$ rpki-client -vvf rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.mft File: 4CFDB632C8A3E9C823323B2E5907A9238E6B8554.mft (raw, json) Hash identifier: lyRagKAzh9tpGjN0NFM0dZxQUuipEQ7Axd0m4WiXr3o= Subject key identifier: 64:1C:A0:B8:0A:4A:67:F3:B0:8D:08:54:84:F1:09:D3:6D:1C:14:3A Authority key identifier: 4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54 Certificate issuer: /CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554 Certificate serial: 60290DCEF59B2CAFD0D5D4007EB0C1AEAC829306 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer Subject info access: rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.mft Manifest number: A3 Signing time: Wed 18 Jun 2025 22:39:03 +0000 Manifest this update: Wed 18 Jun 2025 22:34:03 +0000 Manifest next update: Thu 19 Jun 2025 23:44:03 +0000 Files and hashes: 1: 34352e3138372e36362e302f32342d3234203d3e20323639353238.roa (hash: II1RzsGPkHnpbxVSJUK9zXey6ZFdJi87qI01L71x/ME=) 2: 34352e3138372e36342e302f32342d3234203d3e20323639353238.roa (hash: YX6mtCkxcil6OllZ1wLr5S17yxVjXzLERsvQa0mpOhk=) 3: 4CFDB632C8A3E9C823323B2E5907A9238E6B8554.crl (hash: BFT1vQmWlQEIlRjZe+PYbBRseq08ej+YzFgOsW4Ckqs=) 4: 34352e3138372e36372e302f32342d3234203d3e20323639353238.roa (hash: JfKI3T9GDDh01Rp/qRsbymeyNvU7e82bq+QlApkKLUY=) 5: 323830343a363630343a383130303a3a2f34302d3430203d3e20323639353238.roa (hash: /sZ77TEiaBtcjHNTHWDyU/rdxKv+XLyeYm8ljzt5rMQ=) 6: 34352e3138372e36352e302f32342d3234203d3e20323639353238.roa (hash: 1dWTEVip5rJMxAJY3MvVnEePwaw2qNkxhQqE71H4DUs=) 7: 323830343a363630343a3a2f33332d3333203d3e20323639353238.roa (hash: hyDQZK29E+iKuOEQuGkCku98QPjq+YBU349/02+dXzo=) 8: 323830343a363630343a383030303a3a2f33332d3333203d3e20323639353238.roa (hash: 93nHwgy8FiQR6Co+Hid0rloJ6+WoaspavpiYRXMoTeQ=) 9: 323830343a363630343a393030303a3a2f34302d3430203d3e20323639353238.roa (hash: PItnYmd59ejk+pwYUxn6BWvvCK66WulJqw+Fb9ml88A=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.crl rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 19 Jun 2025 23:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:29:0d:ce:f5:9b:2c:af:d0:d5:d4:00:7e:b0:c1:ae:ac:82:93:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CFDB632C8A3E9C823323B2E5907A9238E6B8554 Validity Not Before: Jun 18 22:34:03 2025 GMT Not After : Jun 19 23:44:03 2025 GMT Subject: CN=641CA0B80A4A67F3B08D085484F109D36D1C143A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:30:01:39:38:c2:cb:15:9d:ac:05:e7:59:bc: a0:4b:87:bc:71:31:05:81:77:a4:58:e2:58:74:d8: 70:f4:78:74:f1:67:40:e4:e1:1f:58:78:03:ac:ac: ac:bb:b8:f0:4c:92:f8:4b:90:e5:87:16:e4:f0:87: 2e:aa:ba:09:e9:8a:3d:6f:b1:fb:57:ee:42:6d:34: 6f:4a:b5:06:e2:c8:e7:e5:3d:14:a8:c9:06:e9:51: ac:93:20:e4:8f:bc:3a:30:b5:4d:90:c3:12:3a:c6: 50:9b:06:98:03:85:5b:97:a7:9c:2e:9d:71:d6:0b: e2:9d:72:c5:b9:26:19:78:7a:b1:5b:f7:8c:08:8c: f1:5c:28:01:31:22:8c:e1:b2:b5:e4:59:21:cd:b4: 25:4a:61:3a:48:de:6a:ec:4b:f3:0f:46:97:78:05: bf:2e:8b:d3:b4:ac:82:f1:f3:26:69:6a:b8:8a:31: 5f:c2:5e:77:4b:2a:6f:2a:75:fc:4e:62:5e:3e:1c: ad:0a:5f:93:c7:8c:d3:77:26:d2:eb:15:99:b0:0a: