$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4B994881FDDD6F476745B62FD48604002A6D30C5.mft File: 4B994881FDDD6F476745B62FD48604002A6D30C5.mft (raw, json) Hash identifier: NH7oCXWP5ZhikPJ0+siLFd88KcPNaocl49oijZldd1g= Subject key identifier: C0:C1:4E:EA:80:D6:61:18:FA:BA:0C:72:52:46:3E:67:F1:84:35:82 Authority key identifier: 4B:99:48:81:FD:DD:6F:47:67:45:B6:2F:D4:86:04:00:2A:6D:30:C5 Certificate issuer: /CN=4B994881FDDD6F476745B62FD48604002A6D30C5 Certificate serial: 0FAB085AAB8A8FA7706F963726B474B8190EA0F8 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B994881FDDD6F476745B62FD48604002A6D30C5.cer Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4B994881FDDD6F476745B62FD48604002A6D30C5.mft Manifest number: 25 Signing time: Sun 10 Aug 2025 14:50:02 +0000 Manifest this update: Sun 10 Aug 2025 14:45:02 +0000 Manifest next update: Mon 11 Aug 2025 14:54:02 +0000 Files and hashes: 1: 3137302e3234372e3230302e302f32322d3332203d3e20323633323536.roa (hash: CVrB2TH1zLHYU+jog8KsMgf4ayPUj0ZJlpK+xRR50gE=) 2: 3139382e35382e382e302f32322d3332203d3e20323633323536.roa (hash: Eqmsv6uZ9xrsgQW3OoXMlywoCoPFjCZ5RB4lI2BKJ1w=) 3: 323830343a313765303a3a2f33322d313238203d3e20323633323536.roa (hash: rhwbdd33SJ24dMOX8zNXqo729Fw0Dw/asbhUBAyr/QY=) 4: 4B994881FDDD6F476745B62FD48604002A6D30C5.crl (hash: dDqrFozQvAEhf/OjXQyiA0XzAX6S/aMxNYsuAr0adS8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4B994881FDDD6F476745B62FD48604002A6D30C5.crl rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4B994881FDDD6F476745B62FD48604002A6D30C5.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B994881FDDD6F476745B62FD48604002A6D30C5.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 11 Aug 2025 14:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ab:08:5a:ab:8a:8f:a7:70:6f:96:37:26:b4:74:b8:19:0e:a0:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B994881FDDD6F476745B62FD48604002A6D30C5 Validity Not Before: Aug 10 14:45:02 2025 GMT Not After : Aug 11 14:54:02 2025 GMT Subject: CN=C0C14EEA80D66118FABA0C7252463E67F1843582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:95:ab:ee:9f:27:a8:d3:c5:e4:4f:29:c7:b8: c5:8a:21:7e:ed:e7:af:ed:38:36:60:dd:94:b0:a9: d8:3c:60:f0:97:25:19:40:ee:91:e0:e9:74:ae:e5: 1b:29:04:4c:0c:6a:8f:cf:3f:a7:54:53:a6:72:b3: 39:8c:2b:b1:12:ae:71:e2:d3:5a:99:72:46:7b:99: 56:1b:e8:24:4b:c3:96:4e:6d:eb:6c:78:aa:d1:4c: 1f:a2:00:a1:a4:e0:d6:ef:3c:29:02:eb:54:9b:07: ab:6c:04:bb:6e:51:08:83:63:8f:97:bc:91:ab:66: 81:f4:53:84:a2:fb:f2:ea:16:94:16:fa:59:d9:79: e0:a9:1e:dc:af:5b:da:88:71:d9:b9:cd:3d:cd:66: 66:96:b1:63:d8:2a:4c:59:9c:9e:ba:b3:6c:cb:7a: d6:45:55:36:70:4d:0b:84:7d:1a:fa:fc:14:a7:92: dd:08:ec:fc:4b:21:d2:8c:15:ee:08:94:85:57:93: c0:25:3a:bb:0a:99:5b:1c:ae:0b:8c:f3:53:33:ad: ed:ee:78:2d:79:d5:95:d4:bb:64:5e:21:ae:11:82: 7b:ff:b0:93:7f:22:54:2e:bc:48:98:6e:0d:6f:0b: 5d:bd:b8:6f:88:c6:41:a6:65:03:f2:38:7e:b9:fd: 1c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C1:4E:EA:80:D6:61:18:FA:BA:0C:72:52:46:3E:67:F1:84:35:82 