$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft File: 433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft (raw, json) Hash identifier: 087/HGPi5TXmHcflvR/fT1ePhm58D39RTeyDsB+Fr+s= Subject key identifier: 3D:BC:68:8E:47:D8:8D:89:E1:88:90:36:26:D4:4E:70:73:46:B0:D6 Authority key identifier: 43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72 Certificate issuer: /CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72 Certificate serial: 1CE221871CDF8BFB3568A5895B8EA4BC360441F5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer Subject info access: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft Manifest number: 0238 Signing time: Tue 03 Jun 2025 20:48:46 +0000 Manifest this update: Tue 03 Jun 2025 20:43:45 +0000 Manifest next update: Wed 04 Jun 2025 23:14:45 +0000 Files and hashes: 1: 34352e3232392e37302e302f32332d3233203d3e20323637323232.roa (hash: YImMQr+RMDsH/GDqY6kCVtep65OxcR2ekjIL8Y2gbew=) 2: 34352e3232392e36382e302f32322d3232203d3e20323637323232.roa (hash: Nsf+Md4t/x2sYg0OO0lur7GyFGxQJtAf2WVPKyN2VSE=) 3: 34352e3232392e36392e302f32342d3234203d3e20323637323232.roa (hash: KB81wjFs9ztD8dGkHE2D/VsScjjuO/L+1/K7dgHU48I=) 4: 34352e3232392e36382e302f32332d3233203d3e20323637323232.roa (hash: UifxwEG7vJxx646ArwKrEjuPH/DVz2naB23cASE80ZE=) 5: 34352e3232392e37302e302f32342d3234203d3e20323637323232.roa (hash: 2CIXDHlG3wiwLu0oPaWa0tJIZ6+F0sTe9D4EQaQ59wc=) 6: 323830343a346132633a3a2f33322d3438203d3e20323637323232.roa (hash: K65c6CQDYmeBQFWU/ufGUImXBQEHhvkmt5bgL91Dh7s=) 7: 433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl (hash: adMFaD5P3HkhTrsJsEwyDoCFo9dznZ0Ouq6INztqJv0=) 8: 34352e3232392e36382e302f32342d3234203d3e20323637323232.roa (hash: OqeJB+mozeDEhDovDsxXjuzpU5+h4/FmiYTzQoaLAFc=) 9: 34352e3232392e37312e302f32342d3234203d3e20323637323232.roa (hash: uFzjyJPTQCmSwhW7HJ86POCK4QcKTF3sb1TVogNfEdw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 04 Jun 2025 23:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e2:21:87:1c:df:8b:fb:35:68:a5:89:5b:8e:a4:bc:36:04:41:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72 Validity Not Before: Jun 3 20:43:45 2025 GMT Not After : Jun 4 23:14:45 2025 GMT Subject: CN=3DBC688E47D88D89E188903626D44E707346B0D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:06:26:52:89:ba:ac:ce:8f:94:dc:44:e8:34: ba:1e:09:fc:c5:47:9c:ce:40:dd:c7:c8:31:f3:af: 2d:57:4a:9c:d9:0f:70:8e:53:fa:4c:5e:37:f3:eb: 06:3f:0b:c5:ba:23:2f:be:ea:6f:94:0e:55:5c:24: 72:db:8b:6c:1c:e4:63:31:db:7f:e4:4a:80:37:33: f2:9e:53:b2:24:60:76:bd:ea:a2:62:da:f2:1f:84: a0:8f:7a:d2:fd:b8:f0:a8:88:d9:f6:cd:17:6d:28: 85:a4:02:9f:84:5f:75:ff:e4:ff:54:ac:37:77:56: dd:b7:7f:6f:06:cd:2c:e2:65:57:ea:42:96:02:23: 16:09:8c:83:45:7d:37:ee:60:64:80:55:3f:3b:39: c0:88:e1:5a:85:00:94:61:94:05:12:fc:92:6b:7d: 34:92:be:75:5f:ab:a3:6c:42:76:0e:82:6e:9f:68: 