$ rpki-client -vvf rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft File: 2601DE669734AEE0385101964D2ED4C0B8A927D4.mft (raw, json) Hash identifier: 7enbO67uYZ/jmgN/yqSYMxVhZnzQryI12CDPRZPJ5OU= Subject key identifier: 3E:62:94:F6:FC:E2:20:5D:59:2F:E6:0C:00:38:64:4E:97:7C:15:4C Authority key identifier: 26:01:DE:66:97:34:AE:E0:38:51:01:96:4D:2E:D4:C0:B8:A9:27:D4 Certificate issuer: /CN=2601DE669734AEE0385101964D2ED4C0B8A927D4 Certificate serial: 577BB19B1838D331BFF94E17C4EE9173A2D2617F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer Subject info access: rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft Manifest number: 70 Signing time: Mon 05 May 2025 09:42:33 +0000 Manifest this update: Mon 05 May 2025 09:37:33 +0000 Manifest next update: Tue 06 May 2025 11:10:33 +0000 Files and hashes: 1: 323830343a383631343a3a2f33322d3434203d3e20323732363139.roa (hash: pQviQjOONbuzn6pqxVPP7SoctO2grbtBArJUd8XQvF4=) 2: 2601DE669734AEE0385101964D2ED4C0B8A927D4.crl (hash: m8MU5gIVTrjxJEGtea4HTWoDk5ZBxHjYvqx2394epBM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.crl rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 06 May 2025 11:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:7b:b1:9b:18:38:d3:31:bf:f9:4e:17:c4:ee:91:73:a2:d2:61:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2601DE669734AEE0385101964D2ED4C0B8A927D4 Validity Not Before: May 5 09:37:33 2025 GMT Not After : May 6 11:10:33 2025 GMT Subject: CN=3E6294F6FCE2205D592FE60C0038644E977C154C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fa:17:95:6c:a5:16:be:b7:c9:83:c2:2f:f7: ae:97:c4:51:80:7b:93:64:50:96:4e:bf:d5:18:ef: 86:22:1b:72:2b:ed:2c:13:22:b2:c9:3f:a0:53:bf: 09:55:22:d6:55:6b:95:80:3d:46:a7:a5:34:f7:54: 0f:b7:88:fa:86:41:ac:3c:de:43:64:0a:21:e5:a9: 91:70:3a:f6:7e:09:ff:0f:78:b0:e5:e3:14:61:db: 28:f2:d4:dd:64:bb:61:49:67:36:68:74:ec:32:9b: a9:6d:30:d3:e8:2d:c2:7f:25:68:25:ff:84:0a:13: 46:ca:c1:cb:43:73:d5:78:b6:6c:aa:0d:01:a2:3e: 2f:81:ec:15:dc:ed:ed:5f:9b:56:a4:e4:16:f5:16: 5a:95:cd:ce:45:b6:ac:c0:01:96:7b:4d:bc:37:b3: b3:83:ef:a4:b2:16:74:73:6f:b0:85:ca:32:c3:29: 6b:53:ea:0f:1d:3f:70:39:c7:44:2d:0c:28:69:4a: 76:46:bb:a4:1c:59:4b:49:ca:fa:f7:30:06:ef:ef: 8a:83:83:16:0e:4e:f0:f6:20:83:4a:a0:9e:ed:59: 4c:7f:50:15:89:11:67:99:ab:b0:4d:f4:69:fa:65: 9c:dd:77:fc:44:34:85:54:f2:7f:8d:b6:2b:d9:e6: 3c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:62:94:F6:FC:E2:20:5D:59:2F:E6:0C:00:38:64:4E:97:7C:15:4C X509v3 Authority Key Identifier: keyid:26:01:DE:66:97:34:AE:E0:38:51:01:96:4D:2E:D4:C0:B8:A9:27:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b2:51:19:1e:09:0c:7b:28:33:73:ca:dd:f3:cd:ab:73:8f: a1:8f:e5:0a:02:d5:f5:7d:af:43:ec:3d:79:96:a4:c3:a4:7a: e1:f8:f5:08:66:2c:c2:45:42:7e:4e:2d:d9:22:56:f8:79:ff: 3f:a3:bd:68:52:c0:d4:39:32:3f:8a:7b:e2:88:a3:90:84:67: 58:f3:26:c7:8d:22:d3:c8:51:30:15:35:e9:ac:39:d8:ee:4c: d1:8b:e2:c6:c8:b3:36:1a:11:c0:ea:f7:a2:15:47:be:6b:ac: 2b:38:14:ff:83:64:78:af:e3:ab:d2:f9:0d:f9:9a:74:a7:b2: d4:42:ad:ca:9f:51:03:0e:8e:37:a7:ae:2f:a7:de:40:9b:e0: f8:dd:26:b5:11:d5:cd:77:97:71:fa:f4:47:29:77:f8:09:7d: ce:b9:75:6a:06:be:38:45:a9:93:c6:07:10:0d:c6:64:d8:21: 88:9f:20:cc:a7:97:84:b3:e1:f6:30:8b:f1:0a:77:c5:cd:26: 31:52:5b:a4:e4:b5:23:4d:cf:93:4e:93:98:6e:00:e2:24:26: 83:af:38:47:6a:0d:bd:09:c7:7d:6c:75:16:c8:73:7f:62:1d: 3d:2b:fb:88:88:b5:f9:37:58:ca:0b:c0:ad:85:4c:e9:dc:d0: 9e:35:f5:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUV3uxmxg40zG/+U4XxO6Rc6LSYX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjYwMURFNjY5NzM0QUVFMDM4NTEwMTk2NEQyRUQ0QzBC OEE5MjdENDAeFw0yNTA1MDUwOTM3MzNaFw0yNTA1MDYxMTEwMzNaMDMxMTAvBgNV BAMTKDNFNjI5NEY2RkNFMjIwNUQ1OTJGRTYwQzAwMzg2NDRFOTc3QzE1NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE+heVbKUWvrfJg8Iv966XxFGA e5NkUJZOv9UY74YiG3Ir7SwTIrLJP6BTvwlVItZVa5WAPUanpTT3VA+3iPqGQaw8 3kNkCiHlqZFwOvZ+Cf8PeLDl4xRh2yjy1N1ku2FJZzZodOwym6ltMNPoLcJ/JWgl /4QKE0bKwctDc9V4tmyqDQGiPi+B7BXc7e1fm1ak5Bb1FlqVzc5FtqzAAZZ7Tbw3 s7OD76SyFnRzb7CFyjLDKWtT6g8dP3A5x0QtDChpSnZGu6QcWUtJyvr3MAbv74qD gxYOTvD2IINKoJ7tWUx/UBWJEWeZq7BN9Gn6ZZzdd/xENIVU8n+NtivZ5jxrAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPmKU9vziIF1ZL+YMADhkTpd8FUwwHwYDVR0j BBgwFoAUJgHeZpc0ruA4UQGWTS7UwLipJ9QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnVaVnJaZ0tTeHJ0MllCaWtaUzNmRTdFY1BId25UYTlFd3Z3cmI3MzlU MXIvMC8yNjAxREU2Njk3MzRBRUUwMzg1MTAxOTY0RDJFRDRDMEI4QTkyN0Q0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2MDFERTY2OTczNEFFRTAz ODUxMDE5NjREMkVENEMwQjhBOTI3RDQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnVaVnJaZ0tTeHJ0MllCaWtaUzNmRTdFY1BId25UYTlFd3Z3cmI3MzlUMXIvMC8y NjAxREU2Njk3MzRBRUUwMzg1MTAxOTY0RDJFRDRDMEI4QTkyN0Q0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAILJRGR4JDHsoM3PK3fPNq3OPoY/lCgLV9X2vQ+w9eZakw6R64fj1CGYswkVC fk4t2SJW+Hn/P6O9aFLA1DkyP4p74oijkIRnWPMmx40i08hRMBU16aw52O5M0Yvi xsizNhoRwOr3ohVHvmusKzgU/4NkeK/jq9L5DfmadKey1EKtyp9RAw6ON6euL6fe QJvg+N0mtRHVzXeXcfr0Ryl3+Al9zrl1aga+OEWpk8YHEA3GZNghiJ8gzKeXhLPh 9jCL8Qp3xc0mMVJbpOS1I03Pk06TmG4A4iQmg684R2oNvQnHfWx1Fshzf2IdPSv7 iIi1+TdYygvArYVM6dzQnjX14Q== -----END CERTIFICATE-----Generated at Mon May 5 20:58:31 2025 by rpki-client