$ rpki-client -vvf rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.mft File: 1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.mft (raw, json) Hash identifier: dCmjwt10kaNuf+LK+lHGroTUfBvgtocCxoHsu7CDU/k= Subject key identifier: 49:DD:9E:36:25:9F:DB:C1:7B:9B:11:CC:50:67:29:0D:46:C2:51:0B Authority key identifier: 1F:A0:26:D7:5F:EF:A5:8C:9C:F8:9B:20:F1:9E:F6:9D:27:DA:58:4F Certificate issuer: /CN=1FA026D75FEFA58C9CF89B20F19EF69D27DA584F Certificate serial: 124A0D698ED6F529A66C57AC4DAD225CF293CAF7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.cer Subject info access: rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.mft Manifest number: 67 Signing time: Wed 11 Jun 2025 00:11:16 +0000 Manifest this update: Wed 11 Jun 2025 00:06:16 +0000 Manifest next update: Thu 12 Jun 2025 00:21:16 +0000 Files and hashes: 1: 3133382e39342e3139322e302f32322d3332203d3e20323634313836.roa (hash: hMoZagbe9u9DNqTzszNAaXKzDZe6RnVWel/LV//GqkY=) 2: 1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.crl (hash: UU9dTG2+fBlvJ614XfHQIyrB8+qrsdsymWI3W+YJDaU=) 3: 3134332e302e3138382e302f32322d3332203d3e20323634313836.roa (hash: kAzZo3IutYEWpbiAuX289vzF3O43kiYdJSetU/2uvhY=) 4: 323830343a323364343a3a2f33322d313238203d3e20323634313836.roa (hash: ixHEyxbRuzDYWWQrvW0AFXTvsiKRklUOKp21R93cmBY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.crl rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 12 Jun 2025 00:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:4a:0d:69:8e:d6:f5:29:a6:6c:57:ac:4d:ad:22:5c:f2:93:ca:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FA026D75FEFA58C9CF89B20F19EF69D27DA584F Validity Not Before: Jun 11 00:06:16 2025 GMT Not After : Jun 12 00:21:16 2025 GMT Subject: CN=49DD9E36259FDBC17B9B11CC5067290D46C2510B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:30:e9:b7:46:aa:ce:d0:cc:3c:a9:07:eb:6f: 32:89:68:fa:48:2a:32:10:13:87:f9:68:e2:64:1e: 30:cc:b9:60:3f:79:3d:a2:7e:b5:52:7c:d1:e9:b7: 17:3b:7a:a6:b3:03:27:1f:06:c8:03:6b:49:20:54: 3d:44:ad:aa:3e:64:73:ac:0f:2a:67:0c:4b:95:28: 96:c7:69:de:a9:ef:95:0a:bb:e0:ba:bc:8c:15:bc: af:51:45:0a:d2:b3:ed:a8:eb:20:2a:35:3d:e6:46: ac:98:4b:b7:23:65:30:48:c8:c8:a4:d6:49:fa:9c: 7f:7a:ad:51:75:36:4b:97:69:ce:89:3d:d4:23:10: ca:66:30:2b:46:50:98:ca:fd:2b:bd:85:7b:8f:eb: a3:1a:99:c6:18:bb:68:e6:f9:55:12:8c:64:3f:4c: 7e:44:d2:9a:91:79:26:13:3f:ca:b4:4f:bc:17:b2: 9d:a2:2b:3f:b6:e9:31:eb:cf:91:ff:f1:7c:39:66: f8:60:5c:bf:9d:92:df:1f:07:91:e7:cb:e1:fc:16: a1:00:d0:2d:09:5d:20:9b:9d:e7:b6:60:39:fb:85: b6:bd:2b:8b:ce:e5:57:63:b5:a3:c4:03:ee:24:e5: 0e:a4:46:c7:1b:c5:4d:92:b1:cb:fa:f9:20:94:3f: 0e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DD:9E:36:25:9F:DB:C1:7B:9B:11:CC:50:67:29:0D:46:C2:51:0B