$ rpki-client -vvf rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/D5185EB6AF2331AEBE136E6B92FA533A35153197.mft File: D5185EB6AF2331AEBE136E6B92FA533A35153197.mft (raw, json) Hash identifier: w2/sj+kA/F/dKOqGL24OVq38UWvc2e74C9Ax207G9Bc= Subject key identifier: 45:07:D4:5C:DC:3A:AD:49:7A:67:2C:E6:AF:E7:C8:8D:41:15:AA:C2 Authority key identifier: D5:18:5E:B6:AF:23:31:AE:BE:13:6E:6B:92:FA:53:3A:35:15:31:97 Certificate issuer: /CN=D5185EB6AF2331AEBE136E6B92FA533A35153197 Certificate serial: 71615A0F754E096AE5877380DC6390D7F4A85D16 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5185EB6AF2331AEBE136E6B92FA533A35153197.cer Subject info access: rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/D5185EB6AF2331AEBE136E6B92FA533A35153197.mft Manifest number: 2C Signing time: Tue 17 Jun 2025 15:39:35 +0000 Manifest this update: Tue 17 Jun 2025 15:34:35 +0000 Manifest next update: Wed 18 Jun 2025 17:48:35 +0000 Files and hashes: 1: 3137302e3234352e3134302e302f32322d3234203d3e20323632383739.roa (hash: 3k0MEdFSGHQcqOZKE0cksZ9DZ3Vx4wPdWpGItsfsnZI=) 2: D5185EB6AF2331AEBE136E6B92FA533A35153197.crl (hash: WAY1eEXujUgY4TnJ9vNjTrWDA4lNas2hi0eIb6NhzQo=) 3: 323830343a3562343a3a2f33322d3438203d3e20323632383739.roa (hash: tLN3e2Iadao26nhIloDanQhZVH8XSVItUUt30mvG60M=) 4: 3137372e32312e3230382e302f32342d3234203d3e20323632383739.roa (hash: NLEz0rSDiRhDPY9pSddkoLkCojk8TxQXrO2xwDQmYfc=) 5: 3137372e32312e3230382e302f32302d3233203d3e20323632383739.roa (hash: loIvkSZE1i1L7iLQkyq0nfpDiPOrERqKQl2eCsMEE7Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/D5185EB6AF2331AEBE136E6B92FA533A35153197.crl rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/D5185EB6AF2331AEBE136E6B92FA533A35153197.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5185EB6AF2331AEBE136E6B92FA533A35153197.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 17:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:61:5a:0f:75:4e:09:6a:e5:87:73:80:dc:63:90:d7:f4:a8:5d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5185EB6AF2331AEBE136E6B92FA533A35153197 Validity Not Before: Jun 17 15:34:35 2025 GMT Not After : Jun 18 17:48:35 2025 GMT Subject: CN=4507D45CDC3AAD497A672CE6AFE7C88D4115AAC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a0:c4:e5:bb:e3:a8:0b:94:72:92:13:d9:a1: 6b:79:18:32:c5:0f:74:d3:03:54:94:aa:ed:63:7f: 94:58:61:d8:63:09:2d:68:74:05:36:86:65:89:27: 2f:45:5b:9f:78:f4:b5:23:30:e2:90:ac:7b:92:3b: ff:da:86:91:dc:31:2c:0b:78:61:30:2b:de:ea:6e: 7e:20:9e:b8:f1:35:2f:ca:e9:ae:84:fa:61:91:9b: 73:9d:8e:1e:3f:3f:3d:53:df:23:a6:56:f9:45:74: 5a:2a:7d:55:a3:d6:bf:d9:9c:62:e5:e8:51:1c:7a: d1:5d:85:08:43:20:be:e9:d7:5d:e7:1c:a7:35:de: 82:6f:01:2e:21:42:fe:f5:10:3a:ae:17:22:23:95: 8f:03:be:88:db:34:c4:ad:e9:5f:69:1c:d5:23:f0: 54:fb:dd:94:d1:31:77:c2:23:ae:d3:d0:15:5e:aa: 6f:d3:c8:58:7a:d4:3b:c3:92:c9:3c:67:f3:7b:08: 0f:ce:d9:13:f9:56:36:b4:eb:c2:43:4d:f1:9f:15: bd:b7:67:4a:38:a9:bb:d0:6c:f0:61:56:7f:bc:85: 67:f9:6d:7d:a6:db:5c:22:7a:33:bc:93:0b:4f:a2: 50:4f:06:8b:18:b1:13:5b:32:71:07:45:2b:66:85: 05:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:07:D4:5C:DC:3A:AD:49:7A:67:2C:E6:AF:E7:C8:8D:41:15:AA:C2 X509v3 Authority Key Identifier: keyid:D5:18:5E:B6:AF:23:31:AE:BE:13:6E:6B:92:FA:53:3A:35:15:31:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/D5185EB6AF2331AEBE136E6B92FA533A35153197.