$ rpki-client -vvf rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.mft File: 4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.mft (raw, json) Hash identifier: tdDKCIPRHAvzd/rWtOqsle5YX9HeH/fB7fxxAxljM0o= Subject key identifier: 6C:05:E8:FA:44:6E:02:B4:1D:5A:8E:50:74:FE:F7:CD:F6:B7:76:2D Authority key identifier: 4C:0D:87:E5:1A:B5:4C:98:BF:00:8C:45:7C:F7:E0:1E:22:66:F9:AB Certificate issuer: /CN=4C0D87E51AB54C98BF008C457CF7E01E2266F9AB Certificate serial: 41593A821D6A0BC40516A77009D3205DE1658580 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.cer Subject info access: rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.mft Manifest number: 0159 Signing time: Tue 17 Jun 2025 16:03:55 +0000 Manifest this update: Tue 17 Jun 2025 15:58:55 +0000 Manifest next update: Wed 18 Jun 2025 18:55:55 +0000 Files and hashes: 1: 4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.crl (hash: xCB81sgJTo/vNy/4Dhw9HXepKygd0FSlT7jSYNyDpL0=) 2: 323830343a38343a3a2f33322d313238203d3e203134323832.roa (hash: 7mg1LGrDDu/k/S5i1yDSV1en9uy/1nZ2zPC3yyyj6dA=) 3: 3230302e3138392e35362e302f32312d3332203d3e203134323832.roa (hash: SBocdGOnhVYdeBFMJ/roaS3W9EhJeA2FXhvkhBoxh20=) 4: 3138392e31342e3234302e302f32302d3332203d3e203134323832.roa (hash: i3kA8mST9ObugRiKbqsN1LRuBV7yCZT9qicHwVmDH0o=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.crl rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 18 Jun 2025 18:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:59:3a:82:1d:6a:0b:c4:05:16:a7:70:09:d3:20:5d:e1:65:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0D87E51AB54C98BF008C457CF7E01E2266F9AB Validity Not Before: Jun 17 15:58:55 2025 GMT Not After : Jun 18 18:55:55 2025 GMT Subject: CN=6C05E8FA446E02B41D5A8E5074FEF7CDF6B7762D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:df:34:c0:bb:10:9c:4d:a5:47:87:49:ce:c2: 25:9f:d9:c9:b6:8b:9e:a0:9a:42:34:7f:bf:39:8c: ba:d9:2c:77:10:31:67:a1:e9:0a:27:3a:69:f4:09: 25:74:0a:8d:de:14:67:b2:74:93:6e:30:4d:f1:31: 2e:34:38:36:93:39:f6:85:8a:f7:c1:e2:0c:6f:54: f1:e9:38:ae:b6:9d:78:6d:e0:ba:a2:c2:17:2f:c0: e6:d1:87:6c:78:3a:6a:9c:91:38:4d:a9:40:0b:3d: b5:c0:3d:91:7e:9e:00:f7:2d:e0:73:4e:0f:f5:ab: f2:3e:af:f9:45:be:15:bd:9b:50:f3:9d:8b:29:95: d3:3b:f8:12:8f:c5:b3:50:88:bd:30:15:08:41:a4: 6e:78:91:ca:11:f7:2d:3e:8f:8e:bb:73:f1:bb:64: 79:b0:e3:44:eb:03:d2:a3:5e:93:93:f8:8f:44:94: 59:63:2e:8c:12:39:6a:20:3f:b5:ab:4d:ff:e3:38: 22:4d:ae:22:29:6b:c8:de:1d:db:b7:7c:cf:73:51: 93:b4:a3:17:05:18:07:3f:d2:35:43:b2:7e:97:4c: 0b:13:95:fd:23:d9:a8:49:ce:64:af:19:1f:08:ff: c2:20:ac:79:46:bb:26:52:df:e4:bd:1b:fe:f4:3c: 5c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:05:E8:FA:44:6E:02:B4:1D:5A:8E:50:74:FE:F7:CD:F6:B7:76:2D X509v3 Authority Key Identifier: keyid:4C:0D:87:E5:1A:B5:4C:98:BF:00:8C:45:7C:F7:E0:1E:22:66:F9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cw8TEHFoxPy9RxijyaPxVSVRjtaKmV9GW9boi7gQ7rbr/0/4C0D87E51AB54C98BF008C457CF7E01E2266F9AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:71:d3:d9:e8:82:ec:4a:6b:bf:f8:a5:47:bf:35:ae:ca:c6: ba:da:64:4d:ae:9c:7a:7b:7b:d4:5a:99:9c:ef:e8:9a:55:b9: 7d:56:e5:82:2a:77:41:f6:5c:94:52:8a:1d:47:25:d9:19:fa: c4:09:0b:00:31:8c:39:a9:48:3e:bd:e7:e9:5c:57:dc:90:4f: 95:62:74:e9:bb:ce:b0:e6:7f:56:41:73:b7:f2:3e:7e:71:39: 28:dd:4e:fe:0b:ed:11:2a:d9:10:c5:f5:f2:99:d7:2a:34:a8: 7d:e0:be:a5:6e:07:5c:b0:b7:6d:75:1e:92:9d:6d:35:5b:01: c4:8b:80:97:48:46:fa:07:8f:7d:f5:73:e7:94:ae:9a:88:69: e9:97:46:a0:af:e7:67:fb:ee:5e:7e:b5:28:06:d4:3f:2c:5a: fe:61:ff:76:e5:3c:e2:5b:c1:ea:fc:2d:ff:3f:1d:cf:6d:1b: 80:be:8b:bb:e1:64:f5:7e:6b:f9:8a:92:eb:e6:da:92:29:1f: 9e:44:d7:59:bb:37:63:d8:dd:97:61:79:3f:de:39:0a:f5:75: 49:76:46:d5:29:e8:ae:14:8b:81:9e:f2:cd:c9:01:db:f0:98: 70:71:ed:9d:6f:e7:e6:88:6f:80:38:99:4f:3f:79:8f:27:05: ce:42:b2:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUQVk6gh1qC8QFFqdwCdMgXeFlhYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwRDg3RTUxQUI1NEM5OEJGMDA4QzQ1N0NGN0UwMUUy MjY2RjlBQjAeFw0yNTA2MTcxNTU4NTVaFw0yNTA2MTgxODU1NTVaMDMxMTAvBgNV BAMTKDZDMDVFOEZBNDQ2RTAyQjQxRDVBOEU1MDc0RkVGN0NERjZCNzc2MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj3zTAuxCcTaVHh0nOwiWf2cm2 i56gmkI0f785jLrZLHcQMWeh6QonOmn0CSV0Co3eFGeydJNuME3xMS40ODaTOfaF ivfB4gxvVPHpOK62nXht4LqiwhcvwObRh2x4OmqckThNqUALPbXAPZF+ngD3LeBz Tg/1q/I+r/lFvhW9m1DznYspldM7+BKPxbNQiL0wFQhBpG54kcoR9y0+j467c/G7 ZHmw40TrA9KjXpOT+I9ElFljLowSOWogP7WrTf/jOCJNriIpa8jeHdu3fM9zUZO0 oxcFGAc/0jVDsn6XTAsTlf0j2ahJzmSvGR8I/8IgrHlGuyZS3+S9G/70PFy7AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUbAXo+kRuArQdWo5QdP73zfa3di0wHwYDVR0j BBgwFoAUTA2H5Rq1TJi/AIxFfPfgHiJm+aswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3c4VEVIRm94UHk5UnhpanlhUHhWU1ZSanRhS21WOUdXOWJvaTdnUTdy YnIvMC80QzBEODdFNTFBQjU0Qzk4QkYwMDhDNDU3Q0Y3RTAxRTIyNjZGOUFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDMEQ4N0U1MUFCNTRDOThC RjAwOEM0NTdDRjdFMDFFMjI2NkY5QUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Q3c4VEVIRm94UHk5UnhpanlhUHhWU1ZSanRhS21WOUdXOWJvaTdnUTdyYnIvMC80 QzBEODdFNTFBQjU0Qzk4QkYwMDhDNDU3Q0Y3RTAxRTIyNjZGOUFCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK3HT2eiC7Eprv/ilR781rsrGutpkTa6cent71FqZnO/omlW5fVblgip3QfZc lFKKHUcl2Rn6xAkLADGMOalIPr3n6VxX3JBPlWJ06bvOsOZ/VkFzt/I+fnE5KN1O /gvtESrZEMX18pnXKjSofeC+pW4HXLC3bXUekp1tNVsBxIuAl0hG+gePffVz55Su mohp6ZdGoK/nZ/vuXn61KAbUPyxa/mH/duU84lvB6vwt/z8dz20bgL6Lu+Fk9X5r +YqS6+bakikfnkTXWbs3Y9jdl2F5P945CvV1SXZG1SnorhSLgZ7yzckB2/CYcHHt nW/n5ohvgDiZTz95jycFzkKyuA== -----END CERTIFICATE-----Generated at Wed Jun 18 12:16:56 2025 by rpki-client