X509v3 Authority Key Identifier: keyid:4B:99:48:81:FD:DD:6F:47:67:45:B6:2F:D4:86:04:00:2A:6D:30:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4B994881FDDD6F476745B62FD48604002A6D30C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B994881FDDD6F476745B62FD48604002A6D30C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/4B994881FDDD6F476745B62FD48604002A6D30C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:7f:ef:ea:9e:13:0c:d2:a8:5a:8a:f8:16:4b:1d:58:c1:bc: 9a:a1:0b:2d:0a:e0:52:9a:17:f1:13:cf:31:27:d5:c1:27:91: 30:98:fb:5d:a0:2c:e8:06:f3:2b:5e:f8:b1:00:c4:cb:0a:4a: 54:d0:38:f7:9f:55:80:6c:e6:79:b2:0f:33:38:9d:b4:63:db: 28:d2:d9:0f:16:bf:9c:db:73:0e:40:2d:c6:e4:fc:70:a3:26: 44:71:e3:2e:40:e3:d7:2b:ab:28:2a:15:c4:4b:27:35:c7:57: 78:ea:10:ae:e7:04:50:e2:64:75:1d:8f:be:01:cf:14:b0:7c: b2:7a:08:b9:34:89:5a:72:d7:80:c9:b4:5b:02:3a:40:ff:5b: 11:9c:83:bd:f0:97:c7:fd:3b:0a:d1:c9:93:cb:d8:10:e8:df: 09:1b:55:2f:e7:77:c6:f9:a2:0b:af:5b:09:62:36:a2:b3:6e: ca:b7:33:fb:d8:74:63:95:6c:c6:74:bc:06:48:1a:10:0a:32: d6:3a:a6:ca:59:be:e7:2f:58:e5:09:9e:1e:ab:56:1f:84:50: 60:78:a4:b5:56:0b:45:c7:29:52:e2:a1:99:0d:c1:95:c9:fd: 43:59:bb:88:7b:ba:94:ca:ce:93:b0:87:2d:f1:c5:b3:8b:2b: 58:0e:ff:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUD6sIWquKj6dwb5Y3JrR0uBkOoPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI5OTQ4ODFGRERENkY0NzY3NDVCNjJGRDQ4NjA0MDAy QTZEMzBDNTAeFw0yNTA4MTAxNDQ1MDJaFw0yNTA4MTExNDU0MDJaMDMxMTAvBgNV BAMTKEMwQzE0RUVBODBENjYxMThGQUJBMEM3MjUyNDYzRTY3RjE4NDM1ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWlavunyeo08XkTynHuMWKIX7t 56/tODZg3ZSwqdg8YPCXJRlA7pHg6XSu5RspBEwMao/PP6dUU6ZyszmMK7ESrnHi 01qZckZ7mVYb6CRLw5ZObetseKrRTB+iAKGk4NbvPCkC61SbB6tsBLtuUQiDY4+X vJGrZoH0U4Si+/LqFpQW+lnZeeCpHtyvW9qIcdm5zT3NZmaWsWPYKkxZnJ66s2zL etZFVTZwTQuEfRr6/BSnkt0I7PxLIdKMFe4IlIVXk8AlOrsKmVscrguM81Mzre3u eC151ZXUu2ReIa4Rgnv/sJN/IlQuvEiYbg1vC129uG+IxkGmZQPyOH65/RxFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUwMFO6oDWYRj6ugxyUkY+Z/GENYIwHwYDVR0j BBgwFoAUS5lIgf3db0dnRbYv1IYEACptMMUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJk U2QvMC80Qjk5NDg4MUZEREQ2RjQ3Njc0NUI2MkZENDg2MDQwMDJBNkQzMEM1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCOTk0ODgxRkRERDZGNDc2 NzQ1QjYyRkQ0ODYwNDAwMkE2RDMwQzUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v RXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJkU2QvMC80 Qjk5NDg4MUZEREQ2RjQ3Njc0NUI2MkZENDg2MDQwMDJBNkQzMEM1Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUn/v6p4TDNKoWor4FksdWMG8mqELLQrgUpoX8RPPMSfVwSeRMJj7XaAs6Abz K174sQDEywpKVNA4959VgGzmebIPMzidtGPbKNLZDxa/nNtzDkAtxuT8cKMmRHHj LkDj1yurKCoVxEsnNcdXeOoQrucEUOJkdR2PvgHPFLB8snoIuTSJWnLXgMm0WwI6 QP9bEZyDvfCXx/07CtHJk8vYEOjfCRtVL+d3xvmiC69bCWI2orNuyrcz+9h0Y5Vs xnS8BkgaEAoy1jqmylm+5y9Y5QmeHqtWH4RQYHiktVYLRccpUuKhmQ3Blcn9Q1m7 iHu6lMrOk7CHLfHFs4srWA7/JA== -----END CERTIFICATE-----Generated at Sun Aug 10 18:17:30 2025 by rpki-client