$ rpki-client -vvf rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft File: A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft (raw, json) Hash identifier: pSzw/qUSzHZUAYtr0ydqAqWjmpTKwR7SjzGISy8kES8= Subject key identifier: FC:0F:BD:23:8A:D4:86:B2:C5:97:ED:DD:47:11:34:33:63:E6:58:BE Authority key identifier: A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A Certificate issuer: /CN=A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A Certificate serial: 752517E0EBDE80FEA17E72ABA062361277704EE9 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer Subject info access: rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft Manifest number: 18 Signing time: Thu 19 Jun 2025 12:23:15 +0000 Manifest this update: Thu 19 Jun 2025 12:18:15 +0000 Manifest next update: Fri 20 Jun 2025 12:47:15 +0000 Files and hashes: 1: 3133382e3131372e38382e302f32322d3234203d3e20323634323336.roa (hash: FY7AnqAx4uALtv3sW2I80UpMHissxv0FiwkefwWNfi8=) 2: 3136382e39302e33362e302f32322d3234203d3e20323634323336.roa (hash: HtqSGu9dBb0YYZ+ZbVBsu0Qzj5D0doY+P8Xbw0oRSSY=) 3: A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl (hash: 8pShRdox4qUTan7NveSNl3zbDQoFRE57AKGha0oLTTg=) 4: 323830343a323461383a3a2f33322d3438203d3e20323634323336.roa (hash: ibQcB0heJmCCHvRKHLau5TQQNa0nHWFomE8+cMwlq7M=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 12:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:25:17:e0:eb:de:80:fe:a1:7e:72:ab:a0:62:36:12:77:70:4e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A Validity Not Before: Jun 19 12:18:15 2025 GMT Not After : Jun 20 12:47:15 2025 GMT Subject: CN=FC0FBD238AD486B2C597EDDD4711343363E658BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5d:5e:54:d2:b6:79:52:64:ab:19:77:02:82: 68:ce:0e:af:ff:c6:8e:df:37:f6:aa:76:63:c8:a3: 3e:35:7c:77:98:5b:d4:07:97:59:76:b2:98:aa:7a: 24:9b:94:59:43:bb:fe:2e:a7:fd:19:ea:e7:37:76: ca:0f:93:da:94:aa:4f:5f:b3:49:e0:59:d6:96:43: 96:15:24:f9:ae:15:d4:2b:50:4c:ab:a3:43:e8:bd: 1c:0e:5c:eb:90:34:2b:76:a8:20:d4:d9:06:a2:5d: e1:a4:68:53:53:87:7d:27:b7:72:fc:19:a6:f0:96: 72:13:f9:fe:cb:ec:22:0f:5d:39:ec:85:bb:8d:fc: 4c:17:29:72:6d:7f:1e:83:9d:25:57:ae:3a:73:86: f6:da:17:d4:a1:6a:5f:67:58:d9:bc:00:27:6d:0a: 14:73:c9:d4:bd:7b:d7:2d:15:01:4d:62:45:57:35: f4:ac:ee:c3:8f:ae:c3:29:fa:1f:95:5e:dd:06:d6: 56:e4:09:4c:b0:e6:b3:07:84:24:4b:b2:41:35:59: f8:c9:00:95:e0:88:4d:b8:a3:08:5a:de:4f:d2:74: ec:fd:bb:83:78:54:db:9e:91:b4:a5:bf:79:28:d6: 87:8f:e6:6c:2c:fe:90:0d:e5:bb:92:8a:69:48:5d: af:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0F:BD:23:8A:D4:86:B2:C5:97:ED:DD:47:11:34:33:63:E6:58:BE X509v3 Authority Key Identifier: