$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft File: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft (raw, json) Hash identifier: wYxPwPH6RsBu0xgBiPQnUpnKrfB1gnaYBF49mv+dtJI= Subject key identifier: 2F:DB:8E:AE:7A:82:D9:32:6A:54:D4:D4:E5:B8:35:86:AE:6D:2D:2E Authority key identifier: 4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E Certificate issuer: /CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E Certificate serial: 40AA160BBEEADEBEF502B69AD291A89BD66EDAC0 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer Subject info access: rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft Manifest number: 020A Signing time: Thu 12 Jun 2025 19:19:58 +0000 Manifest this update: Thu 12 Jun 2025 19:14:58 +0000 Manifest next update: Fri 13 Jun 2025 19:56:58 +0000 Files and hashes: 1: 323830343a313165303a3a2f33322d3335203d3e20323633343435.roa (hash: l52S43eaKfvUZ2t/kqDe9o3Cqn1Y9zJ+3VEnL0T6tag=) 2: 323830343a313165303a343230303a3a2f33392d3339203d3e20323633343435.roa (hash: 6tg5sOgRuiUxwwUq/7zsZLx+hQOy6cWz5ENkeccHj0I=) 3: 4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl (hash: wDvzY9aZGvWyd55tOcepVve7idV5BENN6GNcCe31yKg=) 4: 323830343a313165303a343230313a3a2f34382d3438203d3e20323633343435.roa (hash: T+zhAAYd5vuAwlu8lxtEbL3qZyJYr9GqRyZTr/PPqRg=) 5: 3137372e39312e3136342e302f32322d3234203d3e20323633343435.roa (hash: 2T0ObRxo5BMGuagiajA9IIMVotrKZHgUC8Y0CTXt9eU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 13 Jun 2025 19:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:aa:16:0b:be:ea:de:be:f5:02:b6:9a:d2:91:a8:9b:d6:6e:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E Validity Not Before: Jun 12 19:14:58 2025 GMT Not After : Jun 13 19:56:58 2025 GMT Subject: CN=2FDB8EAE7A82D9326A54D4D4E5B83586AE6D2D2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1a:ae:65:c3:cd:a0:13:41:75:a3:8f:cc:49: 84:74:57:ce:aa:cd:0f:f7:a0:e7:85:31:40:70:91: 1e:68:3c:33:1c:d4:53:8f:a0:19:a3:57:d2:61:6a: d3:83:7a:85:f6:63:9f:bb:0d:09:90:ab:eb:1d:d1: b3:17:3c:1a:2a:d8:44:85:6d:b9:b0:f6:32:1a:a9: 39:4f:61:ae:39:0d:4f:1d:1b:d2:9c:7b:1f:d4:d7: ac:88:e6:c7:e9:0b:8c:a4:25:e4:89:15:a3:ba:63: 5f:15:6a:20:68:01:1c:a5:62:8a:a1:50:fc:8c:84: 4d:c3:9a:f9:d6:89:b5:90:f0:7f:9b:12:60:57:91: 5a:fd:86:69:2f:c7:3b:c3:c7:31:34:26:79:73:61: a8:ff:fb:9f:d2:f2:2f:ec:27:b3:cd:e6:57:bf:5d: 59:53:64:f8:78:11:16:d4:9d:3e:79:9d:a4:7f:ad: 7d:92:6d:65:4b:96:e5:d5:82:3d:a9:af:00:f4:76: 58:17:85:a2:82:53:0d:81:98:ed:b8:d2:d6:f3:f4: 0c:73:d7:a1:0c:bd:85:c9:8e:ea:bf:81:1a:4e:e3: dd:84:6d:2e:58:26:05:79:22:d5:00:e0:e6:2e:4d: d9:0f:b2:fc:af:2e:6f:9b:e8:72:77:1b:2c:b8:64: 2b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DB:8E:AE:7A:82:D9:32:6A:54:D4:D4:E5:B8:35:86:AE:6D:2D:2E