$ rpki-client -vvf rpki-repo.registro.br/repo/4gN8UrTLVUXJ14mJUCgCfvtvJNRLrfxVV1nUMFeCuzQm/0/3ED7EEA9BB1434585656441E180F390DC5431423.mft File: 3ED7EEA9BB1434585656441E180F390DC5431423.mft (raw, json) Hash identifier: nH8XjuUMBoeoNASSHvuSHe1T5z3pal3HxFjPe3vTAYs= Subject key identifier: 4E:A2:94:78:8F:D0:3B:9C:2A:F7:FE:09:C6:16:D2:51:54:F1:D4:46 Authority key identifier: 3E:D7:EE:A9:BB:14:34:58:56:56:44:1E:18:0F:39:0D:C5:43:14:23 Certificate issuer: /CN=3ED7EEA9BB1434585656441E180F390DC5431423 Certificate serial: 7DCCC91CCFD8E89C46727E849B4BB0373C1AE071 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED7EEA9BB1434585656441E180F390DC5431423.cer Subject info access: rsync://rpki-repo.registro.br/repo/4gN8UrTLVUXJ14mJUCgCfvtvJNRLrfxVV1nUMFeCuzQm/0/3ED7EEA9BB1434585656441E180F390DC5431423.mft Manifest number: 4A Signing time: Sun 10 Aug 2025 09:05:40 +0000 Manifest this update: Sun 10 Aug 2025 09:00:40 +0000 Manifest next update: Mon 11 Aug 2025 11:29:40 +0000 Files and hashes: 1: 3ED7EEA9BB1434585656441E180F390DC5431423.crl (hash: x/r7hED3t/IaqXuFhMG7or68St8UdlWnIcMVguqBsag=) 2: 323830343a333735343a3a2f33322d3438203d3e20323636343034.roa (hash: QghiRlJ69bLeTBIWhvuXr2JfQ4vQpjYEXH0ZTsOaxxU=) 3: 3137302e38312e3131322e302f32322d3234203d3e20323636343034.roa (hash: N8kKAb5Ws8Kbb6LYPKTPlPXTl9Z+Htv/mCxKupmmNO8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4gN8UrTLVUXJ14mJUCgCfvtvJNRLrfxVV1nUMFeCuzQm/0/3ED7EEA9BB1434585656441E180F390DC5431423.crl rsync://rpki-repo.registro.br/repo/4gN8UrTLVUXJ14mJUCgCfvtvJNRLrfxVV1nUMFeCuzQm/0/3ED7EEA9BB1434585656441E180F390DC5431423.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED7EEA9BB1434585656441E180F390DC5431423.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 11:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:cc:c9:1c:cf:d8:e8:9c:46:72:7e:84:9b:4b:b0:37:3c:1a:e0:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ED7EEA9BB1434585656441E180F390DC5431423 Validity Not Before: Aug 10 09:00:40 2025 GMT Not After : Aug 11 11:29:40 2025 GMT Subject: CN=4EA294788FD03B9C2AF7FE09C616D25154F1D446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:30:a8:01:92:4f:f0:5a:c1:d0:5d:09:77: be:ce:05:0b:f7:22:16:47:d1:20:40:18:ce:48:36: 20:b7:29:50:52:6a:70:c1:91:54:58:d6:60:eb:3c: 81:ad:3d:c4:78:5f:fb:14:55:36:b0:d8:c6:a3:0e: cb:e6:4d:2d:bd:99:ea:04:e0:30:be:0e:65:c2:1f: 46:de:9f:15:0b:7f:9f:d1:c2:a9:1b:c9:00:72:23: 0e:c8:6d:6b:ea:84:22:47:6f:5b:6b:0b:d5:1e:fa: 9d:3b:2b:50:e4:19:75:89:d5:8e:fb:09:d5:94:02: 75:11:d1:3e:5b:76:6d:a4:75:23:6c:c5:9d:ba:67: e7:64:42:0b:fd:75:d5:08:d8:26:7c:0b:43:48:e4: f0:82:12:27:b3:b1:3a:da:45:41:22:cf:d9:b0:b5: 54:b5:26:88:a0:6e:ad:99:bf:32:fb:61:df:24:80: 07:c2:b7:4e:a3:1d:85:48:27:13:5f:c2:7a:65:d2: 9f:1c:42:30:4f:6d:10:b0:f9:ac:2d:a3:7b:16:f9: c0:ad:6f:1c:5c:38:7d:53:d8:36:69:6f:c6:f6:f0: e5:42:c1:68:64:ca:5c:d8:80:3f:70:79:2b:37:86: 8d:71:bd:d0:02:8c:3f:7a:12:dc:df:6c:7f:05:fa: fe:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A2:94:78:8F:D0:3B:9C:2A:F7:FE:09:C6:16:D2:51:54:F1:D4:46 X509v3 Authority Key Identifier: keyid:3E:D7:EE:A9:BB:14:34:58:56:56:44:1E:18:0F:39:0D:C5:43:14:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4gN8UrTLVUXJ14mJUCgCfvtvJNRLrfxVV1nUMFeCuzQm/0/3ED7EEA9BB1434585656441E180F390DC5431423.