$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/EF9D370AB78E47ED988195E5BF641AC265AC0230.mft File: EF9D370AB78E47ED988195E5BF641AC265AC0230.mft (raw, json) Hash identifier: z11Q1ZloITZOeaFWIF3a/LX/CpswuUYQZV5KTrVp6fk= Subject key identifier: 7F:BF:13:F0:A4:A3:D8:15:AA:CF:1B:BD:32:B3:E1:CE:7E:D7:EA:9E Authority key identifier: EF:9D:37:0A:B7:8E:47:ED:98:81:95:E5:BF:64:1A:C2:65:AC:02:30 Certificate issuer: /CN=EF9D370AB78E47ED988195E5BF641AC265AC0230 Certificate serial: 5C98B4C6E5CAC7431300A4915BEA23F1EC43004A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9D370AB78E47ED988195E5BF641AC265AC0230.cer Subject info access: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/EF9D370AB78E47ED988195E5BF641AC265AC0230.mft Manifest number: 11 Signing time: Fri 08 Aug 2025 10:09:02 +0000 Manifest this update: Fri 08 Aug 2025 10:04:02 +0000 Manifest next update: Sat 09 Aug 2025 12:03:02 +0000 Files and hashes: 1: 3138362e3232372e37362e302f32322d3332203d3e20323733343331.roa (hash: J/1m69/x8vy7bx2a1DCizUvrKeEgZVC8uLG/ePlI91k=) 2: 323830343a386538343a3a2f33322d313238203d3e20323733343331.roa (hash: 6x10PVZZuzVejBRD6Q7FVdxUl4HrhcL/zWS6xH6hbBE=) 3: 3139312e372e302e302f32332d3332203d3e20323733343331.roa (hash: iunrE3SBYmm+pYsI+FnplsHHxSBbDZeM3RxsRQjLbxo=) 4: EF9D370AB78E47ED988195E5BF641AC265AC0230.crl (hash: H3JZuEzL8xrnWRrKPii2tqjlV/t3i5Bl608XyUQNzZE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/EF9D370AB78E47ED988195E5BF641AC265AC0230.crl rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/EF9D370AB78E47ED988195E5BF641AC265AC0230.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9D370AB78E47ED988195E5BF641AC265AC0230.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 09 Aug 2025 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:98:b4:c6:e5:ca:c7:43:13:00:a4:91:5b:ea:23:f1:ec:43:00:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF9D370AB78E47ED988195E5BF641AC265AC0230 Validity Not Before: Aug 8 10:04:02 2025 GMT Not After : Aug 9 12:03:02 2025 GMT Subject: CN=7FBF13F0A4A3D815AACF1BBD32B3E1CE7ED7EA9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:be:87:36:7a:81:69:c6:32:ab:7f:33:bb: e3:9b:98:08:e8:4b:8a:23:cb:3a:66:65:de:73:f7: 70:07:16:44:64:ce:fe:90:f8:4b:b2:5d:3d:77:8a: 2c:13:6a:ca:f4:e8:5a:3c:3e:88:2e:4c:bb:f3:5a: 5b:02:22:af:5f:a2:00:82:ce:21:7a:ae:5e:0b:d7: 84:00:0c:d5:2e:fc:ad:77:82:01:46:ea:21:85:74: 6d:8f:aa:76:4b:6a:1f:7f:bd:04:dc:d9:52:a8:be: bc:08:bd:be:20:cf:ad:c9:a5:65:38:03:6e:76:53: e9:9f:90:8c:2b:3d:92:2a:7b:a9:98:bc:b2:ed:cb: 40:be:9f:16:00:e4:9b:b1:2b:43:8a:4d:77:6e:bd: 5f:e3:d2:94:7e:b5:78:cc:10:17:ce:a9:cc:ad:27: 63:f9:d9:a0:bc:97:45:fb:b1:79:72:e8:e6:db:27: db:e8:52:eb:4e:3d:f5:8c:10:8e:c6:92:91:62:82: 35:51:a1:f9:92:c7:79:07:e5:78:3c:bb:4f:7a:f0: 77:36:80:18:94:29:2b:a5:c1:84:eb:d7:af:2e:f6: 78:ef:85:10:bd:27:2f:81:97:d7:88:c2:50:2d:3d: 85:b8:67:42:df:13:72:1b:29:e1:92:5c:31:91:8f: 32:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BF:13:F0:A4:A3:D8:15:AA:CF:1B:BD:32:B3:E1:CE:7E:D7:EA:9E X509v3 Authority Key Identifier: keyid:EF:9D:37:0A:B7:8E:47:ED:98:81:95:E5:BF:64:1A:C2:65:AC:02:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/EF9D370AB78E47ED988195E5BF641AC265AC0230.