$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft File: DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft (raw, json) Hash identifier: MsFNnYseHbH6QJh/f98GyjaAU3fKutj2t0XTukMs5ko= Subject key identifier: CA:4B:74:E4:2B:87:89:84:82:CE:55:60:ED:77:5A:CB:2D:2D:FB:93 Authority key identifier: DC:34:ED:8D:E5:4B:D2:FA:BE:03:A2:7A:E8:FF:76:59:60:6B:65:42 Certificate issuer: /CN=DC34ED8DE54BD2FABE03A27AE8FF7659606B6542 Certificate serial: 792C29E335B13869C8B1803B642AC27170F53D4C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.cer Subject info access: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft Manifest number: B2 Signing time: Tue 29 Apr 2025 12:31:11 +0000 Manifest this update: Tue 29 Apr 2025 12:26:11 +0000 Manifest next update: Wed 30 Apr 2025 13:05:11 +0000 Files and hashes: 1: DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.crl (hash: GqJXq4cg7iP6xbrYEC3oC4TQ11+mAUNZqt2PI508OSI=) 2: 3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (hash: zkubuxRpLG1gutEslbctXHKpEp2A7E4iQzNQuetKYz4=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.crl rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 13:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:2c:29:e3:35:b1:38:69:c8:b1:80:3b:64:2a:c2:71:70:f5:3d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34ED8DE54BD2FABE03A27AE8FF7659606B6542 Validity Not Before: Apr 29 12:26:11 2025 GMT Not After : Apr 30 13:05:11 2025 GMT Subject: CN=CA4B74E42B87898482CE5560ED775ACB2D2DFB93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cc:37:84:99:5b:71:e6:63:57:2c:d2:5d:92: 11:57:13:d5:de:b4:69:07:23:ff:7e:46:4b:80:34: e7:20:d7:e9:65:29:41:4b:34:35:5c:80:00:4f:98: 62:58:aa:ee:70:5e:c7:86:15:1f:56:c6:fd:49:55: 48:26:f9:2c:ef:15:2c:a6:e4:cf:66:18:6d:df:42: fa:b1:02:ce:80:36:4f:10:af:a8:8e:7b:5d:56:ab: 92:2c:07:a8:19:35:27:98:01:d2:8f:05:d6:47:54: 62:36:fd:b1:d9:30:f0:f3:fb:06:8f:db:24:38:32: 8d:06:b6:c1:46:ad:6b:e4:46:2d:11:37:fb:27:1a: f3:58:1a:1f:63:cd:7b:7b:1f:97:43:fc:8f:7f:b3: 37:4a:b9:eb:9e:34:fc:67:6a:e9:b5:42:97:d3:e0: 43:53:42:4a:ef:6a:af:9a:83:54:d6:ba:45:0c:59: 43:9c:4b:fe:0b:1d:4d:1b:00:75:9c:65:ec:07:2f: c1:69:77:ac:c8:df:c5:14:b7:3e:c6:7c:83:38:14: ce:f3:d5:25:78:84:18:c3:91:31:b4:74:be:e6:a5: 8a:6c:47:ae:9e:83:f6:29:0e:d3:d2:c8:13:0d:d1: 51:9f:d0:af:d7:0a:6f:67:21:cf:06:4c:5b:71:c1: 7c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4B:74:E4:2B:87:89:84:82:CE:55:60:ED:77:5A:CB:2D:2D:FB:93 X509v3 Authority Key Identifier: keyid:DC:34:ED:8D:E5:4B:D2:FA:BE:03:A2:7A:E8:FF:76:59:60:6B:65:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/DC34ED8DE54BD2FABE03A27AE8FF7659606B6542.