$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft File: 4B238277BD4501DC3B75403E74D8B541B7643097.mft (raw, json) Hash identifier: Z/3kYpUwndaHVZ01Jw/ZQJcNxyzD6JEQCP/npF91MjU= Subject key identifier: 3E:A8:BB:37:EB:20:1F:22:F1:C7:11:B7:F2:EE:13:6F:05:BD:77:4C Authority key identifier: 4B:23:82:77:BD:45:01:DC:3B:75:40:3E:74:D8:B5:41:B7:64:30:97 Certificate issuer: /CN=4B238277BD4501DC3B75403E74D8B541B7643097 Certificate serial: 75F42409940CA206771074C7D5997A7B4A79E66B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B238277BD4501DC3B75403E74D8B541B7643097.cer Subject info access: rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft Manifest number: 14 Signing time: Wed 30 Apr 2025 08:58:15 +0000 Manifest this update: Wed 30 Apr 2025 08:53:15 +0000 Manifest next update: Thu 01 May 2025 12:56:15 +0000 Files and hashes: 1: 4B238277BD4501DC3B75403E74D8B541B7643097.crl (hash: Jf4jklYZcrLLMQNSI30/X3JP2vcl5Ubi11KEPF8wvCU=) 2: 323830343a376537383a3a2f33322d313238203d3e20323731363236.roa (hash: YxjgGXwxk/DJwwWBvr8NXqtozbxcPEarptqHkvquf/s=) 3: 3138312e3138392e38302e302f32322d3332203d3e20323731363236.roa (hash: 2xtykdlv2HZAR6UC1CtCNk3nexbhm2O6sDYzQQilQhs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.crl rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B238277BD4501DC3B75403E74D8B541B7643097.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 01 May 2025 12:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f4:24:09:94:0c:a2:06:77:10:74:c7:d5:99:7a:7b:4a:79:e6:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B238277BD4501DC3B75403E74D8B541B7643097 Validity Not Before: Apr 30 08:53:15 2025 GMT Not After : May 1 12:56:15 2025 GMT Subject: CN=3EA8BB37EB201F22F1C711B7F2EE136F05BD774C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:fd:14:0d:cc:52:57:21:48:4c:93:9b:4c: 1e:99:b5:27:11:ca:f3:a8:6a:41:bf:c2:e4:f8:6f: 7c:08:dd:ab:bf:ed:be:35:3f:c4:d4:3e:d5:32:41: cc:da:9d:96:a3:d0:93:32:90:2f:52:2c:b6:87:d1: 52:ce:23:83:b9:f9:6a:43:8e:34:0c:32:1f:74:ab: 8e:cb:04:a8:9c:f7:fd:f1:47:ae:99:28:34:a3:c8: 5e:0c:9c:24:4c:ce:6a:a2:73:2c:8f:30:c9:29:be: 85:3d:04:f3:e3:93:48:dd:6c:31:e8:f7:be:69:e0: 08:9e:8f:32:20:8e:91:47:ce:48:a7:61:fc:be:4c: 03:fe:b4:47:49:b7:bc:e2:03:13:32:fa:58:c2:2b: a7:4f:77:83:a7:e5:c8:4c:7a:0f:70:75:f6:05:72: 2f:46:bf:6c:87:8e:98:59:c6:ef:83:c2:19:98:c4: 3b:99:00:28:1a:42:db:29:b5:7d:2e:fe:e4:4f:7b: 03:45:dc:70:8c:1f:66:c3:f0:87:3a:1e:56:69:c4: e7:71:1d:01:ce:8f:7b:a5:21:99:51:42:bc:df:d9: 47:00:cf:e9:f1:d5:7d:42:04:db:62:c1:f9:e8:1d: fd:22:2a:6c:36:9c:2c:bf:a8:17:13:d1:9a:f1:a9: 30:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A8:BB:37:EB:20:1F:22:F1:C7:11:B7:F2:EE:13:6F:05:BD:77:4C X509v3 Authority Key Identifier: keyid:4B:23:82:77:BD:45:01:DC:3B:75:40:3E:74:D8:B5:41:B7:64:30:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B238277BD4501DC3B75403E74D8B541B7643097.