$ rpki-client -vvf rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft File: C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft (raw, json) Hash identifier: Hr8UQNx3LMJEc3gmJk2OXbtKa1j16ZbRwD8bbTfJZDk= Subject key identifier: 75:DA:F0:B2:63:58:FD:24:A7:BF:33:E2:C5:68:6C:7B:D7:8D:0E:53 Authority key identifier: C4:15:92:2F:5B:DC:B2:CD:CF:5C:21:42:D4:9F:80:F8:78:9A:0F:49 Certificate issuer: /CN=C415922F5BDCB2CDCF5C2142D49F80F8789A0F49 Certificate serial: 059F7FFDC69EE5C181D6784DECA91607F4F0F462 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer Subject info access: rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft Manifest number: 0203 Signing time: Mon 28 Apr 2025 09:15:46 +0000 Manifest this update: Mon 28 Apr 2025 09:10:46 +0000 Manifest next update: Tue 29 Apr 2025 12:19:46 +0000 Files and hashes: 1: 323830343a353466383a3a2f33322d3332203d3e20323638363831.roa (hash: l5tMqCIL7uBusTfXV1I+XZ+H5PbxWfeLrf5CFIwer+Q=) 2: C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.crl (hash: F/7UQ6ho8fNnRwwhQjnNJHbIOUZmRENxdtFBv8AuVJg=) 3: 34352e3136352e39322e302f32322d3234203d3e20323638363831.roa (hash: xkndpxSWLgIvlVDbgR0GBVWnaeOnom0T/C1prhscmG8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.crl rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 02:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:9f:7f:fd:c6:9e:e5:c1:81:d6:78:4d:ec:a9:16:07:f4:f0:f4:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C415922F5BDCB2CDCF5C2142D49F80F8789A0F49 Validity Not Before: Apr 28 09:10:46 2025 GMT Not After : Apr 29 12:19:46 2025 GMT Subject: CN=75DAF0B26358FD24A7BF33E2C5686C7BD78D0E53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8a:65:25:93:c9:a2:5c:ce:eb:b7:97:0a:fb: 1c:b3:ff:b8:43:77:76:b8:84:96:38:8c:8c:39:08: 7d:a5:c7:f4:ef:37:b8:c2:2a:a5:80:85:e3:53:82: 46:25:f3:b3:17:6a:82:3f:a6:14:e9:15:21:eb:f3: 19:ed:5f:d7:bb:c7:63:42:3d:2d:93:cf:7b:59:9d: 5b:85:c6:b6:26:34:fb:e6:90:cc:67:e0:32:c9:4d: a2:df:71:86:22:71:47:6f:c7:df:6f:c7:45:ef:b2: 9f:c6:49:65:77:00:ba:c0:2f:f0:75:1d:ac:76:24: 0b:d8:39:8e:66:0b:13:b5:ae:72:2a:32:4e:04:73: 4f:97:4f:58:18:1c:d3:a9:a3:61:f7:2f:a6:f0:b3: 22:02:7c:db:cd:74:57:05:56:b4:2a:91:c3:47:28: fa:86:a3:98:ef:33:61:a0:71:2e:1f:ec:e4:e8:e7: b1:51:53:f4:8e:2c:4d:e3:69:29:32:46:ba:6d:c5: 14:ef:e3:ce:35:31:b8:12:7f:dc:4e:b5:9c:31:2e: c4:15:5c:68:cc:81:c1:1f:32:3f:12:19:79:71:59: 9b:73:07:91:a4:bd:ad:f3:3d:67:1d:2f:50:76:d7: 5c:ec:a3:3d:f2:5c:9a:79:52:95:d9:21:8a:d0:ff: 52:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DA:F0:B2:63:58:FD:24:A7:BF:33:E2:C5:68:6C:7B:D7:8D:0E:53 X509v3 Authority Key Identifier: keyid:C4:15:92:2F:5B:DC:B2:CD:CF:5C:21:42:D4:9F:80:F8:78:9A:0F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:39:9c:c9:0e:14:2f:6d:57:b1:2e:cf:03:d5:82:e1:e8:e9: a2:20:d7:b9:64:e6:60:e4:10:09:90:21:b8:c8:7e:5c:d4:8e: c2:02:65:b8:2d:22:f1:be:7a:85:9d:1d:9a:4e:c6:a9:2b:a8: 3a:d2:d7:ca:d9:01:b3:3e:b7:5e:64:86:95:b7:51:34:21:c8: b0:a4:ee:63:33:fd:a7:97:61:fb:a5:c3:d0:d6:86:40:2c:9a: 0a:c0:52:0a:22:71:18:5e:d5:09:30:66:33:e6:9d:cd:e2:71: b7:d5:21:c3:c7:1d:ee:a5:f8:75:f1:e4:8e:25:c0:4d:d9:af: 08:07:b1:fa:95:87:7d:dc:82:b8:d7:c1:30:7e:26:91:a3:a4: 6d:17:81:86:ea:99:34:55:3a:cc:89:43:e7:04:07:d9:4b:62: d2:ee:bc:df:ed:60:75:2c:06:25:0b:37:8d:f1:f0:bb:c6:ff: 2b:e2:1f:2e:d5:27:99:72:16:96:41:af:b3:51:ab:99:f8:93: 07:7f:72:5b:5b:fb:cc:21:57:ca:e5:30:bb:63:a2:c0:e1:fb: 32:40:49:0c:99:75:7e:78:c5:e8:f0:f0:7f:86:00:8b:4d:6e: 4d:b9:d8:a8:4c:f7:72:ce:a0:3e:95:3b:46:d0:c4:0f:4b:6c: 1f:ad:e6:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUBZ9//cae5cGB1nhN7KkWB/Tw9GIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQxNTkyMkY1QkRDQjJDRENGNUMyMTQyRDQ5RjgwRjg3 ODlBMEY0OTAeFw0yNTA0MjgwOTEwNDZaFw0yNTA0MjkxMjE5NDZaMDMxMTAvBgNV BAMTKDc1REFGMEIyNjM1OEZEMjRBN0JGMzNFMkM1Njg2QzdCRDc4RDBFNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqimUlk8miXM7rt5cK+xyz/7hD d3a4hJY4jIw5CH2lx/TvN7jCKqWAheNTgkYl87MXaoI/phTpFSHr8xntX9e7x2NC PS2Tz3tZnVuFxrYmNPvmkMxn4DLJTaLfcYYicUdvx99vx0Xvsp/GSWV3ALrAL/B1 Hax2JAvYOY5mCxO1rnIqMk4Ec0+XT1gYHNOpo2H3L6bwsyICfNvNdFcFVrQqkcNH KPqGo5jvM2GgcS4f7OTo57FRU/SOLE3jaSkyRrptxRTv4841MbgSf9xOtZwxLsQV XGjMgcEfMj8SGXlxWZtzB5Gkva3zPWcdL1B211zsoz3yXJp5UpXZIYrQ/1LNAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUddrwsmNY/SSnvzPixWhse9eNDlMwHwYDVR0j BBgwFoAUxBWSL1vcss3PXCFC1J+A+HiaD0kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0NNc1lRRU00UVF1VGNBS2tBU3JlVEd1VHhMemJ4ZmtjWm9hUmd2RkFU SGMvMi9DNDE1OTIyRjVCRENCMkNEQ0Y1QzIxNDJENDlGODBGODc4OUEwRjQ5LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0MTU5MjJGNUJEQ0IyQ0RD RjVDMjE0MkQ0OUY4MEY4Nzg5QTBGNDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0NNc1lRRU00UVF1VGNBS2tBU3JlVEd1VHhMemJ4ZmtjWm9hUmd2RkFUSGMvMi9D NDE1OTIyRjVCRENCMkNEQ0Y1QzIxNDJENDlGODBGODc4OUEwRjQ5Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgjmcyQ4UL21XsS7PA9WC4ejpoiDXuWTmYOQQCZAhuMh+XNSOwgJluC0i8b56 hZ0dmk7GqSuoOtLXytkBsz63XmSGlbdRNCHIsKTuYzP9p5dh+6XD0NaGQCyaCsBS CiJxGF7VCTBmM+adzeJxt9Uhw8cd7qX4dfHkjiXATdmvCAex+pWHfdyCuNfBMH4m kaOkbReBhuqZNFU6zIlD5wQH2Uti0u683+1gdSwGJQs3jfHwu8b/K+IfLtUnmXIW lkGvs1GrmfiTB39yW1v7zCFXyuUwu2OiwOH7MkBJDJl1fnjF6PDwf4YAi01uTbnY qEz3cs6gPpU7RtDED0tsH63mWQ== -----END CERTIFICATE-----Generated at Mon Apr 28 10:58:53 2025 by rpki-client