$ rpki-client -vvf rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft File: 43897DFF118E56C31A35958D9EA818504B130E11.mft (raw, json) Hash identifier: 9kbzhQsx9FlrxnOjOSR7Z/+IixdalhNtyZ9fpT7J3jw= Subject key identifier: 12:69:78:5A:67:4A:9E:00:F4:12:1C:9B:44:F1:EE:84:5E:39:CE:6F Authority key identifier: 43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11 Certificate issuer: /CN=43897DFF118E56C31A35958D9EA818504B130E11 Certificate serial: 66E0E321A92A3AE3921A11BB4397D8EB1D768454 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer Subject info access: rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft Manifest number: 01EB Signing time: Tue 29 Apr 2025 15:59:30 +0000 Manifest this update: Tue 29 Apr 2025 15:54:30 +0000 Manifest next update: Wed 30 Apr 2025 16:45:30 +0000 Files and hashes: 1: 3230302e3130382e3136342e302f32322d3234203d3e20323730323635.roa (hash: /O80p7I/BsID3L+7Tx/zgFUSWMrzsJTiDGJmySOhPvQ=) 2: 323830343a363935633a3a2f33322d3430203d3e20323730323635.roa (hash: 7dYPTrKAi61IYALwp4StVtHMzIcECDDN9J/7R5yuyAg=) 3: 43897DFF118E56C31A35958D9EA818504B130E11.crl (hash: NbINnzjgkgU0NBWuoG4QiYp9O3E9tFb2qvEmgYnsSbg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 16:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e0:e3:21:a9:2a:3a:e3:92:1a:11:bb:43:97:d8:eb:1d:76:84:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43897DFF118E56C31A35958D9EA818504B130E11 Validity Not Before: Apr 29 15:54:30 2025 GMT Not After : Apr 30 16:45:30 2025 GMT Subject: CN=1269785A674A9E00F4121C9B44F1EE845E39CE6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:84:b7:ee:bb:70:f5:3e:c4:5d:78:54:0d:ab: 33:ab:c7:87:4a:2e:6c:69:3a:7c:ac:19:94:1a:ba: 8d:7d:2e:45:8e:da:ec:36:2c:25:17:37:c2:e7:d7: f4:c5:ea:cc:9e:7d:17:91:06:08:e3:51:7d:fe:46: 16:7f:66:88:a4:5c:53:34:1d:20:7b:3b:93:3e:1b: 2d:a1:b1:77:41:43:eb:e3:07:cc:f4:55:42:52:06: b0:79:d1:de:5a:56:8e:fc:8b:ea:b7:f0:06:e4:4c: 66:53:63:7a:39:f2:d3:3e:0c:da:e1:bf:cb:15:7a: 33:04:47:8c:1f:24:73:d4:00:76:72:42:c5:1d:82: 8f:71:29:8a:27:2a:9f:7e:17:27:e7:1d:53:ca:b8: 1b:9e:ed:5f:02:b5:32:c1:8a:d2:cd:63:aa:2d:de: 3e:2c:3e:75:34:55:b3:6d:7c:b7:64:62:fd:a4:72: 2f:80:e9:37:c5:26:85:82:39:c6:8a:83:91:dc:44: b2:1f:91:7f:69:c7:d7:d9:a4:94:12:7e:0f:05:54: c0:91:7f:e9:a4:85:2f:5e:c6:13:28:03:c3:d3:8d: c0:c6:ce:03:e0:79:b9:b6:94:18:8e:36:bf:bf:1c: a8:26:90:32:7d:68:98:c2:e9:26:13:92:2f:32:47: 24:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:69:78:5A:67:4A:9E:00:F4:12:1C:9B:44:F1:EE:84:5E:39:CE:6F X509v3 Authority Key Identifier: keyid:43:89:7D:FF:11:8E:56:C3:1A:35:95:8D:9E:A8:18:50:4B:13:0E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43897DFF118E56C31A35958D9EA818504B130E11.