$ rpki-client -vvf rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft File: 42D604698AFA9BA492807398AA6527B6E7B04AB4.mft (raw, json) Hash identifier: vSNLjKp0st2Gdr59uJovDkcq9b/tLsBMjYu1NajTsUI= Subject key identifier: 1A:F1:03:94:97:88:AD:C3:E0:FF:6A:34:48:9F:B9:D7:BA:7B:75:22 Authority key identifier: 42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4 Certificate issuer: /CN=42D604698AFA9BA492807398AA6527B6E7B04AB4 Certificate serial: 01D2B82F9BEDAEFAB659EA757D6A3E7FCFF9E441 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer Subject info access: rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft Manifest number: 020F Signing time: Sun 22 Jun 2025 15:59:03 +0000 Manifest this update: Sun 22 Jun 2025 15:54:03 +0000 Manifest next update: Mon 23 Jun 2025 16:17:03 +0000 Files and hashes: 1: 42D604698AFA9BA492807398AA6527B6E7B04AB4.crl (hash: gN4uXj+1q7XNxsCBFlmVKCURPF/iiot0u5hXwayKh9g=) 2: 34352e3233362e35322e302f32322d3234203d3e20323638323231.roa (hash: LXzAQRQkoF00WjETpsBxmLx8Um2Thzo4yRCWg3yquYE=) 3: 34352e3233362e35342e302f32332d3233203d3e20323638323231.roa (hash: 5UTaU84R+nywBkmh2VOMTd/UzpdSJSI3l+dyzYmnuFo=) 4: 323830343a346464303a3a2f33322d3336203d3e20323638323231.roa (hash: UrG52ZPguo6yArGwMeYZBknSlHnaNmN3dn07xO9WcKM=) 5: 34352e3233362e35322e302f32322d3232203d3e20323638323231.roa (hash: ceYoAtNP9I/fYOCde9To24oMt8TJcIju9lbdS97lAIM=) 6: 34352e3233362e35322e302f32332d3233203d3e20323638323231.roa (hash: NU6uq0C87qGWTrG4MN1JdLZtRk94lw5YmEnKWfV5ZXU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Jun 2025 16:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d2:b8:2f:9b:ed:ae:fa:b6:59:ea:75:7d:6a:3e:7f:cf:f9:e4:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42D604698AFA9BA492807398AA6527B6E7B04AB4 Validity Not Before: Jun 22 15:54:03 2025 GMT Not After : Jun 23 16:17:03 2025 GMT Subject: CN=1AF103949788ADC3E0FF6A34489FB9D7BA7B7522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:81:e6:6d:8c:08:2a:2e:15:d0:92:01:43:06: e5:17:d3:99:a5:bc:a7:3c:03:f6:17:8b:cb:09:b1: fb:f0:d7:fa:fe:54:23:cf:46:d6:99:91:01:e1:c8: 97:7c:f4:46:3b:59:53:8c:e7:f3:95:c1:d5:ce:d1: 5c:46:b8:df:05:a5:1b:be:cf:19:da:fe:1e:83:c3: b4:3f:8b:ef:ef:d6:60:27:f7:0f:d6:23:91:92:e2: 39:2b:19:0d:8c:8b:42:87:b3:72:42:4e:71:66:18: dd:2c:0e:6c:d0:86:ab:aa:93:7b:e7:e3:37:37:38: e4:0c:04:ca:2e:46:3c:ef:7d:cb:8a:25:fd:d6:34: 6f:d1:a5:59:a3:55:dc:be:26:31:5b:d7:24:4f:93: e8:97:77:e9:84:c9:c6:ff:3a:d0:14:a9:1b:8e:ce: ba:4a:f4:00:f8:0e:0e:e0:b4:22:e2:36:1f:bb:2e: 30:56:07:9c:66:48:ea:a7:f8:4b:91:e2:ff:1d:3d: 60:97:ed:b1:3c:e1:ae:1a:e9:b8:e4:3c:43:30:ce: 0a:25:ed:fb:a3:e3:5b:a2:da:80:e7:26:75:18:aa: 96:4f:85:13:eb:dd:7f:4c:c5:e2:49:1e:4d:8b:af: d7:8c:91:bf:b8:3d:03:49:ca:05:c3:01:c5:96:35: e3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F1:03:94:97:88:AD:C3:E0:FF:6A:34:48:9F:B9:D7:BA:7B:75:22 X509v3 Authority Key Identifier: keyid:42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6c:75:4f:3f:0e:ae:82:e0:cf:09:46:fa:e4:b9:92:a7:a6: 2b:2f:27:c5:10:17:35:96:54:de:5d:1f:c1:64:75:fa:55:fd: 0d:9d:56:0b:4a:95:e4:73:86:2b:80:55:ce:6b:0a:ca:3e:b4: 94:f6:e2:11:87:7a:f8:c6:71:c3:b1:a9:0d:cb:ba:11:4b:f2: 5c:78:6b:6a:ab:5d:db:72:9e:df:bf:b5:03:de:83:af:39:fa: 65:1b:24:57:81:3b:60:69:50:c5:5d:7c:0c:0c:cb:7a:ac:da: c2:33:4a:69:32:fa:11:2b:71:4b:c8:16:a3:43:1e:65:64:33: db:2a:39:d8:00:3b:d4:8f:be:a9:c4:44:ca:1f:55:21:e0:bc: 81:cb:7e:54:3a:c5:80:f8:e4:ea:a5:c7:7d:d6:71:31:d1:d8: 5b:25:b7:f8:09:d8:e6:af:34:b0:94:77:76:32:09:77:7f:1f: 57:d4:88:b6:ea:08:25:3d:da:4c:6d:ee:ee:8d:e0:72:87:e1: 9a:69:c7:49:78:b3:d8:a2:8c:70:5a:80:7b:cd:e4:10:61:45: 37:85:81:00:98:8b:26:a4:ca:74:91:73:44:a2:82:aa:89:4e: 81:74:25:d0:e0:9b:2e:6c:c1:cf:63:7e:2d:c8:b9:67:2d:fd: 50:68:b7:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAdK4L5vtrvq2Wep1fWo+f8/55EEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJENjA0Njk4QUZBOUJBNDkyODA3Mzk4QUE2NTI3QjZF N0IwNEFCNDAeFw0yNTA2MjIxNTU0MDNaFw0yNTA2MjMxNjE3MDNaMDMxMTAvBgNV BAMTKDFBRjEwMzk0OTc4OEFEQzNFMEZGNkEzNDQ4OUZCOUQ3QkE3Qjc1MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCigeZtjAgqLhXQkgFDBuUX05ml vKc8A/YXi8sJsfvw1/r+VCPPRtaZkQHhyJd89EY7WVOM5/OVwdXO0VxGuN8FpRu+ zxna/h6Dw7Q/i+/v1mAn9w/WI5GS4jkrGQ2Mi0KHs3JCTnFmGN0sDmzQhquqk3vn 4zc3OOQMBMouRjzvfcuKJf3WNG/RpVmjVdy+JjFb1yRPk+iXd+mEycb/OtAUqRuO zrpK9AD4Dg7gtCLiNh+7LjBWB5xmSOqn+EuR4v8dPWCX7bE84a4a6bjkPEMwzgol 7fuj41ui2oDnJnUYqpZPhRPr3X9MxeJJHk2Lr9eMkb+4PQNJygXDAcWWNeOPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGvEDlJeIrcPg/2o0SJ+517p7dSIwHwYDVR0j BBgwFoAUQtYEaYr6m6SSgHOYqmUntuewSrQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk5oQ1hWb280b0R4a0Z0MWR2dGg3d0tEQ0ZvdWl1N3Bqd3pmenlrYTVQ NU4vMC80MkQ2MDQ2OThBRkE5QkE0OTI4MDczOThBQTY1MjdCNkU3QjA0QUI0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyRDYwNDY5OEFGQTlCQTQ5 MjgwNzM5OEFBNjUyN0I2RTdCMDRBQjQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mk5oQ1hWb280b0R4a0Z0MWR2dGg3d0tEQ0ZvdWl1N3Bqd3pmenlrYTVQNU4vMC80 MkQ2MDQ2OThBRkE5QkE0OTI4MDczOThBQTY1MjdCNkU3QjA0QUI0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT2x1Tz8OroLgzwlG+uS5kqemKy8nxRAXNZZU3l0fwWR1+lX9DZ1WC0qV5HOG K4BVzmsKyj60lPbiEYd6+MZxw7GpDcu6EUvyXHhraqtd23Ke37+1A96Drzn6ZRsk V4E7YGlQxV18DAzLeqzawjNKaTL6EStxS8gWo0MeZWQz2yo52AA71I++qcREyh9V IeC8gct+VDrFgPjk6qXHfdZxMdHYWyW3+AnY5q80sJR3djIJd38fV9SItuoIJT3a TG3u7o3gcofhmmnHSXiz2KKMcFqAe83kEGFFN4WBAJiLJqTKdJFzRKKCqolOgXQl 0OCbLmzBz2N+Lci5Zy39UGi3VA== -----END CERTIFICATE-----Generated at Mon Jun 23 01:48:43 2025 by rpki-client