$ rpki-client -vvf rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/47820B403DF38273DD737A919A52D4BF6FBD96E3.mft File: 47820B403DF38273DD737A919A52D4BF6FBD96E3.mft (raw, json) Hash identifier: wHbhDavGRsQZhexcn7ubanMS1sjdml16f/3pyc5TfkM= Subject key identifier: 94:71:94:42:6C:1F:4F:19:36:D2:71:F6:6C:69:97:49:8D:DC:88:A6 Authority key identifier: 47:82:0B:40:3D:F3:82:73:DD:73:7A:91:9A:52:D4:BF:6F:BD:96:E3 Certificate issuer: /CN=47820B403DF38273DD737A919A52D4BF6FBD96E3 Certificate serial: 5CFDED73484968D45F81AA62196E98A53FDD031D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47820B403DF38273DD737A919A52D4BF6FBD96E3.cer Subject info access: rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/47820B403DF38273DD737A919A52D4BF6FBD96E3.mft Manifest number: 30 Signing time: Thu 19 Jun 2025 09:54:51 +0000 Manifest this update: Thu 19 Jun 2025 09:49:51 +0000 Manifest next update: Fri 20 Jun 2025 11:23:51 +0000 Files and hashes: 1: 323830343a386232303a383030303a3a2f33332d3333203d3e20323733373133.roa (hash: /xb43dphbZmaZq+GBWxAKpjkx5BYBOMnBczunPn/Wj8=) 2: 47820B403DF38273DD737A919A52D4BF6FBD96E3.crl (hash: CoKpA4WgklHCdGbfM4h8EPZ7h+R1tS6mImb/2zVyad8=) 3: 323830343a386232303a3a2f33332d3333203d3e20323733373133.roa (hash: UhCjSK9SoqbCwkVt6j1gnROZg3c0AShZ3tVDDsodA3o=) 4: 323830343a386232303a3a2f33322d3332203d3e20323733373133.roa (hash: c5o6s2pwU3u1/iDsk7BfDQhJFhCLjT0Kb1FV3Tzf90Q=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/47820B403DF38273DD737A919A52D4BF6FBD96E3.crl rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/47820B403DF38273DD737A919A52D4BF6FBD96E3.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47820B403DF38273DD737A919A52D4BF6FBD96E3.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 11:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:fd:ed:73:48:49:68:d4:5f:81:aa:62:19:6e:98:a5:3f:dd:03:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47820B403DF38273DD737A919A52D4BF6FBD96E3 Validity Not Before: Jun 19 09:49:51 2025 GMT Not After : Jun 20 11:23:51 2025 GMT Subject: CN=947194426C1F4F1936D271F66C6997498DDC88A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c8:61:9f:d6:b0:4d:89:9f:e7:82:bb:43:52: ae:fb:6b:48:e3:e8:f8:cc:7a:72:f9:19:71:2c:bf: d4:df:e3:24:aa:1c:8f:8d:81:cb:bc:dc:b3:5d:75: 28:9e:dc:55:90:15:e2:f4:f9:da:78:41:8e:46:2a: cd:c8:ac:32:66:c9:8b:ec:93:89:2c:3c:24:e6:a9: 9f:f0:1d:f2:f9:01:02:3c:da:10:72:ee:31:e7:38: 82:49:3e:c4:d2:89:d8:46:04:13:e1:80:16:1c:5b: 0a:e4:c3:16:a2:28:99:05:19:a0:cd:c2:c7:f2:12: 7d:50:4b:5a:af:15:c0:8d:1a:d0:3c:09:c7:6c:d2: 1d:af:99:0e:20:1b:76:66:93:d5:34:d3:a2:22:80: c1:98:11:70:31:67:85:1d:8a:8b:c3:e3:d5:1b:63: a6:c1:ab:50:72:a0:34:07:a6:55:39:54:81:a1:e6: 0b:3d:d5:1b:93:6d:32:52:18:3c:1e:9d:2b:72:de: ab:c6:72:5b:cd:7a:43:07:a8:f4:84:6c:22:1f:b4: 46:fa:e2:55:1d:70:ca:9f:3a:ce:cf:31:1d:b0:2b: 93:9f:16:11:73:f1:7f:80:4f:f6:58:9b:1b:08:d6: be:a2:dd:02:3d:6a:73:8a:c7:cf:ab:80:59:5f:f2: 01:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:71:94:42:6C:1F:4F:19:36:D2:71:F6:6C:69:97:49:8D:DC:88:A6 