$ rpki-client -vvf rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.mft File: D45EE207E811FF7831A3054740F4FC376DE9C473.mft (raw, json) Hash identifier: wNDyhy+5pGmJ/Yqsv/G+ZtoSvDePO5vYDvxiQCsb+RU= Subject key identifier: 41:A4:EC:AD:99:EB:CD:E6:0E:8F:87:9B:8C:09:F7:4C:76:90:85:D1 Authority key identifier: D4:5E:E2:07:E8:11:FF:78:31:A3:05:47:40:F4:FC:37:6D:E9:C4:73 Certificate issuer: /CN=D45EE207E811FF7831A3054740F4FC376DE9C473 Certificate serial: 4FE355FB3ACF6F5DABABE17A795AF4FF4DC77DBF Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer Subject info access: rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.mft Manifest number: 0111 Signing time: Thu 19 Jun 2025 10:24:44 +0000 Manifest this update: Thu 19 Jun 2025 10:19:44 +0000 Manifest next update: Fri 20 Jun 2025 12:50:44 +0000 Files and hashes: 1: 3230302e32342e38302e302f32322d3232203d3e203631373930.roa (hash: M2lNJNOo3QmEHp0Yb2W0NhzPTUamH5IA9BhxqbF6t7Q=) 2: 3230302e32342e38342e302f32322d3232203d3e203631373930.roa (hash: oWpT8s3eNAWGbVlR5gpPmlnfM5HqmKLYroWKrDnfVhA=) 3: D45EE207E811FF7831A3054740F4FC376DE9C473.crl (hash: sMbDFJi9j23zyoobAedPczFNvu8w4pFOyUz4S2ZvRIY=) 4: 323830343a313935633a3a2f33332d3333203d3e203631373930.roa (hash: zxoVB0/V+w47xzbIkuWqO0MNlAIMgniNQQdYXcRA3gs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.crl rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 20 Jun 2025 12:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e3:55:fb:3a:cf:6f:5d:ab:ab:e1:7a:79:5a:f4:ff:4d:c7:7d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D45EE207E811FF7831A3054740F4FC376DE9C473 Validity Not Before: Jun 19 10:19:44 2025 GMT Not After : Jun 20 12:50:44 2025 GMT Subject: CN=41A4ECAD99EBCDE60E8F879B8C09F74C769085D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:44:cd:44:20:3b:99:70:31:60:63:1f:ba: 79:32:6e:ad:f8:2b:17:76:49:fd:c4:0e:fd:06:38: 35:08:3b:f7:fe:0a:2b:d4:79:06:95:e3:fe:a5:a6: 0a:b5:6f:46:0f:a4:73:f8:f1:76:ed:20:68:6d:35: ba:5b:00:cf:44:dc:52:69:a3:3a:76:81:88:7c:ca: ec:13:fa:2c:00:a9:08:b3:ea:cc:cc:9c:0b:a3:b9: 00:82:43:62:7c:2b:84:b3:1c:07:90:10:a6:f5:b0: f3:8c:93:3f:06:7f:61:09:b7:7d:f7:5b:34:ac:7c: b7:18:ad:35:03:e2:86:85:39:b4:b2:30:ce:6b:0a: 72:22:2f:22:2e:d6:97:8b:cf:a3:d9:81:f2:65:32: 07:02:80:a3:75:b2:ba:14:82:24:7d:8f:7e:52:d6: 05:66:64:e8:ac:9b:62:2e:81:58:86:01:a1:d3:c5: 86:d9:91:eb:43:47:ed:be:ce:91:72:46:87:f7:e7: 76:d6:b1:03:53:cc:84:e4:50:b4:bb:a0:e3:51:1c: 3c:85:15:0d:60:99:9b:b3:72:38:29:1b:f7:11:ec: 12:77:24:88:87:4a:03:a7:96:16:8a:51:52:62:cf: e5:df:88:1a:03:ed:98:40:61:04:58:09:33:18:85: 52:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A4:EC:AD:99:EB:CD:E6:0E:8F:87:9B:8C:09:F7:4C:76:90:85:D1 X509v3 Authority Key Identifier: keyid:D4:5E:E2:07:E8:11:FF:78:31:A3:05:47:40:F4:FC:37:6D:E9:C4:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45EE207E811FF7831A3054740F4FC376DE9C473.