$ rpki-client -vvf rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft File: 1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft (raw, json) Hash identifier: 1klsnGcr1lvflWEjdPkLwP6Eg2gyJcgeZ7ZLpeD1wh8= Subject key identifier: E2:DB:D4:10:37:AB:96:9F:81:DD:15:24:81:01:50:D2:09:C0:45:D3 Authority key identifier: 1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0 Certificate issuer: /CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0 Certificate serial: 55A8F25F254E2F0B127026F9C61E521633B5349B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer Subject info access: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft Manifest number: 0202 Signing time: Sun 27 Apr 2025 06:19:02 +0000 Manifest this update: Sun 27 Apr 2025 06:14:02 +0000 Manifest next update: Mon 28 Apr 2025 08:41:02 +0000 Files and hashes: 1: 323830343a346566383a3a2f33322d3335203d3e20323638323935.roa (hash: BstW0UlvH2wEHgaNKCbfIv8DXJSe7M/kYqDRbvgjc5k=) 2: 34352e3233372e3233362e302f32322d3234203d3e20323638323935.roa (hash: 1C/jOWt5ZHfKspqIFOUeY8exgTDIPGSvNHULSTIuARE=) 3: 1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl (hash: g+9WScfLeiYDKSssA93J7Yd4kK6HKwFyoTp8M25dtJ8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 08:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:a8:f2:5f:25:4e:2f:0b:12:70:26:f9:c6:1e:52:16:33:b5:34:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0 Validity Not Before: Apr 27 06:14:02 2025 GMT Not After : Apr 28 08:41:02 2025 GMT Subject: CN=E2DBD41037AB969F81DD1524810150D209C045D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5c:63:05:73:65:aa:cb:ca:a0:44:e2:82:92: be:9b:e5:c6:cb:69:e9:17:cb:1c:40:ce:88:e1:b6: 03:c9:f3:33:7b:a8:75:68:10:56:fc:7f:24:ef:47: 30:a4:58:99:91:ea:dc:65:26:85:dc:cc:7c:79:51: 38:07:5c:a1:d9:08:a1:8d:ba:9c:01:71:15:1b:04: 49:f7:1f:a5:13:11:b5:a9:8b:32:9b:cf:7d:7e:f8: 4a:31:8f:45:88:a6:c9:e4:cf:0e:81:1b:6e:5e:63: 32:1f:d2:5c:88:e0:4b:04:46:88:00:c3:bd:0d:ea: c1:b7:d5:92:53:1b:b4:c0:53:f6:a4:8c:56:10:22: ee:a3:36:22:77:77:f8:df:5a:b8:d3:f8:ce:d0:cc: 30:6d:e4:eb:83:fa:e6:83:87:f3:ca:a8:62:ce:e5: 74:36:2a:9e:d9:0b:8f:60:f8:2b:1a:83:03:3d:d8: 41:74:58:aa:c5:9c:05:5b:9e:93:51:d5:61:c6:60: 2d:0e:8a:a8:df:db:ed:fd:f4:db:a2:89:9e:10:01: b8:cc:e1:2a:17:6a:95:17:85:41:43:a2:c4:90:bf: dc:a6:50:b7:86:e1:73:e9:48:64:cf:91:f0:8a:6f: 07:95:dd:5e:05:8d:42:94:59:ef:b8:20:62:2c:1a: 41:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DB:D4:10:37:AB:96:9F:81:DD:15:24:81:01:50:D2:09:C0:45:D3 X509v3 Authority Key Identifier: keyid:1B:A3:60:9D:96:6D:D8:B2:2E:5F:D5:66:7E:4B:AC:AC:EF:F8:D1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/1/1BA3609D966DD8B22E5FD5667E4BACACEFF8D1F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:7c:11:32:a1:5c:aa:e9:6b:9c:75:1e:50:ba:d1:d8:d7:ae: b5:5c:f6:43:0a:01:f9:b8:e5:79:c9:44:24:a2:af:df:4d:28: 4d:04:18:fc:4e:1f:5c:eb:f5:d2:a9:51:eb:e0:31:4b:b5:2f: 88:31:6a:0b:25:f6:ce:d7:6b:53:2a:90:70:0c:aa:bb:85:c3: 67:d7:72:1c:e6:cd:06:81:a7:9f:33:3d:1f:16:68:01:09:dd: 30:ce:05:df:72:ff:4c:67:e6:c9:65:fc:6e:70:cc:cf:47:af: 62:6c:33:ec:b0:7b:15:ef:ad:7a:2a:8e:93:c3:2e:28:30:6d: 37:1c:c0:4c:cc:19:fc:19:e0:4b:0a:2a:da:a6:4f:bf:e8:ba: 38:c0:4d:6b:be:8c:de:8a:b2:f0:a0:b8:d1:dd:1f:a2:fd:b5: 44:c9:f0:61:d3:20:10:70:04:1d:7a:36:e0:69:e8:46:f6:bd: e1:aa:0a:e7:d6:55:fe:a5:01:c4:5f:b2:d6:e6:53:34:82:ce: 2d:98:7c:5a:34:7a:cf:60:05:58:fe:49:5d:d4:10:06:ff:24: 06:09:5f:c1:86:b7:99:31:0c:a5:65:89:ac:08:19:d2:b3:23: 3f:d0:a8:42:05:a3:6f:75:96:ce:cb:38:e5:f0:af:97:41:76: 33:f6:f7:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUVajyXyVOLwsScCb5xh5SFjO1NJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMzYwOUQ5NjZERDhCMjJFNUZENTY2N0U0QkFDQUNF RkY4RDFGMDAeFw0yNTA0MjcwNjE0MDJaFw0yNTA0MjgwODQxMDJaMDMxMTAvBgNV BAMTKEUyREJENDEwMzdBQjk2OUY4MUREMTUyNDgxMDE1MEQyMDlDMDQ1RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLXGMFc2Wqy8qgROKCkr6b5cbL aekXyxxAzojhtgPJ8zN7qHVoEFb8fyTvRzCkWJmR6txlJoXczHx5UTgHXKHZCKGN upwBcRUbBEn3H6UTEbWpizKbz31++Eoxj0WIpsnkzw6BG25eYzIf0lyI4EsERogA w70N6sG31ZJTG7TAU/akjFYQIu6jNiJ3d/jfWrjT+M7QzDBt5OuD+uaDh/PKqGLO 5XQ2Kp7ZC49g+CsagwM92EF0WKrFnAVbnpNR1WHGYC0Oiqjf2+399NuiiZ4QAbjM 4SoXapUXhUFDosSQv9ymULeG4XPpSGTPkfCKbweV3V4FjUKUWe+4IGIsGkEhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU4tvUEDerlp+B3RUkgQFQ0gnARdMwHwYDVR0j BBgwFoAUG6NgnZZt2LIuX9VmfkusrO/40fAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FI cm8vMS8xQkEzNjA5RDk2NkREOEIyMkU1RkQ1NjY3RTRCQUNBQ0VGRjhEMUYwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCQTM2MDlEOTY2REQ4QjIy RTVGRDU2NjdFNEJBQ0FDRUZGOEQxRjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MkRHejFjNUFWM1lTd0dOcHVSRUZkcDE2RDY0WG5mNHhyNE1xRU5MR3FIcm8vMS8x QkEzNjA5RDk2NkREOEIyMkU1RkQ1NjY3RTRCQUNBQ0VGRjhEMUYwLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVXwRMqFcqulrnHUeULrR2NeutVz2QwoB+bjleclEJKKv300oTQQY/E4fXOv1 0qlR6+AxS7UviDFqCyX2ztdrUyqQcAyqu4XDZ9dyHObNBoGnnzM9HxZoAQndMM4F 33L/TGfmyWX8bnDMz0evYmwz7LB7Fe+teiqOk8MuKDBtNxzATMwZ/BngSwoq2qZP v+i6OMBNa76M3oqy8KC40d0fov21RMnwYdMgEHAEHXo24GnoRva94aoK59ZV/qUB xF+y1uZTNILOLZh8WjR6z2AFWP5JXdQQBv8kBglfwYa3mTEMpWWJrAgZ0rMjP9Co QgWjb3WWzss45fCvl0F2M/b3Zw== -----END CERTIFICATE-----Generated at Sun Apr 27 22:18:13 2025 by rpki-client