$ rpki-client -vvf rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft File: B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft (raw, json) Hash identifier: V4W5G0kz/nk7uNVywe2NzhqWTt9U4ULb8Ke9WCBMpZ8= Subject key identifier: 11:EA:F3:37:A7:F7:23:75:A0:26:8D:49:FC:A5:CC:60:0B:92:3B:ED Authority key identifier: B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4 Certificate issuer: /CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4 Certificate serial: 36018302C57AC3E13DDC5F36228DEA4D68C90B58 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer Subject info access: rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft Manifest number: 0218 Signing time: Sun 27 Apr 2025 12:42:43 +0000 Manifest this update: Sun 27 Apr 2025 12:37:43 +0000 Manifest next update: Mon 28 Apr 2025 15:53:43 +0000 Files and hashes: 1: B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl (hash: NHgn+vj/q8TKWNIFYjCYtIzBh63RlPsU+KBIyuxwBRM=) 2: 3137392e35312e3134382e302f32322d3234203d3e20323731313739.roa (hash: TOZLv2YdUpKM19BNgD3ZGHf5LkA7ln1krh07uYQ1evA=) 3: 323830343a373737343a3a2f33322d3332203d3e20323731313739.roa (hash: 15axzlvaPxlpvdEmdsItvuAH+wRillPEZD906FjgXUs=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 28 Apr 2025 15:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:01:83:02:c5:7a:c3:e1:3d:dc:5f:36:22:8d:ea:4d:68:c9:0b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4 Validity Not Before: Apr 27 12:37:43 2025 GMT Not After : Apr 28 15:53:43 2025 GMT Subject: CN=11EAF337A7F72375A0268D49FCA5CC600B923BED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f0:ba:ec:55:0f:73:de:69:28:e0:d1:36:56: 13:58:65:4d:ba:8a:b7:a7:36:0f:c1:69:7b:88:c0: 74:ba:c3:94:87:ab:7e:c4:24:46:2f:aa:ed:d5:c5: 04:48:b8:d7:f6:74:37:e9:21:18:b7:c5:87:65:49: 3e:46:7b:43:ab:03:d4:fe:ae:f8:94:08:c8:a4:2a: 17:25:ac:a6:3a:d6:6a:cb:57:9b:4f:e2:be:c0:41: 9f:d5:5a:b9:54:64:72:3a:3e:13:5f:a3:26:2c:54: 5a:00:85:c5:18:f8:a5:66:d4:82:a3:94:32:01:75: 85:dd:93:bc:ba:c5:93:12:11:4d:06:66:1d:42:dc: 3c:62:13:d8:7d:92:a1:84:3f:23:31:5a:fd:9a:2b: 98:f6:97:30:cc:f9:cb:64:7a:f2:f7:d5:a5:bf:9b: ff:a3:df:6a:f3:ba:bc:62:32:ab:b8:fb:8d:47:7f: cd:0d:6a:ae:39:fa:2e:b6:cc:18:d1:b5:02:27:0b: aa:66:11:98:85:33:c6:3e:47:40:36:d6:9f:71:50: 03:b0:3b:b2:6c:75:a4:f8:c0:39:00:87:6d:5c:e6: 45:38:8f:7c:9d:d2:42:14:f7:11:2f:82:ff:e8:37: 1e:e6:bc:2b:e2:35:40:37:f9:79:2a:50:90:82:26: 93:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EA:F3:37:A7:F7:23:75:A0:26:8D:49:FC:A5:CC:60:0B:92:3B:ED X509v3 Authority Key Identifier: