$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft File: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft (raw, json) Hash identifier: v23gJkW039SaZ0bShGu7aoDmnVqGbOOv7P91t43TP80= Subject key identifier: F7:6F:68:53:F9:5A:16:3D:E9:C1:22:81:11:3F:53:10:4D:A7:0A:9B Authority key identifier: 9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D Certificate issuer: /CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D Certificate serial: 654B8EBD595283B8B9D40D6BB1FF9D4E6F82E6D4 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer Subject info access: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft Manifest number: AE Signing time: Sun 27 Apr 2025 06:04:44 +0000 Manifest this update: Sun 27 Apr 2025 05:59:44 +0000 Manifest next update: Mon 28 Apr 2025 06:50:44 +0000 Files and hashes: 1: 34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa (hash: zwE7+BkACCSkaLuprz1tnvVDwiMXOKL8M0S4eDl2SuI=) 2: 9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl (hash: X/kzEhPrOzaYaxbrLfGtZfC6YNssBRAgkdJMb4VhqEw=) 3: 323830343a363861383a3a2f33322d313238203d3e20323639373037.roa (hash: z8KvPm2mQOim4DJBvpBUShLU77s/9n6vTftmZoh8lWE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 06:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:4b:8e:bd:59:52:83:b8:b9:d4:0d:6b:b1:ff:9d:4e:6f:82:e6:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D Validity Not Before: Apr 27 05:59:44 2025 GMT Not After : Apr 28 06:50:44 2025 GMT Subject: CN=F76F6853F95A163DE9C12281113F53104DA70A9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ae:b5:e2:fb:c2:54:87:85:82:ff:0c:6b:26: 30:6d:12:92:ec:da:ad:dd:a8:49:a7:c0:3a:dd:66: 18:bd:fa:d2:c9:4b:90:f4:38:a3:93:cb:a7:7a:0e: 34:e0:b6:c6:ef:54:49:60:f6:8a:e8:48:2d:fd:42: cb:c3:9b:46:95:5b:f9:60:d4:93:42:ce:92:6d:fe: ea:72:71:37:24:49:f6:34:2f:81:f2:49:bd:d0:02: 09:b1:1f:79:c6:ca:d2:a6:10:05:ac:40:92:e4:b4: 18:18:1a:ac:5d:3e:c5:12:11:ce:93:a6:83:d9:b3: 66:1c:97:ce:aa:da:68:0f:85:c3:a2:fa:a4:0d:dd: ea:dd:1b:98:83:ba:1d:4e:e9:45:4b:61:07:bb:13: 7c:f6:58:a5:ff:24:10:f9:6b:89:ad:d0:23:44:b2: 7b:d4:de:4c:c6:50:f2:6c:87:43:d6:b3:df:3e:60: 4e:ee:f6:40:db:bd:cf:1f:2a:fa:f7:60:bc:fa:b3: 62:41:b0:9e:a1:bf:76:14:a7:03:db:8d:75:20:54: ae:3e:b8:40:26:ff:a0:ac:9d:63:fe:ac:dc:13:f5: fa:81:bc:1b:16:96:6e:57:9f:eb:54:0b:ca:7c:dd: bc:2c:3f:40:e4:1b:7c:f5:43:af:71:ea:61:d1:c4: b2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6F:68:53:F9:5A:16:3D:E9:C1:22:81:11:3F:53:10:4D:A7:0A:9B X509v3 Authority Key Identifier: