$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft File: D95738A14AD98B305087E048FD2E4821E5E2299A.mft (raw, json) Hash identifier: ynwy+NkBYzAD5wsNAz4TUnrF7EWF3K2Aw9DMGJIDIJA= Subject key identifier: 84:B6:17:81:3C:2B:FA:D5:F5:97:16:F5:17:F0:9C:9C:D6:F4:7B:07 Authority key identifier: D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A Certificate issuer: /CN=D95738A14AD98B305087E048FD2E4821E5E2299A Certificate serial: 54CDF7FC85D1431567D08E748E62BE5DD89D10BA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject info access: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft Manifest number: 4C Signing time: Thu 05 Jun 2025 14:51:21 +0000 Manifest this update: Thu 05 Jun 2025 14:46:21 +0000 Manifest next update: Fri 06 Jun 2025 16:53:21 +0000 Files and hashes: 1: 3137302e38332e3230302e302f32322d3234203d3e20323633343730.roa (hash: 3dEyGzKHFOd9LeZVxU1UzcBmIS+t2RbJviuI4dC12Lk=) 2: 323830343a313235343a3a2f33322d3332203d3e20323633343730.roa (hash: ELWb7rC3fgvn1sa3PxipINIruhW615Gy+69ajKYPWzI=) 3: D95738A14AD98B305087E048FD2E4821E5E2299A.crl (hash: hf6aei9wt9697CDAiKb1WQ9yIxEQgEEXKAAPCyU3oSc=) 4: 3139312e3234322e34382e302f32312d3234203d3e20323633343730.roa (hash: g6mPrnM05WB2yDxH6Zlq8hbCsk4V+orsbGR3GF+AKT8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 06 Jun 2025 16:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:cd:f7:fc:85:d1:43:15:67:d0:8e:74:8e:62:be:5d:d8:9d:10:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D95738A14AD98B305087E048FD2E4821E5E2299A Validity Not Before: Jun 5 14:46:21 2025 GMT Not After : Jun 6 16:53:21 2025 GMT Subject: CN=84B617813C2BFAD5F59716F517F09C9CD6F47B07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:a7:61:8e:f8:93:74:0b:8d:b3:1a:2d:c0: 16:b0:5a:10:1b:07:97:63:f7:f0:6b:f4:be:ae:c5: 37:96:15:6e:7f:b9:2c:06:3c:8c:2f:6f:ef:54:0d: 4a:d6:4b:4e:64:a6:88:7d:75:a4:f0:31:38:d0:8f: 5c:b7:38:ba:55:a1:d9:4f:a8:aa:db:9c:58:21:73: d0:43:1c:86:00:1b:33:84:55:18:8b:23:13:5c:13: ac:07:a6:96:45:c5:cd:aa:4f:aa:84:f9:43:62:3b: bb:9e:47:85:d0:e2:d4:a7:39:be:ce:fd:00:fc:ac: 8e:15:a1:9f:ae:e0:18:b8:5c:79:be:6a:0e:6e:53: d0:7d:1f:61:da:ff:40:f5:08:9b:8c:63:13:5e:18: b4:87:1c:47:b7:9c:0b:9f:02:3e:99:5b:c9:ab:9e: 06:fd:30:fc:c5:26:20:f1:7d:db:d9:13:ce:f0:e5: aa:11:f3:f8:7d:8c:78:e5:9c:bd:a5:d6:36:f7:3c: 99:31:3a:d7:00:5b:bf:ef:8f:34:84:2c:b4:3c:08: a2:93:3e:ad:bd:cc:a0:af:d6:bb:f7:16:d4:17:c7: ef:82:54:2d:ba:ea:66:0f:64:35:c7:18:56:f3:1e: f0:d8:26:c3:86:d4:8e:00:4e:32:d1:df:ec:fa:fe: 5e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B6:17:81:3C:2B:FA:D5:F5:97:16:F5:17:F0:9C:9C:D6:F4:7B:07 X509v3 Authority Key Identifier: