$ rpki-client -vvf rpki-repo.registro.br/repo/4HzPT4fbZP6DZcGwGJR1kX1bxBWAKkY6eth6hMuocsTL/0/3810FB892A861E12E8FAE64FBDA04320F34EEEB6.mft File: 3810FB892A861E12E8FAE64FBDA04320F34EEEB6.mft (raw, json) Hash identifier: 2rMrSHixQvXOnF6BxyZEUCwYDJWcGHF7XYEPtBdWBy8= Subject key identifier: 9C:B0:0D:F4:60:75:95:31:4C:56:7E:57:03:E8:9B:74:79:41:EE:57 Authority key identifier: 38:10:FB:89:2A:86:1E:12:E8:FA:E6:4F:BD:A0:43:20:F3:4E:EE:B6 Certificate issuer: /CN=3810FB892A861E12E8FAE64FBDA04320F34EEEB6 Certificate serial: C308C5ADA490D6300E8399C70555396BF1B349 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3810FB892A861E12E8FAE64FBDA04320F34EEEB6.cer Subject info access: rsync://rpki-repo.registro.br/repo/4HzPT4fbZP6DZcGwGJR1kX1bxBWAKkY6eth6hMuocsTL/0/3810FB892A861E12E8FAE64FBDA04320F34EEEB6.mft Manifest number: 2C Signing time: Sun 27 Apr 2025 20:02:43 +0000 Manifest this update: Sun 27 Apr 2025 19:57:43 +0000 Manifest next update: Mon 28 Apr 2025 23:32:43 +0000 Files and hashes: 1: 323830343a316566633a3a2f33322d3634203d3e20323634343538.roa (hash: 8gGlmoOYmUP7cyP0pbO1IEGr2XyzpajsDzGwIBpkImg=) 2: 3133322e3235352e38342e302f32322d3234203d3e20323634343538.roa (hash: LvJeMVfLy3BkQi96hs7tqIcrq4KFk5gVKP+QsvuLT74=) 3: 3810FB892A861E12E8FAE64FBDA04320F34EEEB6.crl (hash: ohE8ejRs+e68Gsj6UhjdIvA+DYIZqQ+KfBIg+WIvldw=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/4HzPT4fbZP6DZcGwGJR1kX1bxBWAKkY6eth6hMuocsTL/0/3810FB892A861E12E8FAE64FBDA04320F34EEEB6.crl rsync://rpki-repo.registro.br/repo/4HzPT4fbZP6DZcGwGJR1kX1bxBWAKkY6eth6hMuocsTL/0/3810FB892A861E12E8FAE64FBDA04320F34EEEB6.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3810FB892A861E12E8FAE64FBDA04320F34EEEB6.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 20:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c3:08:c5:ad:a4:90:d6:30:0e:83:99:c7:05:55:39:6b:f1:b3:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3810FB892A861E12E8FAE64FBDA04320F34EEEB6 Validity Not Before: Apr 27 19:57:43 2025 GMT Not After : Apr 28 23:32:43 2025 GMT Subject: CN=9CB00DF4607595314C567E5703E89B747941EE57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b3:e3:2b:95:ac:34:a8:b3:58:cb:a8:cb:4e: b9:a0:7f:c2:a2:95:a2:b6:73:d8:89:71:b4:34:0b: a8:41:80:97:f6:f5:a9:f2:35:ea:1c:a0:15:2d:94: a6:78:77:35:72:99:b8:4f:e0:7f:39:27:72:b1:49: a7:ba:f3:38:e7:4e:85:e4:31:49:4e:31:0c:8f:1f: 81:57:db:73:91:9a:94:6a:1d:f9:f6:f0:b2:8c:95: 71:61:47:eb:ba:40:bc:44:aa:aa:9d:f0:78:6c:51: 93:e6:23:8a:d0:59:20:c7:da:55:43:ee:2b:51:09: ba:e5:7e:2a:d8:1e:bc:51:35:f2:cb:fc:1e:23:2d: 4b:2f:28:d9:ee:4c:f8:52:1d:d4:b9:a5:22:2e:05: 5f:2e:ff:07:ca:b0:92:ef:71:59:74:2c:2f:55:b3: e4:3b:8c:80:56:ef:1d:a3:2a:c7:a1:d7:79:a3:bd: 0d:97:01:c6:ef:88:98:b1:0a:c1:dc:01:e8:07:90: aa:06:0a:bb:e4:ec:70:dc:27:79:19:5a:47:a2:36: ef:ff:31:af:f0:80:dc:3b:a6:81:93:5f:96:30:f0: d1:4f:a5:7b:63:38:3f:9e:5e:8e:35:11:be:2f:b5: ca:d3:38:99:f9:76:f0:7c:3b:a8:dc:2b:23:b6:ea: e4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B0:0D:F4:60:75:95:31:4C:56:7E:57:03:E8:9B:74:79:41:EE:57 X509v3 Authority