$ rpki-client -vvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft File: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft (raw, json) Hash identifier: eKuozfNuPTo3dvcwFmShpMjBllVabElmjSj8lfS7rC4= Subject key identifier: 64:64:20:8C:B1:B7:0A:E9:02:B8:BB:67:9C:BE:8E:3E:6D:05:B4:21 Authority key identifier: 4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 Certificate issuer: /CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Certificate serial: 0F7059F677D9E923110DD7F716FF8C167A6054B5 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject info access: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft Manifest number: D2 Signing time: Sun 22 Jun 2025 06:13:33 +0000 Manifest this update: Sun 22 Jun 2025 06:08:33 +0000 Manifest next update: Mon 23 Jun 2025 07:20:33 +0000 Files and hashes: 1: 3230312e3135302e3132302e302f32322d3234203d3e203631383632.roa (hash: N7pBzAqFHQXwjW/KS0P1VsU5DUXI/b+mnSTAPuK/6eo=) 2: 3133382e3138352e3137322e302f32322d3234203d3e203631383632.roa (hash: fxTpR6kGjpzHUi4HM+ey62/lxDfVFp1Mya/83PptAgs=) 3: 4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl (hash: 2m08rwRN4UKg5pLAUuhxWWbwD2zx8gt6dACVWcQzUDs=) 4: 323830343a316137633a3a2f33322d3334203d3e203631383632.roa (hash: TJaA5xEZrkse1eozPtBQZAtjZj6iE5o4CDiRrM/8CKc=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 23 Jun 2025 05:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:70:59:f6:77:d9:e9:23:11:0d:d7:f7:16:ff:8c:16:7a:60:54:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355 Validity Not Before: Jun 22 06:08:33 2025 GMT Not After : Jun 23 07:20:33 2025 GMT Subject: CN=6464208CB1B70AE902B8BB679CBE8E3E6D05B421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f5:72:b4:5b:1b:b7:23:66:a6:0e:66:9c:bd: 35:c9:99:af:91:c3:ce:82:45:1f:29:09:56:21:0a: 29:b3:d9:6b:70:32:56:9a:14:e4:15:67:55:63:92: 79:ef:e9:ef:5e:14:67:59:c9:f7:9c:2c:ae:03:a6: 89:8d:99:aa:99:b1:7c:1d:c4:52:0a:c1:86:7c:ac: dc:3b:da:2d:3b:96:d8:66:1d:94:03:fa:8e:4d:45: 9f:06:7f:09:9a:28:d5:8f:ed:78:fe:8e:37:3e:c6: 44:45:3e:5e:0f:7c:6f:ac:6a:97:53:f0:ba:80:53: 77:0c:8a:32:7b:e0:59:3c:a8:16:16:82:5a:e1:2d: 5a:1d:18:62:ff:01:3a:46:a2:8f:ac:b8:2c:74:4a: d0:68:cd:57:ea:c8:f2:4d:1d:8e:62:f8:83:9d:cf: 3b:05:7e:1e:16:88:75:1d:cc:55:75:ad:7c:fe:d7: 3e:ba:59:2c:0f:1b:f2:ed:c5:8e:f6:bd:fa:df:07: e8:96:ae:4c:eb:1e:50:89:b8:cf:f0:6b:67:87:0b: 30:f0:34:5a:f2:5f:9d:b5:3e:86:8c:3f:91:9a:03: cd:29:e1:c5:7c:b2:3a:f7:fd:0c:e8:9e:60:7d:d1: 84:0b:f0:67:09:89:bd:88:19:ac:12:f1:ea:d7:33: 8b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:64:20:8C:B1:B7:0A:E9:02:B8:BB:67:9C:BE:8E:3E:6D:05:B4:21 X509v3 Authority Key Identifier: keyid:4B:80:B2:0B:D7:40:DF:8A:FC:F0:F8:C5:A6:FE:B8:B9:E5:30:63:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/4B80B20BD740DF8AFCF0F8C5A6FEB8B9E5306355.