$ rpki-client -vvf rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft File: 46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft (raw, json) Hash identifier: L6bsIQxSNJMJE1BQjoS92TqhFL4/v9kmDH4ZtI3FYCs= Subject key identifier: 46:9D:F4:B6:7F:22:90:CF:CB:38:41:A5:30:F8:50:EA:06:91:21:EF Authority key identifier: 46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17 Certificate issuer: /CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17 Certificate serial: 49477E58EEBEFC4E56642FE657BEDEF628D1EC52 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer Subject info access: rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft Manifest number: 0239 Signing time: Mon 16 Jun 2025 21:26:52 +0000 Manifest this update: Mon 16 Jun 2025 21:21:52 +0000 Manifest next update: Tue 17 Jun 2025 23:04:52 +0000 Files and hashes: 1: 3137372e3132382e36342e302f32312d3234203d3e203532383639.roa (hash: 8gzEWDF8i42eHf686Ra5Hy4/vvSVtAxDn3ySTpNWsmo=) 2: 46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl (hash: WlD97ZXNNNbmpiLlVWDW+O1uteUjXMK6HBu1x7ShRZs=) 3: 3137372e39332e3138342e302f32322d3234203d3e203532383639.roa (hash: tvRic0kMMAl10dH+h0klz4g3tSflPxU0EbeB037XKr0=) 4: 323830343a313733343a3a2f33322d3438203d3e203532383639.roa (hash: 74BdjGN3yA4ht22QxCqslkKGevvn+bBlN5pFgMtvUxk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 17 Jun 2025 23:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:47:7e:58:ee:be:fc:4e:56:64:2f:e6:57:be:de:f6:28:d1:ec:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46435C07BDEF9EF66EA3F9AC516B398FE487AF17 Validity Not Before: Jun 16 21:21:52 2025 GMT Not After : Jun 17 23:04:52 2025 GMT Subject: CN=469DF4B67F2290CFCB3841A530F850EA069121EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:61:e9:8b:fd:8e:09:cd:f1:55:2a:d3:37: 4d:60:0e:34:64:dc:2e:1b:9b:ae:32:ba:52:5e:9d: 15:d6:c8:93:6c:2a:1e:a3:49:48:72:4b:d6:54:1a: fa:07:51:13:9f:67:0e:12:fd:b9:e5:3b:24:b4:7e: fc:26:c8:5b:dc:e9:61:31:7d:e4:e6:ae:3f:df:a3: c4:71:35:12:62:cf:cf:a4:c3:9b:ec:28:eb:81:c7: f4:ce:de:cb:55:f0:40:94:ce:a4:4b:17:ef:ff:e2: a6:f6:df:69:e6:f7:7e:a6:b5:fa:b2:54:45:8f:cb: bd:66:85:3d:1f:4f:f3:11:a0:c0:77:00:5d:c2:08: 26:c7:50:c7:f8:f2:9f:08:37:f3:74:9c:23:e7:db: 47:3f:46:5a:bd:66:18:90:5e:98:c5:0d:aa:cf:c0: 10:a2:8d:45:8b:bd:55:d9:d8:8e:39:d7:36:fa:93: a9:2e:95:b3:a5:5d:f0:57:fc:94:3b:f9:5b:c8:9f: 38:8f:99:cc:d0:b3:44:16:5e:b8:fb:c7:eb:cf:94: 2f:58:86:32:7a:50:7a:2c:38:7f:d9:e0:3e:fc:36: 8d:40:49:22:62:ca:2f:f5:50:63:51:42:fa:b8:b3: 35:5f:4e:77:26:03:d6:3a:77:83:71:d5:b9:4c:1c: 86:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9D:F4:B6:7F:22:90:CF:CB:38:41:A5:30:F8:50:EA:06:91:21:EF X509v3 Authority Key Identifier: keyid:46:43:5C:07:BD:EF:9E:F6:6E:A3:F9:AC:51:6B:39:8F:E4:87:AF:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/284ZXprWF6Qz7S5Bbj3ZGpnbFRHrQUm9KX4UrHC5cSPk/1/46435C07BDEF9EF66EA3F9AC516B398FE487AF17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:95:6d:0d:59:5b:7b:9b:1d:e2:73:0f:4a:3f:74:ed:ea:d3: 06:fc:fc:65:63:03:b6:81:b1:b5:97:cf:1b:9b:6a:b6:84:b4: f6:14:b3:00:0b:52:57:39:6b:aa:ef:4d:a7:42:00:50:70:e8: cf:e1:21:43:a5:c5:d4:42:b0:cc:71:5f:73:15:5f:4e:df:e5: f8:49:cf:7f:30:89:4c:bd:8f:68:b1:d4:3f:68:19:dd:a6:d4: d0:79:2b:cf:5f:91:68:3b:60:09:ff:b4:93:38:25:fd:57:d8: 4b:d7:fe:d3:a4:a8:b2:fa:ae:25:34:54:2f:80:41:4c:84:e4: 04:1d:aa:03:1d:59:45:88:36:dc:a3:fe:85:52:f0:d4:ba:19: 62:3b:47:73:75:35:c8:6c:4b:3d:10:82:08:a5:32:81:82:1a: b2:ce:cc:0d:20:45:38:96:c6:09:90:62:e4:0b:6b:8f:80:91: a1:1e:84:5d:f4:5d:ce:80:22:13:04:25:0b:b3:18:e8:e3:6e: 58:31:f9:31:47:d2:0f:a5:fd:65:59:d6:d7:74:e9:0a:00:1e: 6f:1c:be:f1:c0:9b:a9:a3:11:f5:87:9a:6b:ea:01:37:d8:61: 2c:b3:c0:b6:fa:9a:69:e8:05:52:d5:26:8a:d1:0b:aa:f2:cd: be:69:61:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSUd+WO6+/E5WZC/mV77e9ijR7FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY0MzVDMDdCREVGOUVGNjZFQTNGOUFDNTE2QjM5OEZF NDg3QUYxNzAeFw0yNTA2MTYyMTIxNTJaFw0yNTA2MTcyMzA0NTJaMDMxMTAvBgNV BAMTKDQ2OURGNEI2N0YyMjkwQ0ZDQjM4NDFBNTMwRjg1MEVBMDY5MTIxRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1gWHpi/2OCc3xVSrTN01gDjRk 3C4bm64yulJenRXWyJNsKh6jSUhyS9ZUGvoHUROfZw4S/bnlOyS0fvwmyFvc6WEx feTmrj/fo8RxNRJiz8+kw5vsKOuBx/TO3stV8ECUzqRLF+//4qb232nm936mtfqy VEWPy71mhT0fT/MRoMB3AF3CCCbHUMf48p8IN/N0nCPn20c/Rlq9ZhiQXpjFDarP wBCijUWLvVXZ2I451zb6k6kulbOlXfBX/JQ7+VvInziPmczQs0QWXrj7x+vPlC9Y hjJ6UHosOH/Z4D78No1ASSJiyi/1UGNRQvq4szVfTncmA9Y6d4Nx1blMHIaBAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURp30tn8ikM/LOEGlMPhQ6gaRIe8wHwYDVR0j BBgwFoAURkNcB73vnvZuo/msUWs5j+SHrxcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMjg0WlhwcldGNlF6N1M1QmJqM1pHcG5iRlJIclFVbTlLWDRVckhDNWNT UGsvMS80NjQzNUMwN0JERUY5RUY2NkVBM0Y5QUM1MTZCMzk4RkU0ODdBRjE3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2NDM1QzA3QkRFRjlFRjY2 RUEzRjlBQzUxNkIzOThGRTQ4N0FGMTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mjg0WlhwcldGNlF6N1M1QmJqM1pHcG5iRlJIclFVbTlLWDRVckhDNWNTUGsvMS80 NjQzNUMwN0JERUY5RUY2NkVBM0Y5QUM1MTZCMzk4RkU0ODdBRjE3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaZVtDVlbe5sd4nMPSj907erTBvz8ZWMDtoGxtZfPG5tqtoS09hSzAAtSVzlr qu9Np0IAUHDoz+EhQ6XF1EKwzHFfcxVfTt/l+EnPfzCJTL2PaLHUP2gZ3abU0Hkr z1+RaDtgCf+0kzgl/VfYS9f+06SosvquJTRUL4BBTITkBB2qAx1ZRYg23KP+hVLw 1LoZYjtHc3U1yGxLPRCCCKUygYIass7MDSBFOJbGCZBi5Atrj4CRoR6EXfRdzoAi EwQlC7MY6ONuWDH5MUfSD6X9ZVnW13TpCgAebxy+8cCbqaMR9Yeaa+oBN9hhLLPA tvqaaegFUtUmitELqvLNvmlhfA== -----END CERTIFICATE-----Generated at Tue Jun 17 09:00:32 2025 by rpki-client