Key Identifier: keyid:38:10:FB:89:2A:86:1E:12:E8:FA:E6:4F:BD:A0:43:20:F3:4E:EE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/4HzPT4fbZP6DZcGwGJR1kX1bxBWAKkY6eth6hMuocsTL/0/3810FB892A861E12E8FAE64FBDA04320F34EEEB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3810FB892A861E12E8FAE64FBDA04320F34EEEB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HzPT4fbZP6DZcGwGJR1kX1bxBWAKkY6eth6hMuocsTL/0/3810FB892A861E12E8FAE64FBDA04320F34EEEB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:06:c1:ce:52:a8:8f:c8:f8:fe:4a:f8:01:63:a4:e3:19:64: 96:36:51:45:53:72:fc:f9:31:ef:d0:9c:f9:c0:82:5e:45:39: f0:d1:6b:2e:dc:d0:c2:6b:91:60:16:ae:42:72:1a:28:8c:c2: 8b:f4:f2:4f:b4:68:8b:46:7b:e9:31:39:2b:48:a7:8d:32:49: 90:68:3c:6e:23:f0:9e:e0:10:8d:9e:e3:9a:63:11:33:56:f4: 26:59:54:3a:27:7b:1e:0c:27:c4:77:27:b6:12:35:2a:ec:76: 72:72:34:70:fc:41:81:63:56:72:ee:80:e9:4a:14:76:13:9e: 1d:5b:43:e3:05:7f:ec:40:98:d1:0e:af:52:dc:3e:e8:e8:77: 0c:6a:28:8a:c7:5d:39:1d:dd:fa:3d:d3:98:94:65:30:d2:07: 3d:4d:ea:50:f4:17:73:0d:77:9d:1d:77:d9:ee:02:2d:7f:6f: 0c:bf:b1:69:69:ca:bd:8a:0d:0b:b9:46:a6:3e:60:2a:99:43: f3:fe:a7:90:f7:72:20:d7:f7:c3:e4:eb:23:21:da:49:e8:52: 8a:15:cb:3b:3f:92:26:b4:8e:43:36:76:91:c2:a8:c2:67:ac: 71:a2:a3:d7:0b:7e:75:bc:0c:03:01:dd:7e:f6:bc:78:d1:2b: c4:6b:d9:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUAMMIxa2kkNYwDoOZxwVVOWvxs0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgxMEZCODkyQTg2MUUxMkU4RkFFNjRGQkRBMDQzMjBG MzRFRUVCNjAeFw0yNTA0MjcxOTU3NDNaFw0yNTA0MjgyMzMyNDNaMDMxMTAvBgNV BAMTKDlDQjAwREY0NjA3NTk1MzE0QzU2N0U1NzAzRTg5Qjc0Nzk0MUVFNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBs+Mrlaw0qLNYy6jLTrmgf8Ki laK2c9iJcbQ0C6hBgJf29anyNeocoBUtlKZ4dzVymbhP4H85J3KxSae68zjnToXk MUlOMQyPH4FX23ORmpRqHfn28LKMlXFhR+u6QLxEqqqd8HhsUZPmI4rQWSDH2lVD 7itRCbrlfirYHrxRNfLL/B4jLUsvKNnuTPhSHdS5pSIuBV8u/wfKsJLvcVl0LC9V s+Q7jIBW7x2jKseh13mjvQ2XAcbviJixCsHcAegHkKoGCrvk7HDcJ3kZWkeiNu// Ma/wgNw7poGTX5Yw8NFPpXtjOD+eXo41Eb4vtcrTOJn5dvB8O6jcKyO26uQPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUnLAN9GB1lTFMVn5XA+ibdHlB7lcwHwYDVR0j BBgwFoAUOBD7iSqGHhLo+uZPvaBDIPNO7rYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNEh6UFQ0ZmJaUDZEWmNHd0dKUjFrWDFieEJXQUtrWTZldGg2aE11b2Nz VEwvMC8zODEwRkI4OTJBODYxRTEyRThGQUU2NEZCREEwNDMyMEYzNEVFRUI2LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4MTBGQjg5MkE4NjFFMTJF OEZBRTY0RkJEQTA0MzIwRjM0RUVFQjYuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NEh6UFQ0ZmJaUDZEWmNHd0dKUjFrWDFieEJXQUtrWTZldGg2aE11b2NzVEwvMC8z ODEwRkI4OTJBODYxRTEyRThGQUU2NEZCREEwNDMyMEYzNEVFRUI2Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtwbBzlKoj8j4/kr4AWOk4xlkljZRRVNy/Pkx79Cc+cCCXkU58NFrLtzQwmuR YBauQnIaKIzCi/TyT7Roi0Z76TE5K0injTJJkGg8biPwnuAQjZ7jmmMRM1b0JllU Oid7HgwnxHcnthI1Kux2cnI0cPxBgWNWcu6A6UoUdhOeHVtD4wV/7ECY0Q6vUtw+ 6Oh3DGooisddOR3d+j3TmJRlMNIHPU3qUPQXcw13nR132e4CLX9vDL+xaWnKvYoN C7lGpj5gKplD8/6nkPdyINf3w+TrIyHaSehSihXLOz+SJrSOQzZ2kcKowmescaKj 1wt+dbwMAwHdfva8eNErxGvZLg== -----END CERTIFICATE-----Generated at Sun Apr 27 23:02:06 2025 by rpki-client