$ rpki-client -vvf rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/A4EB551354D73BB4306DB510E741AB54435DC5FE.mft File: A4EB551354D73BB4306DB510E741AB54435DC5FE.mft (raw, json) Hash identifier: NHWovMmFEdzCk55keWCbFfY4W4fsFjKaQYV5DpZD4gI= Subject key identifier: AF:E0:FF:7B:8B:53:AB:89:E9:3D:E6:89:49:D4:95:F4:B3:F8:5B:4F Authority key identifier: A4:EB:55:13:54:D7:3B:B4:30:6D:B5:10:E7:41:AB:54:43:5D:C5:FE Certificate issuer: /CN=A4EB551354D73BB4306DB510E741AB54435DC5FE Certificate serial: 1F9369D4FCC87DEF546D782DCC42B73E8B3AE02A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4EB551354D73BB4306DB510E741AB54435DC5FE.cer Subject info access: rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/A4EB551354D73BB4306DB510E741AB54435DC5FE.mft Manifest number: 0220 Signing time: Mon 09 Jun 2025 02:29:18 +0000 Manifest this update: Mon 09 Jun 2025 02:24:18 +0000 Manifest next update: Tue 10 Jun 2025 04:42:18 +0000 Files and hashes: 1: 3133382e3138362e3133322e302f32322d3332203d3e203533313630.roa (hash: YB16+bwMzHl6nyfMK3Sstt8Vh2TwaFoONTvie3MVX/w=) 2: 3138372e31392e3131322e302f32302d3332203d3e203533313630.roa (hash: hlTdjCamVe+IoeC5hO2rAezjOwSZOE9yeN5SZY2PAYs=) 3: 323830343a323664383a3a2f33322d313238203d3e203533313630.roa (hash: dLaqR9H7W63zl/xFyWAFk68TGG/AT0JX/SBbLTfKS7o=) 4: A4EB551354D73BB4306DB510E741AB54435DC5FE.crl (hash: asMOqSR2j5Lc0b8eUPhkBmOOe4YvKtuSXQMtf/vWxsI=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/A4EB551354D73BB4306DB510E741AB54435DC5FE.crl rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/A4EB551354D73BB4306DB510E741AB54435DC5FE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4EB551354D73BB4306DB510E741AB54435DC5FE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 10 Jun 2025 04:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:93:69:d4:fc:c8:7d:ef:54:6d:78:2d:cc:42:b7:3e:8b:3a:e0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4EB551354D73BB4306DB510E741AB54435DC5FE Validity Not Before: Jun 9 02:24:18 2025 GMT Not After : Jun 10 04:42:18 2025 GMT Subject: CN=AFE0FF7B8B53AB89E93DE68949D495F4B3F85B4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1a:da:07:79:9c:d5:c9:76:b2:30:5a:0f:87: 01:50:9d:b3:6b:50:40:70:35:e1:6e:29:81:a1:46: d0:ad:5d:1a:d6:d9:93:1e:76:8b:ca:dd:8c:ce:a3: ef:8f:64:62:6e:ee:ae:04:22:23:f9:5f:ce:e9:17: 0b:cf:79:69:ed:2e:51:31:04:c6:a4:18:c1:8d:c8: b4:77:44:be:38:28:83:eb:7e:05:bb:db:f9:b3:89: 9c:c7:5d:20:29:38:6c:39:28:aa:dd:26:10:69:63: 4a:ac:f6:79:d5:22:df:5d:d9:75:08:d1:16:4a:49: 9a:7e:d9:c6:84:a1:89:34:77:ef:42:7e:6d:cc:17: c4:1a:d1:ca:9f:c1:b0:40:3d:13:e7:6d:00:67:e2: 56:c1:5c:0e:37:fc:f3:f3:39:c2:72:46:f7:e1:09: 7b:c6:23:d5:c9:8c:d3:e7:94:33:0d:0d:f6:13:3b: 22:78:31:70:0c:92:6b:7c:10:49:6b:ae:7f:78:2b: 68:d5:5f:34:bf:46:6d:5c:e1:16:2e:3e:be:99:7e: 48:1d:08:40:cf:2d:59:86:18:bc:9a:45:d1:f4:87: 93:70:cb:d8:b4:a5:c6:d3:3f:f2:d6:bd:79:bb:7e: 8b:93:18:4d:ce:bc:93:07:09:3b:58:d3:12:12:33: 87:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E0:FF:7B:8B:53:AB:89:E9:3D:E6:89:49:D4:95:F4:B3:F8:5B:4F