$ rpki-client -vvf rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft File: 19260CFDC65E0274748EF44AA37858B8E34F0C25.mft (raw, json) Hash identifier: 3+3tv5hGhSTA+mpEi1y2dxE1jIVgMd1kSSl1v+YRrR4= Subject key identifier: F3:0E:F8:B4:F7:31:8A:DE:4E:4A:42:EC:84:F2:6A:C5:07:8F:15:1E Authority key identifier: 19:26:0C:FD:C6:5E:02:74:74:8E:F4:4A:A3:78:58:B8:E3:4F:0C:25 Certificate issuer: /CN=19260CFDC65E0274748EF44AA37858B8E34F0C25 Certificate serial: 4A0F9B7EEE71464BF37A55AD61339A3901A06A2A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19260CFDC65E0274748EF44AA37858B8E34F0C25.cer Subject info access: rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft Manifest number: F5 Signing time: Sat 21 Jun 2025 07:50:44 +0000 Manifest this update: Sat 21 Jun 2025 07:45:44 +0000 Manifest next update: Sun 22 Jun 2025 10:54:44 +0000 Files and hashes: 1: 3138362e3139352e39362e302f32302d3234203d3e20323632373230.roa (hash: syT/Sbgem75/2+FPj7DQALiSeFmma+ew6V2XqT7gzqc=) 2: 19260CFDC65E0274748EF44AA37858B8E34F0C25.crl (hash: w8iKlvHRkTlSUJzIzNWNRnBinGa90oB7eFsY54GbhG8=) 3: 3137372e382e3139322e302f32302d3234203d3e20323632373230.roa (hash: ZoJKSec6k6riogUVp0cHV/6gr5piXlvNZBydTk1teNw=) 4: 323830343a6339343a3a2f33322d3438203d3e20323632373230.roa (hash: p+GTiuuAWFu/8S3EJbQPooQG4K6WnOklzedG1N3D0sA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.crl rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19260CFDC65E0274748EF44AA37858B8E34F0C25.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Jun 2025 09:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:0f:9b:7e:ee:71:46:4b:f3:7a:55:ad:61:33:9a:39:01:a0:6a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19260CFDC65E0274748EF44AA37858B8E34F0C25 Validity Not Before: Jun 21 07:45:44 2025 GMT Not After : Jun 22 10:54:44 2025 GMT Subject: CN=F30EF8B4F7318ADE4E4A42EC84F26AC5078F151E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e4:2b:db:9e:83:c4:76:68:e8:f1:21:4f:34: c8:9c:f2:1b:b1:b7:92:5d:42:10:62:d2:03:b0:15: 04:56:23:7c:86:5f:ca:f7:42:43:a1:c2:f3:9f:7b: e9:2c:d7:38:06:2a:5d:1a:8f:70:55:d4:ad:73:2e: c4:44:26:02:82:e7:86:4d:f3:4f:4d:39:2d:97:c9: 77:a7:85:86:d2:37:71:d9:dd:49:e6:86:a7:4e:05: a9:29:30:c6:e3:65:66:93:00:a9:e1:1c:c2:23:ea: 49:eb:af:9d:a6:d8:5e:d7:35:37:cf:6c:10:58:cf: 4d:ae:cf:b9:e4:6b:fa:ea:d1:01:3e:eb:41:15:71: 9e:21:cc:f7:3d:19:a1:34:ce:68:16:7c:f7:66:ce: b6:aa:57:a1:64:33:33:3a:37:98:f7:18:74:d8:f3: 20:8e:5c:b5:b6:72:4f:23:f1:d3:1d:87:8e:8d:59: b4:36:d8:02:06:a0:01:be:8f:55:54:84:99:d5:2d: c6:e8:05:c4:1b:b5:ae:81:1e:f9:e5:9a:06:86:24: bf:60:4d:aa:aa:ec:c4:c7:74:64:31:22:80:3f:26: 73:5c:22:32:91:23:7b:16:90:f2:f2:d0:3d:82:39: c8:30:c8:b7:3b:87:56:49:85:69:1a:23:48:e7:53: 85:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:0E:F8:B4:F7:31:8A:DE:4E:4A:42:EC:84:F2:6A:C5:07:8F:15:1E X509v3 Authority Key Identifier: keyid:19:26:0C:FD:C6:5E:02:74:74:8E:F4:4A:A3:78:58:B8:E3:4F:0C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19260CFDC65E0274748EF44AA37858B8E34F0C25.