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED7EEA9BB1434585656441E180F390DC5431423.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gN8UrTLVUXJ14mJUCgCfvtvJNRLrfxVV1nUMFeCuzQm/0/3ED7EEA9BB1434585656441E180F390DC5431423.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:15:c6:10:9c:2a:6e:4d:70:05:e0:53:84:08:77:c3:f0:f3: 8c:d8:36:d5:53:00:89:73:a4:21:e3:ed:1b:da:5b:52:00:21: 13:86:fa:fe:cd:7a:43:00:92:dc:11:79:2f:85:8a:84:77:c8: 4f:ea:c0:b3:af:6a:5e:e1:1f:95:de:c1:86:2b:0b:82:2b:63: 49:17:5a:c0:fc:06:d2:77:40:3c:67:df:fb:b8:be:90:27:e1: 6c:d4:ba:06:5f:86:a7:da:b3:c2:4d:a6:3b:67:2a:4c:b1:36: 10:91:a2:bf:67:cb:35:0e:6c:40:f8:14:10:f3:d1:d2:fd:58: f2:a2:2b:61:fc:9c:32:cb:13:c9:86:f7:cc:77:79:20:97:14: 79:3d:60:88:2a:1f:60:ce:c5:f4:25:39:c8:fa:43:e3:b1:7c: 34:60:60:46:c6:c8:f2:30:db:46:cd:5a:31:6a:6b:9c:7d:2c: 8f:5d:5d:60:ad:75:78:c3:b4:07:e5:6f:24:ee:51:b1:50:2b: d8:b9:e6:6a:28:66:cf:a9:ec:f3:dc:34:6b:a6:7b:67:a3:1a: b4:58:fa:0a:c0:af:aa:95:81:69:ed:26:f7:9f:98:cd:d1:89: 6e:75:fe:0d:c3:b8:4e:ad:9d:8a:31:66:12:17:d1:a9:72:36: e2:60:22:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUfczJHM/Y6JxGcn6Em0uwNzwa4HEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VEN0VFQTlCQjE0MzQ1ODU2NTY0NDFFMTgwRjM5MERD NTQzMTQyMzAeFw0yNTA4MTAwOTAwNDBaFw0yNTA4MTExMTI5NDBaMDMxMTAvBgNV BAMTKDRFQTI5NDc4OEZEMDNCOUMyQUY3RkUwOUM2MTZEMjUxNTRGMUQ0NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PDCoAZJP8FrB0F0Jd77OBQv3 IhZH0SBAGM5INiC3KVBSanDBkVRY1mDrPIGtPcR4X/sUVTaw2MajDsvmTS29meoE 4DC+DmXCH0benxULf5/RwqkbyQByIw7IbWvqhCJHb1trC9Ue+p07K1DkGXWJ1Y77 CdWUAnUR0T5bdm2kdSNsxZ26Z+dkQgv9ddUI2CZ8C0NI5PCCEiezsTraRUEiz9mw tVS1Joigbq2ZvzL7Yd8kgAfCt06jHYVIJxNfwnpl0p8cQjBPbRCw+awto3sW+cCt bxxcOH1T2DZpb8b28OVCwWhkylzYgD9weSs3ho1xvdACjD96EtzfbH8F+v5jAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUTqKUeI/QO5wq9/4JxhbSUVTx1EYwHwYDVR0j BBgwFoAUPtfuqbsUNFhWVkQeGA85DcVDFCMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGdOOFVyVExWVVhKMTRtSlVDZ0NmdnR2Sk5STHJmeFZWMW5VTUZlQ3V6 UW0vMC8zRUQ3RUVBOUJCMTQzNDU4NTY1NjQ0MUUxODBGMzkwREM1NDMxNDIzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFRDdFRUE5QkIxNDM0NTg1 NjU2NDQxRTE4MEYzOTBEQzU0MzE0MjMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGdOOFVyVExWVVhKMTRtSlVDZ0NmdnR2Sk5STHJmeFZWMW5VTUZlQ3V6UW0vMC8z RUQ3RUVBOUJCMTQzNDU4NTY1NjQ0MUUxODBGMzkwREM1NDMxNDIzLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmBXGEJwqbk1wBeBThAh3w/DzjNg21VMAiXOkIePtG9pbUgAhE4b6/s16QwCS 3BF5L4WKhHfIT+rAs69qXuEfld7BhisLgitjSRdawPwG0ndAPGff+7i+kCfhbNS6 Bl+Gp9qzwk2mO2cqTLE2EJGiv2fLNQ5sQPgUEPPR0v1Y8qIrYfycMssTyYb3zHd5 IJcUeT1giCofYM7F9CU5yPpD47F8NGBgRsbI8jDbRs1aMWprnH0sj11dYK11eMO0 B+VvJO5RsVAr2Lnmaihmz6ns89w0a6Z7Z6MatFj6CsCvqpWBae0m95+YzdGJbnX+ DcO4Tq2dijFmEhfRqXI24mAiVQ== -----END CERTIFICATE-----Generated at Sun Aug 10 21:17:49 2025 by rpki-client