$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft File: 433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft (raw, json) Hash identifier: 7dSlLTKjGbtuTOc44fbdgTb1J21mGzgwomEBozrQ4R0= Subject key identifier: 82:D4:2C:2D:B7:65:F5:90:AE:A1:0E:BC:5E:77:94:9C:D0:01:17:D2 Authority key identifier: 43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72 Certificate issuer: /CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72 Certificate serial: 50E6E36D39162DC6E2984F4CAAFC6F4045A00899 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer Subject info access: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft Manifest number: 027B Signing time: Mon 28 Jul 2025 23:14:33 +0000 Manifest this update: Mon 28 Jul 2025 23:09:33 +0000 Manifest next update: Tue 29 Jul 2025 23:25:33 +0000 Files and hashes: 1: 34352e3232392e36382e302f32322d3232203d3e20323637323232.roa (hash: Nsf+Md4t/x2sYg0OO0lur7GyFGxQJtAf2WVPKyN2VSE=) 2: 34352e3232392e36392e302f32342d3234203d3e20323637323232.roa (hash: KB81wjFs9ztD8dGkHE2D/VsScjjuO/L+1/K7dgHU48I=) 3: 34352e3232392e36382e302f32342d3234203d3e20323637323232.roa (hash: OqeJB+mozeDEhDovDsxXjuzpU5+h4/FmiYTzQoaLAFc=) 4: 34352e3232392e37312e302f32342d3234203d3e20323637323232.roa (hash: uFzjyJPTQCmSwhW7HJ86POCK4QcKTF3sb1TVogNfEdw=) 5: 34352e3232392e37302e302f32342d3234203d3e20323637323232.roa (hash: 2CIXDHlG3wiwLu0oPaWa0tJIZ6+F0sTe9D4EQaQ59wc=) 6: 34352e3232392e37302e302f32332d3233203d3e20323637323232.roa (hash: YImMQr+RMDsH/GDqY6kCVtep65OxcR2ekjIL8Y2gbew=) 7: 34352e3232392e36382e302f32332d3233203d3e20323637323232.roa (hash: UifxwEG7vJxx646ArwKrEjuPH/DVz2naB23cASE80ZE=) 8: 323830343a346132633a3a2f33322d3438203d3e20323637323232.roa (hash: K65c6CQDYmeBQFWU/ufGUImXBQEHhvkmt5bgL91Dh7s=) 9: 433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl (hash: OLrFyz9jExemHoHY2dWQ0klNUBdTp8XCYfXEFeIBdhc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Jul 2025 23:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:e6:e3:6d:39:16:2d:c6:e2:98:4f:4c:aa:fc:6f:40:45:a0:08:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72 Validity Not Before: Jul 28 23:09:33 2025 GMT Not After : Jul 29 23:25:33 2025 GMT Subject: CN=82D42C2DB765F590AEA10EBC5E77949CD00117D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:22:d8:21:f0:36:82:13:80:67:f5:c3:a1:4e: 88:be:ab:9f:18:e0:eb:fe:5f:c8:69:ae:59:1f:38: 00:04:69:0e:10:f5:c6:9e:fa:2b:84:d7:dc:02:3c: b5:06:a4:2e:21:ec:bf:38:fb:bd:f9:76:2d:68:ad: 33:7d:02:69:b2:63:bd:a7:88:4b:01:19:50:89:3d: 9d:70:78:c0:cd:2f:14:67:8a:d2:9c:41:02:09:28: 6b:3f:c5:e2:65:94:3f:b5:c5:b7:7f:07:80:70:f7: df:29:d4:e9:c9:66:12:e8:3a:41:1d:27:ba:99:9c: 5c:b6:ab:8e:ef:ee:a9:67:aa:d4:55:43:d9:71:21: 9f:5a:00:04:79:b7:e7:db:64:77:94:34:52:13:8e: ee:5c:ee:e1:3f:e1:4b:32:ca:4b:2f:37:c6:68:61: 31:d9:bb:4d:07:ff:a6:32:35:ab:09:b7:67:94:61: 