$ rpki-client -vvf rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft File: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft (raw, json) Hash identifier: Ko9AF/T7+gtQpJvPYpU0Bz4O0pnwk3jtdn3xBAvWoDI= Subject key identifier: 19:6F:13:CE:52:4D:72:8E:45:27:AD:4C:A3:A3:F0:84:E0:44:59:D2 Authority key identifier: 40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE Certificate issuer: /CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE Certificate serial: 37B7A2F39F9CC99DB20E7B848705AB1DC3903F92 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer Subject info access: rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft Manifest number: 55 Signing time: Tue 17 Jun 2025 09:43:54 +0000 Manifest this update: Tue 17 Jun 2025 09:38:54 +0000 Manifest next update: Wed 18 Jun 2025 11:59:54 +0000 Files and hashes: 1: 34352e3138392e33322e302f32342d3234203d3e20323734373633.roa (hash: f9h0xJPe6EC4HPN8Q4Vq2DpTHhojeqACv3nqBQ14BsY=) 2: 40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl (hash: 2zIG9PS8Kfmy1beUy/7rg6Deh2E4uqHZYGAv4hXusys=) 3: 34352e3138392e33342e302f32342d3234203d3e20323734373633.roa (hash: +8SomA8CorpblFccJ5hAIRLE8zYsycHTpbXTAfqfp8w=) 4: 34352e3138392e33352e302f32342d3234203d3e20323734373633.roa (hash: 1p2OZ2GU51vARCDd2EzB05jBSXBxDQiaqictJ71WwZg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 11:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b7:a2:f3:9f:9c:c9:9d:b2:0e:7b:84:87:05:ab:1d:c3:90:3f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE Validity Not Before: Jun 17 09:38:54 2025 GMT Not After : Jun 18 11:59:54 2025 GMT Subject: CN=196F13CE524D728E4527AD4CA3A3F084E04459D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bc:3b:72:e3:f0:5a:a6:ef:d1:97:65:4b:14: 3d:7e:cb:c3:30:a4:4a:bd:76:0b:e4:1e:40:85:e7: 06:39:1c:e0:3a:43:57:06:7c:2c:de:de:55:e3:b7: 0f:fd:44:11:13:1e:74:0a:88:91:88:5d:9f:c4:a5: 08:46:41:b3:39:c4:ee:20:03:23:58:05:8c:45:1f: d4:0d:26:ab:43:53:91:93:2e:1d:70:66:09:2b:05: cc:e6:d2:8f:bc:75:18:91:b7:ae:9a:c4:c0:54:fa: f0:18:62:e4:b3:bd:18:0c:31:46:61:b9:6b:e7:e5: a6:40:cc:5a:41:b4:ef:a9:d3:45:0d:3f:82:6c:38: d7:04:7b:e0:34:37:ed:9b:57:96:69:1a:18:03:dc: b0:fe:82:80:b9:d3:72:41:38:ba:52:60:f1:54:ec: 34:0e:7e:90:f4:51:29:22:f4:06:7d:98:f3:c8:38: ef:d8:05:2a:81:27:36:9e:66:4c:d4:ef:45:40:df: 4b:ae:74:ab:d5:f5:e0:80:63:78:fc:5a:8d:b6:6a: cb:25:b0:e9:2f:fd:f8:2d:aa:a0:81:c9:bc:f1:7c: 47:4e:e9:27:64:b4:b2:c0:a5:bb:ee:33:86:c1:16: b8:0d:8e:0c:ff:55:fb:79:95:50:f3:2e:c7:97:c8: 69:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:6F:13:CE:52:4D:72:8E:45:27:AD:4C:A3:A3:F0:84:E0:44:59:D2 