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:98:c3:a2:47:62:9b:57:0e:44:af:f9:48:36:47:3e:ce:69: ef:95:16:05:67:25:a6:6c:28:f7:dc:4a:14:db:ed:42:15:99: 78:51:01:53:75:c7:a2:8c:65:e4:74:f1:95:07:6c:9e:1a:21: 4c:47:44:52:f9:93:a4:bf:f6:0f:5c:97:50:2d:2d:bb:1d:33: 31:1d:2f:84:bb:54:58:c6:fc:b8:51:f1:c1:8d:64:f6:94:5d: cb:7a:c1:b5:ec:93:b2:03:62:92:4e:79:5d:29:f8:25:9d:de: 1c:de:67:ff:ed:44:d3:2e:b6:65:ba:d1:5c:6e:0e:77:ad:e2: c4:7c:b5:d7:f9:21:f3:25:b7:c4:e0:50:cd:20:4b:b4:8c:35: 3d:0b:bd:13:c2:1e:ed:a1:56:2d:5d:9f:2d:8a:8f:2a:ad:dc: 8c:77:0d:33:bb:d1:0b:ac:d6:a4:e5:ed:cb:cd:f0:e8:c0:38: 01:4d:04:fa:b3:92:74:20:19:e8:df:ac:5d:b1:da:03:8c:25: ec:63:63:45:b5:a8:18:f4:fe:df:83:8d:73:99:4d:c1:02:26: c9:06:7b:2d:ef:f3:8f:fc:fe:e2:6e:16:07:3c:d9:5a:b6:00: 61:98:5e:29:fd:be:53:4a:59:f5:23:57:1c:21:59:a2:df:02: 97:22:54:7b -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUD3BZ9nfZ6SMRDdf3Fv+MFnpgVLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlF NTMwNjM1NTAeFw0yNTA2MjIwNjA4MzNaFw0yNTA2MjMwNzIwMzNaMDMxMTAvBgNV BAMTKDY0NjQyMDhDQjFCNzBBRTkwMkI4QkI2NzlDQkU4RTNFNkQwNUI0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ9XK0Wxu3I2amDmacvTXJma+R w86CRR8pCVYhCimz2WtwMlaaFOQVZ1Vjknnv6e9eFGdZyfecLK4DpomNmaqZsXwd xFIKwYZ8rNw72i07lthmHZQD+o5NRZ8GfwmaKNWP7Xj+jjc+xkRFPl4PfG+sapdT 8LqAU3cMijJ74Fk8qBYWglrhLVodGGL/ATpGoo+suCx0StBozVfqyPJNHY5i+IOd zzsFfh4WiHUdzFV1rXz+1z66WSwPG/LtxY72vfrfB+iWrkzrHlCJuM/wa2eHCzDw NFryX521PoaMP5GaA80p4cV8sjr3/QzonmB90YQL8GcJib2IGawS8erXM4u5AgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUZGQgjLG3CukCuLtnnL6OPm0FtCEwHwYDVR0j BBgwFoAUS4CyC9dA34r88PjFpv64ueUwY1UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9Tb2h2akZIS1hwcGtOUWs3UWJxeWVqTjVmUGtaMmNHclA0OXI2dUFRdmNz LzAvNEI4MEIyMEJENzQwREY4QUZDRjBGOEM1QTZGRUI4QjlFNTMwNjM1NS5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjgwQjIwQkQ3NDBERjhBRkNG MEY4QzVBNkZFQjhCOUU1MzA2MzU1LmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL1Nv aHZqRkhLWHBwa05RazdRYnF5ZWpONWZQa1oyY0dyUDQ5cjZ1QVF2Y3MvMC80Qjgw QjIwQkQ3NDBERjhBRkNGMEY4QzVBNkZFQjhCOUU1MzA2MzU1Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA rJjDokdim1cORK/5SDZHPs5p75UWBWclpmwo99xKFNvtQhWZeFEBU3XHooxl5HTx lQdsnhohTEdEUvmTpL/2D1yXUC0tux0zMR0vhLtUWMb8uFHxwY1k9pRdy3rBteyT sgNikk55XSn4JZ3eHN5n/+1E0y62ZbrRXG4Od63ixHy11/kh8yW3xOBQzSBLtIw1 PQu9E8Ie7aFWLV2fLYqPKq3cjHcNM7vRC6zWpOXty83w6MA4AU0E+rOSdCAZ6N+s XbHaA4wl7GNjRbWoGPT+34ONc5lNwQImyQZ7Le/zj/z+4m4WBzzZWrYAYZheKf2+ U0pZ9SNXHCFZot8ClyJUew== -----END CERTIFICATE-----Generated at Sun Jun 22 10:17:03 2025 by rpki-client