$ rpki-client -vvf rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft File: 4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft (raw, json) Hash identifier: GaDCXjIC7c2QNHGryfJqNIwKq5LTO+2BXTYgFSJyENE= Subject key identifier: A8:77:B9:3F:2D:80:71:4A:C5:B1:8D:3A:46:DD:F6:66:E7:91:9D:80 Authority key identifier: 4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42 Certificate issuer: /CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642 Certificate serial: 4C1482B4E83551FB4E1011774AE36A08D4E6E09E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer Subject info access: rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft Manifest number: 0252 Signing time: Sun 22 Jun 2025 12:40:01 +0000 Manifest this update: Sun 22 Jun 2025 12:35:01 +0000 Manifest next update: Mon 23 Jun 2025 13:44:01 +0000 Files and hashes: 1: 323830343a313732343a3a2f33322d3332203d3e20323633313236.roa (hash: xsPWu5Oyc8zYvFSpUQl6AyPy98auaRdocgkmpbAT+rI=) 2: 4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl (hash: J0p8Z75t/iFSHkg4bNMD/pUCTO9dtf/iHI/g/5GIqSw=) 3: 3137372e39322e3138342e302f32312d3231203d3e20323633313236.roa (hash: 0afFfPJistXXEZlrXlXusI1hM5eNaq3t1i5SVTRNels=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Jun 2025 13:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:14:82:b4:e8:35:51:fb:4e:10:11:77:4a:e3:6a:08:d4:e6:e0:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642 Validity Not Before: Jun 22 12:35:01 2025 GMT Not After : Jun 23 13:44:01 2025 GMT Subject: CN=A877B93F2D80714AC5B18D3A46DDF666E7919D80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9a:38:c8:0a:54:9a:77:62:53:4f:02:91:79: 22:25:04:65:39:8e:40:4a:1c:e2:fe:1d:cd:1c:92: 2c:92:94:7e:b3:5a:9a:e9:52:90:5f:34:65:e9:66: 71:89:8b:6c:42:f4:75:e9:27:ee:9e:c0:ff:19:5a: a3:ec:b0:80:ec:dc:79:c9:f8:84:9a:85:20:93:03: 60:19:cb:60:f0:13:71:16:fd:11:87:81:4d:4d:18: 6b:e0:f2:07:f7:88:fb:50:ca:be:78:dd:61:bc:e2: d1:0d:ec:65:9a:6d:c8:7c:8f:12:09:d4:22:bc:4d: 1d:12:5d:30:1b:1c:78:c5:3f:93:4b:cb:2c:80:21: 00:ca:9e:b8:25:96:b6:1b:ee:0e:19:06:24:10:8e: dd:b9:fd:c6:d0:21:94:ac:88:fe:08:ea:90:a1:af: 9f:eb:54:6b:d0:27:ec:38:6f:25:3b:ee:c9:c6:c5: 36:b8:df:de:00:1a:45:d8:2c:26:3d:94:91:bd:d9: cd:3b:b3:9a:c4:71:d8:91:4f:62:76:c9:3c:55:9b: 33:f3:21:60:f4:d3:4c:47:5c:3d:17:48:8f:91:38: ba:44:81:67:d1:ff:41:23:e9:db:f7:c3:9f:c8:5e: 09:1c:e2:b6:e5:98:dc:92:3f:89:e9:c1:59:d5:1f: 9b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:77:B9:3F:2D:80:71:4A:C5:B1:8D:3A:46:DD:F6:66:E7:91:9D:80 X509v3 Authority Key Identifier: