$ rpki-client -vvf rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft File: 488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft (raw, json) Hash identifier: H7FrYOE+otNbroUmjsrk3+AMlG7Nbsbcc2hOwkGiqNA= Subject key identifier: 0E:31:CA:F8:90:64:10:31:F0:E4:E7:76:6F:9A:04:E6:79:D1:A1:9C Authority key identifier: 48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71 Certificate issuer: /CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71 Certificate serial: 04F80B5EF0D36B77EA2670B7ABB815290297D9E2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer Subject info access: rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft Manifest number: 0240 Signing time: Sat 21 Jun 2025 19:44:09 +0000 Manifest this update: Sat 21 Jun 2025 19:39:09 +0000 Manifest next update: Sun 22 Jun 2025 22:46:09 +0000 Files and hashes: 1: 3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa (hash: KMmSTVTjbGIRUDXwi8v73vR5K69QjfR9LlPXX/IBXiY=) 2: 488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl (hash: 2cwLN770j6TolnQOiQmRC8nfyZ1dS1S1Zvod62zyKFM=) 3: 323830343a373836303a3a2f33322d3332203d3e20323731323338.roa (hash: ob/Dwvax52q+vhxyPcSWE0mkKcMCWrMtLj4d7yXoKhY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 22 Jun 2025 22:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f8:0b:5e:f0:d3:6b:77:ea:26:70:b7:ab:b8:15:29:02:97:d9:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488D61367F4C42E03AE5C5AE8BE0076E4961BE71 Validity Not Before: Jun 21 19:39:09 2025 GMT Not After : Jun 22 22:46:09 2025 GMT Subject: CN=0E31CAF890641031F0E4E7766F9A04E679D1A19C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:11:04:63:eb:f7:e1:26:b0:7b:3c:fd:c6:89: 89:84:8f:af:94:f7:b9:79:ef:b9:f1:01:25:40:20: f3:9f:6a:ad:3e:e0:62:04:fc:34:c1:07:94:62:27: 09:ad:2e:21:ce:82:bc:88:85:ee:f1:5c:9c:a5:a2: 2d:40:36:55:04:12:2b:10:e3:3d:a6:a6:86:42:04: ee:cd:b1:32:bb:dc:e5:5b:ad:ea:04:82:0b:62:04: ed:38:e3:e8:ed:77:b3:aa:44:6d:ee:42:e4:02:68: 7c:2a:e2:7c:03:12:2c:c2:c0:d0:50:e0:82:17:75: 46:48:57:85:cd:a4:74:97:a0:a7:12:fa:d8:18:13: bd:46:da:ef:64:17:83:84:4c:c4:4b:67:65:79:05: 7c:95:d0:8d:b1:a4:f9:e7:e3:65:b9:10:b9:e9:48: af:5e:86:47:41:8a:b6:4e:3a:7b:34:27:a5:b6:ce: b1:cf:ca:1f:7a:53:4c:cd:65:36:da:1b:ab:5e:60: f5:55:db:7a:61:c8:f6:a6:2c:c8:5c:4c:ee:b2:38: cb:76:17:64:cd:e5:02:89:8d:6c:db:b0:1e:d0:be: 35:0c:6f:0a:37:1a:69:97:fb:a3:82:ff:3a:30:34: 9c:3b:16:57:8c:9c:73:29:47:61:1c:4c:96:76:7d: 6b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:31:CA:F8:90:64:10:31:F0:E4:E7:76:6F:9A:04:E6:79:D1:A1:9C X509v3 Authority Key Identifier: keyid:48:8D:61:36:7F:4C:42:E0:3A:E5:C5:AE:8B:E0:07:6E:49:61:BE:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/488D61367F4C42E03AE5C5AE8BE0076E4961BE71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:6d:fa:c5:d5:98:b3:03:4e:cb:82:26:20:8b:1d:ca:70:d9: 57:96:ef:5d:41:05:cd:92:90:14:92:60:df:ec:45:c9:1d:ea: 75:62:d9:40:ce:6c:48:78:de:cb:40:e5:88:5b:fb:2f:3e:96: 5b:e4:20:44:c5:57:d4:60:62:b6:c7:8d:cd:a1:5b:ca:ed:05: 10:5b:9b:85:ec:a9:a3:9f:ec:09:2b:85:fa:e8:c6:9c:d2:0c: 51:6a:31:07:dc:d7:71:3c:00:2e:b6:9e:93:74:24:59:d7:bd: 52:73:00:60:9f:ef:ef:cc:61:32:6d:9f:2e:ac:9c:86:57:85: f0:cc:1f:21:99:9f:e5:bb:ac:89:06:e1:38:45:2d:37:b3:bc: a2:18:1d:71:f8:6d:62:50:f7:7a:a8:23:d0:65:b4:aa:58:42: c1:a0:a4:15:cb:a2:ba:22:cd:5a:6b:3e:fe:c0:d2:71:95:c6: d0:fe:b9:3e:66:f2:9b:b6:38:a7:93:3a:b0:77:7b:52:ec:57: 59:3b:c4:e2:8f:ec:e3:d4:12:ba:a1:95:1d:28:21:9e:6d:91: 04:a5:51:e3:70:7b:a9:57:cd:0a:54:84:e1:1b:2f:4e:79:a4: a3:f3:01:9d:e9:ff:3a:79:2f:eb:5c:b6:cb:7c:9f:c0:79:c5: 77:6f:98:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBPgLXvDTa3fqJnC3q7gVKQKX2eIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4RDYxMzY3RjRDNDJFMDNBRTVDNUFFOEJFMDA3NkU0 OTYxQkU3MTAeFw0yNTA2MjExOTM5MDlaFw0yNTA2MjIyMjQ2MDlaMDMxMTAvBgNV BAMTKDBFMzFDQUY4OTA2NDEwMzFGMEU0RTc3NjZGOUEwNEU2NzlEMUExOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcEQRj6/fhJrB7PP3GiYmEj6+U 97l577nxASVAIPOfaq0+4GIE/DTBB5RiJwmtLiHOgryIhe7xXJyloi1ANlUEEisQ 4z2mpoZCBO7NsTK73OVbreoEggtiBO044+jtd7OqRG3uQuQCaHwq4nwDEizCwNBQ 4IIXdUZIV4XNpHSXoKcS+tgYE71G2u9kF4OETMRLZ2V5BXyV0I2xpPnn42W5ELnp SK9ehkdBirZOOns0J6W2zrHPyh96U0zNZTbaG6teYPVV23phyPamLMhcTO6yOMt2 F2TN5QKJjWzbsB7QvjUMbwo3GmmX+6OC/zowNJw7FleMnHMpR2EcTJZ2fWtRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUDjHK+JBkEDHw5Od2b5oE5nnRoZwwHwYDVR0j BBgwFoAUSI1hNn9MQuA65cWui+AHbklhvnEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vR0dZTnFlUVhHQ3VyV2Qxd3ZTYUFoaDFpTTNFeUNFdG12WkREUzhWdDRQ c2cvMC80ODhENjEzNjdGNEM0MkUwM0FFNUM1QUU4QkUwMDc2RTQ5NjFCRTcxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4OEQ2MTM2N0Y0QzQyRTAz QUU1QzVBRThCRTAwNzZFNDk2MUJFNzEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v R0dZTnFlUVhHQ3VyV2Qxd3ZTYUFoaDFpTTNFeUNFdG12WkREUzhWdDRQc2cvMC80 ODhENjEzNjdGNEM0MkUwM0FFNUM1QUU4QkUwMDc2RTQ5NjFCRTcxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEACW36xdWYswNOy4ImIIsdynDZV5bvXUEFzZKQFJJg3+xFyR3qdWLZQM5sSHje y0DliFv7Lz6WW+QgRMVX1GBitseNzaFbyu0FEFubheypo5/sCSuF+ujGnNIMUWox B9zXcTwALraek3QkWde9UnMAYJ/v78xhMm2fLqychleF8MwfIZmf5busiQbhOEUt N7O8ohgdcfhtYlD3eqgj0GW0qlhCwaCkFcuiuiLNWms+/sDScZXG0P65Pmbym7Y4 p5M6sHd7UuxXWTvE4o/s49QSuqGVHSghnm2RBKVR43B7qVfNClSE4RsvTnmko/MB nen/Onkv61y2y3yfwHnFd2+Yhg== -----END CERTIFICATE-----Generated at Sun Jun 22 01:35:01 2025 by rpki-client