$ rpki-client -vvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft File: F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft (raw, json) Hash identifier: 5r9LflLXZQP48jhh5isLcSCNp6DrIC/wWWnobp0gwWk= Subject key identifier: 1D:A1:21:15:5E:45:B7:39:F9:1B:E7:4B:D8:06:6A:0C:BC:41:24:D2 Authority key identifier: F3:9F:CE:F7:5A:85:E9:FA:24:47:77:F7:CE:DA:CC:58:2B:7A:BA:29 Certificate issuer: /CN=F39FCEF75A85E9FA244777F7CEDACC582B7ABA29 Certificate serial: 4D9EF0E2043D9E34722579D6DCB84D048559BDBE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.cer Subject info access: rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft Manifest number: 0133 Signing time: Fri 06 Jun 2025 14:39:28 +0000 Manifest this update: Fri 06 Jun 2025 14:34:28 +0000 Manifest next update: Sat 07 Jun 2025 17:51:28 +0000 Files and hashes: 1: 3136382e302e3136362e302f32342d3234203d3e20323633343833.roa (hash: xnpHTIXw5NOAsWCdZzalk0/kRTMqwFcZy+7og3ox6hc=) 2: 3136382e302e3136342e302f32342d3234203d3e20323633343833.roa (hash: WAVHV00hp8kQuY2m5oNryEnxV7rX87TuahPEF3PkZjY=) 3: 3136382e302e3136352e302f32342d3234203d3e20323633343833.roa (hash: K7GvpcP23FlvcUYDW+06XF+u23S5lyvB473kdUEvaJo=) 4: F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.crl (hash: jP7SmTYueWWaK9uHOwg+iVDDJY3RTAeiRZgrGeXBjik=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.crl rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 17:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:9e:f0:e2:04:3d:9e:34:72:25:79:d6:dc:b8:4d:04:85:59:bd:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F39FCEF75A85E9FA244777F7CEDACC582B7ABA29 Validity Not Before: Jun 6 14:34:28 2025 GMT Not After : Jun 7 17:51:28 2025 GMT Subject: CN=1DA121155E45B739F91BE74BD8066A0CBC4124D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3c:a0:21:65:3e:87:37:36:24:4c:4f:e1:c0: 7f:29:0f:4b:76:b6:e7:f3:56:b4:bd:b8:09:50:62: 06:46:93:d9:e0:0c:aa:bd:3b:bb:49:2b:c3:91:34: 8f:39:2f:0d:ef:8a:f8:f4:03:3a:66:64:49:f5:a1: cb:bc:26:3f:45:03:da:22:0f:11:54:bb:a3:eb:75: 0b:d8:85:f2:64:db:08:99:35:aa:40:07:19:d4:bd: f5:5a:25:c1:07:19:fc:04:9d:58:4a:db:b3:a5:94: 92:94:d7:44:8f:4d:0c:61:08:fc:76:93:54:55:07: 82:7e:6d:eb:50:1b:58:c1:48:cb:63:cd:5c:46:79: d3:b8:de:31:4f:41:8e:47:ab:08:97:aa:72:df:be: 10:d8:2e:12:89:31:39:36:f1:20:97:2d:a8:e3:72: 1f:84:37:6b:96:1f:33:f7:33:10:0e:61:63:df:39: b1:ce:88:22:7d:42:dd:56:a5:75:88:b7:bb:d3:44: 5a:4b:32:52:11:7b:fb:52:2b:ac:67:bd:c9:ed:9b: ff:98:fb:22:c4:37:59:c4:9f:2b:9e:c6:80:85:37: 4a:46:3f:f8:24:ce:a4:6f:4b:49:44:e1:b9:bb:38: 47:1a:98:59:d8:4c:88:ce:65:18:81:11:76:6f:a9: c0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A1:21:15:5E:45:B7:39:F9:1B:E7:4B:D8:06:6A:0C:BC:41:24:D2 X509v3 Authority Key Identifier: