$ rpki-client -vvf rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft File: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft (raw, json) Hash identifier: ol0AKq22CFfXs0HRUc9qn3JLAuBZ7KRsdinHks7iMG0= Subject key identifier: E6:4F:E0:BF:76:CB:CF:38:58:A9:A7:05:E5:47:C9:04:99:D0:45:39 Authority key identifier: 33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 Certificate issuer: /CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Certificate serial: 4F57089F43897C813A164E76554098971A6251B6 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer Subject info access: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft Manifest number: FD Signing time: Sun 27 Apr 2025 17:44:50 +0000 Manifest this update: Sun 27 Apr 2025 17:39:50 +0000 Manifest next update: Mon 28 Apr 2025 18:27:50 +0000 Files and hashes: 1: 323830343a333336303a303a3230303a3a2f35352d3535203d3e20323632373235.roa (hash: YnAj4nnRHR0yIlpmVv3W9tpP6AuEMBjIff491ksaPns=) 2: 3138362e3139322e302e302f32302d3234203d3e20323632373235.roa (hash: 7Tsl7qx1NouUrFNWT4qI6MJPqrTpsHOTmqv/UGnXNJg=) 3: 33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl (hash: JJOgAxtWvD+CbnlLUD7YMLlT5QvFnib26EFX0alOGeI=) 4: 3138362e3233352e36342e302f32302d3234203d3e20323632373235.roa (hash: 1Hkni3TKW3kNQ83mB3nTYeJWQ9mBS7c7zWqWXIg/zDI=) 5: 323830343a333336303a3a2f33322d3438203d3e20323632373235.roa (hash: Vzzy94kvUWUhTx7QLr4vzuitWlbJCB8GpWrdimQi6+8=) 6: 323830343a333336303a303a33303a3a2f36342d3634203d3e20323632373235.roa (hash: PHplbTnXXeq+ONmNsldvZhcMoF9KEK65+ZkGU2g4Cac=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 18:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:57:08:9f:43:89:7c:81:3a:16:4e:76:55:40:98:97:1a:62:51:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33D99D98BFD993CB7DE4284CD0B834BDAA1FB768 Validity Not Before: Apr 27 17:39:50 2025 GMT Not After : Apr 28 18:27:50 2025 GMT Subject: CN=E64FE0BF76CBCF3858A9A705E547C90499D04539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:95:26:f1:18:d4:eb:de:03:4d:ef:a4:58:b6: 87:ee:7f:25:c5:80:de:ac:2e:5e:eb:66:bb:0c:cc: 31:fe:77:d3:03:49:d9:c5:2e:4f:6e:03:62:e8:73: 2a:e6:71:35:24:2e:3f:2b:5c:f9:82:e8:82:ae:40: 3f:83:22:a6:28:3d:98:2f:0e:54:7e:f3:d7:35:cc: 9d:cc:85:c0:39:95:88:64:55:48:dd:86:10:47:17: 09:0b:b7:d6:b6:9c:b0:a9:93:e5:8d:ff:3a:0f:84: 7b:db:0b:8c:c7:15:ef:ee:dc:f2:1c:80:3c:a8:2d: 9c:86:a8:e8:c6:71:01:19:6c:da:4e:97:53:65:75: 68:a7:a3:1a:82:6f:4d:07:7c:16:d8:da:6d:7b:ee: c2:5b:bc:38:14:f7:92:64:4d:b8:17:f5:2b:48:30: 11:0b:e6:07:0c:de:dc:62:89:34:72:55:d4:19:63: a6:6a:68:c8:1f:dd:47:94:84:d7:77:68:7a:f9:ea: e5:b6:e2:5b:48:e2:1a:03:51:47:b9:e4:56:69:1c: af:b0:00:f9:46:a2:67:75:2a:1b:11:93:c7:31:aa: f8:02:cf:41:9e:38:4a:36:6f:5e:60:ca:68:63:47: 10:80:c2:d2:c2:8d:e0:1b:f2:79:13:1b:8f:4f:ce: 67:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4F:E0:BF:76:CB:CF:38:58:A9:A7:05:E5:47:C9:04:99:D0:45:39 X509v3 Authority Key Identifier: keyid:33:D9:9D:98:BF:D9:93:CB:7D:E4:28:4C:D0:B8:34:BD:AA:1F:B7:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KXkan1P1xc7JNJjtPeLTmsGGQt8ifRtVZPYTuri3NUR/0/33D99D98BFD993CB7DE4284CD0B834BDAA1FB768.