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF9D370AB78E47ED988195E5BF641AC265AC0230.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/EF9D370AB78E47ED988195E5BF641AC265AC0230.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:c2:95:54:40:f6:ff:be:1e:a2:a8:3d:ac:e5:68:b6:5b:72: a1:ee:f2:82:33:bc:d1:3a:ae:f4:01:0c:7c:e2:a9:ff:5f:4f: b0:04:74:77:d5:0f:b1:f5:5a:aa:b8:ee:71:3b:b2:a2:46:05: d6:a8:64:56:30:70:4c:4c:1c:78:6d:b7:f5:8d:2e:5c:33:33: c6:3c:35:19:6c:d8:3a:39:84:6f:d6:79:95:3a:6d:4a:6c:b6: 33:98:66:92:56:ce:7d:3d:4d:aa:bd:cd:f4:2d:8c:12:54:a0: e1:74:02:3b:0c:44:9c:81:19:3c:29:ef:db:18:84:73:66:c7: b2:ea:6b:1e:f0:51:46:9b:51:67:f0:a9:b2:2f:31:b1:58:23: ac:60:c3:39:4a:da:50:9d:2e:37:09:80:a7:8b:b6:e7:5c:bd: 3c:c3:16:db:59:1d:b0:2a:ca:9b:f3:0a:5d:af:8f:6f:d7:7a: 95:87:88:07:6d:f1:a1:2e:e6:56:bb:18:3a:e4:13:d9:84:35: 4a:a6:7d:e2:cb:ee:2c:6b:be:46:75:1f:16:5f:af:01:54:1b: f1:d0:55:d2:d4:55:3a:d3:36:9b:33:5c:a5:49:ff:94:c6:2e: 65:7d:df:44:e3:9d:6a:89:b4:7e:55:06:8a:88:64:e7:b5:ad: c5:3b:e8:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXJi0xuXKx0MTAKSRW+oj8exDAEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY5RDM3MEFCNzhFNDdFRDk4ODE5NUU1QkY2NDFBQzI2 NUFDMDIzMDAeFw0yNTA4MDgxMDA0MDJaFw0yNTA4MDkxMjAzMDJaMDMxMTAvBgNV BAMTKDdGQkYxM0YwQTRBM0Q4MTVBQUNGMUJCRDMyQjNFMUNFN0VEN0VBOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8aL6HNnqBacYyq38zu+ObmAjo S4ojyzpmZd5z93AHFkRkzv6Q+EuyXT13iiwTasr06Fo8PoguTLvzWlsCIq9fogCC ziF6rl4L14QADNUu/K13ggFG6iGFdG2PqnZLah9/vQTc2VKovrwIvb4gz63JpWU4 A252U+mfkIwrPZIqe6mYvLLty0C+nxYA5JuxK0OKTXduvV/j0pR+tXjMEBfOqcyt J2P52aC8l0X7sXly6ObbJ9voUutOPfWMEI7GkpFigjVRofmSx3kH5Xg8u0968Hc2 gBiUKSulwYTr168u9njvhRC9Jy+Bl9eIwlAtPYW4Z0LfE3IbKeGSXDGRjzJvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUf78T8KSj2BWqzxu9MrPhzn7X6p4wHwYDVR0j BBgwFoAU7503CreOR+2YgZXlv2QawmWsAjAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNGlwazRlUWQ5elV1Y3lFeExrc0NZeHlLNFNxRWR2R1FzSkxMazlNc3Bt RlgvMC9FRjlEMzcwQUI3OEU0N0VEOTg4MTk1RTVCRjY0MUFDMjY1QUMwMjMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGOUQzNzBBQjc4RTQ3RUQ5 ODgxOTVFNUJGNjQxQUMyNjVBQzAyMzAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NGlwazRlUWQ5elV1Y3lFeExrc0NZeHlLNFNxRWR2R1FzSkxMazlNc3BtRlgvMC9F RjlEMzcwQUI3OEU0N0VEOTg4MTk1RTVCRjY0MUFDMjY1QUMwMjMwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOMKVVED2/74eoqg9rOVotltyoe7ygjO80Tqu9AEMfOKp/19PsAR0d9UPsfVa qrjucTuyokYF1qhkVjBwTEwceG239Y0uXDMzxjw1GWzYOjmEb9Z5lTptSmy2M5hm klbOfT1Nqr3N9C2MElSg4XQCOwxEnIEZPCnv2xiEc2bHsuprHvBRRptRZ/Cpsi8x sVgjrGDDOUraUJ0uNwmAp4u251y9PMMW21kdsCrKm/MKXa+Pb9d6lYeIB23xoS7m VrsYOuQT2YQ1SqZ94svuLGu+RnUfFl+vAVQb8dBV0tRVOtM2mzNcpUn/lMYuZX3f ROOdaom0flUGiohk57WtxTvoBg== -----END CERTIFICATE-----Generated at Fri Aug 8 13:06:51 2025 by rpki-client