$ rpki-client -vvf rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft File: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft (raw, json) Hash identifier: 3740u4Nv61Lt8dVBXxjQOGHPpoz5WT+GsKDtFTcaTOQ= Subject key identifier: 39:4A:1A:32:18:1A:D9:71:C2:CB:BE:CB:79:D8:4C:22:18:B3:FE:D6 Authority key identifier: 9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC Certificate issuer: /CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Certificate serial: 5D45C1433B04EE1CABBFD9086B3ABEAE6D06929D Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject info access: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft Manifest number: 72 Signing time: Sun 27 Apr 2025 09:04:43 +0000 Manifest this update: Sun 27 Apr 2025 08:59:43 +0000 Manifest next update: Mon 28 Apr 2025 12:10:43 +0000 Files and hashes: 1: 3136382e3232372e35362e302f32322d3234203d3e20323634383830.roa (hash: ZIjfSo+Y8U8r36JCVeoF2b5UMYHuJK9csANlSvslsHk=) 2: 9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl (hash: WZTERCyyK9HNTctqBZ9OZiUbjSiV7fpa6zVzGpkOJVk=) 3: 323830343a326634303a3a2f33322d3438203d3e20323634383830.roa (hash: 3g8/sjxV8E647/HAZRmu2PV+IP7H3yOgtmHvSu2jRew=) 4: 3137302e3234362e3138342e302f32322d3234203d3e20323634383830.roa (hash: vIm2Zj8tyzVDc+8CKc8N8ILHLVLvBtHG21RZkNA4OZE=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 12:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:45:c1:43:3b:04:ee:1c:ab:bf:d9:08:6b:3a:be:ae:6d:06:92:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC Validity Not Before: Apr 27 08:59:43 2025 GMT Not After : Apr 28 12:10:43 2025 GMT Subject: CN=394A1A32181AD971C2CBBECB79D84C2218B3FED6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:be:10:be:c8:fa:19:0c:dd:7a:d4:2f:c3:98: d9:bc:d1:92:21:d2:f1:16:71:00:d8:f9:46:35:6f: 4f:f4:c6:7f:2c:c4:94:28:59:ec:c1:a4:a1:e2:e7: 3c:40:2f:20:06:69:13:a2:64:45:8d:be:3f:9e:76: a1:08:af:cd:c3:96:59:11:2f:18:f8:65:1a:0d:20: be:56:a9:01:ca:cd:00:41:cf:7f:62:71:b7:59:05: bc:ab:b4:dd:ca:51:89:b9:7d:28:44:6d:da:4f:35: f5:3f:f9:b4:ec:ee:ad:10:6f:12:36:82:3c:ed:b1: 70:aa:7a:fb:4a:8f:95:c3:06:f9:45:1e:6b:24:cd: 10:d1:bc:61:dc:0d:94:67:d3:a1:e6:0d:93:2e:a0: 45:c3:de:1b:06:f4:b0:c9:07:71:53:e8:01:c6:db: 91:fc:e9:90:ff:30:ed:f6:4c:3b:6b:0f:d5:e2:76: 0d:f4:29:72:ec:75:fe:4f:d1:49:15:86:51:94:3f: b5:c3:cf:5b:ba:f4:aa:70:4f:56:8c:0a:40:3f:58: 98:72:5f:a9:4a:21:e5:1c:11:f3:9d:a6:3c:33:ea: a5:21:b3:d7:42:60:2c:bb:fc:31:13:b6:44:f2:a0: c5:9f:fd:05:ad:eb:9e:e5:1a:91:84:13:c6:3e:ca: d9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4A:1A:32:18:1A:D9:71:C2:CB:BE:CB:79:D8:4C:22:18:B3:FE:D6 X509v3 Authority