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a2:8a:8f:b9:ed:bc:fe:e2:31:57:af:11:48:0d:c9:b8:42: eb:8a:f5:3c:08:02:c0:23:79:2b:5a:3b:7c:66:01:02:c7:38: 35:90:40:08:a5:1e:0c:90:5f:c3:d0:b2:d3:6a:bf:6a:36:4e: d7:b8:9c:cd:04:91:59:61:f0:f5:0b:d5:7d:81:e3:2b:37:ff: 25:ef:bf:70:15:d2:8e:23:cd:5b:76:74:25:a4:ba:89:1c:63: 1f:2a:8a:af:59:33:b5:1a:fe:a7:43:6b:9d:59:b0:41:0a:5e: 01:f8:57:b1:e9:b6:fe:62:19:8e:96:af:ca:ef:e5:5a:60:7b: 3b:15:2b:3b:6a:82:89:90:7c:49:4f:09:fd:9f:0e:91:b7:a9: ba:11:62:c6:c3:4d:43:6e:d7:64:9b:67:54:ba:0b:b7:ab:22: 24:23:7b:64:0b:39:b2:61:c9:40:bf:d6:e0:f0:f4:ba:08:8f: 04:cf:72:23:5e:c8:97:3f:fb:97:01:c5:e5:7c:f0:7c:8b:95: 51:db:8f:5b:fd:d2:40:2f:fb:40:ef:1d:90:13:87:e2:b9:db: 3d:f5:ee:3f:00:7f:36:5c:cd:d3:c4:37:62:5e:81:90:ef:b0: 44:ca:d3:74:e1:01:98:50:2e:c3:31:66:e4:93:00:a0:94:e9: 5a:f2:fc:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUT1cIn0OJfIE6Fk52VUCYlxpiUbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNEOTlEOThCRkQ5OTNDQjdERTQyODRDRDBCODM0QkRB QTFGQjc2ODAeFw0yNTA0MjcxNzM5NTBaFw0yNTA0MjgxODI3NTBaMDMxMTAvBgNV BAMTKEU2NEZFMEJGNzZDQkNGMzg1OEE5QTcwNUU1NDdDOTA0OTlEMDQ1MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCglSbxGNTr3gNN76RYtofufyXF gN6sLl7rZrsMzDH+d9MDSdnFLk9uA2LocyrmcTUkLj8rXPmC6IKuQD+DIqYoPZgv DlR+89c1zJ3MhcA5lYhkVUjdhhBHFwkLt9a2nLCpk+WN/zoPhHvbC4zHFe/u3PIc gDyoLZyGqOjGcQEZbNpOl1NldWinoxqCb00HfBbY2m177sJbvDgU95JkTbgX9StI MBEL5gcM3txiiTRyVdQZY6ZqaMgf3UeUhNd3aHr56uW24ltI4hoDUUe55FZpHK+w APlGomd1KhsRk8cxqvgCz0GeOEo2b15gymhjRxCAwtLCjeAb8nkTG49PzmfxAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU5k/gv3bLzzhYqacF5UfJBJnQRTkwHwYDVR0j BBgwFoAUM9mdmL/Zk8t95ChM0Lg0vaoft2gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM0tYa2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNO VVIvMC8zM0Q5OUQ5OEJGRDk5M0NCN0RFNDI4NENEMEI4MzRCREFBMUZCNzY4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzRDk5RDk4QkZEOTkzQ0I3 REU0Mjg0Q0QwQjgzNEJEQUExRkI3NjguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M0tYa2FuMVAxeGM3Sk5KanRQZUxUbXNHR1F0OGlmUnRWWlBZVHVyaTNOVVIvMC8z M0Q5OUQ5OEJGRDk5M0NCN0RFNDI4NENEMEI4MzRCREFBMUZCNzY4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnaKKj7ntvP7iMVevEUgNybhC64r1PAgCwCN5K1o7fGYBAsc4NZBACKUeDJBf w9Cy02q/ajZO17iczQSRWWHw9QvVfYHjKzf/Je+/cBXSjiPNW3Z0JaS6iRxjHyqK r1kztRr+p0NrnVmwQQpeAfhXsem2/mIZjpavyu/lWmB7OxUrO2qCiZB8SU8J/Z8O kbepuhFixsNNQ27XZJtnVLoLt6siJCN7ZAs5smHJQL/W4PD0ugiPBM9yI17Ilz/7 lwHF5XzwfIuVUduPW/3SQC/7QO8dkBOH4rnbPfXuPwB/NlzN08Q3Yl6BkO+wRMrT dOEBmFAuwzFm5JMAoJTpWvL8vQ== -----END CERTIFICATE-----Generated at Mon Apr 28 10:01:51 2025 by rpki-client