$ rpki-client -vvf rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/47F7BDC381D25855954B36ACF82259F7CE8074E5.mft File: 47F7BDC381D25855954B36ACF82259F7CE8074E5.mft (raw, json) Hash identifier: EUoSE+v5jZq0aDELvrre1MhCrYlKUZVhIUjzY2Wg9cQ= Subject key identifier: 39:08:B2:71:58:72:76:74:B5:76:7A:CB:AF:6F:26:42:AA:E2:F3:B3 Authority key identifier: 47:F7:BD:C3:81:D2:58:55:95:4B:36:AC:F8:22:59:F7:CE:80:74:E5 Certificate issuer: /CN=47F7BDC381D25855954B36ACF82259F7CE8074E5 Certificate serial: 68758803D99AAA0B7C57F4E1DB8A4935B98EFC19 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F7BDC381D25855954B36ACF82259F7CE8074E5.cer Subject info access: rsync://rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/47F7BDC381D25855954B36ACF82259F7CE8074E5.mft Manifest number: 45 Signing time: Thu 19 Jun 2025 10:33:17 +0000 Manifest this update: Thu 19 Jun 2025 10:28:17 +0000 Manifest next update: Fri 20 Jun 2025 11:24:17 +0000 Files and hashes: 1: 34352e3136312e38382e302f32322d3332203d3e20323638343536.roa (hash: 7kQg9hFshySn9NHWKTY2iHob8FJnJIdqN/MKccIhdE4=) 2: 323830343a353138303a3a2f33322d313238203d3e20323638343536.roa (hash: nX6pD6WWoRZ8fwRijcpbptii+vEusryPHN3lae/oj4E=) 3: 47F7BDC381D25855954B36ACF82259F7CE8074E5.crl (hash: pDRDqCpe45OpOJZCC0mQbVnS8cQAe30VSYloUMYD70o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/47F7BDC381D25855954B36ACF82259F7CE8074E5.crl rsync://rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/47F7BDC381D25855954B36ACF82259F7CE8074E5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F7BDC381D25855954B36ACF82259F7CE8074E5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 11:24:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:75:88:03:d9:9a:aa:0b:7c:57:f4:e1:db:8a:49:35:b9:8e:fc:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47F7BDC381D25855954B36ACF82259F7CE8074E5 Validity Not Before: Jun 19 10:28:17 2025 GMT Not After : Jun 20 11:24:17 2025 GMT Subject: CN=3908B27158727674B5767ACBAF6F2642AAE2F3B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:47:bc:f3:23:76:67:20:5b:86:9f:c5:b7: 7f:82:ad:81:b2:59:e7:6b:67:ec:03:3d:21:88:5e: d4:61:6a:02:b8:fe:75:e4:ff:75:f0:09:6a:dd:89: e0:d9:27:0b:bb:09:28:9d:8b:c1:df:9e:ee:4e:4a: 2e:d7:92:4c:5b:3c:ed:fa:7e:13:4d:18:ee:7d:b7: e8:85:58:c6:c7:12:b8:80:4c:b8:39:a5:3c:d0:b6: aa:f4:be:bf:8e:ea:be:96:27:1e:fe:6c:9f:a3:c1: 00:7e:e9:be:89:63:da:e5:ba:68:4d:a0:a0:c5:79: 1a:e1:0e:02:98:06:7e:85:58:72:62:cc:68:c8:74: a0:7e:af:ec:42:fc:9d:d7:be:53:21:5a:da:0d:b4: eb:67:e3:1d:11:a4:59:62:2b:36:55:07:10:18:5c: 52:be:a6:a6:a4:c0:84:f8:5e:2c:75:db:99:37:8e: 55:d3:00:b1:ae:2e:eb:41:02:b9:ab:e7:36:79:45: d6:8a:6e:b9:6c:20:80:54:04:11:fa:40:4b:24:b4: 37:a3:e5:c3:69:20:40:2d:1d:3a:11:32:04:6a:32: 44:18:ad:00:5b:5b:e8:f4:8f:53:2e:ef:ce:cc:39: 6d:64:d1:04:8a:14:f0:54:82:16:89:e9:a6:9c:b0: 92:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:08:B2:71:58:72:76:74:B5:76:7A:CB:AF:6F:26:42:AA:E2:F3:B3 X509v3 Authority Key Identifier: keyid:47:F7:BD:C3:81:D2:58:55:95:4B:36:AC:F8:22:59:F7:CE:80:74:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/47F7BDC381D25855954B36ACF82259F7CE8074E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F7BDC381D25855954B36ACF82259F7CE8074E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Bh3fi29zqRTptSk9EvogyBPRcWBXebXXdDvhjBXoj9M/0/47F7BDC381D25855954B36ACF82259F7CE8074E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:ce:ea:b5:43:6c:7b:66:ee:bf:04:e9:a0:6c:f1:05:d2:5e: 17:f8:21:27:b3:9a:c5:d0:58:f5:42:84:a1:f2:48:1a:a1:90: cb:80:54:3a:94:3b:07:14:10:8c:33:ef:0c:64:b7:67:ff:02: 35:f1:3f:73:89:cb:af:9c:ab:16:cb:85:f1:ff:78:0d:78:b5: 71:d0:a2:82:1f:81:37:e4:63:e8:5f:63:ff:ed:fd:c1:51:69: 11:b6:41:42:e4:84:02:ed:8a:51:e6:34:99:4a:94:e1:2e:39: 24:f8:c6:4b:f1:83:fa:49:94:c2:4e:12:c7:45:04:2e:af:99: 32:fa:4b:9f:28:10:8f:03:9e:a0:b1:34:c1:e7:e5:52:55:23: ad:30:d0:fb:13:a0:01:68:bd:67:25:7c:1b:de:8c:6b:83:ef: a8:4d:14:77:5c:48:db:2c:0e:06:3e:f6:ae:09:cc:86:bb:80: 59:32:fa:9c:aa:cd:a5:eb:14:66:b9:e1:fa:1a:bc:90:71:1b: 3c:30:46:c5:98:5b:04:51:2e:f6:7a:6d:57:05:70:33:24:53: 40:60:20:18:98:3f:95:22:3b:17:3d:33:5f:82:aa:01:33:5a: 78:b8:6a:11:f3:0d:50:20:b5:4d:5b:23:34:74:9b:9a:af:27: f0:f9:34:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUaHWIA9maqgt8V/Th24pJNbmO/BkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdGN0JEQzM4MUQyNTg1NTk1NEIzNkFDRjgyMjU5RjdD RTgwNzRFNTAeFw0yNTA2MTkxMDI4MTdaFw0yNTA2MjAxMTI0MTdaMDMxMTAvBgNV BAMTKDM5MDhCMjcxNTg3Mjc2NzRCNTc2N0FDQkFGNkYyNjQyQUFFMkYzQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAN0e88yN2ZyBbhp/Ft3+CrYGy WedrZ+wDPSGIXtRhagK4/nXk/3XwCWrdieDZJwu7CSidi8Hfnu5OSi7XkkxbPO36 fhNNGO59t+iFWMbHEriATLg5pTzQtqr0vr+O6r6WJx7+bJ+jwQB+6b6JY9rlumhN oKDFeRrhDgKYBn6FWHJizGjIdKB+r+xC/J3XvlMhWtoNtOtn4x0RpFliKzZVBxAY XFK+pqakwIT4Xix125k3jlXTALGuLutBArmr5zZ5RdaKbrlsIIBUBBH6QEsktDej 5cNpIEAtHToRMgRqMkQYrQBbW+j0j1Mu787MOW1k0QSKFPBUghaJ6aacsJJTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOQiycVhydnS1dnrLr28mQqri87MwHwYDVR0j BBgwFoAUR/e9w4HSWFWVSzas+CJZ986AdOUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEJoM2ZpMjl6cVJUcHRTazlFdm9neUJQUmNXQlhlYlhYZER2aGpCWG9q OU0vMC80N0Y3QkRDMzgxRDI1ODU1OTU0QjM2QUNGODIyNTlGN0NFODA3NEU1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3RjdCREMzODFEMjU4NTU5 NTRCMzZBQ0Y4MjI1OUY3Q0U4MDc0RTUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OEJoM2ZpMjl6cVJUcHRTazlFdm9neUJQUmNXQlhlYlhYZER2aGpCWG9qOU0vMC80 N0Y3QkRDMzgxRDI1ODU1OTU0QjM2QUNGODIyNTlGN0NFODA3NEU1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtM7qtUNse2buvwTpoGzxBdJeF/ghJ7OaxdBY9UKEofJIGqGQy4BUOpQ7BxQQ jDPvDGS3Z/8CNfE/c4nLr5yrFsuF8f94DXi1cdCigh+BN+Rj6F9j/+39wVFpEbZB QuSEAu2KUeY0mUqU4S45JPjGS/GD+kmUwk4Sx0UELq+ZMvpLnygQjwOeoLE0wefl UlUjrTDQ+xOgAWi9ZyV8G96Ma4PvqE0Ud1xI2ywOBj72rgnMhruAWTL6nKrNpesU Zrnh+hq8kHEbPDBGxZhbBFEu9nptVwVwMyRTQGAgGJg/lSI7Fz0zX4KqATNaeLhq EfMNUCC1TVsjNHSbmq8n8Pk0WQ== -----END CERTIFICATE-----Generated at Thu Jun 19 20:16:18 2025 by rpki-client