X509v3 Authority Key Identifier: keyid:47:82:0B:40:3D:F3:82:73:DD:73:7A:91:9A:52:D4:BF:6F:BD:96:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/47820B403DF38273DD737A919A52D4BF6FBD96E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47820B403DF38273DD737A919A52D4BF6FBD96E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/47820B403DF38273DD737A919A52D4BF6FBD96E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:a6:e9:19:d8:88:80:08:41:36:11:90:ce:58:f1:27:89:14: 20:ad:27:e5:ae:5b:a5:b6:47:9a:b3:26:35:7e:a9:f1:05:8c: 38:4e:16:7f:f0:f5:47:c0:dd:7c:4d:44:b3:30:7e:ce:24:1b: 8c:7f:ae:df:b5:60:e2:1b:1d:65:d2:f3:bb:18:fd:81:94:02: 28:19:99:a0:11:73:e4:a0:11:f6:4a:b8:97:d4:d1:84:1a:f9: 99:15:8c:72:04:57:66:ee:8e:c8:26:24:af:7c:3a:c5:dd:1d: e9:d4:7e:1c:53:a3:24:f5:85:79:7d:cf:5f:de:36:b1:c5:56: 40:65:ad:3f:ba:d2:dd:3e:b4:35:e4:f0:c0:d7:1d:de:c9:dc: a1:f7:d0:a0:16:ab:cd:a1:b3:e5:bd:3e:af:70:f0:5b:03:bd: 71:83:65:ba:89:70:3e:40:46:a4:e3:3b:87:a1:fe:3e:fc:e6: 01:1a:70:90:0e:c4:3a:91:3b:d4:2e:a2:1b:ca:3f:3a:ec:7e: cc:9a:36:1b:22:79:13:37:6d:5f:cb:45:2a:85:1e:73:db:63: 68:be:7a:96:80:c8:d6:ed:b6:d7:92:d2:bf:e6:33:23:83:e4: 4d:c2:01:b4:be:3c:13:cf:62:6f:79:8e:5b:6a:7c:f1:21:05: 58:b4:85:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXP3tc0hJaNRfgapiGW6YpT/dAx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc4MjBCNDAzREYzODI3M0RENzM3QTkxOUE1MkQ0QkY2 RkJEOTZFMzAeFw0yNTA2MTkwOTQ5NTFaFw0yNTA2MjAxMTIzNTFaMDMxMTAvBgNV BAMTKDk0NzE5NDQyNkMxRjRGMTkzNkQyNzFGNjZDNjk5NzQ5OEREQzg4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeyGGf1rBNiZ/ngrtDUq77a0jj 6PjMenL5GXEsv9Tf4ySqHI+Ngcu83LNddSie3FWQFeL0+dp4QY5GKs3IrDJmyYvs k4ksPCTmqZ/wHfL5AQI82hBy7jHnOIJJPsTSidhGBBPhgBYcWwrkwxaiKJkFGaDN wsfyEn1QS1qvFcCNGtA8Ccds0h2vmQ4gG3Zmk9U006IigMGYEXAxZ4UdiovD49Ub Y6bBq1ByoDQHplU5VIGh5gs91RuTbTJSGDwenSty3qvGclvNekMHqPSEbCIftEb6 4lUdcMqfOs7PMR2wK5OfFhFz8X+AT/ZYmxsI1r6i3QI9anOKx8+rgFlf8gHFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUlHGUQmwfTxk20nH2bGmXSY3ciKYwHwYDVR0j BBgwFoAUR4ILQD3zgnPdc3qRmlLUv2+9luMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGNtVFMxSGN1WVJCY2R2aUpieDdZYURyRHFEQThVQVBGandQSzVGdVV1 NlovMC80NzgyMEI0MDNERjM4MjczREQ3MzdBOTE5QTUyRDRCRjZGQkQ5NkUzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3ODIwQjQwM0RGMzgyNzNE RDczN0E5MTlBNTJENEJGNkZCRDk2RTMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGNtVFMxSGN1WVJCY2R2aUpieDdZYURyRHFEQThVQVBGandQSzVGdVV1NlovMC80 NzgyMEI0MDNERjM4MjczREQ3MzdBOTE5QTUyRDRCRjZGQkQ5NkUzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJabpGdiIgAhBNhGQzljxJ4kUIK0n5a5bpbZHmrMmNX6p8QWMOE4Wf/D1R8Dd fE1EszB+ziQbjH+u37Vg4hsdZdLzuxj9gZQCKBmZoBFz5KAR9kq4l9TRhBr5mRWM cgRXZu6OyCYkr3w6xd0d6dR+HFOjJPWFeX3PX942scVWQGWtP7rS3T60NeTwwNcd 3sncoffQoBarzaGz5b0+r3DwWwO9cYNluolwPkBGpOM7h6H+PvzmARpwkA7EOpE7 1C6iG8o/Oux+zJo2GyJ5EzdtX8tFKoUec9tjaL56loDI1u2215LSv+YzI4PkTcIB tL48E89ib3mOW2p88SEFWLSFvw== -----END CERTIFICATE-----Generated at Thu Jun 19 13:58:39 2025 by rpki-client