$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft File: D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft (raw, json) Hash identifier: cJ24EfqRzonB+43Azi6zfebRgDi6QT01zTn7XsJzo2g= Subject key identifier: 82:29:F5:B4:58:86:99:E3:00:85:0D:E2:1C:03:FF:66:19:7A:7B:41 Authority key identifier: D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B Certificate issuer: /CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B Certificate serial: 3BD665FD5330F1D381E7D70D4260AD0FEEB2ED11 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer Subject info access: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft Manifest number: AD Signing time: Thu 01 May 2025 07:57:58 +0000 Manifest this update: Thu 01 May 2025 07:52:58 +0000 Manifest next update: Fri 02 May 2025 11:43:58 +0000 Files and hashes: 1: 323830343a313234633a3a2f33322d3438203d3e20323633343638.roa (hash: T2k3XHzj+R5PWM1PAn1IiRXkMkZU+kzdLTKOTB9BdPU=) 2: 3137372e37332e36302e302f32322d3234203d3e20323633343638.roa (hash: ojNYwHHCihvNSk2FkbyfGPhui+Fo/NptmXx53NBSpaQ=) 3: D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl (hash: kWjyrLN5Uk+bYlNbs8Y5eaoEzhcYiy9Ie2G33iIMwGc=) 4: 3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa (hash: mQl+DqMitEfto4sm/J239pDInofAJ055830zO5LsIjU=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 02 May 2025 11:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d6:65:fd:53:30:f1:d3:81:e7:d7:0d:42:60:ad:0f:ee:b2:ed:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D374F54280FC9CF7E9068C6FF744FA5AD149D71B Validity Not Before: May 1 07:52:58 2025 GMT Not After : May 2 11:43:58 2025 GMT Subject: CN=8229F5B4588699E300850DE21C03FF66197A7B41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:26:95:d9:5e:08:fa:cf:94:72:4a:fd:2e:b3: 40:b6:14:26:32:65:db:df:15:8b:12:af:20:95:7e: 6e:57:6c:b1:9a:1e:0d:69:36:7d:eb:23:a9:0e:c0: 60:0b:60:27:ec:2d:0c:c6:f2:02:94:97:a6:6e:aa: 04:fc:74:65:7a:b1:e8:a3:08:b5:f3:17:94:81:c9: 9b:82:aa:03:1a:f8:39:cd:03:9c:41:45:a7:75:b2: 58:03:46:02:b4:cc:31:1e:5d:93:9d:48:cb:ca:1c: 81:06:b6:7b:03:83:f6:6a:04:33:7d:cb:58:7b:59: b4:53:b9:f7:79:1b:11:6c:80:31:20:4a:09:16:b4: 56:05:f8:65:26:cb:82:cd:2a:ee:58:2a:c8:49:2a: b4:ca:83:ac:14:9f:7f:4e:43:b2:3f:58:32:23:17: d9:0e:84:a7:d6:94:8b:84:1a:56:27:b4:9b:47:74: 16:ba:d8:a5:6f:9b:28:21:89:e9:26:4e:9a:a1:dc: d5:2d:59:83:0a:39:74:39:ab:dc:61:e3:9f:68:ca: ce:19:d4:24:b2:26:6f:ac:b1:a6:9a:f0:9b:2d:f0: 16:f0:8f:20:68:85:0a:c2:70:5c:66:0c:7c:42:99: d5:5b:b6:d0:c8:ba:6b:ee:2d:15:c6:a7:e2:79:bd: 7c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:29:F5:B4:58:86:99:E3:00:85:0D:E2:1C:03:FF:66:19:7A:7B:41 X509v3 Authority Key Identifier: keyid:D3:74:F5:42:80:FC:9C:F7:E9:06:8C:6F:F7:44:FA:5A:D1:49:D7:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/D374F54280FC9CF7E9068C6FF744FA5AD149D71B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a1:79:78:44:53:46:7b:af:b7:88:ca:5f:90:a3:b4:e3:7e: 10:53:e5:34:ed:42:bb:5b:d9:bc:dc:98:1f:47:d0:00:a9:a0: e0:a2:c2:1e:55:d2:11:5b:34:e7:45:eb:eb:72:fa:ef:43:7f: a2:25:68:5a:38:ba:c1:8d:c6:48:40:bb:fe:7a:c4:f8:4a:e1: de:78:e1:78:25:ed:e7:75:24:fc:5d:88:d1:9b:1b:20:c3:cb: ce:33:40:9b:59:c4:f2:df:5b:1a:0d:e7:a7:25:8c:8f:59:31: 11:ab:bd:26:47:ef:07:b6:19:af:54:45:cb:89:c9:f8:6b:fb: 71:30:bd:61:07:27:cc:eb:99:82:8b:9b:5d:42:ad:43:8e:c1: 6a:1e:32:37:26:b1:d6:78:30:d3:21:f2:2f:f2:6b:d5:a1:e8: 0c:29:cd:0a:74:ce:cd:5e:ab:88:b3:c3:09:a5:25:31:8a:0c: f5:98:af:e3:65:73:02:c9:3b:dc:32:a3:f3:67:96:f1:04:42: 15:c6:b9:78:35:8e:b0:e3:da:fb:44:b7:6a:44:6f:1f:f5:b5: 1d:25:19:d0:09:33:57:1f:11:19:5e:78:12:ad:36:6c:9a:b7: 05:9c:12:12:92:a4:62:b0:3a:c7:50:f7:7e:cc:a4:af:f2:39: 4f:1d:63:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUO9Zl/VMw8dOB59cNQmCtD+6y7REwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM3NEY1NDI4MEZDOUNGN0U5MDY4QzZGRjc0NEZBNUFE MTQ5RDcxQjAeFw0yNTA1MDEwNzUyNThaFw0yNTA1MDIxMTQzNThaMDMxMTAvBgNV BAMTKDgyMjlGNUI0NTg4Njk5RTMwMDg1MERFMjFDMDNGRjY2MTk3QTdCNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfJpXZXgj6z5RySv0us0C2FCYy ZdvfFYsSryCVfm5XbLGaHg1pNn3rI6kOwGALYCfsLQzG8gKUl6ZuqgT8dGV6seij CLXzF5SByZuCqgMa+DnNA5xBRad1slgDRgK0zDEeXZOdSMvKHIEGtnsDg/ZqBDN9 y1h7WbRTufd5GxFsgDEgSgkWtFYF+GUmy4LNKu5YKshJKrTKg6wUn39OQ7I/WDIj F9kOhKfWlIuEGlYntJtHdBa62KVvmyghiekmTpqh3NUtWYMKOXQ5q9xh459oys4Z 1CSyJm+ssaaa8Jst8BbwjyBohQrCcFxmDHxCmdVbttDIumvuLRXGp+J5vXyfAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUgin1tFiGmeMAhQ3iHAP/Zhl6e0EwHwYDVR0j BBgwFoAU03T1QoD8nPfpBoxv90T6WtFJ1xswDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0Vh blkvMC9EMzc0RjU0MjgwRkM5Q0Y3RTkwNjhDNkZGNzQ0RkE1QUQxNDlENzFCLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNzRGNTQyODBGQzlDRjdF OTA2OEM2RkY3NDRGQTVBRDE0OUQ3MUIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v Mk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0VhblkvMC9E Mzc0RjU0MjgwRkM5Q0Y3RTkwNjhDNkZGNzQ0RkE1QUQxNDlENzFCLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc6F5eERTRnuvt4jKX5CjtON+EFPlNO1Cu1vZvNyYH0fQAKmg4KLCHlXSEVs0 50Xr63L670N/oiVoWji6wY3GSEC7/nrE+Erh3njheCXt53Uk/F2I0ZsbIMPLzjNA m1nE8t9bGg3npyWMj1kxEau9JkfvB7YZr1RFy4nJ+Gv7cTC9YQcnzOuZgoubXUKt Q47Bah4yNyax1ngw0yHyL/Jr1aHoDCnNCnTOzV6riLPDCaUlMYoM9Ziv42VzAsk7 3DKj82eW8QRCFca5eDWOsOPa+0S3akRvH/W1HSUZ0AkzVx8RGV54Eq02bJq3BZwS EpKkYrA6x1D3fsykr/I5Tx1jMg== -----END CERTIFICATE-----Generated at Fri May 2 03:46:35 2025 by rpki-client