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e0:f2:8f:25:e8:2c:cd:84:4c:35:02:da:97:c9:a3:b5:0a: 93:0c:15:0b:4a:00:b9:90:a3:1e:1c:75:2c:e0:f1:ea:b4:57: cd:6a:01:eb:25:c8:b7:93:b8:fa:12:98:4e:6c:36:72:28:27: 90:f9:c2:d5:0a:4f:f2:f2:40:25:29:16:6b:0a:f4:26:24:45: 96:1d:1e:7f:d8:f8:70:58:d9:30:f5:8e:87:80:65:f8:cb:92: c9:22:f9:7b:4d:56:0a:46:b5:4d:87:13:74:a3:1a:9b:74:5b: ed:07:ed:22:09:8f:2c:5d:97:a7:4b:41:5b:36:d7:cb:b5:5a: c2:5b:10:ca:ff:23:1f:dd:30:d0:41:a2:0e:23:28:61:af:38: 24:53:78:2f:9f:15:1e:d4:64:1b:e6:25:ee:7c:38:2e:a5:07: eb:2c:79:d0:90:20:ee:57:89:58:21:5c:14:0f:9c:6a:bd:94: d4:63:f6:4b:e5:01:2c:ad:ab:f7:a2:08:ff:b0:60:59:bb:3c: ed:37:12:c0:93:a4:51:49:5b:df:0a:74:ad:81:68:1b:92:6b: 52:79:5a:8a:14:63:ea:31:28:14:5b:5c:64:cb:78:de:40:c9: bf:30:87:71:19:b4:b2:a8:58:48:5f:04:2b:18:70:f3:9d:70: d4:2f:2e:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUeSwp4zWxOGnIsYA7ZCrCcXD1PUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEVEOERFNTRCRDJGQUJFMDNBMjdBRThGRjc2NTk2 MDZCNjU0MjAeFw0yNTA0MjkxMjI2MTFaFw0yNTA0MzAxMzA1MTFaMDMxMTAvBgNV BAMTKENBNEI3NEU0MkI4Nzg5ODQ4MkNFNTU2MEVENzc1QUNCMkQyREZCOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDazDeEmVtx5mNXLNJdkhFXE9Xe tGkHI/9+RkuANOcg1+llKUFLNDVcgABPmGJYqu5wXseGFR9Wxv1JVUgm+SzvFSym 5M9mGG3fQvqxAs6ANk8Qr6iOe11Wq5IsB6gZNSeYAdKPBdZHVGI2/bHZMPDz+waP 2yQ4Mo0GtsFGrWvkRi0RN/snGvNYGh9jzXt7H5dD/I9/szdKueueNPxnaum1QpfT 4ENTQkrvaq+ag1TWukUMWUOcS/4LHU0bAHWcZewHL8Fpd6zI38UUtz7GfIM4FM7z 1SV4hBjDkTG0dL7mpYpsR66eg/YpDtPSyBMN0VGf0K/XCm9nIc8GTFtxwXydAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUykt05CuHiYSCzlVg7Xdayy0t+5MwHwYDVR0j BBgwFoAU3DTtjeVL0vq+A6J66P92WWBrZUIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkz Q2kvMS9EQzM0RUQ4REU1NEJEMkZBQkUwM0EyN0FFOEZGNzY1OTYwNkI2NTQyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMzRFRDhERTU0QkQyRkFC RTAzQTI3QUU4RkY3NjU5NjA2QjY1NDIuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkzQ2kvMS9E QzM0RUQ4REU1NEJEMkZBQkUwM0EyN0FFOEZGNzY1OTYwNkI2NTQyLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaeDyjyXoLM2ETDUC2pfJo7UKkwwVC0oAuZCjHhx1LODx6rRXzWoB6yXIt5O4 +hKYTmw2cignkPnC1QpP8vJAJSkWawr0JiRFlh0ef9j4cFjZMPWOh4Bl+MuSySL5 e01WCka1TYcTdKMam3Rb7QftIgmPLF2Xp0tBWzbXy7VawlsQyv8jH90w0EGiDiMo Ya84JFN4L58VHtRkG+Yl7nw4LqUH6yx50JAg7leJWCFcFA+car2U1GP2S+UBLK2r 96II/7BgWbs87TcSwJOkUUlb3wp0rYFoG5JrUnlaihRj6jEoFFtcZMt43kDJvzCH cRm0sqhYSF8EKxhw851w1C8u2Q== -----END CERTIFICATE-----Generated at Tue Apr 29 17:45:00 2025 by rpki-client