X509v3 Authority Key Identifier: keyid:40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:02:46:d9:88:ca:2e:50:af:0b:3c:6f:cb:f5:b8:f7:84:00: a9:f9:54:72:a9:4e:aa:ab:31:1a:b9:25:15:7f:80:5a:33:f1: 73:2c:f9:cb:bf:af:df:6c:6f:d7:32:11:7f:8e:01:cd:38:31: 09:73:73:b4:fe:ec:7d:20:44:ef:c6:9c:d1:86:9c:e3:1a:e3: 1c:5d:f5:71:14:eb:db:8e:7f:c1:ea:d2:53:3e:de:6d:e4:fb: aa:ba:99:6d:82:68:3f:f2:36:9e:98:af:12:d2:63:7e:3a:ae: 6c:17:54:a7:f7:28:ce:b5:2c:de:3e:2b:64:be:fe:f0:37:3d: 57:83:b6:e8:e9:7a:8d:c1:87:4b:55:82:d1:be:fc:e2:72:b9: aa:02:a1:67:43:73:a4:3b:6b:2e:19:8a:0e:54:12:32:99:de: e3:45:cd:a6:6b:77:d9:f5:ed:78:ab:c2:98:dc:92:5f:76:e1: 75:4a:86:aa:27:ed:f5:55:64:f0:9b:6d:8f:e8:b3:c2:b7:4e: 05:cb:b6:d8:ec:ee:c3:56:54:de:9a:3b:07:51:88:1a:eb:10: 60:be:1e:00:f6:8d:c3:b9:6c:a6:25:5b:b7:b4:13:d5:c4:c5: e1:eb:ac:9e:ba:b2:42:34:7e:55:0f:7c:55:75:c7:e5:49:26: 51:65:de:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUN7ei85+cyZ2yDnuEhwWrHcOQP5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCQjE0QTJGRDhCODExMDMwNDJCRjMyRkFDOUIyRDkw QUNGOEFGRTAeFw0yNTA2MTcwOTM4NTRaFw0yNTA2MTgxMTU5NTRaMDMxMTAvBgNV BAMTKDE5NkYxM0NFNTI0RDcyOEU0NTI3QUQ0Q0EzQTNGMDg0RTA0NDU5RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvDty4/Bapu/Rl2VLFD1+y8Mw pEq9dgvkHkCF5wY5HOA6Q1cGfCze3lXjtw/9RBETHnQKiJGIXZ/EpQhGQbM5xO4g AyNYBYxFH9QNJqtDU5GTLh1wZgkrBczm0o+8dRiRt66axMBU+vAYYuSzvRgMMUZh uWvn5aZAzFpBtO+p00UNP4JsONcEe+A0N+2bV5ZpGhgD3LD+goC503JBOLpSYPFU 7DQOfpD0USki9AZ9mPPIOO/YBSqBJzaeZkzU70VA30uudKvV9eCAY3j8Wo22assl sOkv/fgtqqCBybzxfEdO6SdktLLApbvuM4bBFrgNjgz/Vft5lVDzLseXyGn5AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUGW8TzlJNco5FJ61Mo6PwhOBEWdIwHwYDVR0j BBgwFoAUQLsUov2LgRAwQr8y+smy2QrPiv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2 NjIvMC80MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwQkIxNEEyRkQ4QjgxMTAz MDQyQkYzMkZBQzlCMkQ5MEFDRjhBRkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NG9Xb245dWtqNVlLZ1lmRUNkc0g0cmI5N0pVRnBjWDJ0WkYycVM2TTk2NjIvMC80 MEJCMTRBMkZEOEI4MTEwMzA0MkJGMzJGQUM5QjJEOTBBQ0Y4QUZFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAAJG2YjKLlCvCzxvy/W494QAqflUcqlOqqsxGrklFX+AWjPxcyz5y7+v32xv 1zIRf44BzTgxCXNztP7sfSBE78ac0Yac4xrjHF31cRTr245/werSUz7ebeT7qrqZ bYJoP/I2npivEtJjfjqubBdUp/cozrUs3j4rZL7+8Dc9V4O26Ol6jcGHS1WC0b78 4nK5qgKhZ0NzpDtrLhmKDlQSMpne40XNpmt32fXteKvCmNySX3bhdUqGqift9VVk 8Jttj+izwrdOBcu22Ozuw1ZU3po7B1GIGusQYL4eAPaNw7lspiVbt7QT1cTF4eus nrqyQjR+VQ98VXXH5UkmUWXemA== -----END CERTIFICATE-----Generated at Tue Jun 17 21:54:03 2025 by rpki-client