keyid:4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b1:39:5e:53:26:de:d8:77:44:51:1b:9d:b5:72:71:7d:3a: 47:e7:31:3f:52:fc:37:2d:30:de:c8:21:89:75:23:19:d0:7c: 8f:74:46:97:52:89:20:b4:a8:3e:8d:c4:16:da:6a:9a:fc:4d: 23:59:f4:33:2b:90:9e:82:db:72:80:53:05:f5:46:f2:ae:b0: d2:2e:d6:a8:3e:48:99:44:84:f0:84:ee:a9:3c:13:1a:73:ae: 52:d6:2c:57:f4:71:10:98:3f:30:8a:52:ad:1a:27:14:0b:af: c3:68:6a:00:85:1b:cf:60:54:f1:8b:31:15:f8:1e:aa:1b:19: 3f:72:07:41:e3:de:96:04:82:26:a6:e4:da:27:0e:bc:ad:15: 62:57:75:d5:c2:dc:52:5a:b0:5c:99:82:79:1e:22:0f:60:d7: b3:19:af:7f:2c:56:b6:a7:af:99:93:64:18:16:bc:8e:e0:aa: 15:c9:18:99:61:27:bd:35:87:6b:f5:3a:77:b6:41:ef:5a:b8: 4e:8f:8d:6a:8f:e7:cf:5c:78:e2:05:24:fa:8f:10:af:07:fd: 96:b5:e1:b6:33:17:f3:26:2b:30:d9:6b:db:b9:ee:fc:90:9d: a6:7b:f4:01:84:0e:3e:10:af:dc:ca:20:8b:27:3e:b7:44:02: 33:34:96:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTBSCtOg1UftOEBF3SuNqCNTm4J4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENBMjFBOEQ5MjhDQUJDMEM5RUYxMzg1MDYzNUIzMUVB RjNDMjY0MjAeFw0yNTA2MjIxMjM1MDFaFw0yNTA2MjMxMzQ0MDFaMDMxMTAvBgNV BAMTKEE4NzdCOTNGMkQ4MDcxNEFDNUIxOEQzQTQ2RERGNjY2RTc5MTlEODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmjjIClSad2JTTwKReSIlBGU5 jkBKHOL+Hc0ckiySlH6zWprpUpBfNGXpZnGJi2xC9HXpJ+6ewP8ZWqPssIDs3HnJ +ISahSCTA2AZy2DwE3EW/RGHgU1NGGvg8gf3iPtQyr543WG84tEN7GWabch8jxIJ 1CK8TR0SXTAbHHjFP5NLyyyAIQDKnrgllrYb7g4ZBiQQjt25/cbQIZSsiP4I6pCh r5/rVGvQJ+w4byU77snGxTa4394AGkXYLCY9lJG92c07s5rEcdiRT2J2yTxVmzPz IWD000xHXD0XSI+ROLpEgWfR/0Ej6dv3w5/IXgkc4rblmNySP4npwVnVH5v5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqHe5Py2AcUrFsY06Rt32ZueRnYAwHwYDVR0j BBgwFoAUTKIajZKMq8DJ7xOFBjWzHq88JkIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNDl1VzFrQ2hjRFlBRWpaZWc4RlhxWTdFRXBXWnZCOHozeEQ0aTJQWVZU c2cvMS80Q0EyMUE4RDkyOENBQkMwQzlFRjEzODUwNjM1QjMxRUFGM0MyNjQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDQTIxQThEOTI4Q0FCQzBD OUVGMTM4NTA2MzVCMzFFQUYzQzI2NDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NDl1VzFrQ2hjRFlBRWpaZWc4RlhxWTdFRXBXWnZCOHozeEQ0aTJQWVZUc2cvMS80 Q0EyMUE4RDkyOENBQkMwQzlFRjEzODUwNjM1QjMxRUFGM0MyNjQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY7E5XlMm3th3RFEbnbVycX06R+cxP1L8Ny0w3sghiXUjGdB8j3RGl1KJILSo Po3EFtpqmvxNI1n0MyuQnoLbcoBTBfVG8q6w0i7WqD5ImUSE8ITuqTwTGnOuUtYs V/RxEJg/MIpSrRonFAuvw2hqAIUbz2BU8YsxFfgeqhsZP3IHQePelgSCJqbk2icO vK0VYld11cLcUlqwXJmCeR4iD2DXsxmvfyxWtqevmZNkGBa8juCqFckYmWEnvTWH a/U6d7ZB71q4To+Nao/nz1x44gUk+o8Qrwf9lrXhtjMX8yYrMNlr27nu/JCdpnv0 AYQOPhCv3Mogiyc+t0QCMzSWyw== -----END CERTIFICATE-----Generated at Sun Jun 22 21:29:25 2025 by rpki-client