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Q2ToqP2rGKt3zHgTG6WPNtC6ni1C2fSfne1KLjEaxKh/0/19260CFDC65E0274748EF44AA37858B8E34F0C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:0a:4f:a0:ea:9c:58:30:bf:79:08:37:69:c2:91:5c:2c:4f: a0:b7:7c:b8:67:c7:da:b9:7c:f9:98:73:43:b7:b2:f4:e6:db: 21:f4:37:b2:ea:df:e5:28:1c:b1:e0:01:4a:a7:cc:ce:27:f8: 86:ce:06:06:42:91:1f:91:a3:f5:73:24:3f:22:75:48:62:69: c8:eb:c5:a7:6e:f0:2c:f7:f6:d5:31:5e:bf:38:eb:b1:bf:da: 5b:60:75:57:85:c3:5e:df:ac:14:33:cb:3c:58:f3:5b:40:ff: 70:bc:b5:26:4c:e4:d5:d3:cb:73:e7:e1:d2:e6:bd:80:e6:39: 98:cd:35:c8:1a:2f:0a:33:05:2e:19:f9:55:b2:9e:02:ea:eb: 35:12:92:79:55:5c:9c:85:5a:41:c8:18:1a:ed:cf:d1:b7:93: 52:26:53:cd:38:8e:6a:70:b1:3d:87:98:ea:af:89:f1:be:3f: 1a:4c:3a:9b:8c:27:f3:91:53:51:88:2e:4a:34:00:11:b7:da: 55:f9:a5:17:b4:48:e4:95:48:2c:b8:b6:32:70:1a:e0:c6:e9: d0:f9:13:6f:ed:ed:28:99:ce:f1:31:31:62:4a:43:1f:d8:37: d8:1c:15:91:73:69:24:83:90:c4:00:94:94:9d:35:2a:4a:a5: 52:2a:af:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUSg+bfu5xRkvzelWtYTOaOQGgaiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkyNjBDRkRDNjVFMDI3NDc0OEVGNDRBQTM3ODU4QjhF MzRGMEMyNTAeFw0yNTA2MjEwNzQ1NDRaFw0yNTA2MjIxMDU0NDRaMDMxMTAvBgNV BAMTKEYzMEVGOEI0RjczMThBREU0RTRBNDJFQzg0RjI2QUM1MDc4RjE1MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh5CvbnoPEdmjo8SFPNMic8hux t5JdQhBi0gOwFQRWI3yGX8r3QkOhwvOfe+ks1zgGKl0aj3BV1K1zLsREJgKC54ZN 809NOS2XyXenhYbSN3HZ3UnmhqdOBakpMMbjZWaTAKnhHMIj6knrr52m2F7XNTfP bBBYz02uz7nka/rq0QE+60EVcZ4hzPc9GaE0zmgWfPdmzraqV6FkMzM6N5j3GHTY 8yCOXLW2ck8j8dMdh46NWbQ22AIGoAG+j1VUhJnVLcboBcQbta6BHvnlmgaGJL9g Taqq7MTHdGQxIoA/JnNcIjKRI3sWkPLy0D2COcgwyLc7h1ZJhWkaI0jnU4U/AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU8w74tPcxit5OSkLshPJqxQePFR4wHwYDVR0j BBgwFoAUGSYM/cZeAnR0jvRKo3hYuONPDCUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNFEyVG9xUDJyR0t0M3pIZ1RHNldQTnRDNm5pMUMyZlNmbmUxS0xqRWF4 S2gvMC8xOTI2MENGREM2NUUwMjc0NzQ4RUY0NEFBMzc4NThCOEUzNEYwQzI1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5MjYwQ0ZEQzY1RTAyNzQ3 NDhFRjQ0QUEzNzg1OEI4RTM0RjBDMjUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NFEyVG9xUDJyR0t0M3pIZ1RHNldQTnRDNm5pMUMyZlNmbmUxS0xqRWF4S2gvMC8x OTI2MENGREM2NUUwMjc0NzQ4RUY0NEFBMzc4NThCOEUzNEYwQzI1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfApPoOqcWDC/eQg3acKRXCxPoLd8uGfH2rl8+ZhzQ7ey9ObbIfQ3surf5Sgc seABSqfMzif4hs4GBkKRH5Gj9XMkPyJ1SGJpyOvFp27wLPf21TFevzjrsb/aW2B1 V4XDXt+sFDPLPFjzW0D/cLy1Jkzk1dPLc+fh0ua9gOY5mM01yBovCjMFLhn5VbKe AurrNRKSeVVcnIVaQcgYGu3P0beTUiZTzTiOanCxPYeY6q+J8b4/Gkw6m4wn85FT UYguSjQAEbfaVfmlF7RI5JVILLi2MnAa4Mbp0PkTb+3tKJnO8TExYkpDH9g32BwV kXNpJIOQxACUlJ01KkqlUiqvDw== -----END CERTIFICATE-----Generated at Sat Jun 21 09:52:58 2025 by rpki-client