X509v3 Authority Key Identifier: keyid:1F:A0:26:D7:5F:EF:A5:8C:9C:F8:9B:20:F1:9E:F6:9D:27:DA:58:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:80:c7:df:8a:ea:f3:ef:68:f8:41:cf:9e:e5:f9:3f:78:39: 06:ab:7b:60:e4:c1:48:00:4c:75:ee:a5:7a:fd:18:a7:8f:dc: c3:50:90:3f:47:71:6b:e6:2d:8c:9a:7d:8f:66:8a:a7:f5:44: 13:fb:19:26:12:a8:01:60:f5:72:06:d7:c3:d5:d7:4c:cb:02: 2b:48:3c:b3:78:ca:b9:02:54:89:c1:f9:01:16:58:dd:59:21: 31:2e:65:9b:7d:6c:9b:e9:3e:7e:f2:ea:aa:d8:42:86:48:d6: 66:47:29:11:00:2d:72:89:e1:e4:88:f5:e5:5e:ac:d0:32:10: a5:ef:4e:cf:a7:97:e0:4b:78:67:73:f8:ca:e4:a3:36:7d:e5: 37:b4:92:b5:4a:46:53:2c:aa:98:0e:5c:99:b9:0b:bf:2a:2e: a0:32:5f:b2:7d:5d:10:78:1b:18:32:3d:48:83:a4:ea:b4:8c: 44:95:e2:be:fc:3e:e6:6f:97:9f:f4:e8:eb:2d:ba:3e:82:dc: 0f:e1:ae:55:7d:d4:4f:68:b0:fd:31:fe:a8:9c:b2:f4:bc:51: 78:18:10:08:ec:36:ce:37:46:45:9e:2e:20:f0:af:20:68:c8: 64:02:7c:f7:3d:b2:87:4d:0d:2f:41:c4:fe:10:c4:5a:f1:46: 07:68:5f:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUEkoNaY7W9SmmbFesTa0iXPKTyvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZBMDI2RDc1RkVGQTU4QzlDRjg5QjIwRjE5RUY2OUQy N0RBNTg0RjAeFw0yNTA2MTEwMDA2MTZaFw0yNTA2MTIwMDIxMTZaMDMxMTAvBgNV BAMTKDQ5REQ5RTM2MjU5RkRCQzE3QjlCMTFDQzUwNjcyOTBENDZDMjUxMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvMOm3RqrO0Mw8qQfrbzKJaPpI KjIQE4f5aOJkHjDMuWA/eT2ifrVSfNHptxc7eqazAycfBsgDa0kgVD1Erao+ZHOs DypnDEuVKJbHad6p75UKu+C6vIwVvK9RRQrSs+2o6yAqNT3mRqyYS7cjZTBIyMik 1kn6nH96rVF1NkuXac6JPdQjEMpmMCtGUJjK/Su9hXuP66MamcYYu2jm+VUSjGQ/ TH5E0pqReSYTP8q0T7wXsp2iKz+26THrz5H/8Xw5ZvhgXL+dkt8fB5Hny+H8FqEA 0C0JXSCbnee2YDn7hba9K4vO5VdjtaPEA+4k5Q6kRscbxU2Sscv6+SCUPw7pAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUSd2eNiWf28F7mxHMUGcpDUbCUQswHwYDVR0j BBgwFoAUH6Am11/vpYyc+Jsg8Z72nSfaWE8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGZ5c1kzaXZqUnk1Z3JXQkxKeWdKU3BMb3dURzRiVHZHcjRKUVVvdmpO dXUvMC8xRkEwMjZENzVGRUZBNThDOUNGODlCMjBGMTlFRjY5RDI3REE1ODRGLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGQTAyNkQ3NUZFRkE1OEM5 Q0Y4OUIyMEYxOUVGNjlEMjdEQTU4NEYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OGZ5c1kzaXZqUnk1Z3JXQkxKeWdKU3BMb3dURzRiVHZHcjRKUVVvdmpOdXUvMC8x RkEwMjZENzVGRUZBNThDOUNGODlCMjBGMTlFRjY5RDI3REE1ODRGLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqYDH34rq8+9o+EHPnuX5P3g5Bqt7YOTBSABMde6lev0Yp4/cw1CQP0dxa+Yt jJp9j2aKp/VEE/sZJhKoAWD1cgbXw9XXTMsCK0g8s3jKuQJUicH5ARZY3VkhMS5l m31sm+k+fvLqqthChkjWZkcpEQAtconh5Ij15V6s0DIQpe9Oz6eX4Et4Z3P4yuSj Nn3lN7SStUpGUyyqmA5cmbkLvyouoDJfsn1dEHgbGDI9SIOk6rSMRJXivvw+5m+X n/To6y26PoLcD+GuVX3UT2iw/TH+qJyy9LxReBgQCOw2zjdGRZ4uIPCvIGjIZAJ8 9z2yh00NL0HE/hDEWvFGB2hf6Q== -----END CERTIFICATE-----Generated at Wed Jun 11 10:36:11 2025 by rpki-client