$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft File: 42E0C742D5DC5A6C41753F73202F41323E27436C.mft (raw, json) Hash identifier: YolWZLbQUDGeRw6fnZbsVfKo5H1iCHIsSmaVFuLzot0= Subject key identifier: AB:33:FB:5D:2F:3F:5D:EA:C6:E9:06:36:B7:70:8D:CE:86:FD:9C:66 Authority key identifier: 42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C Certificate issuer: /CN=42E0C742D5DC5A6C41753F73202F41323E27436C Certificate serial: 018BFAA837CF4A61D3E70E8B9EF2507500734FFB Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer Subject info access: rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft Manifest number: 024A Signing time: Tue 17 Jun 2025 01:13:44 +0000 Manifest this update: Tue 17 Jun 2025 01:08:44 +0000 Manifest next update: Wed 18 Jun 2025 02:22:44 +0000 Files and hashes: 1: 42E0C742D5DC5A6C41753F73202F41323E27436C.crl (hash: vbgJeDy90iTAJ2GGslBWErfME0dYIVgwX7XmBDA0aZo=) 2: 34352e3137322e38302e302f32322d3234203d3e20323634353532.roa (hash: GvxwwRB4CJnq/Jj9AOzJMqWm+rt4u0wxOID0kLFpMS4=) 3: 323830343a323136343a3a2f33322d313238203d3e20323634353532.roa (hash: Sbv71aUgQsl8zdlbbpeXL+yAaywXJvWpr940dxida9s=) 4: 3133382e302e3137322e302f32322d3234203d3e20323634353532.roa (hash: GmwZJbaoy+k1FTw6qlwbLXe+EFZw6807X+9GSA5dJ74=) 5: 3137302e37392e35322e302f32322d3234203d3e20323634353532.roa (hash: UQ56rMkePIWmRQnxJEolgK/byYB/tX2CcoDpZOtnz1o=) 6: 3230312e3134382e3131322e302f32322d3234203d3e20323634353532.roa (hash: 0ZZEuQrrPfiHaMrIh9+0kxAuBjT9ZSwkAb3GoL//XvY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.crl rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 02:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:fa:a8:37:cf:4a:61:d3:e7:0e:8b:9e:f2:50:75:00:73:4f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42E0C742D5DC5A6C41753F73202F41323E27436C Validity Not Before: Jun 17 01:08:44 2025 GMT Not After : Jun 18 02:22:44 2025 GMT Subject: CN=AB33FB5D2F3F5DEAC6E90636B7708DCE86FD9C66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:05:03:0a:d0:36:0b:94:6e:40:7a:78:ab:3e: e6:e2:92:24:0d:ea:07:a1:6f:59:fe:8e:b6:c8:1d: ec:2f:63:3c:4a:f0:cc:a2:78:ab:43:8a:58:bf:7c: 1f:6f:e8:01:50:d8:40:39:75:e8:ee:fa:f1:da:a1: c1:7d:1c:0a:d0:09:a7:39:57:03:07:cf:f7:df:38: 5b:a0:4c:13:94:7c:9e:82:3a:73:56:06:ec:7a:a4: a0:9b:08:e6:33:23:98:a7:e9:10:dd:b4:15:3e:1b: db:76:1f:6a:c4:04:3f:ec:37:e4:96:16:5e:cd:30: 63:df:58:18:d5:73:9a:4b:69:0c:7b:1a:be:7c:4c: ff:f9:42:1b:84:74:14:cb:70:64:00:41:a3:5b:17: 04:54:c8:b4:0f:bd:17:f4:fb:b1:b9:f0:64:2d:15: 67:bd:18:84:21:f1:ac:cf:50:c0:f3:a6:c5:3b:a2: 67:dc:38:4b:4b:1d:16:95:8e:19:6b:e4:37:e3:05: 05:05:00:af:6a:13:27:95:c6:48:c7:1e:da:70:e4: 10:f4:3a:17:57:5b:ee:b4:09:c6:bb:c4:02:bd:70: cf:96:9c:6f:5a:14:f2:04:48:28:d5:49:02:ee:86: 