NsQz4H NPrMEke5W7ziQ/4hfI5PfqS77rIKZjjAH9IqpLIGjC/C/PkiYdfM9Ssz/BwdildF EBO250icCO2JTHAtoS7ZSnP1Jqhtlr/o+FUPNXpuwksJWXWpHYv6otUmFStDsIwk Ayb6+1WAgzle36pjdd/YDhwO3cQCbblrXOjBwyGGV+o2fWVtcAXkVWcyhSrkl8fy qO5kP7LRQInC2fqjobVomfDmXH+0fPrI32JjxIaqEVK9R9+l2MTa2wvXXBTSTaa3 ZBo71ceiWL0wZLmVAX/N5EX3gA== -----END CERTIFICATE-----Generated at Thu Jun 12 04:12:35 2025 by rpki-client