keyid:D9:57:38:A1:4A:D9:8B:30:50:87:E0:48:FD:2E:48:21:E5:E2:29:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95738A14AD98B305087E048FD2E4821E5E2299A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/D95738A14AD98B305087E048FD2E4821E5E2299A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:ae:97:12:24:20:0a:c4:50:5c:c5:6d:ac:33:bb:44:7b:ce: 34:ed:24:9a:73:2a:46:6e:fb:01:ba:f4:4d:de:6c:f1:24:e8: c9:02:b9:fe:8d:26:a4:b0:17:fd:84:2e:d5:32:c7:8b:ec:1e: 19:d7:60:cf:78:48:0b:c7:8a:b3:ee:38:73:b8:b2:7a:77:29: 35:6b:9f:39:a9:e3:67:cd:1b:0d:a2:ca:80:e5:37:3a:a8:a9: 8b:de:79:e7:fc:e9:d6:06:0f:83:b6:8a:1b:fc:f9:3b:34:0a: f4:1d:dd:74:af:dc:02:25:b3:99:e8:0c:f9:af:83:99:b9:a5: 6d:ca:9e:dc:55:a2:27:66:11:7c:e3:69:4a:ca:71:43:43:48: e8:5b:c0:85:a1:2a:f0:ed:35:b7:bc:32:28:06:49:58:96:bf: 89:22:48:8b:03:58:91:14:52:84:0d:d1:f6:13:bb:fd:2b:19: 0b:da:d0:3e:f5:50:b5:df:a8:c8:7e:89:89:ac:5e:38:11:54: 30:5b:8d:da:d2:1d:d8:8d:ef:73:ec:a4:8f:54:8e:02:ef:0a: 08:17:e8:67:ac:e0:2a:78:db:3b:40:0c:23:4f:e7:dc:0d:0d: 64:5f:5b:49:f6:78:9a:ac:34:8f:9a:26:be:96:f3:ab:95:db: 53:08:17:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVM33/IXRQxVn0I50jmK+XdidELowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk1NzM4QTE0QUQ5OEIzMDUwODdFMDQ4RkQyRTQ4MjFF NUUyMjk5QTAeFw0yNTA2MDUxNDQ2MjFaFw0yNTA2MDYxNjUzMjFaMDMxMTAvBgNV BAMTKDg0QjYxNzgxM0MyQkZBRDVGNTk3MTZGNTE3RjA5QzlDRDZGNDdCMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/E6dhjviTdAuNsxotwBawWhAb B5dj9/Br9L6uxTeWFW5/uSwGPIwvb+9UDUrWS05kpoh9daTwMTjQj1y3OLpVodlP qKrbnFghc9BDHIYAGzOEVRiLIxNcE6wHppZFxc2qT6qE+UNiO7ueR4XQ4tSnOb7O /QD8rI4VoZ+u4Bi4XHm+ag5uU9B9H2Ha/0D1CJuMYxNeGLSHHEe3nAufAj6ZW8mr ngb9MPzFJiDxfdvZE87w5aoR8/h9jHjlnL2l1jb3PJkxOtcAW7/vjzSELLQ8CKKT Pq29zKCv1rv3FtQXx++CVC266mYPZDXHGFbzHvDYJsOG1I4ATjLR3+z6/l67AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUhLYXgTwr+tX1lxb1F/CcnNb0ewcwHwYDVR0j BBgwFoAU2Vc4oUrZizBQh+BI/S5IIeXiKZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2 UFkvMC9EOTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5NTczOEExNEFEOThCMzA1 MDg3RTA0OEZEMkU0ODIxRTVFMjI5OUEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2UFkvMC9E OTU3MzhBMTRBRDk4QjMwNTA4N0UwNDhGRDJFNDgyMUU1RTIyOTlBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtK6XEiQgCsRQXMVtrDO7RHvONO0kmnMqRm77Abr0Td5s8SToyQK5/o0mpLAX /YQu1TLHi+weGddgz3hIC8eKs+44c7iyencpNWufOanjZ80bDaLKgOU3Oqipi955 5/zp1gYPg7aKG/z5OzQK9B3ddK/cAiWzmegM+a+Dmbmlbcqe3FWiJ2YRfONpSspx Q0NI6FvAhaEq8O01t7wyKAZJWJa/iSJIiwNYkRRShA3R9hO7/SsZC9rQPvVQtd+o yH6JiaxeOBFUMFuN2tId2I3vc+ykj1SOAu8KCBfoZ6zgKnjbO0AMI0/n3A0NZF9b SfZ4mqw0j5omvpbzq5XbUwgXqw== -----END CERTIFICATE-----Generated at Fri Jun 6 03:18:11 2025 by rpki-client