$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/4800594127A75EA9390E9268E09C074EF25FE80E.mft File: 4800594127A75EA9390E9268E09C074EF25FE80E.mft (raw, json) Hash identifier: WTQmxEQ+UEK7C/p3Uzu3aC5jTDDJPowjY0W5chd8VC0= Subject key identifier: C7:4D:A5:9C:F8:78:08:65:B5:65:03:45:C4:64:B3:48:D8:17:DD:27 Authority key identifier: 48:00:59:41:27:A7:5E:A9:39:0E:92:68:E0:9C:07:4E:F2:5F:E8:0E Certificate issuer: /CN=4800594127A75EA9390E9268E09C074EF25FE80E Certificate serial: 20D52AAA4FB7487F30FD2A06046FB91B00C50532 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4800594127A75EA9390E9268E09C074EF25FE80E.cer Subject info access: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/4800594127A75EA9390E9268E09C074EF25FE80E.mft Manifest number: 33 Signing time: Fri 20 Jun 2025 16:24:23 +0000 Manifest this update: Fri 20 Jun 2025 16:19:23 +0000 Manifest next update: Sat 21 Jun 2025 19:52:23 +0000 Files and hashes: 1: 323830343a343763633a3a2f33322d313238203d3e20323637303737.roa (hash: dkpJZLKLeBytps3Up49qq07UK1hz89fSi2OnQGUwLpw=) 2: 34352e3232382e3130342e302f32322d3332203d3e20323637303737.roa (hash: HziQjJsfuNPYCdGPffcimxB0/j2QzVd8nFqRX48qnm8=) 3: 4800594127A75EA9390E9268E09C074EF25FE80E.crl (hash: cgP4sEOsC2k5WunQjZC2FqtW+6flNYDaDE0StiEDMgA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/4800594127A75EA9390E9268E09C074EF25FE80E.crl rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/4800594127A75EA9390E9268E09C074EF25FE80E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4800594127A75EA9390E9268E09C074EF25FE80E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 21 Jun 2025 19:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d5:2a:aa:4f:b7:48:7f:30:fd:2a:06:04:6f:b9:1b:00:c5:05:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4800594127A75EA9390E9268E09C074EF25FE80E Validity Not Before: Jun 20 16:19:23 2025 GMT Not After : Jun 21 19:52:23 2025 GMT Subject: CN=C74DA59CF8780865B5650345C464B348D817DD27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9a:2b:ad:01:4c:b2:8a:dd:c6:1e:f5:72:34: 41:2a:e1:96:9e:3a:75:03:00:51:a3:21:e1:f3:96: 37:63:d4:59:e4:e4:2e:c4:0c:60:23:c3:a7:60:9b: e0:7d:3e:db:4f:fe:71:78:7f:05:77:d5:00:39:ea: d8:aa:5c:8a:55:5b:34:8b:cb:9c:e3:ba:40:ab:bd: 4b:c5:79:ab:70:bc:32:c8:a2:fa:17:44:95:b2:8b: 0b:78:1e:88:95:bc:d2:61:e6:f0:f0:7a:5f:0d:c8: 1a:c0:f4:81:3d:01:b3:15:e1:b2:6a:c5:b4:d8:3d: 5c:ef:fc:a2:e0:58:06:1b:9b:a3:13:19:fe:5b:87: 1f:3a:f0:5b:04:f5:62:b1:1c:05:b2:58:29:b9:01: 95:d8:6f:fd:f2:9e:bc:00:aa:db:7b:de:84:ac:2c: 41:cd:f9:5f:3b:dd:4b:7e:31:d2:08:cf:98:e3:a0: d9:fc:e3:5d:b0:06:17:84:ae:c4:b6:5f:50:e1:b3: 34:60:87:e2:f9:25:0e:8d:7a:9a:31:9a:91:4f:76: 20:05:df:df:2c:d4:f3:39:f1:a4:e5:9a:74:31:fc: 35:f9:43:eb:0b:51:ec:a8:0d:0c:a6:7f:dd:51:7e: 13:a4:8a:9f:6b:a3:6d:ef:68:8b:d7:16:44:3f:07: a0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4D:A5:9C:F8:78:08:65:B5:65:03:45:C4:64:B3:48:D8:17:DD:27 