31:85:66:2f:6f:05:24:c2:b8:22:46:84:fe:16:8f: 0a:6a:3b:f2:5a:f4:3e:fd:f4:10:72:b7:c8:dc:e3: 4a:4b:d5:8b:61:ed:84:9f:a5:62:26:0a:6d:d8:93: b1:db:c2:0e:38:c7:e9:51:5d:22:4b:76:2b:9f:67: cc:eb:5f:20:e9:8d:6a:ff:57:0d:4f:b6:70:07:e3: 9e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BC:68:8E:47:D8:8D:89:E1:88:90:36:26:D4:4E:70:73:46:B0:D6 X509v3 Authority Key Identifier: keyid:43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:7a:d9:d6:c2:2d:ce:bc:0c:99:6c:55:28:8b:d4:69:6d:b0: 71:0f:53:53:06:0c:54:40:2f:0a:f9:2f:99:f4:40:16:20:d3: 04:c0:11:d4:cc:1a:7c:73:37:03:2d:6e:17:43:d6:49:ff:8a: ed:58:4b:63:c2:6c:a9:bc:e8:2c:94:a4:82:7c:b1:a4:24:ab: ee:5f:4a:1a:b1:6d:ff:de:9e:74:61:b5:3a:d4:ba:f4:36:8a: f6:47:8d:96:d7:b6:6f:62:42:63:cf:55:e2:94:b7:97:ab:f2: a0:bf:91:7a:12:6d:95:e0:e0:82:b2:e8:a7:40:a3:4f:95:74: 39:57:6b:e6:e5:da:33:5d:bc:a1:3a:8f:18:0a:1c:52:83:f1: a7:c4:fb:31:b2:41:d3:b0:4e:6a:e9:e9:51:27:98:ae:6a:31: 4f:bb:e6:e1:b8:a8:d5:4d:9c:31:ae:e5:79:7d:66:9a:cc:96: de:2b:e2:95:c6:c2:e4:47:4f:96:ab:42:8b:52:e0:85:72:b5: db:55:b6:e4:57:9f:f1:e9:d5:67:1e:74:16:d8:a6:9f:d8:1a: 85:cb:e2:fa:fc:c6:02:d9:44:d2:e0:65:a8:03:94:8c:a6:ac: 91:8f:b4:f4:81:f5:57:96:56:46:8f:fe:0e:8e:09:15:32:bc: 47:8c:3f:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHOIhhxzfi/s1aKWJW46kvDYEQfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzQkQ0Njk0ODQ1QkE2NUNBNEFFMUJGNjIyQTFDNTk5 Q0I1M0Y3MjAeFw0yNTA2MDMyMDQzNDVaFw0yNTA2MDQyMzE0NDVaMDMxMTAvBgNV BAMTKDNEQkM2ODhFNDdEODhEODlFMTg4OTAzNjI2RDQ0RTcwNzM0NkIwRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXBiZSibqszo+U3EToNLoeCfzF R5zOQN3HyDHzry1XSpzZD3COU/pMXjfz6wY/C8W6Iy++6m+UDlVcJHLbi2wc5GMx 23/kSoA3M/KeU7IkYHa96qJi2vIfhKCPetL9uPCoiNn2zRdtKIWkAp+EX3X/5P9U rDd3Vt23f28GzSziZVfqQpYCIxYJjINFfTfuYGSAVT87OcCI4VqFAJRhlAUS/JJr fTSSvnVfq6NsQnYOgm6faDGFZi9vBSTCuCJGhP4WjwpqO/Ja9D799BByt8jc40pL 1Yth7YSfpWImCm3Yk7Hbwg44x+lRXSJLdiufZ8zrXyDpjWr/Vw1PtnAH457XAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPbxojkfYjYnhiJA2JtROcHNGsNYwHwYDVR0j BBgwFoAUQzvUaUhFumXKSuG/YiocWZy1P3IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1o a2UvMS80MzNCRDQ2OTQ4NDVCQTY1Q0E0QUUxQkY2MjJBMUM1OTlDQjUzRjcyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzM0JENDY5NDg0NUJBNjVD QTRBRTFCRjYyMkExQzU5OUNCNTNGNzIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1oa2UvMS80 MzNCRDQ2OTQ4NDVCQTY1Q0E0QUUxQkY2MjJBMUM1OTlDQjUzRjcyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEARnrZ1sItzrwMmWxVKIvUaW2wcQ9TUwYMVEAvCvkvmfRAFiDTBMAR1MwafHM3 Ay1uF0PWSf+K7VhLY8JsqbzoLJSkgnyxpCSr7l9KGrFt/96edGG1OtS69DaK9keN lte2b2JCY89V4pS3l6vyoL+RehJtleDggrLop0CjT5V0OVdr5uXaM128oTqPGAoc UoPxp8T7MbJB07BOaunpUSeYrmoxT7vm4bio1U2cMa7leX1mmsyW3ivilcbC5EdP lqtCi1LghXK121W25Fef8enVZx50Ftimn9gahcvi+vzGAtlE0uBlqAOUjKaskY+0 9IH1V5ZWRo/+Do4JFTK8R4w/Aw== -----END CERTIFICATE-----Generated at Wed Jun 4 11:31:08 2025 by rpki-client