$ rpki-client -vvf rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft File: 4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft (raw, json) Hash identifier: XIHXdzJutBVDKDdEWMRYx+nFf2ZddW1XcLXHRE0O2BE= Subject key identifier: 5F:60:E5:8D:57:1A:92:F3:42:D0:27:D8:52:00:A3:DD:56:C7:01:85 Authority key identifier: 4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4 Certificate issuer: /CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4 Certificate serial: 7404C2BFE761288B0F519AE1D344275F59E198ED Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer Subject info access: rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft Manifest number: 21 Signing time: Fri 04 Jul 2025 02:26:51 +0000 Manifest this update: Fri 04 Jul 2025 02:21:51 +0000 Manifest next update: Sat 05 Jul 2025 05:17:51 +0000 Files and hashes: 1: 3136382e3139362e3231362e302f32322d3234203d3e20323635343733.roa (hash: fPsx4d62UPQm+f5HlAHqo78FphvrRmReo6la1d77pLU=) 2: 4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl (hash: OlOincz2L2cJyoXBcAW35FwCHoMzMWepB1pqQmlWCzg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Jul 2025 05:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:04:c2:bf:e7:61:28:8b:0f:51:9a:e1:d3:44:27:5f:59:e1:98:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4 Validity Not Before: Jul 4 02:21:51 2025 GMT Not After : Jul 5 05:17:51 2025 GMT Subject: CN=5F60E58D571A92F342D027D85200A3DD56C70185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:71:2b:85:13:9a:3c:9b:ba:ff:b6:b9:4f:58: ab:b8:f1:31:c2:ef:0c:10:4a:87:59:bb:7d:ba:3e: 3c:66:c2:04:2d:96:70:dd:55:64:ab:1b:af:86:16: f5:f5:ce:cb:ff:03:31:c0:c7:3a:14:44:71:55:ef: 03:61:59:c3:88:97:bf:a8:36:93:d4:69:72:44:1a: 24:19:96:6c:4c:77:45:03:a3:9d:54:87:1e:55:f9: 24:7e:d8:95:86:4d:03:b3:f7:9d:1e:11:7f:51:ed: d9:b5:21:fc:b5:52:1e:1d:d5:3f:9b:63:4a:42:6f: 56:1c:49:cf:3d:06:bf:f7:79:1d:09:51:d5:52:a9: 12:ca:a5:5f:f2:35:52:c8:96:19:7b:96:3e:9d:35: f3:24:4c:9f:2e:9b:5a:5e:5a:53:90:9a:a7:63:f1: a1:4f:02:a4:b4:34:7b:a0:57:43:5f:78:5e:65:ba: d8:eb:f2:2d:8f:ec:83:28:f3:4b:e5:be:b4:71:2e: 32:4d:03:3c:16:71:b0:45:dc:f0:f3:99:4d:27:8d: 91:0b:98:e5:b7:de:9b:b0:ae:04:85:16:25:1f:97: a0:74:4b:a7:0a:6e:14:c6:0c:9a:28:c8:1b:c4:4a: bf:6e:1b:96:34:90:ff:26:c6:bb:c3:cd:aa:dc:d4: 57:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:60:E5:8D:57:1A:92:F3:42:D0:27:D8:52:00:A3:DD:56:C7:01:85 X509v3 Authority Key Identifier: keyid:4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:cf:3f:a5:d3:19:37:8c:a1:2d:77:76:93:ca:d2:6a:02:bf: 