$ rpki-client -vvf rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.mft File: 481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.mft (raw, json) Hash identifier: /KNcV6RRxPAHPtnO3h6OvanZT4fLEaBKPjdhkuDZNKI= Subject key identifier: A9:2E:17:40:AC:DD:D7:94:6C:DD:3E:24:08:4C:70:51:1B:7A:A1:E2 Authority key identifier: 48:1B:24:AC:65:23:E8:C3:FC:CE:DE:9F:C8:B8:A7:4C:C2:C4:E5:F9 Certificate issuer: /CN=481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9 Certificate serial: 3CA600644BC39DA2D3E9E078043900A1E002D3E9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.cer Subject info access: rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.mft Manifest number: 024D Signing time: Wed 18 Jun 2025 20:20:00 +0000 Manifest this update: Wed 18 Jun 2025 20:15:00 +0000 Manifest next update: Thu 19 Jun 2025 23:21:00 +0000 Files and hashes: 1: 323830343a346138633a3130303a3a2f34302d3430203d3e20323637323438.roa (hash: V3fffgqCN3ORQOxU//QC0eXQOytJiGD37tPjec0DJ9k=) 2: 323830343a346138633a3a2f33322d3334203d3e20323637323438.roa (hash: HXBPNNM9JK77Qjs6rWwR8L8yvx4LZpjy3+ee8Pytg0E=) 3: 34352e3233322e32302e302f32322d3234203d3e20323637323438.roa (hash: OoMklKgWnbZZyD9EXa9zX8avqQ0zyo27I7zEQ1Kbu70=) 4: 481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.crl (hash: sQ0+A1MLWzxPZEICkVZd7w5WRa2BX++bprzWtAzBDBg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.crl rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Jun 2025 23:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a6:00:64:4b:c3:9d:a2:d3:e9:e0:78:04:39:00:a1:e0:02:d3:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9 Validity Not Before: Jun 18 20:15:00 2025 GMT Not After : Jun 19 23:21:00 2025 GMT Subject: CN=A92E1740ACDDD7946CDD3E24084C70511B7AA1E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:34:30:04:ba:d1:9a:d4:ac:78:a2:55:49:96: 0e:8e:aa:70:ea:71:05:af:c6:e1:86:a0:96:9c:33: e8:59:83:82:18:fd:10:eb:b3:df:12:e9:77:83:4d: fb:41:5f:f6:08:d0:64:b3:d2:ca:1e:f4:2b:ca:ce: 5e:8e:c4:21:00:5c:8e:1f:88:9c:04:56:06:03:ca: 6d:06:58:9d:0d:20:41:14:d6:33:9c:27:75:d7:37: e9:06:81:b6:e1:21:96:ad:ae:4e:67:4b:f7:71:b5: 10:64:e2:ca:6e:73:dd:1e:3c:db:e5:b5:29:91:72: ab:51:97:61:a9:b5:f9:71:98:c0:bf:e9:93:2c:42: 58:da:16:d9:4a:f1:a6:b5:46:60:d9:c0:84:dd:56: 2a:42:36:9d:52:07:88:eb:57:8b:b6:c3:c1:cb:e2: 60:77:d4:17:43:9a:9a:c5:d1:6a:fa:69:c4:81:3e: 9f:6c:26:94:a1:f5:3f:14:08:28:e9:71:45:5b:54: 62:79:89:ed:f8:d1:fa:1b:d7:c0:6e:79:e8:65:8e: ec:93:39:fb:b6:68:3c:c6:cf:d0:3d:19:41:33:19: 4f:e8:d1:85:3d:39:6e:f0:a7:05:74:20:09:0d:6d: 78:e8:78:fd:22:fb:fd:09:44:6b:ca:44:cb:46:f4: 42:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2E:17:40:AC:DD:D7:94:6C:DD:3E:24:08:4C:70:51:1B:7A:A1:E2 