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5185EB6AF2331AEBE136E6B92FA533A35153197.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/D5185EB6AF2331AEBE136E6B92FA533A35153197.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:ed:64:fd:b4:f3:7e:f9:e6:35:96:dd:ec:ea:de:c4:4c:31: b2:67:06:fc:ea:ad:ab:ab:40:03:13:d0:f8:47:50:df:c0:f5: b7:bb:b0:75:59:3b:1b:c2:a3:48:5c:76:90:60:96:80:2e:83: 25:3e:d4:a4:b8:42:f7:3e:2f:c1:86:e2:1f:0a:51:de:a4:4c: 20:0f:a5:92:bd:57:1e:87:ce:54:48:72:bb:df:29:f1:dd:c2: 4f:9d:1c:a9:60:9b:bf:1f:e6:0e:10:48:3b:07:6a:c4:4d:b8: 95:78:05:e8:79:d7:5c:2c:a3:09:d2:84:51:67:b9:5b:8c:06: a6:81:c1:9a:d7:14:c8:e7:10:4d:99:05:cc:61:7a:76:25:f5: b2:d2:42:d1:ad:bd:bd:11:e6:f2:5f:f3:a1:77:9a:eb:85:85: 3e:3e:e9:ea:68:7f:64:18:bd:de:a7:90:c5:83:32:ae:dd:01: 86:91:e1:f6:4b:98:75:4d:8b:d7:33:8a:35:1b:f9:3a:ac:28: 89:15:8e:2d:9f:14:88:30:dc:02:d2:86:8b:6a:36:9f:a8:63: ed:81:55:2b:df:a7:71:c9:c0:72:8f:91:18:06:70:57:fe:56: d5:e4:6e:36:2f:1c:86:d9:38:d6:3d:dd:c5:a2:62:82:87:bb: 78:85:6d:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUcWFaD3VOCWrlh3OA3GOQ1/SoXRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxODVFQjZBRjIzMzFBRUJFMTM2RTZCOTJGQTUzM0Ez NTE1MzE5NzAeFw0yNTA2MTcxNTM0MzVaFw0yNTA2MTgxNzQ4MzVaMDMxMTAvBgNV BAMTKDQ1MDdENDVDREMzQUFENDk3QTY3MkNFNkFGRTdDODhENDExNUFBQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpoMTlu+OoC5RykhPZoWt5GDLF D3TTA1SUqu1jf5RYYdhjCS1odAU2hmWJJy9FW5949LUjMOKQrHuSO//ahpHcMSwL eGEwK97qbn4gnrjxNS/K6a6E+mGRm3Odjh4/Pz1T3yOmVvlFdFoqfVWj1r/ZnGLl 6FEcetFdhQhDIL7p113nHKc13oJvAS4hQv71EDquFyIjlY8DvojbNMSt6V9pHNUj 8FT73ZTRMXfCI67T0BVeqm/TyFh61DvDksk8Z/N7CA/O2RP5Vja068JDTfGfFb23 Z0o4qbvQbPBhVn+8hWf5bX2m21wiejO8kwtPolBPBosYsRNbMnEHRStmhQVPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQURQfUXNw6rUl6Zyzmr+fIjUEVqsIwHwYDVR0j BBgwFoAU1Rhetq8jMa6+E25rkvpTOjUVMZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEd6NVVianNLVjRGMWtubVhpeVFkcTloSm5SN2pCRWhjeWVZQUhieTV6 bjMvMC9ENTE4NUVCNkFGMjMzMUFFQkUxMzZFNkI5MkZBNTMzQTM1MTUzMTk3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MTg1RUI2QUYyMzMxQUVC RTEzNkU2QjkyRkE1MzNBMzUxNTMxOTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEd6NVVianNLVjRGMWtubVhpeVFkcTloSm5SN2pCRWhjeWVZQUhieTV6bjMvMC9E NTE4NUVCNkFGMjMzMUFFQkUxMzZFNkI5MkZBNTMzQTM1MTUzMTk3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsu1k/bTzfvnmNZbd7OrexEwxsmcG/Oqtq6tAAxPQ+EdQ38D1t7uwdVk7G8Kj SFx2kGCWgC6DJT7UpLhC9z4vwYbiHwpR3qRMIA+lkr1XHofOVEhyu98p8d3CT50c qWCbvx/mDhBIOwdqxE24lXgF6HnXXCyjCdKEUWe5W4wGpoHBmtcUyOcQTZkFzGF6 diX1stJC0a29vRHm8l/zoXea64WFPj7p6mh/ZBi93qeQxYMyrt0BhpHh9kuYdU2L 1zOKNRv5OqwoiRWOLZ8UiDDcAtKGi2o2n6hj7YFVK9+nccnAco+RGAZwV/5W1eRu Ni8chtk41j3dxaJigoe7eIVtaw== -----END CERTIFICATE-----Generated at Tue Jun 17 19:45:40 2025 by rpki-client