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHPETmcfR2hPaougfQMxyLGSpKXehX35jxAp4yd4dQ5i/0/D45EE207E811FF7831A3054740F4FC376DE9C473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:76:db:17:97:a2:68:6c:57:d8:72:b6:a5:0d:32:f2:09:c7: bb:65:ea:f8:be:2f:f8:92:e4:a5:5e:0d:31:10:17:c5:30:66: 41:55:d0:f6:a9:32:63:93:b1:ca:62:06:d5:cc:2b:4a:86:58: 02:fe:67:be:ee:98:1a:fe:69:5e:08:40:e2:a7:fe:0d:36:49: 7c:74:1a:67:b5:6c:8a:db:78:e7:56:0c:39:4c:22:1c:3a:dc: 79:de:60:33:c5:95:ab:f9:a2:5a:65:30:92:40:09:79:e5:34: 9b:68:55:c3:95:e3:79:6f:17:75:06:4b:75:b5:3e:d6:68:3a: 97:d8:97:1e:06:86:c9:0e:2a:d3:20:49:c0:3f:c5:ac:7c:e9: 27:37:4c:a6:1a:63:c5:1e:f1:f1:d8:8b:68:12:e2:b6:cb:54: 51:f7:fd:d2:2c:2e:e5:85:8a:07:aa:a9:90:44:c1:c1:ec:15: 65:25:4a:68:e6:4f:ce:af:f8:74:4c:f4:f2:31:1c:77:47:06: ea:8b:4d:79:4a:26:20:31:bf:6e:b1:e7:60:a2:c6:5a:46:08: b8:31:73:64:73:da:9b:1d:66:ab:47:e9:f7:6d:2b:ec:d6:1e: b0:cf:60:32:c8:90:2b:08:77:3a:3a:f7:2e:0c:8f:d6:5b:66: 1f:33:14:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUT+NV+zrPb12rq+F6eVr0/03Hfb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1RUUyMDdFODExRkY3ODMxQTMwNTQ3NDBGNEZDMzc2 REU5QzQ3MzAeFw0yNTA2MTkxMDE5NDRaFw0yNTA2MjAxMjUwNDRaMDMxMTAvBgNV BAMTKDQxQTRFQ0FEOTlFQkNERTYwRThGODc5QjhDMDlGNzRDNzY5MDg1RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnE0TNRCA7mXAxYGMfunkybq34 Kxd2Sf3EDv0GODUIO/f+CivUeQaV4/6lpgq1b0YPpHP48XbtIGhtNbpbAM9E3FJp ozp2gYh8yuwT+iwAqQiz6szMnAujuQCCQ2J8K4SzHAeQEKb1sPOMkz8Gf2EJt333 WzSsfLcYrTUD4oaFObSyMM5rCnIiLyIu1peLz6PZgfJlMgcCgKN1sroUgiR9j35S 1gVmZOism2IugViGAaHTxYbZketDR+2+zpFyRof353bWsQNTzITkULS7oONRHDyF FQ1gmZuzcjgpG/cR7BJ3JIiHSgOnlhaKUVJiz+XfiBoD7ZhAYQRYCTMYhVJxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUQaTsrZnrzeYOj4ebjAn3THaQhdEwHwYDVR0j BBgwFoAU1F7iB+gR/3gxowVHQPT8N23pxHMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSEhQRVRtY2ZSMmhQYW91Z2ZRTXh5TEdTcEtYZWhYMzVqeEFwNHlkNGRR NWkvMC9ENDVFRTIwN0U4MTFGRjc4MzFBMzA1NDc0MEY0RkMzNzZERTlDNDczLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NUVFMjA3RTgxMUZGNzgz MUEzMDU0NzQwRjRGQzM3NkRFOUM0NzMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v SEhQRVRtY2ZSMmhQYW91Z2ZRTXh5TEdTcEtYZWhYMzVqeEFwNHlkNGRRNWkvMC9E NDVFRTIwN0U4MTFGRjc4MzFBMzA1NDc0MEY0RkMzNzZERTlDNDczLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUXbbF5eiaGxX2HK2pQ0y8gnHu2Xq+L4v+JLkpV4NMRAXxTBmQVXQ9qkyY5Ox ymIG1cwrSoZYAv5nvu6YGv5pXghA4qf+DTZJfHQaZ7Vsitt451YMOUwiHDrced5g M8WVq/miWmUwkkAJeeU0m2hVw5XjeW8XdQZLdbU+1mg6l9iXHgaGyQ4q0yBJwD/F rHzpJzdMphpjxR7x8diLaBLitstUUff90iwu5YWKB6qpkETBwewVZSVKaOZPzq/4 dEz08jEcd0cG6otNeUomIDG/brHnYKLGWkYIuDFzZHPamx1mq0fp920r7NYesM9g MsiQKwh3Ojr3LgyP1ltmHzMU0Q== -----END CERTIFICATE-----Generated at Fri Jun 20 01:38:41 2025 by rpki-client