keyid:F3:9F:CE:F7:5A:85:E9:FA:24:47:77:F7:CE:DA:CC:58:2B:7A:BA:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/F39FCEF75A85E9FA244777F7CEDACC582B7ABA29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4f:c4:0d:46:79:4b:6a:94:15:ef:7c:e8:55:16:24:a8:63: 53:7a:9e:c6:9f:5a:57:85:7c:eb:e3:d1:10:33:7b:d6:0a:d4: bd:25:9d:08:c1:c7:6d:0d:0a:26:10:9c:76:59:16:ec:a1:74: 10:9f:a9:77:21:cb:b7:2b:17:a8:a2:c2:70:d2:06:df:f7:74: 6f:b0:1d:97:5a:fd:24:55:a7:19:99:98:b1:e2:7c:cb:c7:79: 8e:57:96:1f:00:71:a5:64:c4:91:7b:53:02:68:92:3e:e4:c3: d5:19:37:3a:11:3d:a8:4a:9d:07:0a:0b:f6:a9:8a:65:d3:0f: a4:38:bb:1e:b7:5a:09:b6:17:c6:f4:08:d8:14:a5:df:0e:e2: 2e:6a:be:95:b9:c2:06:e7:7e:60:23:1c:9d:01:95:97:9e:1e: 6c:bb:90:a8:a5:08:5d:07:40:b7:84:d5:b7:79:3b:86:fb:c2: 61:2c:c5:e8:b3:c8:a0:cc:f7:54:d7:3b:7d:c9:16:52:ac:da: ed:60:72:29:8a:69:e4:f9:05:38:c8:4d:7c:09:f3:39:1a:d4: 27:fc:f7:10:ff:1d:b2:d1:ec:2b:2c:dd:4a:fc:ff:9d:72:9d: ed:30:69:49:a4:43:83:79:bf:7e:f1:f1:2b:a0:1a:5f:01:03: cd:22:c6:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTZ7w4gQ9njRyJXnW3LhNBIVZvb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5RkNFRjc1QTg1RTlGQTI0NDc3N0Y3Q0VEQUNDNTgy QjdBQkEyOTAeFw0yNTA2MDYxNDM0MjhaFw0yNTA2MDcxNzUxMjhaMDMxMTAvBgNV BAMTKDFEQTEyMTE1NUU0NUI3MzlGOTFCRTc0QkQ4MDY2QTBDQkM0MTI0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0PKAhZT6HNzYkTE/hwH8pD0t2 tufzVrS9uAlQYgZGk9ngDKq9O7tJK8ORNI85Lw3vivj0AzpmZEn1ocu8Jj9FA9oi DxFUu6PrdQvYhfJk2wiZNapABxnUvfVaJcEHGfwEnVhK27OllJKU10SPTQxhCPx2 k1RVB4J+betQG1jBSMtjzVxGedO43jFPQY5HqwiXqnLfvhDYLhKJMTk28SCXLajj ch+EN2uWHzP3MxAOYWPfObHOiCJ9Qt1WpXWIt7vTRFpLMlIRe/tSK6xnvcntm/+Y +yLEN1nEnyuexoCFN0pGP/gkzqRvS0lE4bm7OEcamFnYTIjOZRiBEXZvqcCpAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHaEhFV5Ftzn5G+dL2AZqDLxBJNIwHwYDVR0j BBgwFoAU85/O91qF6fokR3f3ztrMWCt6uikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDR4Tlh1OWNaYko5QVd5ZnRYVXpYVGRzbUQ0R3NuQzI1Mms5WkFNZGVB VXAvMC9GMzlGQ0VGNzVBODVFOUZBMjQ0Nzc3RjdDRURBQ0M1ODJCN0FCQTI5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzOUZDRUY3NUE4NUU5RkEy NDQ3NzdGN0NFREFDQzU4MkI3QUJBMjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RDR4Tlh1OWNaYko5QVd5ZnRYVXpYVGRzbUQ0R3NuQzI1Mms5WkFNZGVBVXAvMC9G MzlGQ0VGNzVBODVFOUZBMjQ0Nzc3RjdDRURBQ0M1ODJCN0FCQTI5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOk/EDUZ5S2qUFe986FUWJKhjU3qexp9aV4V86+PREDN71grUvSWdCMHHbQ0K JhCcdlkW7KF0EJ+pdyHLtysXqKLCcNIG3/d0b7Adl1r9JFWnGZmYseJ8y8d5jleW HwBxpWTEkXtTAmiSPuTD1Rk3OhE9qEqdBwoL9qmKZdMPpDi7HrdaCbYXxvQI2BSl 3w7iLmq+lbnCBud+YCMcnQGVl54ebLuQqKUIXQdAt4TVt3k7hvvCYSzF6LPIoMz3 VNc7fckWUqza7WByKYpp5PkFOMhNfAnzORrUJ/z3EP8dstHsKyzdSvz/nXKd7TBp SaRDg3m/fvHxK6AaXwEDzSLGyA== -----END CERTIFICATE-----Generated at Sat Jun 7 04:05:57 2025 by rpki-client