$ rpki-client -vvf rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft File: 3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft (raw, json) Hash identifier: 5r2FEom1JALvI0WmalhGSJnQ08CN8v9+d3EHAVCqpfw= Subject key identifier: 1D:E2:36:96:C5:06:5B:5D:7B:35:69:6C:91:F7:6D:0D:A2:0D:15:E9 Authority key identifier: 3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E Certificate issuer: /CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E Certificate serial: 3901C40D2266C93DEC78E7BFCDC19F30B21981FC Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer Subject info access: rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft Manifest number: 7F Signing time: Tue 29 Apr 2025 19:36:47 +0000 Manifest this update: Tue 29 Apr 2025 19:31:47 +0000 Manifest next update: Wed 30 Apr 2025 19:36:47 +0000 Files and hashes: 1: 3138392e35302e3232302e302f32342d3234203d3e20323730353531.roa (hash: XIK3trgOduFvYXpauvrEY/zSl++zplK4JsYkuaGD2gw=) 2: 3138392e35302e3232332e302f32342d3234203d3e20323730353531.roa (hash: tg53L27JqwL4FND+rLzsbtuLYRRo/BSqrNhOQnodd2w=) 3: 323830343a366462383a3a2f33322d3332203d3e20323730353531.roa (hash: FV+S+TZX84Q03vR1jKTgDhNyXgTv5smpg9WGAeALcHM=) 4: 3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl (hash: uAfX1tkv/YJfIpGAhVRQmSPgtaPO3us9DNpdE+Y3nBw=) 5: 3138392e35302e3232302e302f32322d3232203d3e20323730353531.roa (hash: AX9jQRnpyOWBuTJjKmVSaEOA2ZYYCjSkvfBgQQ9WXbA=) 6: 3138392e35302e3232312e302f32342d3234203d3e20323730353531.roa (hash: a5PrF0/f461Ynit6WvECovL5BWmEJeQoBlDUQq7HxQo=) 7: 3138392e35302e3232322e302f32342d3234203d3e20323730353531.roa (hash: UsQOMyZHtsc6TaHqA0joIAL0Xfjc2PpvhLLL00pQDVA=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 30 Apr 2025 19:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:01:c4:0d:22:66:c9:3d:ec:78:e7:bf:cd:c1:9f:30:b2:19:81:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E Validity Not Before: Apr 29 19:31:47 2025 GMT Not After : Apr 30 19:36:47 2025 GMT Subject: CN=1DE23696C5065B5D7B35696C91F76D0DA20D15E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1d:1f:cf:d8:d3:9a:8d:34:cb:48:c1:59:18: 9c:32:ae:58:67:7a:b2:42:ba:f1:b9:7a:e5:f6:cd: a7:07:4b:43:b4:88:e5:1d:8f:b5:57:7a:6c:06:5a: ce:a2:f5:d6:88:16:a9:4b:bc:f9:4c:48:43:a2:a0: 66:15:fc:91:46:0c:ff:2b:d1:44:67:7d:5c:0b:69: 87:c1:6e:00:f1:4a:f8:84:7d:c5:b2:79:6e:8e:9c: bb:8a:54:a4:e9:ec:73:70:ac:e4:35:f9:b9:c0:62: f7:76:07:d1:41:f3:62:a7:a4:c4:58:4b:5e:c8:e1: d4:c7:7f:4f:4d:1d:10:99:4f:db:db:b7:bd:9c:8e: 7e:62:35:b3:2c:a9:22:ac:92:01:a4:4c:03:8e:9f: 87:46:b6:23:05:bf:7f:a6:e7:7c:87:13:47:1e:9f: f7:59:91:88:d5:2e:07:6b:a8:91:43:06:ee:a7:bc: d6:b6:73:2c:ab:90:06:64:8f:fc:b7:22:1c:80:cf: 42:8b:db:6a:07:4c:66:dc:58:20:f8:8b:eb:6f:f4: f5:2d:2c:a6:8f:80:37:69:8c:8b:26:55:84:b7:d6: 34:25:e7:a8:c8:c8:25:6c:0f:cf:ef:83:e1:e4:7a: dd:7e:6e:e8:b9:65:a3:0f:7e:f5:56:f7:bf:5e:51: 39:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E2:36:96:C5:06:5B:5D:7B:35:69:6C:91:F7:6D:0D:A2:0D:15:E9 X509v3 Authority Key Identifier: keyid:3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c3:57:05:c7:2d:a8:1c:fc:67:a2:b7:66:dc:86:7b:4e:79: 74:79:d3:42:78:82:ba:dc:cb:e8:3c:22:0d:aa:23:cf:d9:38: c1:ed:a0:d5:d6:93:2e:fc:d0:d8:52:37:65:a9:d1:ab:c7:0f: 18:a7:fe:fc:c6:af:41:45:b1:b3:0b:1c:44:ff:be:5e:a7:d4: 5c:51:20:56:58:b3:5b:c1:92:3d:91:ec:a7:25:e2:60:17:24: 11:fb:77:4c:47:45:54:3c:c4:99:33:57:8d:71:80:c3:97:31: c6:4f:85:62:83:61:40:24:84:5b:66:4d:55:42:b7:32:8d:f0: c2:29:30:7f:a9:e6:c2:0e:2b:96:c4:12:94:73:11:ec:4c:9d: 2c:90:7b:1c:a3:0d:17:d5:14:65:2c:4c:1b:1b:c8:bc:dc:b0: 01:a4:63:0b:b0:0c:39:4c:31:72:99:3f:a3:fa:53:17:5b:5f: 0c:b2:c6:48:ea:ae:a6:ab:8f:b4:af:36:ff:97:e9:14:47:a2: 90:d7:8f:4e:4d:a5:ba:d9:64:b6:15:c4:bb:04:3d:2c:43:41: 41:b3:20:c1:ac:6c:a9:fa:5a:cb:78:27:15:20:e7:bd:c7:7e: 3f:69:d2:b7:44:65:8b:f2:67:c0:ee:9e:62:11:cd:aa:be:bf: a9:31:73:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUOQHEDSJmyT3seOe/zcGfMLIZgfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QyQTFBMDk0MjQ1RDQwNzQ3NEY5MzE4NkNFM0YyNUZG QkJFRTU5RTAeFw0yNTA0MjkxOTMxNDdaFw0yNTA0MzAxOTM2NDdaMDMxMTAvBgNV BAMTKDFERTIzNjk2QzUwNjVCNUQ3QjM1Njk2QzkxRjc2RDBEQTIwRDE1RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTHR/P2NOajTTLSMFZGJwyrlhn erJCuvG5euX2zacHS0O0iOUdj7VXemwGWs6i9daIFqlLvPlMSEOioGYV/JFGDP8r 0URnfVwLaYfBbgDxSviEfcWyeW6OnLuKVKTp7HNwrOQ1+bnAYvd2B9FB82KnpMRY S17I4dTHf09NHRCZT9vbt72cjn5iNbMsqSKskgGkTAOOn4dGtiMFv3+m53yHE0ce n/dZkYjVLgdrqJFDBu6nvNa2cyyrkAZkj/y3IhyAz0KL22oHTGbcWCD4i+tv9PUt LKaPgDdpjIsmVYS31jQl56jIyCVsD8/vg+Hket1+bui5ZaMPfvVW979eUTkhAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUHeI2lsUGW117NWlskfdtDaINFekwHwYDVR0j BBgwFoAUPSoaCUJF1AdHT5MYbOPyX/u+5Z4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEM1dDNWbXI5ajdheDFBWEdLMXVzd1FHeHREcXlaVGtMRk1MZ1puVGNu UmcvMC8zRDJBMUEwOTQyNDVENDA3NDc0RjkzMTg2Q0UzRjI1RkZCQkVFNTlFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEMkExQTA5NDI0NUQ0MDc0 NzRGOTMxODZDRTNGMjVGRkJCRUU1OUUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEM1dDNWbXI5ajdheDFBWEdLMXVzd1FHeHREcXlaVGtMRk1MZ1puVGNuUmcvMC8z RDJBMUEwOTQyNDVENDA3NDc0RjkzMTg2Q0UzRjI1RkZCQkVFNTlFLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPcNXBcctqBz8Z6K3ZtyGe055dHnTQniCutzL6DwiDaojz9k4we2g1daTLvzQ 2FI3ZanRq8cPGKf+/MavQUWxswscRP++XqfUXFEgVlizW8GSPZHspyXiYBckEft3 TEdFVDzEmTNXjXGAw5cxxk+FYoNhQCSEW2ZNVUK3Mo3wwikwf6nmwg4rlsQSlHMR 7EydLJB7HKMNF9UUZSxMGxvIvNywAaRjC7AMOUwxcpk/o/pTF1tfDLLGSOqupquP tK82/5fpFEeikNePTk2lutlkthXEuwQ9LENBQbMgwaxsqfpay3gnFSDnvcd+P2nS t0Rli/JnwO6eYhHNqr6/qTFzeQ== -----END CERTIFICATE-----Generated at Tue Apr 29 21:26:40 2025 by rpki-client