$ rpki-client -vvf rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.mft File: 04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.mft (raw, json) Hash identifier: Q7rlL/+xojiziM7vUmqs5JGaWV9zWLc6gdp29FGfvbA= Subject key identifier: 3B:6E:87:72:B5:8A:5C:92:87:84:22:6E:CF:54:1E:7A:33:97:4A:0C Authority key identifier: 04:82:1F:F7:3B:C7:A0:F4:56:82:3C:5D:FE:BD:A8:BB:8C:25:EB:87 Certificate issuer: /CN=04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87 Certificate serial: 1CCA71C050AA6AB6E69AC9EE3E1AB5E7DEEC9566 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.cer Subject info access: rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.mft Manifest number: 4B Signing time: Wed 06 Aug 2025 08:57:17 +0000 Manifest this update: Wed 06 Aug 2025 08:52:17 +0000 Manifest next update: Thu 07 Aug 2025 10:24:17 +0000 Files and hashes: 1: 323830343a346332383a3a2f33322d3438203d3e20323637333533.roa (hash: bmT09xDutoa9PvJahu2aOyeKWMXErbCwcThQLbnkXm0=) 2: 34352e3233342e34382e302f32322d3234203d3e20323637333533.roa (hash: eoUHwMrI3zAiw9wLJNrGheTpcxxSu5ipNJzZq/fBJdU=) 3: 04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.crl (hash: STT2ZO0xNQdyqboyfPqbzPZpQiATErQH1Ps5k0tJM+Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.crl rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 07 Aug 2025 10:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ca:71:c0:50:aa:6a:b6:e6:9a:c9:ee:3e:1a:b5:e7:de:ec:95:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87 Validity Not Before: Aug 6 08:52:17 2025 GMT Not After : Aug 7 10:24:17 2025 GMT Subject: CN=3B6E8772B58A5C928784226ECF541E7A33974A0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c2:eb:c7:99:f9:91:d9:78:a5:b0:a8:f1:4d: e9:e3:46:65:5c:dd:b8:1a:3d:81:82:28:bb:2e:c9: b3:32:be:b2:4c:f0:75:e3:1b:cd:cd:e2:82:3b:85: d1:b8:1b:46:f3:16:65:2f:6b:ce:18:b3:93:86:de: 08:24:d5:c1:6e:4e:c8:64:89:42:93:47:d1:45:7a: c8:1e:43:c0:bf:f1:7c:e5:d1:21:c8:36:57:62:11: ad:d0:9f:08:e0:47:c2:63:e7:f5:a5:14:ae:c1:ce: be:3a:78:c1:b8:81:8f:cd:28:13:f7:6e:7b:86:4e: 5c:3e:a2:34:14:06:88:a6:c3:25:51:31:4d:27:67: b4:95:f9:c2:22:52:38:77:77:4d:4e:c4:6b:4f:0c: f7:eb:2e:29:4c:9f:9c:10:13:3b:2f:9e:eb:ce:99: f2:57:9a:28:55:f4:a7:0d:b3:82:cb:fa:0c:3f:05: 73:e1:25:50:13:3b:de:b6:50:51:3e:b5:2a:d9:03: f4:e6:38:0a:c7:55:d4:7f:35:43:46:ca:b3:82:97: 45:9f:57:ab:94:9a:3e:19:82:3b:eb:df:3f:07:50: 06:38:8b:6d:8f:a1:b1:41:05:98:ed:3d:50:ed:36: a0:70:8a:fb:49:78:b1:87:19:86:48:92:c0:b4:35: 3e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6E:87:72:B5:8A:5C:92:87:84:22:6E:CF:54:1E:7A:33:97:4A:0C X509v3 Authority Key Identifier: keyid:04:82:1F:F7:3B:C7:A0:F4:56:82:3C:5D:FE:BD:A8:BB:8C:25:EB:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:f7:24:2a:08:67:45:b4:f8:64:85:c7:94:c8:35:91:37:1e: 09:8d:72:32:30:0d:97:be:2e:93:8f:dd:94:9f:d2:4e:28:54: ee:bd:23:74:ba:15:43:57:7f:df:f4:47:2a:03:7b:02:57:a1: 93:fa:45:6b:f4:3c:c0:fc:e7:17:74:c3:87:25:86:f3:4d:37: 91:2d:c1:4a:3d:43:5c:c0:ba:eb:93:a7:53:7d:2f:80:99:cf: 6f:90:c6:df:55:8d:dd:5c:1e:c4:89:f1:45:22:a0:0d:e0:ca: 1a:72:c4:d8:af:f9:12:4d:14:69:4a:0c:45:0a:de:ac:b6:ef: a3:2d:e6:c5:ac:4e:a9:58:7b:3f:49:96:ee:2f:08:d8:2b:d9: ad:1e:05:82:e3:dd:b1:ef:03:c6:00:14:24:66:8e:51:e4:9d: ac:6e:1f:8b:3c:6c:3d:5c:8e:0e:48:62:e6:35:28:00:2f:76: ad:7e:20:56:03:ca:61:0d:25:95:39:0e:d1:ab:14:3e:0a:0d: f0:3b:a1:b6:5c:ac:ca:10:77:0c:2c:cc:3e:bd:c1:0f:39:ec: 34:39:d3:b2:15:88:c0:c2:25:23:59:ac:2d:fb:a5:1e:ab:b1: 0c:51:1a:75:c4:b1:72:9f:04:89:54:8e:ab:64:35:ec:32:2f: 3f:d1:34:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUHMpxwFCqarbmmsnuPhq1597slWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4MjFGRjczQkM3QTBGNDU2ODIzQzVERkVCREE4QkI4 QzI1RUI4NzAeFw0yNTA4MDYwODUyMTdaFw0yNTA4MDcxMDI0MTdaMDMxMTAvBgNV BAMTKDNCNkU4NzcyQjU4QTVDOTI4Nzg0MjI2RUNGNTQxRTdBMzM5NzRBMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMwuvHmfmR2XilsKjxTenjRmVc 3bgaPYGCKLsuybMyvrJM8HXjG83N4oI7hdG4G0bzFmUva84Ys5OG3ggk1cFuTshk iUKTR9FFesgeQ8C/8Xzl0SHINldiEa3QnwjgR8Jj5/WlFK7Bzr46eMG4gY/NKBP3 bnuGTlw+ojQUBoimwyVRMU0nZ7SV+cIiUjh3d01OxGtPDPfrLilMn5wQEzsvnuvO mfJXmihV9KcNs4LL+gw/BXPhJVATO962UFE+tSrZA/TmOArHVdR/NUNGyrOCl0Wf V6uUmj4Zgjvr3z8HUAY4i22PobFBBZjtPVDtNqBwivtJeLGHGYZIksC0NT5RAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUO26HcrWKXJKHhCJuz1QeejOXSgwwHwYDVR0j BBgwFoAUBIIf9zvHoPRWgjxd/r2ou4wl64cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlB6bTdMUjlhYVFiekY1WVh0SGF3dmFTbmJEZlh1aGF3OVFFTHV0c3Zj OUUvMC8wNDgyMUZGNzNCQzdBMEY0NTY4MjNDNURGRUJEQThCQjhDMjVFQjg3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0ODIxRkY3M0JDN0EwRjQ1 NjgyM0M1REZFQkRBOEJCOEMyNUVCODcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlB6bTdMUjlhYVFiekY1WVh0SGF3dmFTbmJEZlh1aGF3OVFFTHV0c3ZjOUUvMC8w NDgyMUZGNzNCQzdBMEY0NTY4MjNDNURGRUJEQThCQjhDMjVFQjg3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI/ckKghnRbT4ZIXHlMg1kTceCY1yMjANl74uk4/dlJ/STihU7r0jdLoVQ1d/ 3/RHKgN7Alehk/pFa/Q8wPznF3TDhyWG8003kS3BSj1DXMC665OnU30vgJnPb5DG 31WN3VwexInxRSKgDeDKGnLE2K/5Ek0UaUoMRQrerLbvoy3mxaxOqVh7P0mW7i8I 2CvZrR4FguPdse8DxgAUJGaOUeSdrG4fizxsPVyODkhi5jUoAC92rX4gVgPKYQ0l lTkO0asUPgoN8DuhtlysyhB3DCzMPr3BDznsNDnTshWIwMIlI1msLfulHquxDFEa dcSxcp8EiVSOq2Q17DIvP9E0Wg== -----END CERTIFICATE-----Generated at Wed Aug 6 16:26:16 2025 by rpki-client