X509v3 Authority Key Identifier: keyid:A4:EB:55:13:54:D7:3B:B4:30:6D:B5:10:E7:41:AB:54:43:5D:C5:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/A4EB551354D73BB4306DB510E741AB54435DC5FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4EB551354D73BB4306DB510E741AB54435DC5FE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/955wyRbeUZe9sh793ns3qvtiDsEsdebFzLKVow4WogkP/0/A4EB551354D73BB4306DB510E741AB54435DC5FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:0b:2b:4b:4f:64:a3:9a:fc:8a:89:76:2b:ba:a5:51:97:78: af:7b:5a:42:7b:7f:69:d7:0f:bb:83:6d:53:f1:da:da:ea:8f: 21:ee:97:48:36:f4:66:e4:8a:ff:2c:ba:56:91:b7:7c:b7:92: 44:2c:23:6e:05:ba:30:43:db:09:38:30:e9:0c:58:08:1c:e3: 6e:ec:0b:3e:d6:b2:ae:17:a8:9d:4d:ad:2a:d8:79:5e:c2:06: f3:7c:70:85:c6:4e:4e:1f:ee:23:c2:b0:d4:1c:7b:f8:2f:97: ac:21:3e:4a:15:d9:1e:a3:83:12:dd:af:47:c5:4e:e7:c5:4e: 33:88:92:94:75:ef:f5:d2:53:9a:2a:5b:64:74:fe:5e:97:06: d3:6f:05:d6:14:3a:17:81:df:58:60:36:25:e0:40:68:5d:7b: 2a:3f:cf:01:6f:b7:48:dd:f3:de:5f:ef:59:52:7e:51:09:e3: d9:81:d8:be:5d:ea:fc:b1:23:39:19:33:21:c8:4a:c7:cc:d9: 16:33:97:23:13:dc:e4:ba:55:89:38:f0:79:21:20:ae:33:93: 8a:3a:6c:4a:5e:5e:f2:cd:fb:be:09:08:c1:f6:64:a6:f3:38: 25:a8:1d:32:52:71:1c:c7:48:ac:2f:ff:83:e3:57:3c:35:64: 4b:f2:8d:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUH5Np1PzIfe9UbXgtzEK3Pos64CowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRFQjU1MTM1NEQ3M0JCNDMwNkRCNTEwRTc0MUFCNTQ0 MzVEQzVGRTAeFw0yNTA2MDkwMjI0MThaFw0yNTA2MTAwNDQyMThaMDMxMTAvBgNV BAMTKEFGRTBGRjdCOEI1M0FCODlFOTNERTY4OTQ5RDQ5NUY0QjNGODVCNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnGtoHeZzVyXayMFoPhwFQnbNr UEBwNeFuKYGhRtCtXRrW2ZMedovK3YzOo++PZGJu7q4EIiP5X87pFwvPeWntLlEx BMakGMGNyLR3RL44KIPrfgW72/mziZzHXSApOGw5KKrdJhBpY0qs9nnVIt9d2XUI 0RZKSZp+2caEoYk0d+9Cfm3MF8Qa0cqfwbBAPRPnbQBn4lbBXA43/PPzOcJyRvfh CXvGI9XJjNPnlDMNDfYTOyJ4MXAMkmt8EElrrn94K2jVXzS/Rm1c4RYuPr6Zfkgd CEDPLVmGGLyaRdH0h5Nwy9i0pcbTP/LWvXm7fouTGE3OvJMHCTtY0xISM4chAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUr+D/e4tTq4npPeaJSdSV9LP4W08wHwYDVR0j BBgwFoAUpOtVE1TXO7QwbbUQ50GrVENdxf4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOTU1d3lSYmVVWmU5c2g3OTNuczNxdnRpRHNFc2RlYkZ6TEtWb3c0V29n a1AvMC9BNEVCNTUxMzU0RDczQkI0MzA2REI1MTBFNzQxQUI1NDQzNURDNUZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0RUI1NTEzNTRENzNCQjQz MDZEQjUxMEU3NDFBQjU0NDM1REM1RkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OTU1d3lSYmVVWmU5c2g3OTNuczNxdnRpRHNFc2RlYkZ6TEtWb3c0V29na1AvMC9B NEVCNTUxMzU0RDczQkI0MzA2REI1MTBFNzQxQUI1NDQzNURDNUZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAAsrS09ko5r8iol2K7qlUZd4r3taQnt/adcPu4NtU/Ha2uqPIe6XSDb0ZuSK /yy6VpG3fLeSRCwjbgW6MEPbCTgw6QxYCBzjbuwLPtayrheonU2tKth5XsIG83xw hcZOTh/uI8Kw1Bx7+C+XrCE+ShXZHqODEt2vR8VO58VOM4iSlHXv9dJTmipbZHT+ XpcG028F1hQ6F4HfWGA2JeBAaF17Kj/PAW+3SN3z3l/vWVJ+UQnj2YHYvl3q/LEj ORkzIchKx8zZFjOXIxPc5LpViTjweSEgrjOTijpsSl5e8s37vgkIwfZkpvM4Jagd MlJxHMdIrC//g+NXPDVkS/KNxg== -----END CERTIFICATE-----Generated at Mon Jun 9 13:17:16 2025 by rpki-client