76:a0:e5:92:ce:0c:76:91:a9:af:3b:db:f1:ea:20: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:33:FB:5D:2F:3F:5D:EA:C6:E9:06:36:B7:70:8D:CE:86:FD:9C:66 X509v3 Authority Key Identifier: keyid:42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:9f:7e:80:6d:b7:8e:d2:e0:bf:91:42:35:17:2c:87:8f:bb: 18:53:67:cb:f4:4b:99:2b:aa:d2:f3:ee:a0:c2:76:b7:3e:5c: 0b:68:0a:bb:12:e4:9d:a3:91:26:6b:3b:28:6e:de:01:2d:4e: 71:77:9a:b8:16:f1:09:37:f1:90:11:60:c3:20:88:3c:92:e2: d4:41:ae:7e:87:9c:76:83:34:a3:78:f0:ff:b3:94:62:c8:83: 50:99:a6:07:3a:dc:38:f9:16:81:45:ef:cb:0e:f3:28:b6:58: e4:22:9a:f2:d0:e7:be:75:3e:c2:55:c7:fe:b8:46:51:03:26: f2:07:cd:12:5a:35:51:bc:6e:93:c1:15:47:9e:e0:e6:0b:7e: c7:63:c3:38:2c:6a:b2:3a:75:ca:c5:14:fe:3c:3a:30:36:d7: 8b:37:32:51:8d:26:4e:f2:aa:8b:f0:b0:14:64:86:47:39:a8: d1:72:8d:d3:d5:94:13:3f:d0:c3:d3:57:d9:c7:94:d3:6a:f8: 86:23:60:df:e1:5b:6d:48:5a:72:22:6e:67:23:03:be:2f:8d: 4a:ad:77:9b:fa:84:70:b9:ed:19:53:a0:e7:68:9a:6e:00:71: b4:15:aa:a1:86:88:25:ee:d5:cf:5e:bd:85:63:7d:1d:4c:56: bc:69:1d:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAYv6qDfPSmHT5w6LnvJQdQBzT/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJFMEM3NDJENURDNUE2QzQxNzUzRjczMjAyRjQxMzIz RTI3NDM2QzAeFw0yNTA2MTcwMTA4NDRaFw0yNTA2MTgwMjIyNDRaMDMxMTAvBgNV BAMTKEFCMzNGQjVEMkYzRjVERUFDNkU5MDYzNkI3NzA4RENFODZGRDlDNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfBQMK0DYLlG5AenirPubikiQN 6gehb1n+jrbIHewvYzxK8MyieKtDili/fB9v6AFQ2EA5deju+vHaocF9HArQCac5 VwMHz/ffOFugTBOUfJ6COnNWBux6pKCbCOYzI5in6RDdtBU+G9t2H2rEBD/sN+SW Fl7NMGPfWBjVc5pLaQx7Gr58TP/5QhuEdBTLcGQAQaNbFwRUyLQPvRf0+7G58GQt FWe9GIQh8azPUMDzpsU7omfcOEtLHRaVjhlr5DfjBQUFAK9qEyeVxkjHHtpw5BD0 OhdXW+60Cca7xAK9cM+WnG9aFPIESCjVSQLuhnag5ZLODHaRqa872/HqIFbTAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUqzP7XS8/XerG6QY2t3CNzob9nGYwHwYDVR0j BBgwFoAUQuDHQtXcWmxBdT9zIC9BMj4nQ2wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOHZORWtORW5Xd3pxWGZqVG85aW5Sejh4eTNaVEZuWFRzMWoyUGl0MWRK d1YvMS80MkUwQzc0MkQ1REM1QTZDNDE3NTNGNzMyMDJGNDEzMjNFMjc0MzZDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyRTBDNzQyRDVEQzVBNkM0 MTc1M0Y3MzIwMkY0MTMyM0UyNzQzNkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v OHZORWtORW5Xd3pxWGZqVG85aW5Sejh4eTNaVEZuWFRzMWoyUGl0MWRKd1YvMS80 MkUwQzc0MkQ1REM1QTZDNDE3NTNGNzMyMDJGNDEzMjNFMjc0MzZDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF59+gG23jtLgv5FCNRcsh4+7GFNny/RLmSuq0vPuoMJ2tz5cC2gKuxLknaOR Jms7KG7eAS1OcXeauBbxCTfxkBFgwyCIPJLi1EGufoecdoM0o3jw/7OUYsiDUJmm BzrcOPkWgUXvyw7zKLZY5CKa8tDnvnU+wlXH/rhGUQMm8gfNElo1Ubxuk8EVR57g 5gt+x2PDOCxqsjp1ysUU/jw6MDbXizcyUY0mTvKqi/CwFGSGRzmo0XKN09WUEz/Q w9NX2ceU02r4hiNg3+FbbUhaciJuZyMDvi+NSq13m/qEcLntGVOg52iabgBxtBWq oYaIJe7Vz169hWN9HUxWvGkdHg== -----END CERTIFICATE-----Generated at Tue Jun 17 12:07:35 2025 by rpki-client