$ rpki-client -vvf rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft File: A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft (raw, json) Hash identifier: mtU8IDNrgB81fFJlfLzL4EfqDB4m88Eq1jo+vfwF9gM= Subject key identifier: 04:70:CC:FC:6A:E0:33:11:51:66:5A:88:09:71:43:50:4D:05:59:BE Authority key identifier: A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD Certificate issuer: /CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD Certificate serial: 65E03C0D15A13DF047DCEF0AF06DA3B3FE78472F Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer Subject info access: rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft Manifest number: 0208 Signing time: Tue 29 Apr 2025 01:49:24 +0000 Manifest this update: Tue 29 Apr 2025 01:44:24 +0000 Manifest next update: Wed 30 Apr 2025 01:59:24 +0000 Files and hashes: 1: 323830343a313966633a3a2f33322d313238203d3e203631383330.roa (hash: 1fBqlheobXcBImZUSmBR8xZUu4CjVeNok+HYscqNMOw=) 2: A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl (hash: 2n/QTNXh35rB8G15f7JJzJTQfEvT/CrOHTnEYQfi9uY=) 3: 3230312e3134302e3234302e302f32322d3332203d3e203631383330.roa (hash: 2GMI5l4Ze96BdW91sSpr2ML6DS2lIwQHnvz+4+faiFA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 01:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e0:3c:0d:15:a1:3d:f0:47:dc:ef:0a:f0:6d:a3:b3:fe:78:47:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A21C03DD09CDC2C00997594C20983473EF5ADAFD Validity Not Before: Apr 29 01:44:24 2025 GMT Not After : Apr 30 01:59:24 2025 GMT Subject: CN=0470CCFC6AE0331151665A88097143504D0559BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:5b:d9:c5:9d:33:b2:58:df:23:8a:4b:eb: 07:5a:45:76:e1:95:c8:5c:d7:d0:e7:ab:72:7c:c4: 4c:a8:7f:37:87:b9:b0:cb:56:ab:74:0f:d7:65:1a: aa:89:5d:2b:1f:48:ee:3b:79:b9:69:80:51:69:69: e9:97:48:52:73:77:99:d4:31:e2:1b:95:88:a6:48: 0f:d3:6c:58:3b:5d:8f:df:79:c8:fa:b8:54:ab:e4: 84:97:f4:9f:6f:d9:70:7a:71:39:23:f7:b7:41:e8: b7:9e:b1:66:75:ac:11:30:18:f1:33:27:d0:ac:05: 94:c8:85:a6:02:f3:d2:bd:f7:ee:36:b7:26:a2:a3: 67:3a:a6:c6:56:ec:0d:aa:b7:eb:93:04:a2:92:7d: 6a:49:27:27:dc:e7:1e:3d:f5:61:c5:e3:ef:bd:1f: 4b:8e:b8:13:7c:11:1e:6a:69:94:e3:eb:85:96:0a: 5e:89:3f:e4:75:61:b7:44:9b:b8:0a:3c:fb:84:3c: 95:34:2a:90:a1:58:0b:d9:b3:af:1d:48:cb:aa:73: 9b:57:21:ce:ae:12:4d:6a:b9:41:11:29:57:20:cb: c6:31:29:6e:7a:c0:ac:f5:1b:7d:38:4d:27:b2:51: 1a:37:68:3e:f8:79:21:fb:a4:0a:14:57:0e:78:92: d3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:70:CC:FC:6A:E0:33:11:51:66:5A:88:09:71:43:50:4D:05:59:BE X509v3 Authority Key Identifier: keyid:A2:1C:03:DD:09:CD:C2:C0:09:97:59:4C:20:98:34:73:EF:5A:DA:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A21C03DD09CDC2C00997594C20983473EF5ADAFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJ7CLn77V8oULMsfAzuH34bQANVkk5MwPFng5k9F6nK/2/A21C03DD09CDC2C00997594C20983473EF5ADAFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:68:b3:66:70:70:5c:4a:b2:8c:72:e5:53:df:de:88:ee:4a: b6:83:fa:73:cd:30:26:24:52:48:59:27:66:d9:ce:c6:e5:c1: 29:f8:4e:3d:d1:71:da:f4:a1:e9:9f:1c:18:47:19:79:49:83: cd:94:6b:b8:4b:38:51:99:c6:4b:65:00:e8:d3:06:19:2a:93: 51:11:8d:19:c8:74:cf:3e:9a:c2:e5:9c:d7:0a:47:da:f3:2a: bf:ca:be:dd:4d:41:6c:d1:19:a2:aa:86:0e:de:77:92:81:ab: ea:d1:38:15:7c:d0:6d:96:78:63:d2:37:44:ad:a7:0b:14:2c: ef:9f:60:1b:f7:79:71:88:ec:53:d2:46:74:5e:99:49:b9:83: 13:43:6f:8c:1f:2c:21:84:7f:cd:ad:69:50:4f:77:98:36:5e: 36:99:0e:a3:7a:28:2a:64:cc:bf:dc:54:76:83:63:3a:34:b7: 1f:2d:86:7d:26:4c:2e:6a:15:a1:d8:7b:de:34:45:55:9e:9a: 4b:6e:4f:10:56:ef:08:db:8b:19:f0:ff:cb:6f:22:5e:57:b6: 9b:8d:b9:65:63:e3:4b:68:7d:c1:a6:c0:bf:34:f9:6c:0b:5f: 8b:31:1f:e0:74:fd:75:c4:f2:e8:91:f8:61:92:32:22:d8:7e: aa:ec:61:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUZeA8DRWhPfBH3O8K8G2js/54Ry8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIxQzAzREQwOUNEQzJDMDA5OTc1OTRDMjA5ODM0NzNF RjVBREFGRDAeFw0yNTA0MjkwMTQ0MjRaFw0yNTA0MzAwMTU5MjRaMDMxMTAvBgNV BAMTKDA0NzBDQ0ZDNkFFMDMzMTE1MTY2NUE4ODA5NzE0MzUwNEQwNTU5QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4oVvZxZ0zsljfI4pL6wdaRXbh lchc19Dnq3J8xEyofzeHubDLVqt0D9dlGqqJXSsfSO47eblpgFFpaemXSFJzd5nU MeIblYimSA/TbFg7XY/fecj6uFSr5ISX9J9v2XB6cTkj97dB6LeesWZ1rBEwGPEz J9CsBZTIhaYC89K99+42tyaio2c6psZW7A2qt+uTBKKSfWpJJyfc5x499WHF4++9 H0uOuBN8ER5qaZTj64WWCl6JP+R1YbdEm7gKPPuEPJU0KpChWAvZs68dSMuqc5tX Ic6uEk1quUERKVcgy8YxKW56wKz1G304TSeyURo3aD74eSH7pAoUVw54ktOdAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUBHDM/GrgMxFRZlqICXFDUE0FWb4wHwYDVR0j BBgwFoAUohwD3QnNwsAJl1lMIJg0c+9a2v0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2 bksvMi9BMjFDMDNERDA5Q0RDMkMwMDk5NzU5NEMyMDk4MzQ3M0VGNUFEQUZELmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyMUMwM0REMDlDREMyQzAw OTk3NTk0QzIwOTgzNDczRUY1QURBRkQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M1NKN0NMbjc3VjhvVUxNc2ZBenVIMzRiUUFOVmtrNU13UEZuZzVrOUY2bksvMi9B MjFDMDNERDA5Q0RDMkMwMDk5NzU5NEMyMDk4MzQ3M0VGNUFEQUZELm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ2izZnBwXEqyjHLlU9/eiO5KtoP6c80wJiRSSFknZtnOxuXBKfhOPdFx2vSh 6Z8cGEcZeUmDzZRruEs4UZnGS2UA6NMGGSqTURGNGch0zz6awuWc1wpH2vMqv8q+ 3U1BbNEZoqqGDt53koGr6tE4FXzQbZZ4Y9I3RK2nCxQs759gG/d5cYjsU9JGdF6Z SbmDE0NvjB8sIYR/za1pUE93mDZeNpkOo3ooKmTMv9xUdoNjOjS3Hy2GfSZMLmoV odh73jRFVZ6aS25PEFbvCNuLGfD/y28iXle2m425ZWPjS2h9wabAvzT5bAtfizEf 4HT9dcTy6JH4YZIyIth+quxhpA== -----END CERTIFICATE-----Generated at Tue Apr 29 11:25:58 2025 by rpki-client