$ rpki-client -vvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft File: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft (raw, json) Hash identifier: Yg7HQ38QsXKlTEF00ViWwvlmEpIWXeSs6ZlVdnLzNGU= Subject key identifier: 95:2D:23:A6:55:62:27:60:13:48:2F:14:9B:46:35:75:2D:E6:3E:DB Authority key identifier: 4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 Certificate issuer: /CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Certificate serial: F6F42FF1BBA48CC8D78DD911D6FD86B6F2B29E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject info access: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft Manifest number: BD Signing time: Fri 06 Jun 2025 11:09:28 +0000 Manifest this update: Fri 06 Jun 2025 11:04:28 +0000 Manifest next update: Sat 07 Jun 2025 12:55:28 +0000 Files and hashes: 1: 3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa (hash: fxTpR6kGjpzHUi4HM+ey62/lxDfVFp1Mya/83PptAgs=) 2: 323830343a316137633a3a2f33322d3334203d3e203631383632.roa (hash: TJaA5xEZrkse1eozPtBQZAtjZj6iE5o4CDiRrM/8CKc=) 3: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl (hash: 7/WaHnWsUTrjms2f2/dNrEpHfiGFqUSu8SeaZby1ghA=) 4: 3230312e3135302e3132302e302f32322d3234203d3e203631383632.roa (hash: N7pBzAqFHQXwjW/KS0P1VsU5DUXI/b+mnSTAPuK/6eo=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Jun 2025 12:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f6:f4:2f:f1:bb:a4:8c:c8:d7:8d:d9:11:d6:fd:86:b6:f2:b2:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Validity Not Before: Jun 6 11:04:28 2025 GMT Not After : Jun 7 12:55:28 2025 GMT Subject: CN=952D23A65562276013482F149B4635752DE63EDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:29:7a:29:46:7e:65:83:85:c4:bf:38:95:45: 8f:04:d7:70:82:20:7e:22:80:bd:25:ef:63:b1:bd: c5:26:f2:2d:0e:6e:d2:75:49:37:60:21:08:a5:e0: 9f:60:70:b9:23:0f:9d:19:7f:23:61:61:b9:28:49: 78:4a:95:76:62:ce:21:f1:8e:80:e2:b0:bf:c1:03: 9d:58:82:bd:2f:0a:c6:00:7a:8b:11:92:68:f7:7f: 65:7a:97:4a:a0:bd:bb:23:e2:17:f9:21:a4:be:18: e5:5e:79:15:1e:33:4f:76:cf:b2:6c:da:bd:87:f3: 45:6b:05:f6:41:7e:0d:c1:cc:9e:e5:75:e4:c7:66: 8d:ac:51:0c:10:13:04:49:7b:7a:e1:87:55:34:58: 5a:7c:dd:2a:1d:d5:65:97:6e:42:b8:23:e6:6b:1c: 8e:c4:2e:56:34:55:b8:98:a7:fb:3c:2a:ca:1b:4c: b1:22:77:82:80:33:2d:e3:39:f7:01:92:45:1d:62: 11:dd:88:b2:fa:6f:9f:75:f7:99:76:4a:b9:3a:50: 98:87:59:09:49:36:17:0c:3e:51:e6:3a:d9:08:86: 99:c2:67:d4:33:4f:16:a7:c4:94:bc:39:03:00:07: 61:2f:24:5a:12:4f:8e:3b:69:f4:e0:3d:10:ee:1a: f7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2D:23:A6:55:62:27:60:13:48:2F:14:9B:46:35:75:2D:E6:3E:DB X509v3 Authority