e2:e2:7b:a0:74:c8:ac:1d:d0:52:48:66:18:e6:e8: 9a:cb:a9:e8:71:79:24:03:2c:35:fd:ec:e4:0b:bf: a8:7f:7a:86:b0:04:cf:dd:c0:60:9a:81:1d:7a:b1: 1d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:1C:A0:B8:0A:4A:67:F3:B0:8D:08:54:84:F1:09:D3:6D:1C:14:3A X509v3 Authority Key Identifier: keyid:4C:FD:B6:32:C8:A3:E9:C8:23:32:3B:2E:59:07:A9:23:8E:6B:85:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8D6zs6evjETbwBYsyhHFe6RKpHcMWEw8Zg2GjRwjaSW2/0/4CFDB632C8A3E9C823323B2E5907A9238E6B8554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:4e:b1:ed:48:d8:ad:87:67:63:d1:f6:74:94:8e:4f:04:50: 4d:b6:e4:91:cc:0b:2e:52:b0:ff:d5:65:e3:94:79:68:e5:69: fc:3c:d7:7d:14:1e:e5:dc:d2:c6:e3:24:15:51:e1:77:ec:dc: 91:29:a5:97:cb:6e:b8:74:20:65:59:62:92:c9:c0:1f:e3:da: dc:0f:2a:3c:6f:19:3f:66:a1:27:4e:20:c1:ad:f5:59:2b:16: 4f:2e:fe:d6:8b:4e:ef:5a:0a:09:ef:63:ed:dd:00:e5:f7:da: da:9f:97:cd:a2:63:fc:67:a5:a8:1c:e0:6d:7d:b1:91:e6:bc: e0:e1:9c:49:52:45:db:00:61:77:e8:87:ce:50:48:f0:3b:19: 36:83:48:21:1b:46:15:52:98:3c:5b:43:3e:ce:6a:ad:b4:3d: b0:ff:ce:57:5c:51:89:59:46:2f:99:b3:53:be:23:b5:be:93: 32:06:aa:6c:f7:3e:8d:2a:62:c0:12:e4:4f:72:c8:f0:9e:dd: c8:1e:ef:dd:77:2e:e7:4c:52:58:8f:4b:6e:73:2f:31:46:ad: 5d:54:05:ed:c0:52:f9:bd:32:a6:08:d5:e4:7a:77:80:85:61: dc:f4:95:4c:d2:b3:6b:ed:02:3a:04:02:d8:45:17:d4:55:d8: 1c:81:7f:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUYCkNzvWbLK/Q1dQAfrDBrqyCkwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENGREI2MzJDOEEzRTlDODIzMzIzQjJFNTkwN0E5MjM4 RTZCODU1NDAeFw0yNTA2MTgyMjM0MDNaFw0yNTA2MTkyMzQ0MDNaMDMxMTAvBgNV BAMTKDY0MUNBMEI4MEE0QTY3RjNCMDhEMDg1NDg0RjEwOUQzNkQxQzE0M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSMAE5OMLLFZ2sBedZvKBLh7xx MQWBd6RY4lh02HD0eHTxZ0Dk4R9YeAOsrKy7uPBMkvhLkOWHFuTwhy6qugnpij1v sftX7kJtNG9KtQbiyOflPRSoyQbpUayTIOSPvDowtU2QwxI6xlCbBpgDhVuXp5wu nXHWC+KdcsW5Jhl4erFb94wIjPFcKAExIozhsrXkWSHNtCVKYTpI3mrsS/MPRpd4 Bb8ui9O0rILx8yZpariKMV/CXndLKm8qdfxOYl4+HK0KX5PHjNN3JtLrFZmwCuLi e6B0yKwd0FJIZhjm6JrLqehxeSQDLDX97OQLv6h/eoawBM/dwGCagR16sR01AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUZByguApKZ/OwjQhUhPEJ020cFDowHwYDVR0j BBgwFoAUTP22Msij6cgjMjsuWQepI45rhVQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOEQ2enM2ZXZqRVRid0JZc3loSEZlNlJLcEhjTVdFdzhaZzJHalJ3amFT VzIvMC80Q0ZEQjYzMkM4QTNFOUM4MjMzMjNCMkU1OTA3QTkyMzhFNkI4NTU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRkRCNjMyQzhBM0U5Qzgy MzMyM0IyRTU5MDdBOTIzOEU2Qjg1NTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OEQ2enM2ZXZqRVRid0JZc3loSEZlNlJLcEhjTVdFdzhaZzJHalJ3amFTVzIvMC80 Q0ZEQjYzMkM4QTNFOUM4MjMzMjNCMkU1OTA3QTkyMzhFNkI4NTU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFE6x7UjYrYdnY9H2dJSOTwRQTbbkkcwLLlKw/9Vl45R5aOVp/DzXfRQe5dzS xuMkFVHhd+zckSmll8tuuHQgZVliksnAH+Pa3A8qPG8ZP2ahJ04gwa31WSsWTy7+ 1otO71oKCe9j7d0A5ffa2p+XzaJj/GelqBzgbX2xkea84OGcSVJF2wBhd+iHzlBI 8DsZNoNIIRtGFVKYPFtDPs5qrbQ9sP/OV1xRiVlGL5mzU74jtb6TMgaqbPc+jSpi wBLkT3LI8J7dyB7v3Xcu50xSWI9LbnMvMUatXVQF7cBS+b0ypgjV5Hp3gIVh3PSV TNKza+0COgQC2EUX1FXYHIF/zw== -----END CERTIFICATE-----Generated at Thu Jun 19 14:52:18 2025 by rpki-client