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/4B238277BD4501DC3B75403E74D8B541B7643097.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e0:fe:47:85:5c:75:5f:4a:c5:e4:fb:12:93:f8:ce:39:5a: 15:b1:bf:91:4c:c3:45:2d:60:e4:f7:52:ef:ef:73:63:fc:f4: 57:70:dc:77:2a:ea:b9:ac:c4:14:8b:ee:4c:9f:03:6a:a2:a0: 2b:44:37:10:cb:d4:0c:24:a4:05:44:0c:6e:27:0b:3f:85:18: df:c4:53:e8:52:fe:1b:d6:3b:5a:cb:29:2c:fd:29:46:31:79: c6:37:81:86:0d:ba:00:7c:41:2d:4c:7d:2a:d5:04:f7:27:18: b3:1e:f7:aa:12:73:0c:e8:ca:20:0f:b1:e3:2d:44:bb:41:00: 26:af:8b:1c:53:92:5b:70:e8:3e:2b:8e:aa:33:1c:f4:1e:c2: 5c:b1:4e:ea:4e:30:de:6d:07:bc:4f:f2:6e:54:6c:15:17:b0: 71:7a:97:db:e4:2e:2a:7e:63:a8:fa:ed:aa:fb:43:92:3a:df: ae:61:51:98:57:ec:16:d1:24:c6:e4:e2:b1:eb:7d:3a:e2:da: 37:44:33:cd:bb:08:60:8e:c0:7f:e4:8d:85:27:37:34:d8:f6: 4d:d9:e4:d3:33:2d:96:22:44:c3:c3:7b:64:c0:97:bf:3e:ba: d4:f1:72:48:ee:34:8a:bc:57:52:e4:05:af:00:ca:a8:c5:f5: aa:4c:13:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdfQkCZQMogZ3EHTH1Zl6e0p55mswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIyMzgyNzdCRDQ1MDFEQzNCNzU0MDNFNzREOEI1NDFC NzY0MzA5NzAeFw0yNTA0MzAwODUzMTVaFw0yNTA1MDExMjU2MTVaMDMxMTAvBgNV BAMTKDNFQThCQjM3RUIyMDFGMjJGMUM3MTFCN0YyRUUxMzZGMDVCRDc3NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2kv0UDcxSVyFITJObTB6ZtScR yvOoakG/wuT4b3wI3au/7b41P8TUPtUyQczanZaj0JMykC9SLLaH0VLOI4O5+WpD jjQMMh90q47LBKic9/3xR66ZKDSjyF4MnCRMzmqicyyPMMkpvoU9BPPjk0jdbDHo 975p4AiejzIgjpFHzkinYfy+TAP+tEdJt7ziAxMy+ljCK6dPd4On5chMeg9wdfYF ci9Gv2yHjphZxu+DwhmYxDuZACgaQtsptX0u/uRPewNF3HCMH2bD8Ic6HlZpxOdx HQHOj3ulIZlRQrzf2UcAz+nx1X1CBNtiwfnoHf0iKmw2nCy/qBcT0ZrxqTCJAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPqi7N+sgHyLxxxG38u4TbwW9d0wwHwYDVR0j BBgwFoAUSyOCd71FAdw7dUA+dNi1QbdkMJcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vNVhQWlFVN3BqV3pUd2I0N2E1TXpHdTJNdFNQTkh5RXZrbm9halVnRFBT bmgvMC80QjIzODI3N0JENDUwMURDM0I3NTQwM0U3NEQ4QjU0MUI3NjQzMDk3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCMjM4Mjc3QkQ0NTAxREMz Qjc1NDAzRTc0RDhCNTQxQjc2NDMwOTcuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v NVhQWlFVN3BqV3pUd2I0N2E1TXpHdTJNdFNQTkh5RXZrbm9halVnRFBTbmgvMC80 QjIzODI3N0JENDUwMURDM0I3NTQwM0U3NEQ4QjU0MUI3NjQzMDk3Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEATOD+R4VcdV9KxeT7EpP4zjlaFbG/kUzDRS1g5PdS7+9zY/z0V3DcdyrquazE FIvuTJ8DaqKgK0Q3EMvUDCSkBUQMbicLP4UY38RT6FL+G9Y7WsspLP0pRjF5xjeB hg26AHxBLUx9KtUE9ycYsx73qhJzDOjKIA+x4y1Eu0EAJq+LHFOSW3DoPiuOqjMc 9B7CXLFO6k4w3m0HvE/yblRsFRewcXqX2+QuKn5jqPrtqvtDkjrfrmFRmFfsFtEk xuTiset9OuLaN0QzzbsIYI7Af+SNhSc3NNj2Tdnk0zMtliJEw8N7ZMCXvz661PFy SO40irxXUuQFrwDKqMX1qkwTIg== -----END CERTIFICATE-----Generated at Wed Apr 30 22:23:19 2025 by rpki-client