07:e1:4c:82:27:06:1b:ec:1c:24:be:e6:c3:3b:b4:71:f0:01: 58:0a:9d:b4:c0:76:b4:a3:53:93:55:ca:30:70:00:90:b6:ef: c6:a4:5f:76:a0:79:2a:05:4e:dd:d5:f9:ef:f0:a2:d5:4e:b4: 6b:64:93:d9:5a:0b:02:fd:b5:87:ad:4c:9b:35:8a:1b:57:fe: 0f:8c:88:d5:dc:ca:6f:fc:d9:e4:3e:e7:73:76:b4:67:bc:6a: 19:9d:50:b6:5f:b0:54:3f:6b:b5:ce:87:be:82:f0:02:6f:cd: c4:8e:ba:c5:73:e3:9f:cf:0e:36:6d:c9:df:f8:eb:54:1c:88: 65:2d:37:9c:c9:9b:82:cf:57:c4:1a:96:df:f8:4b:b4:16:ee: 39:51:94:33:54:b5:17:62:e3:5f:ec:f8:e4:74:65:eb:93:ec: 3b:67:66:7a:0b:e8:33:d8:46:7d:4e:22:07:5f:53:14:d1:9c: 86:02:3b:d8:57:c9:0b:cc:f2:a2:b6:af:b5:5f:22:71:67:e2: 1c:80:db:4f:6b:8c:cd:f3:09:05:8f:71:47:58:60:31:9a:d7: 94:24:d7:1a:d4:5d:cb:09:ff:ab:52:28:29:8c:85:34:29:34: 4f:15:10:7b -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUdATCv+dhKIsPUZrh00QnX1nhmO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVGMDdENTE0QkExRDZCMkZCREE2QzREQzM2MEJFQjc1 MEQzQzlDNDAeFw0yNTA3MDQwMjIxNTFaFw0yNTA3MDUwNTE3NTFaMDMxMTAvBgNV BAMTKDVGNjBFNThENTcxQTkyRjM0MkQwMjdEODUyMDBBM0RENTZDNzAxODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcSuFE5o8m7r/trlPWKu48THC 7wwQSodZu326PjxmwgQtlnDdVWSrG6+GFvX1zsv/AzHAxzoURHFV7wNhWcOIl7+o NpPUaXJEGiQZlmxMd0UDo51Uhx5V+SR+2JWGTQOz950eEX9R7dm1Ify1Uh4d1T+b Y0pCb1YcSc89Br/3eR0JUdVSqRLKpV/yNVLIlhl7lj6dNfMkTJ8um1peWlOQmqdj 8aFPAqS0NHugV0NfeF5lutjr8i2P7IMo80vlvrRxLjJNAzwWcbBF3PDzmU0njZEL mOW33puwrgSFFiUfl6B0S6cKbhTGDJooyBvESr9uG5Y0kP8mxrvDzarc1Fc/AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUX2DljVcakvNC0CfYUgCj3VbHAYUwHwYDVR0j BBgwFoAUTvB9UUuh1rL72mxNw2C+t1DTycQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9YemFHSkM0bTRCWXgyb21abkszdFo4cFV6R0NZR1NVblFkdm0xUUZMeVZz LzAvNEVGMDdENTE0QkExRDZCMkZCREE2QzREQzM2MEJFQjc1MEQzQzlDNC5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80RUYwN0Q1MTRCQTFENkIyRkJE QTZDNERDMzYwQkVCNzUwRDNDOUM0LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1h6 YUdKQzRtNEJZeDJvbVpuSzN0WjhwVXpHQ1lHU1VuUWR2bTFRRkx5VnMvMC80RUYw N0Q1MTRCQTFENkIyRkJEQTZDNERDMzYwQkVCNzUwRDNDOUM0Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA yM8/pdMZN4yhLXd2k8rSagK/B+FMgicGG+wcJL7mwzu0cfABWAqdtMB2tKNTk1XK MHAAkLbvxqRfdqB5KgVO3dX57/Ci1U60a2ST2VoLAv21h61MmzWKG1f+D4yI1dzK b/zZ5D7nc3a0Z7xqGZ1Qtl+wVD9rtc6HvoLwAm/NxI66xXPjn88ONm3J3/jrVByI ZS03nMmbgs9XxBqW3/hLtBbuOVGUM1S1F2LjX+z45HRl65PsO2dmegvoM9hGfU4i B19TFNGchgI72FfJC8zyoravtV8icWfiHIDbT2uMzfMJBY9xR1hgMZrXlCTXGtRd ywn/q1IoKYyFNCk0TxUQew== -----END CERTIFICATE-----Generated at Fri Jul 4 14:24:02 2025 by rpki-client