$ rpki-client -vvf rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.mft File: FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.mft (raw, json) Hash identifier: YwXmG88N5GmjqGZVkFVAVt6jI97DFPJyNPS7btTCX7o= Subject key identifier: 68:D1:DB:BA:75:7A:0D:7F:13:7E:BB:50:9A:8C:1C:96:43:84:69:F2 Authority key identifier: FD:C3:AB:D5:76:F0:A1:32:A9:B0:41:C7:B6:E6:99:77:85:CB:CD:4A Certificate issuer: /CN=FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A Certificate serial: 70EC9F1294F84500D941D219C75128E15B8CEB77 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.mft Manifest number: 19 Signing time: Fri 04 Jul 2025 14:08:11 +0000 Manifest this update: Fri 04 Jul 2025 14:03:11 +0000 Manifest next update: Sat 05 Jul 2025 17:25:11 +0000 Files and hashes: 1: 3230302e33392e3134342e302f32322d3232203d3e20323730373538.roa (hash: tb1g3NCktqSrdcvWQ2gxaX+GDhsqkyxkZJ3C04Np+Yg=) 2: 323830343a373066343a3a2f33322d3332203d3e20323730373538.roa (hash: 2GptZ3RabEC7QCCw/HaicFNVgieTrkw3S/oraJ8oR9o=) 3: 3230302e33392e3134372e302f32342d3234203d3e20323730373538.roa (hash: BSkWzAzGwusAJ1olHzvzCTf8zP2i9ICVPz6sQGRgBPQ=) 4: 3230302e33392e3134352e302f32342d3234203d3e20323730373538.roa (hash: zfqjJcXYgvPw2REMAcBA4TkFyAWC717mikpPNxOp6Ts=) 5: 3230302e33392e3134362e302f32342d3234203d3e20323730373538.roa (hash: +mvP8qMouAMvWor17GLsETtlUHroIUaj5JwxXsNsvAU=) 6: FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.crl (hash: Wsj+gUg8fJWzcreYJQS3A3QjTOBjpNWTyVgsgMv8Pcc=) 7: 3230302e33392e3134342e302f32342d3234203d3e20323730373538.roa (hash: KIFTJjKKd6/PSI+6j7nOzWGYSCTtpxHe1qGG6vpOiNU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.crl rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Jul 2025 17:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ec:9f:12:94:f8:45:00:d9:41:d2:19:c7:51:28:e1:5b:8c:eb:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A Validity Not Before: Jul 4 14:03:11 2025 GMT Not After : Jul 5 17:25:11 2025 GMT Subject: CN=68D1DBBA757A0D7F137EBB509A8C1C96438469F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:05:17:e0:52:17:78:b4:47:cc:18:ad:50:41: cb:69:2e:72:1f:df:5c:a1:14:ba:68:b8:7a:70:68: 8c:50:52:4f:a5:9c:34:46:2f:8f:fa:bc:a9:67:6b: 4d:da:cd:95:26:49:7b:27:12:70:5b:d7:f4:a6:f8: 19:04:c9:dc:3d:c5:c8:48:a6:fb:12:57:72:f6:9b: f7:64:aa:6d:73:32:39:38:c4:a1:9b:13:e1:f6:5d: 84:6f:d8:56:12:f7:d6:b6:f3:d6:3f:9f:8a:e4:24: 33:12:24:19:0a:21:ab:f2:fd:1b:d8:8c:2e:27:e5: fe:ca:b1:bf:1b:b0:37:43:5d:50:0f:c5:f9:76:49: 1e:2f:92:90:f2:a1:45:2e:d5:51:a0:37:36:d6:b0: b9:e8:11:33:99:0b:a8:65:67:c6:1b:15:81:14:ef: b0:70:ff:27:64:0d:55:76:a1:58:22:fe:98:92:60: aa:de:00:72:be:e5:cc:3e:c3:ee:1b:ad:96:3e:d0: bd:0e:4b:a3:9c:18:4d:96:34:72:27:3c:73:e5:88: 89:9b:86:73:bf:19:38:b6:49:c6:c5:52:28:6c:3b: 68:e2:94:6c:6b:67:36:e2:df:68:98:02:83:1d:ba: 28:a0:b1:01:27:75:1f:cf:89:c4:81:78:56:83:50: 37:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D1:DB:BA:75:7A:0D:7F:13:7E:BB:50:9A:8C:1C:96:43:84:69:F2 X509v3 Authority Key Identifier: keyid:FD:C3:AB:D5:76:F0:A1:32:A9:B0:41:C7:B6:E6:99:77:85:CB:CD:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExZqbg4s5knrsc6VKKzbhafKZD1heRDuKefxajkq4pE/0/FDC3ABD576F0A132A9B041C7B6E6997785CBCD4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b9:57:c1:e3:1e:84:08:96:2e:90:cd:88:6b:f8:3b:15:85: 6e:fe:d3:f2:fd:3c:29:87:ff:b1:10:e2:15:f5:90:62:7f:71: 69:cc:78:ef:29:7c:3a:60:c2:ac:f9:66:87:3b:6f:37:19:02: 31:de:b4:bb:b5:3d:86:64:39:a8:f6:7d:9c:84:40:8e:8a:7b: 79:ef:c5:cf:0a:c9:75:0d:ef:a4:6b:ac:33:7a:ad:cf:8f:52: 95:04:d0:1c:c7:89:cc:b8:73:d0:8b:da:17:51:c4:51:13:3d: b6:1a:a7:7e:64:36:70:f1:f0:8d:f1:4e:6b:4b:d8:65:e6:75: 24:0a:3f:2c:7c:29:71:b1:11:60:95:d4:3d:4f:09:a2:ac:6f: 48:6f:62:9c:f8:77:93:46:b0:22:d8:26:f8:72:c3:26:ae:a6: 9b:f2:10:c9:c0:55:a5:ce:59:5c:8f:df:7b:34:ee:0e:1b:60: ff:cc:ed:02:11:c7:c5:36:ed:77:59:1a:24:1f:e6:ae:9b:3b: 5f:af:2d:9f:a1:cd:42:07:67:fa:70:ef:f8:81:8b:16:69:ff: 98:df:1a:7d:a5:47:ca:c5:d1:ec:00:88:77:21:53:59:6c:15: 15:f3:79:eb:f5:7d:8f:5c:c0:7b:de:32:ea:d9:43:7c:62:bc: 8c:a1:7b:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcOyfEpT4RQDZQdIZx1Eo4VuM63cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkRDM0FCRDU3NkYwQTEzMkE5QjA0MUM3QjZFNjk5Nzc4 NUNCQ0Q0QTAeFw0yNTA3MDQxNDAzMTFaFw0yNTA3MDUxNzI1MTFaMDMxMTAvBgNV BAMTKDY4RDFEQkJBNzU3QTBEN0YxMzdFQkI1MDlBOEMxQzk2NDM4NDY5RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBRfgUhd4tEfMGK1QQctpLnIf 31yhFLpouHpwaIxQUk+lnDRGL4/6vKlna03azZUmSXsnEnBb1/Sm+BkEydw9xchI pvsSV3L2m/dkqm1zMjk4xKGbE+H2XYRv2FYS99a289Y/n4rkJDMSJBkKIavy/RvY jC4n5f7Ksb8bsDdDXVAPxfl2SR4vkpDyoUUu1VGgNzbWsLnoETOZC6hlZ8YbFYEU 77Bw/ydkDVV2oVgi/piSYKreAHK+5cw+w+4brZY+0L0OS6OcGE2WNHInPHPliImb hnO/GTi2ScbFUihsO2jilGxrZzbi32iYAoMduiigsQEndR/PicSBeFaDUDfnAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUaNHbunV6DX8TfrtQmowclkOEafIwHwYDVR0j BBgwFoAU/cOr1XbwoTKpsEHHtuaZd4XLzUowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0V4WnFiZzRzNWtucnNjNlZLS3piaGFmS1pEMWhlUkR1S2VmeGFqa3E0 cEUvMC9GREMzQUJENTc2RjBBMTMyQTlCMDQxQzdCNkU2OTk3Nzg1Q0JDRDRBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZEQzNBQkQ1NzZGMEExMzJB OUIwNDFDN0I2RTY5OTc3ODVDQkNENEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0V4WnFiZzRzNWtucnNjNlZLS3piaGFmS1pEMWhlUkR1S2VmeGFqa3E0cEUvMC9G REMzQUJENTc2RjBBMTMyQTlCMDQxQzdCNkU2OTk3Nzg1Q0JDRDRBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbblXweMehAiWLpDNiGv4OxWFbv7T8v08KYf/sRDiFfWQYn9xacx47yl8OmDC rPlmhztvNxkCMd60u7U9hmQ5qPZ9nIRAjop7ee/FzwrJdQ3vpGusM3qtz49SlQTQ HMeJzLhz0IvaF1HEURM9thqnfmQ2cPHwjfFOa0vYZeZ1JAo/LHwpcbERYJXUPU8J oqxvSG9inPh3k0awItgm+HLDJq6mm/IQycBVpc5ZXI/fezTuDhtg/8ztAhHHxTbt d1kaJB/mrps7X68tn6HNQgdn+nDv+IGLFmn/mN8afaVHysXR7ACIdyFTWWwVFfN5 6/V9j1zAe94y6tlDfGK8jKF7hQ== -----END CERTIFICATE-----Generated at Fri Jul 4 20:49:19 2025 by rpki-client