keyid:B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:40:e9:41:c3:cb:63:29:9c:32:dd:50:4a:c6:50:ef:b6:cc: f1:c2:5c:67:88:89:eb:c8:84:68:25:2f:d1:08:5f:81:8e:23: b6:f4:11:1d:07:bd:c8:66:6c:48:b6:12:14:c0:e2:3e:bc:74: 1f:3d:c9:6a:1a:c8:30:05:a6:40:a5:d6:02:93:8e:f4:3e:11: 30:ca:c6:04:17:8b:42:f7:1e:c8:84:af:e8:e0:06:14:89:dd: 01:e3:22:da:bc:46:d7:50:a5:94:7c:25:e9:66:23:3a:a6:18: ce:db:d9:95:1f:d6:8d:03:8e:19:00:61:ae:b7:af:43:9a:24: 7b:3b:3a:77:8b:32:d2:6b:6c:97:06:4f:09:cd:eb:49:ea:e9: 18:44:c6:c5:25:ba:e9:48:9c:52:af:8f:83:b3:8f:0f:72:e0: 07:51:09:26:5e:5d:37:20:93:9e:66:3f:fa:c5:c6:11:09:74: 59:b8:fb:81:a1:c8:3f:11:4a:aa:ea:60:67:1e:bc:16:18:75: f2:96:74:b9:b7:12:14:1f:aa:3a:4d:8a:c0:09:7f:39:b0:ad: a0:28:e8:30:7f:5d:82:28:e1:00:3f:eb:cb:0f:c3:e1:22:a7: 9c:04:94:60:5a:8d:18:45:bd:f5:d5:ad:d7:93:f2:91:87:d4: a2:dd:f7:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUNgGDAsV6w+E93F82Io3qTWjJC1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlFRkYyRENDOEQzQjY5MjhFNTE2RTZBMkRGMDg2RTA4 Q0I4OTFFNDAeFw0yNTA0MjcxMjM3NDNaFw0yNTA0MjgxNTUzNDNaMDMxMTAvBgNV BAMTKDExRUFGMzM3QTdGNzIzNzVBMDI2OEQ0OUZDQTVDQzYwMEI5MjNCRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68LrsVQ9z3mko4NE2VhNYZU26 irenNg/BaXuIwHS6w5SHq37EJEYvqu3VxQRIuNf2dDfpIRi3xYdlST5Ge0OrA9T+ rviUCMikKhclrKY61mrLV5tP4r7AQZ/VWrlUZHI6PhNfoyYsVFoAhcUY+KVm1IKj lDIBdYXdk7y6xZMSEU0GZh1C3DxiE9h9kqGEPyMxWv2aK5j2lzDM+ctkevL31aW/ m/+j32rzurxiMqu4+41Hf80Naq45+i62zBjRtQInC6pmEZiFM8Y+R0A21p9xUAOw O7JsdaT4wDkAh21c5kU4j3yd0kIU9xEvgv/oNx7mvCviNUA3+XkqUJCCJpM1AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUEerzN6f3I3WgJo1J/KXMYAuSO+0wHwYDVR0j BBgwFoAUue/y3MjTtpKOUW5qLfCG4Iy4keQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vN1lnVUNGakVOYmlMZzRGTEJ6b2tXRGdqbzdVSE44TEtqV0pEemhvU3gx WkgvMS9COUVGRjJEQ0M4RDNCNjkyOEU1MTZFNkEyREYwODZFMDhDQjg5MUU0LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5RUZGMkRDQzhEM0I2OTI4 RTUxNkU2QTJERjA4NkUwOENCODkxRTQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v N1lnVUNGakVOYmlMZzRGTEJ6b2tXRGdqbzdVSE44TEtqV0pEemhvU3gxWkgvMS9C OUVGRjJEQ0M4RDNCNjkyOEU1MTZFNkEyREYwODZFMDhDQjg5MUU0Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl0DpQcPLYymcMt1QSsZQ77bM8cJcZ4iJ68iEaCUv0QhfgY4jtvQRHQe9yGZs SLYSFMDiPrx0Hz3JahrIMAWmQKXWApOO9D4RMMrGBBeLQvceyISv6OAGFIndAeMi 2rxG11CllHwl6WYjOqYYztvZlR/WjQOOGQBhrrevQ5okezs6d4sy0mtslwZPCc3r SerpGETGxSW66UicUq+Pg7OPD3LgB1EJJl5dNyCTnmY/+sXGEQl0Wbj7gaHIPxFK qupgZx68Fhh18pZ0ubcSFB+qOk2KwAl/ObCtoCjoMH9dgijhAD/ryw/D4SKnnASU YFqNGEW99dWt15PykYfUot33Rw== -----END CERTIFICATE-----Generated at Mon Apr 28 07:19:49 2025 by rpki-client