Key Identifier: keyid:9A:32:CD:91:FC:E9:CA:DB:F2:8B:ED:F4:C7:20:E6:7B:79:AF:B9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/9A32CD91FCE9CADBF28BEDF4C720E67B79AFB9CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:bd:43:16:48:74:e4:41:da:3b:04:22:9a:29:91:a1:0c:8b: ec:e7:18:b3:8b:43:fa:53:60:b1:9a:b0:80:7e:cd:f8:c1:dc: 16:e7:ed:d6:8b:ef:4e:88:2d:51:cc:04:61:9e:84:2d:03:f6: 86:bd:8a:b6:af:94:6a:c9:c9:83:34:b8:a0:3f:38:7a:ba:d1: a4:0b:a9:74:90:19:41:6c:29:ea:2c:36:62:54:dd:b4:f7:b3: 53:50:e1:a8:fb:98:6e:71:f9:a0:f1:a2:a0:6b:9a:6b:e7:df: 1e:21:19:23:ae:dc:be:93:21:8a:9c:94:97:84:15:b1:6e:46: 02:ba:25:e6:05:d7:70:ef:26:41:bd:ef:67:7e:72:cf:25:a1: 3c:dd:c2:5c:0b:c4:6f:19:36:ef:ec:9b:70:33:9f:1e:6e:0a: 69:4a:ae:ce:e0:7d:04:00:2d:9a:0e:62:37:d9:2f:89:8a:71: 25:d3:72:67:a1:98:81:40:7a:e9:66:ff:eb:ce:c3:f1:65:a7: 98:41:ba:cc:80:b3:09:24:8e:78:b5:e2:aa:9c:12:a9:e7:9c: 34:7c:0d:60:65:ad:c1:3c:d6:23:a2:1f:69:ad:e7:f1:47:0b: b5:ae:64:26:92:a8:4e:20:cc:b9:db:dc:a2:50:14:cd:fb:9e: 5d:3e:d1:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUXUXBQzsE7hyrv9kIazq+rm0Gkp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEzMkNEOTFGQ0U5Q0FEQkYyOEJFREY0QzcyMEU2N0I3 OUFGQjlDQzAeFw0yNTA0MjcwODU5NDNaFw0yNTA0MjgxMjEwNDNaMDMxMTAvBgNV BAMTKDM5NEExQTMyMTgxQUQ5NzFDMkNCQkVDQjc5RDg0QzIyMThCM0ZFRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSvhC+yPoZDN161C/DmNm80ZIh 0vEWcQDY+UY1b0/0xn8sxJQoWezBpKHi5zxALyAGaROiZEWNvj+edqEIr83DllkR Lxj4ZRoNIL5WqQHKzQBBz39icbdZBbyrtN3KUYm5fShEbdpPNfU/+bTs7q0QbxI2 gjztsXCqevtKj5XDBvlFHmskzRDRvGHcDZRn06HmDZMuoEXD3hsG9LDJB3FT6AHG 25H86ZD/MO32TDtrD9Xidg30KXLsdf5P0UkVhlGUP7XDz1u69KpwT1aMCkA/WJhy X6lKIeUcEfOdpjwz6qUhs9dCYCy7/DETtkTyoMWf/QWt657lGpGEE8Y+ytn3AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUOUoaMhga2XHCy77LedhMIhiz/tYwHwYDVR0j BBgwFoAUmjLNkfzpytvyi+30xyDme3mvucwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1 Q2gvMC85QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlBMzJDRDkxRkNFOUNBREJG MjhCRURGNEM3MjBFNjdCNzlBRkI5Q0MuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1Q2gvMC85 QTMyQ0Q5MUZDRTlDQURCRjI4QkVERjRDNzIwRTY3Qjc5QUZCOUNDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEANL1DFkh05EHaOwQimimRoQyL7OcYs4tD+lNgsZqwgH7N+MHcFuft1ovvTogt UcwEYZ6ELQP2hr2Ktq+UasnJgzS4oD84errRpAupdJAZQWwp6iw2YlTdtPezU1Dh qPuYbnH5oPGioGuaa+ffHiEZI67cvpMhipyUl4QVsW5GArol5gXXcO8mQb3vZ35y zyWhPN3CXAvEbxk27+ybcDOfHm4KaUquzuB9BAAtmg5iN9kviYpxJdNyZ6GYgUB6 6Wb/687D8WWnmEG6zICzCSSOeLXiqpwSqeecNHwNYGWtwTzWI6Ifaa3n8UcLta5k JpKoTiDMudvcolAUzfueXT7RGg== -----END CERTIFICATE-----Generated at Mon Apr 28 03:26:08 2025 by rpki-client