$ rpki-client -vvf rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.mft File: 0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.mft (raw, json) Hash identifier: /HBkbXLDVtuko7x/ZJIBLCeYUWsZUOCM86dptRi8XMA= Subject key identifier: 42:79:A6:B9:CD:EC:E1:C1:67:E0:9B:08:20:C2:09:66:45:ED:DE:2E Authority key identifier: 0F:73:AF:CF:07:9B:05:DD:A5:5B:9F:90:9C:C9:30:63:B7:D1:C1:A2 Certificate issuer: /CN=0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2 Certificate serial: 7AB7E57635E5CFE238CE8F36A7B4DBD853E6542C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.mft Manifest number: 028D Signing time: Tue 05 Aug 2025 05:27:51 +0000 Manifest this update: Tue 05 Aug 2025 05:22:51 +0000 Manifest next update: Wed 06 Aug 2025 09:06:51 +0000 Files and hashes: 1: 323830343a6631383a3a2f33322d3438203d3e20323633353636.roa (hash: cXUKgwkHmIVs0YsO9hKZSLfuZAgMe8nKbeE7rT1Twos=) 2: 3137302e37392e32382e302f32322d3234203d3e20323633353636.roa (hash: rRcy8ewNN8KtY/VoKPEvFrpVwfoQppvqwOy37SAUArU=) 3: 3137372e34342e3231362e302f32322d3234203d3e20323633353636.roa (hash: bGnR+WkNs7p0RBufr9jEqbqttazLr+HeIQrCdeZTcYY=) 4: 0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.crl (hash: 6HwU74AdfES8+ImZ0BcEqquPk9UmlMdZxzvyLMnm/7s=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.crl rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 06 Aug 2025 09:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b7:e5:76:35:e5:cf:e2:38:ce:8f:36:a7:b4:db:d8:53:e6:54:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2 Validity Not Before: Aug 5 05:22:51 2025 GMT Not After : Aug 6 09:06:51 2025 GMT Subject: CN=4279A6B9CDECE1C167E09B0820C2096645EDDE2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:6f:75:7c:a6:16:b4:58:a5:57:11:ba:fa: 2d:a0:3f:1f:08:1d:ae:af:25:d8:c6:c6:39:23:64: 80:75:94:f8:ef:86:99:ca:67:60:c7:ee:a4:bf:3a: 1f:6a:2b:d5:55:f4:0f:8f:91:a2:67:f1:8c:12:40: 57:d6:4c:1f:e0:11:90:63:8a:5a:38:6b:db:d6:c9: 37:25:99:2f:c7:91:a8:f5:24:38:e5:c0:f9:d7:8c: 10:22:a0:92:1a:df:9b:02:9e:be:b6:01:ea:06:ba: e1:42:eb:95:11:45:db:32:0b:76:3b:7f:55:ca:fc: 78:20:a0:45:30:59:dd:5b:9a:d0:8f:05:f1:ee:76: 0d:53:27:61:d2:24:95:b6:22:7b:9b:5e:65:b3:42: 24:24:ce:9b:2a:92:80:3a:01:6f:bf:6f:54:50:6c: cc:53:9f:a8:3c:30:c8:68:92:5b:32:fe:3a:b1:a4: 02:08:e6:d5:71:25:b8:01:a5:7e:28:10:29:5f:fa: 22:25:ad:52:46:c2:20:13:2a:47:18:6d:74:0e:a9: 8a:4c:b7:21:7f:5d:50:6f:78:30:58:e9:0d:17:ef: d7:f2:dd:12:19:dd:27:ee:4b:0b:e7:f2:41:e0:35: c4:72:18:08:65:48:ee:34:6f:8d:37:93:23:2e:d2: 12:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:79:A6:B9:CD:EC:E1:C1:67:E0:9B:08:20:C2:09:66:45:ED:DE:2E X509v3 Authority Key Identifier: keyid:0F:73:AF:CF:07:9B:05:DD:A5:5B:9F:90:9C:C9:30:63:B7:D1:C1:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/1/0F73AFCF079B05DDA55B9F909CC93063B7D1C1A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:13:e3:6e:12:ae:25:ed:70:c3:aa:e9:b9:ed:d2:ff:68:ae: fa:74:f0:a6:4e:3b:c9:e2:82:fb:33:2c:70:b4:d8:e8:81:e5: 2e:69:e9:c1:54:2b:9a:4c:65:e6:a2:99:93:db:d8:8f:4d:6f: 26:e6:ee:e6:d1:dc:b1:04:20:ca:45:b4:ee:c3:d9:18:8b:ce: bd:b9:91:41:79:ee:8e:06:db:7d:fb:79:a2:ef:48:73:a8:5f: 5e:63:c6:89:e4:cd:e5:82:fc:0b:5a:f7:2e:92:f7:87:68:d1: c8:5a:4b:d3:54:f6:00:15:1f:c6:fb:97:79:5c:5f:46:8c:28: c5:20:25:bc:fd:a1:2f:b9:d2:69:04:b6:b6:24:51:0b:f9:e6: 13:42:fa:15:6e:a4:5a:87:bc:7a:5c:ba:e2:40:8d:3f:dd:e7: 93:c1:06:d1:d9:df:5d:cf:3e:c1:fd:c1:ca:6e:07:eb:c2:29: 84:dc:50:ca:21:90:92:19:5c:1f:7c:1e:48:11:3f:ed:02:19: 76:57:fe:02:19:38:64:db:c4:7c:2d:5f:c0:2b:7e:21:85:eb: e7:f7:72:b7:13:1a:83:66:1c:48:df:56:dc:2d:ba:dc:ad:59: 3d:d6:ab:e9:b8:33:cc:06:46:c8:17:85:ca:66:bd:16:6d:7b: 30:30:cc:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUerfldjXlz+I4zo82p7Tb2FPmVCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY3M0FGQ0YwNzlCMDVEREE1NUI5RjkwOUNDOTMwNjNC N0QxQzFBMjAeFw0yNTA4MDUwNTIyNTFaFw0yNTA4MDYwOTA2NTFaMDMxMTAvBgNV BAMTKDQyNzlBNkI5Q0RFQ0UxQzE2N0UwOUIwODIwQzIwOTY2NDVFRERFMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEGW91fKYWtFilVxG6+i2gPx8I Ha6vJdjGxjkjZIB1lPjvhpnKZ2DH7qS/Oh9qK9VV9A+PkaJn8YwSQFfWTB/gEZBj ilo4a9vWyTclmS/Hkaj1JDjlwPnXjBAioJIa35sCnr62AeoGuuFC65URRdsyC3Y7 f1XK/HggoEUwWd1bmtCPBfHudg1TJ2HSJJW2InubXmWzQiQkzpsqkoA6AW+/b1RQ bMxTn6g8MMhoklsy/jqxpAII5tVxJbgBpX4oEClf+iIlrVJGwiATKkcYbXQOqYpM tyF/XVBveDBY6Q0X79fy3RIZ3SfuSwvn8kHgNcRyGAhlSO40b403kyMu0hL1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQnmmuc3s4cFn4JsIIMIJZkXt3i4wHwYDVR0j BBgwFoAUD3OvzwebBd2lW5+QnMkwY7fRwaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSDRhZlhyZVBlWW1iUkMyaWllVU5YeWJGVXdwd2U4cW50dnYyaTJySkFw c2QvMS8wRjczQUZDRjA3OUIwNUREQTU1QjlGOTA5Q0M5MzA2M0I3RDFDMUEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGNzNBRkNGMDc5QjA1RERB NTVCOUY5MDlDQzkzMDYzQjdEMUMxQTIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SDRhZlhyZVBlWW1iUkMyaWllVU5YeWJGVXdwd2U4cW50dnYyaTJySkFwc2QvMS8w RjczQUZDRjA3OUIwNUREQTU1QjlGOTA5Q0M5MzA2M0I3RDFDMUEyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEALhPjbhKuJe1ww6rpue3S/2iu+nTwpk47yeKC+zMscLTY6IHlLmnpwVQrmkxl 5qKZk9vYj01vJubu5tHcsQQgykW07sPZGIvOvbmRQXnujgbbfft5ou9Ic6hfXmPG ieTN5YL8C1r3LpL3h2jRyFpL01T2ABUfxvuXeVxfRowoxSAlvP2hL7nSaQS2tiRR C/nmE0L6FW6kWoe8ely64kCNP93nk8EG0dnfXc8+wf3Bym4H68IphNxQyiGQkhlc H3weSBE/7QIZdlf+Ahk4ZNvEfC1fwCt+IYXr5/dytxMag2YcSN9W3C263K1ZPdar 6bgzzAZGyBeFyma9Fm17MDDM8w== -----END CERTIFICATE-----Generated at Wed Aug 6 00:37:34 2025 by rpki-client