X509v3 Authority Key Identifier: keyid:48:00:59:41:27:A7:5E:A9:39:0E:92:68:E0:9C:07:4E:F2:5F:E8:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/4800594127A75EA9390E9268E09C074EF25FE80E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4800594127A75EA9390E9268E09C074EF25FE80E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/4800594127A75EA9390E9268E09C074EF25FE80E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:13:e3:16:ea:3d:e3:3a:eb:f9:1e:1e:c2:a3:86:71:9f:4a: 4a:ca:e5:c3:d0:02:05:c8:e3:7e:ca:16:b6:5e:c7:2f:62:05: b9:7f:d7:a5:17:be:e9:14:34:d6:7e:a4:83:a0:d4:ae:cd:ae: 11:42:15:97:20:3e:8b:fb:c4:20:f4:c9:be:de:99:29:f3:5a: 4d:13:65:7a:72:93:38:9c:3a:75:0d:7e:de:8d:2e:de:87:81: 99:4d:47:73:8f:b9:59:f0:8d:25:4b:f8:38:19:64:56:ad:40: 07:a0:4b:43:c8:d4:1b:b6:09:4d:88:05:cf:9b:8a:6e:74:50: 1a:c5:f1:d3:75:4f:b1:6d:50:4c:16:f9:cf:78:15:39:36:fa: 52:f2:c5:81:96:7b:55:c7:08:1b:7c:7d:41:d4:06:a7:fe:fa: 38:e1:79:12:2c:7d:1a:be:a9:14:cf:00:a5:d3:17:c0:c1:e3: 5a:4b:e4:56:6a:d9:21:e1:3b:65:eb:1a:77:73:5f:f7:33:e1: 4d:ac:c3:2e:37:e9:12:ca:8a:88:2d:0e:fd:13:81:18:e3:45: 25:70:99:7b:26:93:c7:de:b4:a4:f0:c7:20:38:a9:4c:57:57: 9a:d3:99:84:39:81:25:e2:2b:79:66:e5:52:98:ae:bb:6d:f6: 68:39:b6:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUINUqqk+3SH8w/SoGBG+5GwDFBTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgwMDU5NDEyN0E3NUVBOTM5MEU5MjY4RTA5QzA3NEVG MjVGRTgwRTAeFw0yNTA2MjAxNjE5MjNaFw0yNTA2MjExOTUyMjNaMDMxMTAvBgNV BAMTKEM3NERBNTlDRjg3ODA4NjVCNTY1MDM0NUM0NjRCMzQ4RDgxN0REMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbmiutAUyyit3GHvVyNEEq4Zae OnUDAFGjIeHzljdj1Fnk5C7EDGAjw6dgm+B9PttP/nF4fwV31QA56tiqXIpVWzSL y5zjukCrvUvFeatwvDLIovoXRJWyiwt4HoiVvNJh5vDwel8NyBrA9IE9AbMV4bJq xbTYPVzv/KLgWAYbm6MTGf5bhx868FsE9WKxHAWyWCm5AZXYb/3ynrwAqtt73oSs LEHN+V873Ut+MdIIz5jjoNn8412wBheErsS2X1DhszRgh+L5JQ6NepoxmpFPdiAF 398s1PM58aTlmnQx/DX5Q+sLUeyoDQymf91RfhOkip9ro23vaIvXFkQ/B6DDAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUx02lnPh4CGW1ZQNFxGSzSNgX3ScwHwYDVR0j BBgwFoAUSABZQSenXqk5DpJo4JwHTvJf6A4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNL MUovMC80ODAwNTk0MTI3QTc1RUE5MzkwRTkyNjhFMDlDMDc0RUYyNUZFODBFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4MDA1OTQxMjdBNzVFQTkz OTBFOTI2OEUwOUMwNzRFRjI1RkU4MEUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNLMUovMC80 ODAwNTk0MTI3QTc1RUE5MzkwRTkyNjhFMDlDMDc0RUYyNUZFODBFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKRPjFuo94zrr+R4ewqOGcZ9KSsrlw9ACBcjjfsoWtl7HL2IFuX/XpRe+6RQ0 1n6kg6DUrs2uEUIVlyA+i/vEIPTJvt6ZKfNaTRNlenKTOJw6dQ1+3o0u3oeBmU1H c4+5WfCNJUv4OBlkVq1AB6BLQ8jUG7YJTYgFz5uKbnRQGsXx03VPsW1QTBb5z3gV OTb6UvLFgZZ7VccIG3x9QdQGp/76OOF5Eix9Gr6pFM8ApdMXwMHjWkvkVmrZIeE7 Zesad3Nf9zPhTazDLjfpEsqKiC0O/ROBGONFJXCZeyaTx960pPDHIDipTFdXmtOZ hDmBJeIreWblUpiuu232aDm21Q== -----END CERTIFICATE-----Generated at Fri Jun 20 20:00:25 2025 by rpki-client