Key Identifier: keyid:4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:58:11:9f:18:77:9c:6d:51:2e:2b:4c:4b:a6:09:b9:65:e6: 77:24:08:cc:22:a0:33:ad:77:be:45:5d:8a:46:84:3a:95:65: 63:23:a4:ca:31:99:c1:21:5d:72:c0:e4:ae:19:29:aa:08:2d: ea:61:1f:f3:fc:f0:70:95:8a:4e:52:9f:56:35:94:79:a0:4c: 49:67:10:9e:d3:15:4e:0d:48:f6:2e:6a:da:32:e2:b1:5c:7e: e0:83:85:13:38:28:c8:02:30:b0:28:5b:e4:ad:23:9a:48:2e: ec:16:05:1c:40:b0:c0:3d:54:a7:56:97:b2:71:07:fc:ba:17: 66:4d:62:7d:a1:f9:5d:10:79:86:f6:96:fd:f1:b2:7f:ee:ba: b2:45:26:7c:6e:c1:73:a9:d5:4b:bb:6a:73:d3:70:fc:6f:bd: f1:83:10:30:04:ed:1e:a5:4d:67:00:54:6b:77:a8:a9:1a:90: f7:3c:9f:8d:1f:e6:cf:82:59:2b:c0:4a:94:70:c8:65:40:24: 0b:7b:d1:fa:67:b7:e1:f4:24:fa:a5:24:fa:34:c9:98:50:cc: 32:88:14:22:28:0b:b6:26:50:09:17:51:12:0f:0c:87:6c:01: f3:cd:dd:e6:f1:39:45:16:e7:85:d2:18:c4:01:07:08:55:f8: 8f:ed:7b:c8 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUAPb0L/G7pIzI143ZEdb9hrbysp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlF NTMwNjM1NTAeFw0yNTA2MDYxMTA0MjhaFw0yNTA2MDcxMjU1MjhaMDMxMTAvBgNV BAMTKDk1MkQyM0E2NTU2MjI3NjAxMzQ4MkYxNDlCNDYzNTc1MkRFNjNFREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5KXopRn5lg4XEvziVRY8E13CC IH4igL0l72OxvcUm8i0ObtJ1STdgIQil4J9gcLkjD50ZfyNhYbkoSXhKlXZiziHx joDisL/BA51Ygr0vCsYAeosRkmj3f2V6l0qgvbsj4hf5IaS+GOVeeRUeM092z7Js 2r2H80VrBfZBfg3BzJ7ldeTHZo2sUQwQEwRJe3rhh1U0WFp83Sod1WWXbkK4I+Zr HI7ELlY0VbiYp/s8KsobTLEid4KAMy3jOfcBkkUdYhHdiLL6b59195l2Srk6UJiH WQlJNhcMPlHmOtkIhpnCZ9QzTxanxJS8OQMAB2EvJFoST447afTgPRDuGvd3AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUlS0jplViJ2ATSC8Um0Y1dS3mPtswHwYDVR0j BBgwFoAUS4CyC9dA34r88PjFpv64ueUwY1UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9Tb2h2akZIS1hwcGtOUWs3UWJxeWVqTjVmUGtaMmNHclA0OXI2dUFRdmNz LzAvNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlFNTMwNjM1NS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjgwQjIwQkQ3NDBERjhBRkNG MEY4QzVBNkZFQjhCOUU1MzA2MzU1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1Nv aHZqRkhLWHBwa05RazdRYnF5ZWpONWZQa1oyY0dyUDQ5cjZ1QVF2Y3MvMC80Qjgw QjIwQkQ3NDBERjhBRkNGMEY4QzVBNkZFQjhCOUU1MzA2MzU1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA JVgRnxh3nG1RLitMS6YJuWXmdyQIzCKgM613vkVdikaEOpVlYyOkyjGZwSFdcsDk rhkpqggt6mEf8/zwcJWKTlKfVjWUeaBMSWcQntMVTg1I9i5q2jLisVx+4IOFEzgo yAIwsChb5K0jmkgu7BYFHECwwD1Up1aXsnEH/LoXZk1ifaH5XRB5hvaW/fGyf+66 skUmfG7Bc6nVS7tqc9Nw/G+98YMQMATtHqVNZwBUa3eoqRqQ9zyfjR/mz4JZK8BK lHDIZUAkC3vR+me34fQk+qUk+jTJmFDMMogUIigLtiZQCRdREg8Mh2wB883d5vE5 RRbnhdIYxAEHCFX4j+17yA== -----END CERTIFICATE-----Generated at Sat Jun 7 05:34:46 2025 by rpki-client