X509v3 Authority Key Identifier: keyid:4B:3E:9C:D0:9E:3F:4A:69:B4:0B:44:C8:C8:16:1E:1F:00:BE:0F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/4B3E9CD09E3F4A69B40B44C8C8161E1F00BE0F5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:76:81:d1:96:de:58:ed:97:df:d4:90:62:35:5f:58:f3:06: 68:3f:ab:1c:5e:d2:dd:be:25:30:42:05:62:bc:cc:5d:b7:6b: 2c:81:e0:7a:77:2d:69:d8:92:ee:86:ce:98:7f:02:9b:0f:4e: c0:f5:63:9f:64:bc:a1:6a:3d:d2:d8:e0:9f:35:f4:12:f4:77: 3e:1a:4a:5b:a8:08:57:85:1b:71:44:74:71:ad:fd:bb:e7:1b: 33:49:c5:02:6a:60:db:94:07:7e:b8:fc:31:e5:c9:20:8d:9d: e7:80:cb:8f:e8:07:5e:f5:5f:bd:1b:d8:bf:af:48:a7:d0:1f: 19:4f:7a:e7:a1:08:5d:b9:cb:cc:69:5e:cd:3c:3a:e1:6d:72: 0c:70:e8:83:11:7b:ef:e0:6a:5a:59:23:b0:91:d3:0f:e3:23: df:28:5f:ee:47:aa:99:26:77:14:de:e2:ea:60:5c:d3:4a:22: 19:71:1a:a7:bb:fe:9a:17:29:1f:80:dd:54:f5:80:28:b4:f9: ae:1f:70:dd:74:b2:1f:f2:23:7a:97:9b:51:20:77:77:6f:53: db:ec:59:bc:95:84:aa:c9:6b:e8:87:4b:74:37:9a:f3:d4:da: 8a:01:c6:be:85:2f:26:d0:f0:4b:63:96:90:a7:fe:34:b0:b9: 6a:86:c4:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQKoWC77q3r71Araa0pGom9Zu2sAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzRTlDRDA5RTNGNEE2OUI0MEI0NEM4QzgxNjFFMUYw MEJFMEY1RTAeFw0yNTA2MTIxOTE0NThaFw0yNTA2MTMxOTU2NThaMDMxMTAvBgNV BAMTKDJGREI4RUFFN0E4MkQ5MzI2QTU0RDRENEU1QjgzNTg2QUU2RDJEMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClGq5lw82gE0F1o4/MSYR0V86q zQ/3oOeFMUBwkR5oPDMc1FOPoBmjV9JhatODeoX2Y5+7DQmQq+sd0bMXPBoq2ESF bbmw9jIaqTlPYa45DU8dG9Kcex/U16yI5sfpC4ykJeSJFaO6Y18VaiBoARylYoqh UPyMhE3DmvnWibWQ8H+bEmBXkVr9hmkvxzvDxzE0JnlzYaj/+5/S8i/sJ7PN5le/ XVlTZPh4ERbUnT55naR/rX2SbWVLluXVgj2prwD0dlgXhaKCUw2BmO240tbz9Axz 16EMvYXJjuq/gRpO492EbS5YJgV5ItUA4OYuTdkPsvyvLm+b6HJ3Gyy4ZCvdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUL9uOrnqC2TJqVNTU5bg1hq5tLS4wHwYDVR0j BBgwFoAUSz6c0J4/Smm0C0TIyBYeHwC+D14wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZE bXgvMC80QjNFOUNEMDlFM0Y0QTY5QjQwQjQ0QzhDODE2MUUxRjAwQkUwRjVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCM0U5Q0QwOUUzRjRBNjlC NDBCNDRDOEM4MTYxRTFGMDBCRTBGNUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Sjlvc3BXYlZxdFlOWWtQYmZreFZiaWNLZE1EWFdKZ0RCcVJOVXlIUzZEbXgvMC80 QjNFOUNEMDlFM0Y0QTY5QjQwQjQ0QzhDODE2MUUxRjAwQkUwRjVFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcXaB0ZbeWO2X39SQYjVfWPMGaD+rHF7S3b4lMEIFYrzMXbdrLIHgenctadiS 7obOmH8Cmw9OwPVjn2S8oWo90tjgnzX0EvR3PhpKW6gIV4UbcUR0ca39u+cbM0nF Ampg25QHfrj8MeXJII2d54DLj+gHXvVfvRvYv69Ip9AfGU9656EIXbnLzGlezTw6 4W1yDHDogxF77+BqWlkjsJHTD+Mj3yhf7keqmSZ3FN7i6mBc00oiGXEap7v+mhcp H4DdVPWAKLT5rh9w3XSyH/IjepebUSB3d29T2+xZvJWEqslr6IdLdDea89TaigHG voUvJtDwS2OWkKf+NLC5aobEzg== -----END CERTIFICATE-----Generated at Fri Jun 13 10:44:49 2025 by rpki-client