X509v3 Authority Key Identifier: keyid:48:1B:24:AC:65:23:E8:C3:FC:CE:DE:9F:C8:B8:A7:4C:C2:C4:E5:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:f0:f2:3c:10:38:3b:27:ea:d5:16:63:3e:52:a2:aa:99:e6: 6f:a0:1d:50:a7:d9:30:4e:13:69:ac:66:42:d1:0c:1d:5c:26: 32:96:9b:5a:a6:dd:fc:d4:64:16:f5:9b:02:f5:ab:63:2a:7f: 63:9c:69:3b:e9:7f:94:b7:5e:8a:e1:f1:06:b0:c0:1c:be:30: c4:8f:f5:04:78:ed:fd:e9:a3:1d:b3:53:d1:d8:7f:a6:bf:1d: 45:d7:c9:40:16:99:84:b1:5d:5b:7f:18:06:46:e5:e6:68:e7: 4d:42:76:54:b9:e1:5c:f5:40:59:7e:c1:b5:1c:24:37:0c:53: c7:65:e6:e7:56:39:f3:d8:6e:8d:99:97:29:f4:c7:7e:12:4f: 3d:36:e4:a1:30:29:01:35:a6:65:c6:45:4a:8e:79:33:7a:5f: a7:d6:4d:35:f4:47:64:08:ba:5c:fa:04:58:25:27:f3:ef:ed: 22:26:a6:f6:e9:f2:94:fb:8a:df:57:b7:88:ea:e5:2b:12:a6: 1c:47:99:44:51:ce:92:4f:e5:17:33:7d:06:da:bd:2b:d3:ea: 1c:0d:c9:86:de:be:9d:b9:09:48:1c:66:47:14:fd:96:42:04: 4d:b7:97:64:eb:c4:cd:90:db:a5:1d:61:86:4a:60:19:bd:e7: 0e:80:6e:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUPKYAZEvDnaLT6eB4BDkAoeAC0+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgxQjI0QUM2NTIzRThDM0ZDQ0VERTlGQzhCOEE3NEND MkM0RTVGOTAeFw0yNTA2MTgyMDE1MDBaFw0yNTA2MTkyMzIxMDBaMDMxMTAvBgNV BAMTKEE5MkUxNzQwQUNEREQ3OTQ2Q0REM0UyNDA4NEM3MDUxMUI3QUExRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDONDAEutGa1Kx4olVJlg6OqnDq cQWvxuGGoJacM+hZg4IY/RDrs98S6XeDTftBX/YI0GSz0soe9CvKzl6OxCEAXI4f iJwEVgYDym0GWJ0NIEEU1jOcJ3XXN+kGgbbhIZatrk5nS/dxtRBk4spuc90ePNvl tSmRcqtRl2GptflxmMC/6ZMsQljaFtlK8aa1RmDZwITdVipCNp1SB4jrV4u2w8HL 4mB31BdDmprF0Wr6acSBPp9sJpSh9T8UCCjpcUVbVGJ5ie340fob18BueehljuyT Ofu2aDzGz9A9GUEzGU/o0YU9OW7wpwV0IAkNbXjoeP0i+/0JRGvKRMtG9EJ9AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqS4XQKzd15Rs3T4kCExwURt6oeIwHwYDVR0j BBgwFoAUSBskrGUj6MP8zt6fyLinTMLE5fkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEJNWHQ2cFhWWXVlYVFaRDhxcGQxaE1FcTFSS0JHa1YzQW9jQkZIUkFt OFQvMS80ODFCMjRBQzY1MjNFOEMzRkNDRURFOUZDOEI4QTc0Q0MyQzRFNUY5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4MUIyNEFDNjUyM0U4QzNG Q0NFREU5RkM4QjhBNzRDQzJDNEU1RjkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEJNWHQ2cFhWWXVlYVFaRDhxcGQxaE1FcTFSS0JHa1YzQW9jQkZIUkFtOFQvMS80 ODFCMjRBQzY1MjNFOEMzRkNDRURFOUZDOEI4QTc0Q0MyQzRFNUY5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl/DyPBA4Oyfq1RZjPlKiqpnmb6AdUKfZME4TaaxmQtEMHVwmMpabWqbd/NRk FvWbAvWrYyp/Y5xpO+l/lLdeiuHxBrDAHL4wxI/1BHjt/emjHbNT0dh/pr8dRdfJ QBaZhLFdW38YBkbl5mjnTUJ2VLnhXPVAWX7BtRwkNwxTx2Xm51Y589hujZmXKfTH fhJPPTbkoTApATWmZcZFSo55M3pfp9ZNNfRHZAi6XPoEWCUn8+/tIiam9unylPuK 31e3iOrlKxKmHEeZRFHOkk/lFzN9Btq9K9PqHA3Jht6+nbkJSBxmRxT9lkIETbeX ZOvEzZDbpR1hhkpgGb3nDoBuVA== -----END CERTIFICATE-----Generated at Thu Jun 19 15:16:28 2025 by rpki-client