keyid:A9:48:AB:96:F6:BB:7D:AC:2C:16:76:EF:BE:E8:D6:10:99:C6:1E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5AXaB9KbadHCSj2LMtpBRQoHUEJdnr29wgdvtZ2MfvEJ/0/A948AB96F6BB7DAC2C1676EFBEE8D61099C61E0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ab:42:4c:8c:8f:e6:9e:59:95:ad:c0:98:f7:ac:78:5c:21: 10:b0:53:29:d8:60:52:cd:ee:5d:6b:b3:dc:a6:5f:35:b9:5d: c0:35:6a:57:0b:ec:3c:a4:f7:4d:04:78:c3:81:ab:06:e7:64: 21:bc:28:ca:87:5e:0e:3c:1b:96:21:97:f1:b8:d9:f7:36:de: ac:0d:2d:00:9b:81:8b:b7:6e:38:89:a5:cd:9b:3c:96:01:65: 02:a3:c5:04:f4:58:b0:fe:7b:5d:24:68:87:41:f5:88:91:cc: ca:43:46:5a:ee:ce:1d:a6:ac:8c:36:05:2d:53:0c:25:87:5d: 84:eb:a0:e4:4f:1e:09:b4:df:64:24:3f:45:5d:87:64:a0:49: 8f:0b:ca:aa:d8:57:81:e3:49:c4:42:ea:f9:c4:1a:e1:2c:8a: 26:92:0b:16:a1:12:a7:1c:08:7c:8a:aa:ff:40:e9:3f:d8:d0: 7b:37:23:60:b5:f4:4f:77:e9:d4:14:81:94:90:50:4d:b8:b2: 9c:fd:2c:78:2f:8e:c7:13:ad:a0:c5:7d:25:30:4a:38:d9:ad: 4a:b9:c5:92:a5:34:0b:70:11:12:f4:f4:60:95:05:39:13:ba: 78:5f:a8:8d:20:87:46:74:08:15:d0:c4:bb:b2:8e:06:6f:31: 30:86:bc:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdSUX4OvegP6hfnKroGI2EndwTukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk0OEFCOTZGNkJCN0RBQzJDMTY3NkVGQkVFOEQ2MTA5 OUM2MUUwQTAeFw0yNTA2MTkxMjE4MTVaFw0yNTA2MjAxMjQ3MTVaMDMxMTAvBgNV BAMTKEZDMEZCRDIzOEFENDg2QjJDNTk3RURERDQ3MTEzNDMzNjNFNjU4QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPXV5U0rZ5UmSrGXcCgmjODq// xo7fN/aqdmPIoz41fHeYW9QHl1l2spiqeiSblFlDu/4up/0Z6uc3dsoPk9qUqk9f s0ngWdaWQ5YVJPmuFdQrUEyro0PovRwOXOuQNCt2qCDU2QaiXeGkaFNTh30nt3L8 GabwlnIT+f7L7CIPXTnshbuN/EwXKXJtfx6DnSVXrjpzhvbaF9Shal9nWNm8ACdt ChRzydS9e9ctFQFNYkVXNfSs7sOPrsMp+h+VXt0G1lbkCUyw5rMHhCRLskE1WfjJ AJXgiE24owha3k/SdOz9u4N4VNuekbSlv3ko1oeP5mws/pAN5buSimlIXa+FAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU/A+9I4rUhrLFl+3dRxE0M2PmWL4wHwYDVR0j BBgwFoAUqUirlva7fawsFnbvvujWEJnGHgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNUFYYUI5S2JhZEhDU2oyTE10cEJSUW9IVUVKZG5yMjl3Z2R2dFoyTWZ2 RUovMC9BOTQ4QUI5NkY2QkI3REFDMkMxNjc2RUZCRUU4RDYxMDk5QzYxRTBBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5NDhBQjk2RjZCQjdEQUMy QzE2NzZFRkJFRThENjEwOTlDNjFFMEEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NUFYYUI5S2JhZEhDU2oyTE10cEJSUW9IVUVKZG5yMjl3Z2R2dFoyTWZ2RUovMC9B OTQ4QUI5NkY2QkI3REFDMkMxNjc2RUZCRUU4RDYxMDk5QzYxRTBBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjKtCTIyP5p5Zla3AmPeseFwhELBTKdhgUs3uXWuz3KZfNbldwDVqVwvsPKT3 TQR4w4GrBudkIbwoyodeDjwbliGX8bjZ9zberA0tAJuBi7duOImlzZs8lgFlAqPF BPRYsP57XSRoh0H1iJHMykNGWu7OHaasjDYFLVMMJYddhOug5E8eCbTfZCQ/RV2H ZKBJjwvKqthXgeNJxELq+cQa4SyKJpILFqESpxwIfIqq/0DpP9jQezcjYLX0T3fp 1BSBlJBQTbiynP0seC+OxxOtoMV9JTBKONmtSrnFkqU0C3AREvT0YJUFORO6eF+o jSCHRnQIFdDEu7KOBm8xMIa8nA== -----END CERTIFICATE-----Generated at Thu Jun 19 21:46:41 2025 by rpki-client