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/39R3CVtEqeGQFDK3R7B5HeVLj4aHTqQtUM5r8SVokie2/0/43897DFF118E56C31A35958D9EA818504B130E11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a8:89:ed:b3:d7:c9:24:b1:59:e2:c6:2e:f8:4c:93:d5:d5: 6f:53:29:19:5c:b2:68:a8:d0:e5:27:ff:73:45:f9:48:34:8d: 91:e0:a6:c3:13:63:5e:b9:99:ca:f2:16:73:a1:dc:26:e6:ab: f4:19:36:2f:d4:9c:25:c0:46:a1:f4:97:28:1d:7c:34:2d:85: f1:d5:f2:8c:bb:48:4f:bb:d3:32:75:ce:2d:9b:23:3f:4b:43: 63:7c:2d:f1:6b:8e:d0:c4:85:84:18:2b:7e:1d:c2:fc:43:1c: c8:d2:40:92:0a:a5:f0:b6:68:8c:d9:47:1c:d9:ba:dd:22:59: a4:50:1a:55:ab:a7:3f:12:47:da:81:48:2b:ca:ec:0b:ae:f6: cd:12:a9:76:f1:b0:a0:49:ea:10:98:3b:a1:fa:54:a3:99:4e: 86:02:dc:cc:4e:a6:be:aa:4b:a2:33:6b:fc:5b:66:25:99:82: c0:6f:77:e2:56:78:d6:68:6a:1b:72:6d:4f:7e:87:73:9f:e6: 38:a6:e3:f1:42:61:c7:b4:29:6f:e5:ac:ca:68:47:5c:fe:87: 0e:ad:8e:a6:4f:cb:c3:11:d2:0b:d1:c6:41:cb:d3:b9:04:38: 5b:82:c7:66:5e:e9:df:97:1a:fe:61:2b:f9:7d:8b:2f:8a:37: 60:eb:17:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZuDjIakqOuOSGhG7Q5fY6x12hFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM4OTdERkYxMThFNTZDMzFBMzU5NThEOUVBODE4NTA0 QjEzMEUxMTAeFw0yNTA0MjkxNTU0MzBaFw0yNTA0MzAxNjQ1MzBaMDMxMTAvBgNV BAMTKDEyNjk3ODVBNjc0QTlFMDBGNDEyMUM5QjQ0RjFFRTg0NUUzOUNFNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLhLfuu3D1PsRdeFQNqzOrx4dK LmxpOnysGZQauo19LkWO2uw2LCUXN8Ln1/TF6syefReRBgjjUX3+RhZ/ZoikXFM0 HSB7O5M+Gy2hsXdBQ+vjB8z0VUJSBrB50d5aVo78i+q38AbkTGZTY3o58tM+DNrh v8sVejMER4wfJHPUAHZyQsUdgo9xKYonKp9+FyfnHVPKuBue7V8CtTLBitLNY6ot 3j4sPnU0VbNtfLdkYv2kci+A6TfFJoWCOcaKg5HcRLIfkX9px9fZpJQSfg8FVMCR f+mkhS9exhMoA8PTjcDGzgPgebm2lBiONr+/HKgmkDJ9aJjC6SYTki8yRySRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEml4WmdKngD0EhybRPHuhF45zm8wHwYDVR0j BBgwFoAUQ4l9/xGOVsMaNZWNnqgYUEsTDhEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMzlSM0NWdEVxZUdRRkRLM1I3QjVIZVZMajRhSFRxUXRVTTVyOFNWb2tp ZTIvMC80Mzg5N0RGRjExOEU1NkMzMUEzNTk1OEQ5RUE4MTg1MDRCMTMwRTExLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzODk3REZGMTE4RTU2QzMx QTM1OTU4RDlFQTgxODUwNEIxMzBFMTEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MzlSM0NWdEVxZUdRRkRLM1I3QjVIZVZMajRhSFRxUXRVTTVyOFNWb2tpZTIvMC80 Mzg5N0RGRjExOEU1NkMzMUEzNTk1OEQ5RUE4MTg1MDRCMTMwRTExLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM6iJ7bPXySSxWeLGLvhMk9XVb1MpGVyyaKjQ5Sf/c0X5SDSNkeCmwxNjXrmZ yvIWc6HcJuar9Bk2L9ScJcBGofSXKB18NC2F8dXyjLtIT7vTMnXOLZsjP0tDY3wt 8WuO0MSFhBgrfh3C/EMcyNJAkgql8LZojNlHHNm63SJZpFAaVaunPxJH2oFIK8rs C672zRKpdvGwoEnqEJg7ofpUo5lOhgLczE6mvqpLojNr/FtmJZmCwG934lZ41mhq G3JtT36Hc5/mOKbj8UJhx7Qpb+WsymhHXP6HDq2Opk/LwxHSC9HGQcvTuQQ4W4LH Zl7p35ca/mEr+X2LL4o3YOsXOw== -----END CERTIFICATE-----Generated at Wed Apr 30 03:49:40 2025 by rpki-client