45:d0:63:33:11:19:75:10:32:41:54:75:a5:7b:70: e3:86:72:f9:e2:1f:16:ba:ca:95:55:94:53:22:b1: a3:8d:68:30:2a:62:42:23:f5:d2:20:de:81:80:74: 87:1c:36:05:f0:ec:ba:a8:12:40:f7:a2:26:28:e4: e2:b5:fb:99:ed:b6:7f:b9:f1:9c:70:44:4b:c8:2b: 80:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D4:2C:2D:B7:65:F5:90:AE:A1:0E:BC:5E:77:94:9C:D0:01:17:D2 X509v3 Authority Key Identifier: keyid:43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:95:ba:ca:17:87:13:9e:5e:be:78:3e:9a:48:62:de:fe:3d: a7:f7:bb:95:f8:2f:eb:b9:ca:5f:e2:3b:1b:71:69:67:cb:cb: 66:ce:9f:78:74:b7:dd:b0:70:23:a5:2e:63:0e:29:43:52:33: e1:a6:1a:37:d4:78:87:70:09:7f:45:d9:12:aa:32:b7:8d:bc: 8a:0a:e9:84:ba:33:1c:59:40:76:b3:3b:7c:6e:85:3d:01:f5: 90:6a:41:a8:9d:29:2d:de:43:4f:12:60:6a:e3:d6:fc:65:f8: e0:5f:c9:bc:49:89:ba:f8:cc:e4:92:10:e7:28:57:0c:31:41: 5b:25:94:13:3e:6d:dc:5a:b5:06:bb:e6:17:9c:f3:27:80:bf: 2e:c5:4d:02:9f:1d:82:fa:39:93:fb:5c:51:2a:83:5f:4a:88: 4e:68:e3:f1:fc:96:e4:79:74:24:d6:c0:e9:85:95:62:28:d6: 2c:d0:93:14:f5:28:3f:75:40:57:96:2d:09:7e:9c:fe:63:13: 43:26:79:ce:58:dd:0e:9d:45:93:ea:51:35:78:5e:0e:37:27: 69:86:fb:ec:28:a7:36:08:18:a0:44:92:4a:bb:63:bc:b2:f7: fe:be:b3:d0:0d:f8:98:5e:0c:d6:69:3e:b1:4c:1e:72:a7:f4: 6e:46:bc:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUUObjbTkWLcbimE9MqvxvQEWgCJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzQkQ0Njk0ODQ1QkE2NUNBNEFFMUJGNjIyQTFDNTk5 Q0I1M0Y3MjAeFw0yNTA3MjgyMzA5MzNaFw0yNTA3MjkyMzI1MzNaMDMxMTAvBgNV BAMTKDgyRDQyQzJEQjc2NUY1OTBBRUExMEVCQzVFNzc5NDlDRDAwMTE3RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwItgh8DaCE4Bn9cOhToi+q58Y 4Ov+X8hprlkfOAAEaQ4Q9cae+iuE19wCPLUGpC4h7L84+735di1orTN9AmmyY72n iEsBGVCJPZ1weMDNLxRnitKcQQIJKGs/xeJllD+1xbd/B4Bw998p1OnJZhLoOkEd J7qZnFy2q47v7qlnqtRVQ9lxIZ9aAAR5t+fbZHeUNFITju5c7uE/4UsyyksvN8Zo YTHZu00H/6YyNasJt2eUYUXQYzMRGXUQMkFUdaV7cOOGcvniHxa6ypVVlFMisaON aDAqYkIj9dIg3oGAdIccNgXw7LqoEkD3oiYo5OK1+5nttn+58ZxwREvIK4BNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgtQsLbdl9ZCuoQ68XneUnNABF9IwHwYDVR0j BBgwFoAUQzvUaUhFumXKSuG/YiocWZy1P3IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1o a2UvMS80MzNCRDQ2OTQ4NDVCQTY1Q0E0QUUxQkY2MjJBMUM1OTlDQjUzRjcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzM0JENDY5NDg0NUJBNjVD QTRBRTFCRjYyMkExQzU5OUNCNTNGNzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1oa2UvMS80 MzNCRDQ2OTQ4NDVCQTY1Q0E0QUUxQkY2MjJBMUM1OTlDQjUzRjcyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY5W6yheHE55evng+mkhi3v49p/e7lfgv67nKX+I7G3FpZ8vLZs6feHS33bBw I6UuYw4pQ1Iz4aYaN9R4h3AJf0XZEqoyt428igrphLozHFlAdrM7fG6FPQH1kGpB qJ0pLd5DTxJgauPW/GX44F/JvEmJuvjM5JIQ5yhXDDFBWyWUEz5t3Fq1BrvmF5zz J4C/LsVNAp8dgvo5k/tcUSqDX0qITmjj8fyW5Hl0JNbA6YWVYijWLNCTFPUoP3VA V5YtCX6c/mMTQyZ5zljdDp1Fk+pRNXheDjcnaYb77CinNggYoESSSrtjvLL3/r6z 0A34mF4M1mk+sUwecqf0bka8eg== -----END CERTIFICATE-----Generated at Tue Jul 29 12:11:58 2025 by rpki-client