keyid:9D:4F:99:C5:0B:CE:62:2C:25:F6:CF:40:83:B3:CB:E3:64:C8:BA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/0/9D4F99C50BCE622C25F6CF4083B3CBE364C8BA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:99:d0:d0:d3:44:c1:ef:d4:ee:88:79:22:7f:2c:8d:7c:03: d9:4d:2e:e2:40:e4:a6:fe:90:d7:c4:02:af:d3:11:cf:57:a8: f9:1a:74:2a:1f:97:68:d4:27:35:a7:6d:d5:c5:77:a3:0e:db: 06:17:c4:da:fb:50:10:a3:41:ed:cd:06:f4:42:c4:d9:c4:92: d0:51:85:98:a6:52:dd:a7:3d:b0:32:a3:06:e0:dd:65:58:d6: e3:5b:20:33:b3:b7:9b:4d:9c:91:61:6a:57:be:21:c0:f4:10: 32:27:f3:d6:0c:39:72:62:02:7a:14:c2:0e:db:d0:3c:34:8d: e7:ac:64:0c:cd:ac:97:fc:b7:1c:93:c9:b4:43:b5:3b:25:5c: 8a:26:39:10:e6:a9:e9:0e:02:82:2a:9e:96:3a:bc:b4:0a:70: 89:11:f6:42:0a:c4:c8:84:4c:40:76:6d:66:f5:2a:cc:b2:7b: c1:84:b7:c7:a2:8f:b5:ba:97:4f:fb:3e:3b:cf:e5:4d:c3:e7: 9d:6e:53:64:cd:9e:2d:6f:5c:18:0f:a7:9b:3a:6d:d5:e1:46: 6d:63:49:1b:14:eb:f6:b8:83:34:97:cc:90:e5:c0:e5:cc:da: 38:98:74:c8:c9:51:e5:fc:f1:07:62:de:65:84:cc:ff:0f:ac: 80:5c:db:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZUuOvVlSg7i51A1rsf+dTm+C5tQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ0Rjk5QzUwQkNFNjIyQzI1RjZDRjQwODNCM0NCRTM2 NEM4QkExRDAeFw0yNTA0MjcwNTU5NDRaFw0yNTA0MjgwNjUwNDRaMDMxMTAvBgNV BAMTKEY3NkY2ODUzRjk1QTE2M0RFOUMxMjI4MTExM0Y1MzEwNERBNzBBOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLrrXi+8JUh4WC/wxrJjBtEpLs 2q3dqEmnwDrdZhi9+tLJS5D0OKOTy6d6DjTgtsbvVElg9oroSC39QsvDm0aVW/lg 1JNCzpJt/upycTckSfY0L4HySb3QAgmxH3nGytKmEAWsQJLktBgYGqxdPsUSEc6T poPZs2Ycl86q2mgPhcOi+qQN3erdG5iDuh1O6UVLYQe7E3z2WKX/JBD5a4mt0CNE snvU3kzGUPJsh0PWs98+YE7u9kDbvc8fKvr3YLz6s2JBsJ6hv3YUpwPbjXUgVK4+ uEAm/6CsnWP+rNwT9fqBvBsWlm5Xn+tUC8p83bwsP0DkG3z1Q69x6mHRxLKvAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU929oU/laFj3pwSKBET9TEE2nCpswHwYDVR0j BBgwFoAUnU+ZxQvOYiwl9s9Ag7PL42TIuh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmFQQ25nTGtjTG9ja3JBTnNLWHV1dFVvTnJkNE5vNURWeDYzQmZoQ0w2 TUcvMC85RDRGOTlDNTBCQ0U2MjJDMjVGNkNGNDA4M0IzQ0JFMzY0QzhCQTFELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlENEY5OUM1MEJDRTYyMkMy NUY2Q0Y0MDgzQjNDQkUzNjRDOEJBMUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmFQQ25nTGtjTG9ja3JBTnNLWHV1dFVvTnJkNE5vNURWeDYzQmZoQ0w2TUcvMC85 RDRGOTlDNTBCQ0U2MjJDMjVGNkNGNDA4M0IzQ0JFMzY0QzhCQTFELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMZnQ0NNEwe/U7oh5In8sjXwD2U0u4kDkpv6Q18QCr9MRz1eo+Rp0Kh+XaNQn Nadt1cV3ow7bBhfE2vtQEKNB7c0G9ELE2cSS0FGFmKZS3ac9sDKjBuDdZVjW41sg M7O3m02ckWFqV74hwPQQMifz1gw5cmICehTCDtvQPDSN56xkDM2sl/y3HJPJtEO1 OyVciiY5EOap6Q4Cgiqeljq8tApwiRH2QgrEyIRMQHZtZvUqzLJ7wYS3x6KPtbqX T/s+O8/lTcPnnW5TZM2eLW9cGA+nmzpt1eFGbWNJGxTr9riDNJfMkOXA5czaOJh0 yMlR5fzxB2LeZYTM/w+sgFzbxw== -----END CERTIFICATE-----Generated at Sun Apr 27 22:12:20 2025 by rpki-client